last executing test programs: 1m7.947607075s ago: executing program 4 (id=39): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002580)={0x28, r0, 0x32b, 0x0, 0x25dfdbfc, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x8, 0x201, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x6e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000890) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000200001d00009b00000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100000600660001000000240033"], 0x54}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, r7, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf685, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8936, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r2}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 51.629183897s ago: executing program 4 (id=39): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002580)={0x28, r0, 0x32b, 0x0, 0x25dfdbfc, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x8, 0x201, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x6e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000890) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000200001d00009b00000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100000600660001000000240033"], 0x54}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, r7, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf685, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8936, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r2}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 38.08711273s ago: executing program 4 (id=39): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002580)={0x28, r0, 0x32b, 0x0, 0x25dfdbfc, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x8, 0x201, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x6e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000890) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000200001d00009b00000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100000600660001000000240033"], 0x54}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, r7, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf685, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8936, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r2}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 25.058600824s ago: executing program 4 (id=39): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002580)={0x28, r0, 0x32b, 0x0, 0x25dfdbfc, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x8, 0x201, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x6e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000890) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000200001d00009b00000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100000600660001000000240033"], 0x54}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, r7, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf685, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8936, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r2}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 12.980022461s ago: executing program 1 (id=2116): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) 12.878777005s ago: executing program 4 (id=39): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002580)={0x28, r0, 0x32b, 0x0, 0x25dfdbfc, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x8, 0x201, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x6e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000890) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000200001d00009b00000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100000600660001000000240033"], 0x54}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, r7, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf685, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8936, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r2}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 10.543003761s ago: executing program 1 (id=2119): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xe, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x2000000}, @TCA_NETEM_DELAY_DIST={0x6, 0x2, "58d5"}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_REORDER={0xc, 0x3, {0x1, 0x9}}]}}}]}, 0x78}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000580)}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r6, &(0x7f0000000100)}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000001840)="efe15a38f4dc7768963f2f6e9e0356de1ae15bb72719b131ee10a0e67746ae48ce5428ee179c094c78a3d0b5456acc9f2465228811897903ca6c999bec34104324fdb92bf0e8cd0ecd65d638abee25855a79e2e2853fd83f7811f7cf0affe1a26b42786810003876523a59eb9fd0437826192a57ffe929b2f505c2ec952411dc4c26639f74e4573380acf154368d8961976367caecd4de495ee241ab89b425ccb07891877e7ce3ad78d8c961a59b4d4f214a2e095f2f3da9982917b0b20c0a720e94094df439edef30ee223e63c8ed155ff8f99d1e6e47c9577982517680e5d427051e1fa5d251c650b95743bcb82465a6d427452b6292f8469a6e1e2c67f847f591cd78c98c7816e7c23392052464a8318fa9fb9623940d72abc16b58fcb7794947e1f682e96041f4250086f542764253f3af6ae9d3ef017b8ffd6e79ce766bef79f7c7c6c9b8c9d3370efc9905884827bc38f11b47206d7fe4ca081bf168853eaec82710dd3bb393f52ee4eaf3a7ffdaacdbd97ef49f7a841fedb202be81e715", 0x181}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000f62d76"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b70300000300000085000000b2000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x10, 0xfffffffd, 0xfff, 0x6123, 0x40004, 0x1, 0x8f3, '\x00', r2, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x10, 0x7fffffff, 0x5, 0x9, 0x0, r3, 0x4, '\x00', 0x0, r4, 0x1, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000780)={0xffffffffffffffff}) pipe(&(0x7f0000000880)={0xffffffffffffffff}) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0x1, 0x10}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x5, '\x00', r2, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r15 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r15, 0x107, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x13, 0x15, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @ldst={0x0, 0x1, 0x3, 0x8, 0x4, 0xc, 0x10}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x2, 0x76, &(0x7f0000000500)=""/118, 0x40f00, 0x3, '\x00', r2, @fallback=0x18, r4, 0x8, &(0x7f0000000680)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x1, 0x20, 0xd32d}, 0x10, 0x0, r5, 0x0, &(0x7f0000000980)=[r7, r7, r6, r10, r11, r12, r13, 0xffffffffffffffff, r14, 0xffffffffffffffff], 0x0, 0x10, 0xe, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x7800, 0x10, 0xffffff7a, 0xfffffbff, {{0x14, 0x4, 0x1, 0x9, 0x50, 0x65, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp={0x44, 0x20, 0x1e, 0x0, 0xc, [0x4b5f, 0x25ce08e5, 0x0, 0xfffffffb, 0x3, 0x3aba, 0x1ff]}, @generic={0x94, 0x4, "6bdd"}, @rr={0x7, 0x17, 0x79, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x3e}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'erspan0\x00', r16, 0x40, 0x80, 0x3, 0x6, {{0x21, 0x4, 0x3, 0x1c, 0x84, 0x67, 0x0, 0x8, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xd}, {[@timestamp_prespec={0x44, 0x2c, 0x59, 0x3, 0xd, [{@multicast2, 0x1}, {@private=0xa010100, 0x3}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x4}, {@local, 0x9}]}, @noop, @timestamp={0x44, 0x20, 0x53, 0x0, 0x3, [0x4, 0xfffffff8, 0x7, 0xfffffff7, 0x400, 0x81, 0x2]}, @end, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xa4, [@broadcast, @rand_addr=0x64010100]}, @lsrr={0x83, 0xf, 0xdf, [@remote, @empty, @multicast2]}]}}}}}) 9.539614913s ago: executing program 1 (id=2124): r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'caif0\x00', 0x400}) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0x5, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x2a, 0x7, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x20, 0x3, 0x9}}) sendto$packet(r2, &(0x7f0000000140)="f605467c1d2e09e2338f35c5c94e17413e34ec5cec18cf6f4f8dd6cfcaae64504988a38dd815ef4daefda8730b5fe3caa9ca1e27ced32852017a37f44a32a1f5b63b2de03fe004a8fac45be2847d1673be07b7d2c2507b6df891bc230b880bfdfe8e323db9d5498b29ced2e37031cb5851a6e1f506fbde39df5a12ca9ed50bd1e28b96643071f0b13fed457aca1c23e27a4cee76ac3adcea27f337c49bb44c199f38df87f73f408fbdb00aa8125e2447243ebb2a4b12b5c9c1e82845feb8060f123a305e5f5f5ab2d0cbf59be8255395d197aa0687e01ff7121c8423227d", 0xde, 0x80, &(0x7f0000000300)={0x11, 0x1b, r3, 0x1, 0x1, 0x6, @multicast}, 0x14) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000340)={'macvlan0\x00', 0x1402}) recvmmsg(r0, &(0x7f0000002740)=[{{&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/247, 0xf7}, {&(0x7f0000001640)=""/122, 0x7a}], 0x5, &(0x7f0000001740)=""/4096, 0x1000}, 0x8}], 0x1, 0x162, &(0x7f0000002780)={0x0, 0x989680}) (async) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000027c0)={r1}) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002800), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000002840)={[{0x2b, 'pids'}, {0x2d, 'rlimit'}, {0x2d, 'net'}, {0x2d, 'blkio'}, {0x2d, 'devices'}]}, 0x23) (async) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000002880)=""/132, &(0x7f0000002940)=0x84) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000002980)={r1}) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000029c0)={0x5c, @remote, 0x4e22, 0x0, 'sh\x00', 0x2, 0x401, 0x5e}, 0x2c) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000002a00)={'veth1_vlan\x00', 0x400}) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002a80), r5) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000002b80)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x70, r9, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x27}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000882}, 0x4004001) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000002bc0)={0x0}, &(0x7f0000002c00)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000002c40)={0xfff3, 0x4, 0x4, 0x944a, 0x8, 0xcaf3, 0x7fff, 0x5, r10}, &(0x7f0000002c80)=0x20) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000002cc0)={0x1, 0x10}, 0x8) (async) getpeername$packet(r5, &(0x7f0000002d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002d40)=0x14) getpeername$packet(r7, &(0x7f0000002d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002dc0)=0x14) bind$xdp(r7, &(0x7f0000002e00)={0x2c, 0x8, r11, 0x31, r7}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000002e40)={{0x0, 0x6, 0x80000001, 0xfd, 0xff, 0x5, 0xb, 0x2, 0xde, 0x5, 0x5f29, 0x40, 0x5, 0x5, 0xfffffffffffffff8}}) ioctl$BTRFS_IOC_INO_LOOKUP(r6, 0xd0009412, &(0x7f0000003e40)={r12, 0x5}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000004e40)={'veth0_to_bridge\x00', 0x100}) 8.63305967s ago: executing program 1 (id=2133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000400000000000000060000080800f0ff", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x18, 0x8, 0x0, @void, @value}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x2891}, 0x20008010) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02"], 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r7, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500ffffffff080000002e00000008000300", @ANYRES32=r2, @ANYBLOB="059cd641f86f6764c2f234e498a1b50c5034963d42df1b4ddf034a94b77875857200"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000240)) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r8, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@hoplimit={{0x14, 0x29, 0x34, 0xf9b}}], 0x18}}], 0x2, 0x4001) 8.21866339s ago: executing program 1 (id=2137): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x30}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 8.02705104s ago: executing program 1 (id=2139): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000005e0000009500000000000000afed364fe86f0b5c9620ddeecb32720ad3f3e03f4c9f28e4963a9272511919ea3482c05293b8dd020000d3f3f87602f2d4eeece1afa52bf70429668521ff86558e3a6687091582736a1f56883f24639bc52c1448b595d3"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000002c0)={0xffffff31, {{0xa, 0x4e20, 0x10c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}}, 0x88) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r2, &(0x7f00000000c0)={@void, @void, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x9, 0x40, 0x63, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x4, 0xc5, 0x0, 0x4000, {[@window={0x9, 0x3}, @sack={0x5, 0x12, [0x8d6, 0x61, 0xb807, 0xffff]}]}}}}}}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x84, "bb5912e5e668fd24efc6ef737b0fd9400a84c4eb4b91c0a001c9512271aa538bdcb8035bfb7eb2c2e0db4a7c180169ae3adc07eeded3c4893834ae8fb60c59b4828dfe6a7f0aaadea038e3c3e1f3eccf8a9d04a6097551168c46c9efe02482d77e0dcad1c6b5545342ac1e4c34d9ba024506e0c196cd7024c1c9d33da97902ccd8a186af"}, &(0x7f0000000000)=0xa8) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x20}, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) getsockname$llc(r3, &(0x7f0000000140), &(0x7f0000000180)=0x10) 2.27862428s ago: executing program 2 (id=2199): r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000010027bd7000fbdbdfa500000000", @ANYRES32=r5, @ANYBLOB="104e06000162010028001280110001006272696467655f736c6176650000000010000580050000000000000004001800584f"], 0x48}, 0x1, 0x0, 0x0, 0x2400c004}, 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r1]) r6 = socket$isdn_base(0x22, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) r7 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x50, r9, 0x5, 0x4, 0xb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7fffffff, 0x70}}}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x2, 0x4, 0x0, {0xfb4, 0x1, 0x0, 0x141, 0x0, 0x0, 0x0, 0x2}, 0x800, 0x10, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x6, 0x34, @random="e25d"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) 2.157640178s ago: executing program 3 (id=2200): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), 0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r1) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r3], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) 1.95594315s ago: executing program 3 (id=2203): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="509d2ea33b753c082ec8", 0xa}], 0x1) 1.719681189s ago: executing program 3 (id=2204): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=',', 0x1}], 0x1, 0x0, 0x0, 0x4000}, 0xc841) accept4(r6, 0x0, 0x0, 0x80000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x136}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r7) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000cd4) socket$packet(0x11, 0x3, 0x300) 1.254463248s ago: executing program 2 (id=2207): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f00000000c0), 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.127676039s ago: executing program 0 (id=2208): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x110, 0xd}}, @ip_ttl={{0x14}}], 0x30}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "dc542b4e237011fb38ddb228806571a8633206e26df63a43bbc516382325dedd79c1cf0a26379dfaf72cb5ab9ab7efe16f312ee9ab598d1ac0d7903ac69c51f1b6842ebecf00dec5deff737b59f0c1f0b57cc6c2b7b8c5b2c527aafa57222f4bd2355ccab39fa20d4033b6b687491532080101805feb9c6fa8a56a77186efcb394ce1a1cd7f2130835e3bf9e3ac25d0a102a808be13beb51f37da6d10046f131834545ee5013f43e41e91eb18a12c28540ab4106286e0f7568f6a9cd0c0da51df08e42848096b25d455ebec9adfd6e493d8c9725bc2d49bbbae0a5375b359f91d9dad20ed109ffbc52469cffd2cf5df7773f7a4c72ae167485315c326281efc4"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000300)=0xd, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0800090000000000080008f2ffffffff130001"], 0x64}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@generic="c4c29fec2ebf574c4ed46aeed0f0c262eeba2baf76c82d25b54e15e243201ccae24246849725ab34eceb84904e4c7fc94900fe9b451ad31c857df349d864ef7887b9b5f9b50a791786834d73d296"]}, @nested={0xfffffffffffffd17, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @generic="0e2f070120df713c113eb6642e4e3126a8dda7da79576c63713880f6fcf73db48eff5c4281117d347a8e601bafd7d05fdb1f2cd0e1a55c93197e488149bcd8d95e3a9387b5f5104804fd99f08d99c29316103a56c44b7c1c46810f8d8fdef56f2de773c115939137372da117f3664dac6f978ee6a40c1a2c27adcf5846ca24c330765ea81f310ed95fd1aaeed662045e852295a7d22c548a5c193f001145571ca3b533f7b6846d15def71d9aab"]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 1.0578834s ago: executing program 2 (id=2209): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedb0a33914c68082078eecc", @ANYRES32=r4, @ANYBLOB="060065000000000004005b00"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4810) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='ip6_vti0\x00', 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) accept4(r5, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x80000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x101, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2008010) 834.880155ms ago: executing program 2 (id=2210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080004400000000508000240000000040600000073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) 738.896888ms ago: executing program 0 (id=2211): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x4001) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x4001) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000240)=0x5) r4 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280)={0x0, r0}, 0x10) (async) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280)={0x0, r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r4, r5, 0x0, 0x1, &(0x7f00000002c0)='\x00'}, 0x30) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000003c0)=@get={0x1, &(0x7f0000000340)=""/68, 0x4}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10018004}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) write$cgroup_pid(r1, &(0x7f0000000500)=r4, 0x12) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x28}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1200000}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8751}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2f}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa956}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008085) (async) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xfc, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x28}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1200000}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8751}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2f}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa956}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008085) r7 = accept(r1, &(0x7f0000000740)=@tipc=@name, &(0x7f00000007c0)=0x80) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r0) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x124, r8, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xdd17}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc0ad}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x53db}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x74e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe29}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2b6fa01b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@initdev}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000b40)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000b40)=0xe8) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000bc0)={0x5, 0x10, '\x00', 0x1, &(0x7f0000000b80)=[0x0, 0x0]}) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000bc0)={0x5, 0x10, '\x00', 0x1, &(0x7f0000000b80)=[0x0, 0x0]}) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f40)=@o_path={&(0x7f0000000f00)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0xd, 0x2d, &(0x7f0000000c00)=@raw=[@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}, @alu={0x7, 0x0, 0x3, 0xc, 0x8, 0x8, 0x4}, @call={0x85, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x12aa79cc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x7c}], &(0x7f0000000d80)='syzkaller\x00', 0x5, 0x88, &(0x7f0000000dc0)=""/136, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, r1, 0x8, &(0x7f0000000e80)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000ec0)={0x4, 0x5, 0xfd1e, 0x5}, 0x10, 0xffffffffffffffff, r0, 0x7, &(0x7f0000000f80)=[r0, r0, r0, r10, r0, r0, r1, r1], &(0x7f0000000fc0)=[{0x3, 0x1, 0x9, 0x3}, {0x2, 0x2, 0xa, 0x2}, {0x4, 0x4, 0xe}, {0x4, 0x4, 0x3, 0xa}, {0x5, 0x5, 0x8, 0x4}, {0x3, 0x3, 0x8, 0x6}, {0x5, 0x3, 0x4, 0x9}], 0x10, 0x7, @void, @value}, 0x94) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000001100)={{r10}, "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"}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000001100)={{r10}, "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"}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002180)={'syztnl1\x00', &(0x7f0000002100)={'syztnl1\x00', r9, 0x2f, 0x5, 0x7f, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7800, 0x40, 0x2, 0xe}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002180)={'syztnl1\x00', &(0x7f0000002100)={'syztnl1\x00', r9, 0x2f, 0x5, 0x7f, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7800, 0x40, 0x2, 0xe}}) sendmsg$nl_route(r7, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)=@RTM_NEWMDB={0x38, 0x54, 0x100, 0x70bd29, 0x25dfdbfb, {0x7, r11}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x3, 0x1, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000002300)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000002300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r7, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x251}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(r7, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x251}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r0) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x28, r13, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x9c, 0x32}}}}, ["", ""]}, 0x28}}, 0x40040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002740)=@bpf_tracing={0x1a, 0x7, &(0x7f0000002580)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], &(0x7f00000025c0)='syzkaller\x00', 0x7, 0x94, &(0x7f0000002600)=""/148, 0x0, 0x40, '\x00', 0x0, 0x17, r0, 0x8, &(0x7f00000026c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000002700)={0x0, 0xb, 0x8, 0x2}, 0x10, 0x8dc7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc000, @void, @value}, 0x94) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r14, &(0x7f0000002980)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002940)={&(0x7f0000002840)={0xf0, r6, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x40}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa5d}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x34}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x16}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6f}]}, 0xf0}}, 0x44000) 737.606204ms ago: executing program 3 (id=2212): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0xfffffeff, @empty, 0x4000000}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x4000000) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1c, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x330d}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0xc) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x7, &(0x7f0000000180)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@map_fd={0x18, 0x5, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0xc4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 623.420295ms ago: executing program 0 (id=2213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 376.278751ms ago: executing program 0 (id=2214): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x10000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x800) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x50, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x3e, 0x0, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="50bb2d2672d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046"]}]}, 0x50}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x11, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) 279.724797ms ago: executing program 2 (id=2215): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000380)=""/46, &(0x7f00000003c0)=0x2e) (async, rerun: 32) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x24004044) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x1e, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4}, 0x10) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000400), 0xe) (async, rerun: 32) listen(r6, 0x0) (rerun: 32) accept(r6, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200000a0}, 0x4) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r9) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 276.975415ms ago: executing program 3 (id=2216): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4020001200000009500000000000000", @ANYRES64=r2], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_per_queue_op={0x4b, 0xe}}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, 0x140f, 0x1, 0x70bd25, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'srp\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000300)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.freeze\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x2a, &(0x7f0000000080)=r9, 0x4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000008}, 0x881) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r11, 0x84, 0x7d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffe}, &(0x7f0000000240)=0x14) sendmsg$kcm(r9, &(0x7f0000000900)={&(0x7f0000000380)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)="49a2075903c11ee6434e79d4296ed93dfa0118f524460ad2c973fa2e7cb72a23b7b19a3dc88a75c8399bc810512c365501bb1518a1983524db46484b12003de9a319d27c3ba43a2a17a0f25a81b15409318ac89f27054b04cdf148e5cdaaba2c03dbdfb4d912ff8aa41b862409d024840f7f6031a614dbe911721b64399b6d4f920a679ca7f4812e4d7c797d0cc870a961951515950ee10b93d46581ba78b7a4", 0xa0}, {&(0x7f00000001c0)="dce09426c1c2201519d44f46a59210b4c9caf552ab0cf86dc12e2f9a1454e0f95fe1b99131303e2fedfe05bf216bbfeac0f044eb44af5c09fc8657", 0x3b}, {&(0x7f0000000400)="264eb0b96f3941405fd1007d4729d68a76", 0x11}, {&(0x7f00000007c0)="864f46ec950e41d58a52eb6f69e1ff7c87ed3d91feadc40c563b0313dfe4446f078b814ef39af163e581a6341b6ffb062cce279cbc6435dde7f578f0b3e7fe4d1d0340717425620ccd6805d864778aa8b5f139ed52e38cb0e9e9869fc90ec13e844e472f085d277df05eb4f64b504a59aa77a6749074dea9948d4578b03d07b4ea79ac3c542c5c25eeb3ccf6c95226da0fe391f95a58715bb44ff10bb8db35d6daa2087c", 0xa4}, {&(0x7f00000004c0)="aa66f476bd0869af76fcb5d8efa9cc81613b9216bfce1d4d78f8469139e6653d9eee8d954ec7d991cf65d67722ce206252b18f21cf7addf192707b16e75e24153c218920a2932663a1dc14e2c25e3637f2231fb161be7d720be4b2ba77a9f5bb0dbb60e3cfd4dd9dd7ac5ba030eef22332b1", 0x72}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f0000000440)="4c3a19cf9c94ff5baade814eff745be1412716a07bc0da1bd3677613430935881105c9bbbd411d2b1e89057c7d9d7b", 0x2f}], 0x7}, 0x4000000) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x1c, r5, 0xb97534d5fe9704cf, 0x70bd27, 0xfffffffd, {{0x12}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r12}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x80, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c0000000214010000000000000000000900620073797a31000000001e185ab4862b73863a370d0d0e7b6c09c8a636c3388d92d0527ec7223f5d40922f88f7bc121b6648b528e455adcd284166e859dd07de2165a2aaec93380c464e8e38f7e8b9390bab3760354eb8d7771d55ac64df9384d00a534a9300de663904f1754b76f1e654d80e60f8ae162c9a230742a69e"], 0x1c}}, 0x0) 242.794416ms ago: executing program 0 (id=2217): sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="2cf568c98614500bad27ca2e65007585f539ba8a140451c38e413333a454c83c90cdc920c45e58bfa939639df4bfedd388730e3890d66eb299aceb0bd0771f614e0cb022c26062d5548447ea54f1d32aa06e68b623315f7c203e3d47c18e891db23146c00fba7a0b08cc036f9b061628afb5a98648", 0x75}], 0x1, 0x0, 0x180}, 0x4000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xd1383000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=@newae={0x440, 0x1e, 0x10, 0x70bd2c, 0x25dfdbfe, {{@in=@local, 0x4d3, 0x2, 0x3c}, @in=@multicast1, 0x4, 0x3502}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @algo_auth={0x106, 0x1, {{'streebog512-generic\x00'}, 0x5f0, "787d7eaafb69972e2342143a1d1ed6f4437e8681a318ea61515bcb84e60adfe51f9de39776b7cc71727f69aec7d50d43aa65cd5637b68b6cf67be9ce5cd9be09676c48f209b7a99f11d029a160e601d677c199deb680e4b125775433a5fb0145c4fb00b41760c5c16e7b9bad9c51124fc0ed0b7eb82997672888a045eac77abc6cbaa879fe5fd3beed8a80bd0a90fad1d27030bb9cec94ab31afb1c7e186507b8d5a3d09a49b7a625b4275f92618a590ffa6d52eee22b3f065af8db38eee"}}, @algo_comp={0x66, 0x3, {{'lzjh\x00'}, 0xf0, "4a33742a045d0f45d6aaa967dd2e643bb372ade106422dc84f3c300e4eb8"}}, @tmpl={0x184, 0x5, [{{@in=@multicast2, 0x4d6, 0x3c}, 0x14, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x2, 0x5, 0x9, 0x0, 0x80000000}, {{@in=@broadcast, 0x4d6, 0x32}, 0x2, @in=@empty, 0x3505, 0x3, 0x3, 0xfb, 0x240, 0xdae, 0xfffff745}, {{@in6=@private1, 0x4d2, 0xff}, 0x0, @in6=@remote, 0x3503, 0x1, 0x3, 0xc, 0x1ff, 0x1b2f, 0x7f}, {{@in6=@private0, 0x4d6, 0x32}, 0xa, @in=@multicast2, 0x34ff, 0x3, 0x1, 0x9, 0x7fffffff, 0x1, 0x7fffffff}, {{@in6=@local, 0x4d2, 0x6c}, 0x2, @in6=@remote, 0x0, 0x0, 0x3, 0x8, 0xff, 0x3, 0xfff}, {{@in=@multicast1, 0x4d5, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x3501, 0x4, 0x3, 0x81, 0xffff, 0x1, 0x2}]}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @user_kmaddress={0x2c, 0x13, {@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0xa}}, @srcaddr={0x14, 0xd, @in=@local}, @algo_comp={0xb7, 0x3, {{'lzs\x00'}, 0x378, "e237e2058b6afd3350a399a78389947647ccbccd9d3996ec6973a2e32bad4b0090fe11a213e0f906f6b39ae830a0e74e38bd06189b44575de1c1c29b263f144b029581c44e4262cb7abf8efd497e97c71eea0e3024399af8f84bd1b3237016c6988033e159384415838805bd42dca8"}}]}, 0x440}, 0x1, 0x0, 0x0, 0x20048044}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000000000000006c0000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000035000002000100000000000000000048000300"], 0x138}}, 0x0) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x100000c, 0x4130013, r0, 0x40c36000) 121.976021ms ago: executing program 0 (id=2218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000020c0009800800011e0000f5d90800084000000001"], 0xc4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r2], 0x54}}, 0x800) 3.695423ms ago: executing program 3 (id=2219): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb27f}, @TCA_FQ_PIE_LIMIT={0x8}]}}]}, 0x44}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="a6bea8a120e5f832c166cf9788a8", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x7, 0x7, @vifc_lcl_ifindex=r4, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x90}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xb27f}, @TCA_FQ_PIE_LIMIT={0x8}]}}]}, 0x44}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) sendto$packet(r2, &(0x7f0000000180)="a6bea8a120e5f832c166cf9788a8", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) (async) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x7, 0x7, @vifc_lcl_ifindex=r4, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x90}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 3.098808ms ago: executing program 4 (id=39): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002580)={0x28, r0, 0x32b, 0x0, 0x25dfdbfc, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x8, 0x201, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x6e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000890) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000200001d00009b00000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100000600660001000000240033"], 0x54}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x8c, r7, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf685, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8936, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r2}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 0s ago: executing program 2 (id=2220): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="f6ffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): tes leftover after parsing attributes in process `syz.2.1214'. [ 242.964615][T10995] netlink: 'syz.1.1212': attribute type 3 has an invalid length. [ 242.986167][T10995] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1212'. [ 243.124425][T11005] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1218'. [ 243.216880][ T55] Bluetooth: hci4: command tx timeout [ 243.491866][ T6679] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 244.627652][ T6686] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 244.800299][T10850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 244.893445][T10850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.989054][T10850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 245.021359][T11052] xt_hashlimit: size too large, truncated to 1048576 [ 245.073255][T10850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 245.185663][T11056] @ÿ: renamed from bond_slave_0 [ 245.301287][ T55] Bluetooth: hci4: command tx timeout [ 245.441132][T11063] __nla_validate_parse: 2 callbacks suppressed [ 245.441155][T11063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1238'. [ 245.699002][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 245.746756][ T6686] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 245.801894][T10850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.882788][T10850] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.921143][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.928519][ T6687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.013032][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.020284][ T6685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.074648][T11078] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1243'. [ 246.295546][T11080] netlink: 'syz.1.1244': attribute type 11 has an invalid length. [ 246.512817][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033773000: rx timeout, send abort [ 246.605749][T11094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1249'. [ 246.646678][T11100] netlink: 'syz.1.1251': attribute type 10 has an invalid length. [ 246.697448][T11100] vlan0: entered allmulticast mode [ 246.702845][T11100] veth0_vlan: entered allmulticast mode [ 246.884255][T10850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.959873][T11111] Cannot find add_set index 0 as target [ 246.981405][ T6679] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 247.022251][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033773000: abort rx timeout. Force session deactivation [ 247.082447][T11121] tipc: Enabling of bearer rejected, already enabled [ 247.165081][T11123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1255'. [ 247.176081][T11125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1256'. [ 247.367764][T11136] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1258'. [ 247.377096][ T55] Bluetooth: hci4: command tx timeout [ 247.526002][T11143] netlink: 'syz.3.1261': attribute type 10 has an invalid length. [ 247.581205][T11143] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 247.800829][T10850] veth0_vlan: entered promiscuous mode [ 247.888015][T11159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.905281][T10850] veth1_vlan: entered promiscuous mode [ 247.952455][T11156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.959354][T10850] veth0_macvtap: entered promiscuous mode [ 247.995987][T10850] veth1_macvtap: entered promiscuous mode [ 248.039614][T11156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.056145][T10850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.065343][T11165] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1267'. [ 248.072330][T11156] netlink: 'syz.3.1265': attribute type 11 has an invalid length. [ 248.092473][T11156] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1265'. [ 248.102282][T10850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.110358][T10850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.110399][T10850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.110429][T10850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.110458][T10850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.154769][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1267'. [ 248.192138][ T6686] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 248.391352][ T6678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.416205][ T6678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.525791][ T6686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.539339][ T6686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.895596][T11190] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1276'. [ 249.109896][T11201] netlink: 'syz.0.1279': attribute type 21 has an invalid length. [ 249.320543][ T6680] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 249.352338][ T6685] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.371970][T11201] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 249.413986][ T6685] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.723602][ T6685] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.102332][ T6685] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.208895][ T6685] bridge_slave_1: left allmulticast mode [ 250.214615][ T6685] bridge_slave_1: left promiscuous mode [ 250.220718][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.230841][ T6685] bridge_slave_0: left allmulticast mode [ 250.236533][ T6685] bridge_slave_0: left promiscuous mode [ 250.243216][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.437768][ T6678] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 250.517746][T11209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 250.566181][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 250.897424][ T6685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.919502][ T6685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.939405][ T6685] bond0 (unregistering): Released all slaves [ 250.999531][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 251.029248][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 251.038343][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 251.048929][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 251.057227][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.195090][T11230] virt_wifi0 speed is unknown, defaulting to 1000 [ 251.310439][T11236] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 251.322469][T11236] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 251.387674][T11235] 8021q: adding VLAN 0 to HW filter on device bond5 [ 251.399811][T11235] bond0: (slave bond5): Enslaving as an active interface with an up link [ 251.547822][ T6679] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 251.612008][T11236] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 251.638398][T11236] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 251.690023][T11236] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 251.712300][T11236] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 251.723114][T11226] infiniband syz2: set down [ 251.739247][T11236] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 251.747447][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'. [ 251.766185][T11226] infiniband syz2: added team_slave_0 [ 251.773275][T11253] xt_hashlimit: overflow, rate too high: 0 [ 251.790930][T11226] syz2: rxe_create_cq: returned err = -12 [ 251.801139][ T6685] hsr_slave_0: left promiscuous mode [ 251.817010][T11226] infiniband syz2: Couldn't create ib_mad CQ [ 251.823273][T11226] infiniband syz2: Couldn't open port 1 [ 251.830654][ T6685] hsr_slave_1: left promiscuous mode [ 251.838215][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.845688][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.900549][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.920692][T11226] RDS/IB: syz2: added [ 251.925376][T11226] smc: adding ib device syz2 with port count 1 [ 251.932002][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.957129][T11226] smc: ib device syz2 port 1 has pnetid [ 251.975896][ T6685] veth1_macvtap: left promiscuous mode [ 251.996989][ T6685] veth0_macvtap: left promiscuous mode [ 252.002817][ T6685] veth1_vlan: left promiscuous mode [ 252.011704][ T6685] veth0_vlan: left promiscuous mode [ 252.137232][T11268] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1297'. [ 252.247969][T11272] ksmbd: Unknown IPC event: 0, ignore. [ 252.606444][ T6685] team0 (unregistering): Port device team_slave_1 removed [ 252.649778][ T6685] team0 (unregistering): Port device team_slave_0 removed [ 252.707905][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 253.137582][ T5834] Bluetooth: hci4: command tx timeout [ 253.162554][T11236] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 253.224347][T11275] bond0: (slave dummy0): Releasing backup interface [ 253.249558][T11275] bridge_slave_0: left allmulticast mode [ 253.255268][T11275] bridge_slave_0: left promiscuous mode [ 253.279599][T11275] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.295830][T11275] bridge_slave_1: left promiscuous mode [ 253.302750][T11275] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.314020][T11275] bond0: (slave bond_slave_0): Releasing backup interface [ 253.325738][T11275] bond0: (slave bond_slave_1): Releasing backup interface [ 253.339137][T11275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.347508][T11275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.356546][T11275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.365720][T11275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.383793][T11275] bond0: (slave wlan1): Releasing backup interface [ 253.822389][T11230] chnl_net:caif_netlink_parms(): no params data found [ 253.842545][ T6680] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 254.107338][T11306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1310'. [ 254.173354][T11319] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 254.290771][T11230] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.328455][T11230] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.347662][T11230] bridge_slave_0: entered allmulticast mode [ 254.360274][T11230] bridge_slave_0: entered promiscuous mode [ 254.495146][T11230] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.536955][T11230] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.547012][T11230] bridge_slave_1: entered allmulticast mode [ 254.565673][T11230] bridge_slave_1: entered promiscuous mode [ 254.668762][T11337] netlink: 'syz.0.1318': attribute type 1 has an invalid length. [ 254.683797][T11337] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1318'. [ 254.831637][T11343] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 254.901989][T11230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.022097][ T6680] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 255.041706][T11230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.209288][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1321'. [ 255.226220][T11230] team0: Port device team_slave_0 added [ 255.227485][ T5834] Bluetooth: hci4: command tx timeout [ 255.280331][T11230] team0: Port device team_slave_1 added [ 255.365091][T11353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1321'. [ 255.408573][T11230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.425812][T11230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.520282][T11230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.543680][T11230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.553442][T11230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.616934][T11230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.744039][T11369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.810618][T11230] hsr_slave_0: entered promiscuous mode [ 255.832277][T11230] hsr_slave_1: entered promiscuous mode [ 255.839989][T11230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.858416][T11230] Cannot create hsr debugfs directory [ 256.033829][T11383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1331'. [ 256.146952][T11383] 8021q: VLANs not supported on vcan0 [ 256.167018][ T6685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.175125][T11386] veth0: entered promiscuous mode [ 256.242276][T11387] veth0: left promiscuous mode [ 256.562089][T11411] bridge2: entered promiscuous mode [ 256.573870][T11411] bridge2: entered allmulticast mode [ 256.581848][T11412] netlink: 'syz.3.1339': attribute type 4 has an invalid length. [ 256.612047][T11411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1340'. [ 256.629136][T11411] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1340'. [ 256.644526][T11408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1338'. [ 256.711899][T11420] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 256.965471][T11434] netlink: 'syz.3.1345': attribute type 33 has an invalid length. [ 257.010733][T11434] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1345'. [ 257.201840][T11450] xt_hashlimit: max too large, truncated to 1048576 [ 257.261039][T11454] netlink: 'syz.1.1351': attribute type 12 has an invalid length. [ 257.295551][T11230] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.311203][ T5834] Bluetooth: hci4: command tx timeout [ 257.330346][ T6678] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.359193][T11230] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.408844][T11458] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 257.412809][T11230] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.454802][T11456] : entered promiscuous mode [ 257.500624][T11230] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.586619][T11459] bond6: (slave gretap2): making interface the new active one [ 257.615510][T11459] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 257.690537][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1357'. [ 257.783902][T11478] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 257.846266][T11230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.885882][T11482] Cannot find add_set index 0 as target [ 257.899862][T11230] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.919176][T11484] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1361'. [ 257.960565][ T6679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.983348][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.990608][ T6687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.014712][ T6679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.044434][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.051649][ T6687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.064966][T11488] netlink: 'syz.0.1362': attribute type 39 has an invalid length. [ 258.423276][T11506] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1367'. [ 258.475497][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 258.515891][ T6685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 258.904428][T11230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.992105][T11534] netlink: 'syz.3.1373': attribute type 1 has an invalid length. [ 259.032993][T11536] netlink: 'syz.3.1373': attribute type 1 has an invalid length. [ 259.134142][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1375'. [ 259.196955][T11547] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 259.220946][T11547] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 259.254292][T11550] geneve2: entered promiscuous mode [ 259.335913][T11552] 1·: renamed from c0· (while UP) [ 259.345093][T11552] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 259.377360][ T5834] Bluetooth: hci4: command tx timeout [ 259.499730][T11564] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 259.624244][T11568] virt_wifi0 speed is unknown, defaulting to 1000 [ 259.632407][ T6679] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 259.662126][T11230] veth0_vlan: entered promiscuous mode [ 259.704388][T11230] veth1_vlan: entered promiscuous mode [ 259.811922][T11230] veth0_macvtap: entered promiscuous mode [ 259.868640][T11230] veth1_macvtap: entered promiscuous mode [ 259.871557][T11587] netlink: 'syz.2.1387': attribute type 1 has an invalid length. [ 260.054592][T11230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.115125][T11230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.174548][T11230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.193838][T11230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.203456][T11230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.221440][T11230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.512209][ T6678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.539489][ T6687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.562734][ T6678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.607560][ T6687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.710446][T11615] sctp: [Deprecated]: syz.3.1396 (pid 11615) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.710446][T11615] Use struct sctp_sack_info instead [ 260.778012][ T6678] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 261.061273][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.245504][T11635] netlink: 'syz.3.1401': attribute type 12 has an invalid length. [ 261.294480][T11635] __nla_validate_parse: 11 callbacks suppressed [ 261.294503][T11635] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1401'. [ 261.591330][ T6682] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.684539][ T6682] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.803076][ T6682] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.938210][ T6686] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 261.971502][ T6682] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.082105][ T6682] bridge_slave_1: left allmulticast mode [ 262.088492][ T6682] bridge_slave_1: left promiscuous mode [ 262.094245][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.104292][ T6682] bridge_slave_0: left allmulticast mode [ 262.110199][ T6682] bridge_slave_0: left promiscuous mode [ 262.115911][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.456412][ T6682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.470409][ T6682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.480965][ T6682] bond0 (unregistering): Released all slaves [ 262.936407][ T6682] hsr_slave_0: left promiscuous mode [ 262.952778][ T6682] hsr_slave_1: left promiscuous mode [ 262.969127][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.975733][T11650] netlink: 'syz.3.1405': attribute type 10 has an invalid length. [ 262.983796][ T6682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.008322][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.016547][ T6682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.062103][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 263.066769][ T6682] veth1_macvtap: left promiscuous mode [ 263.072517][ T6686] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 263.088404][ T6682] veth0_macvtap: left promiscuous mode [ 263.094112][ T6682] veth1_vlan: left promiscuous mode [ 263.101078][ T6682] veth0_vlan: left promiscuous mode [ 263.439083][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.451378][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.462475][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.470943][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.479142][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.830592][ T6682] team0 (unregistering): Port device team_slave_1 removed [ 263.880571][ T6682] team0 (unregistering): Port device team_slave_0 removed [ 264.199613][ T6679] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.305821][T11650] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 264.460653][T11661] virt_wifi0 speed is unknown, defaulting to 1000 [ 264.579365][T11678] openvswitch: netlink: Tunnel attr 2 has unexpected len 16 expected 4 [ 264.589187][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'. [ 264.610772][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 264.613033][T11676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1411'. [ 264.627033][T11677] nbd: nbd0 already in use [ 264.640169][T11673] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1412'. [ 264.650912][T11673] netlink: 'syz.2.1412': attribute type 1 has an invalid length. [ 264.747717][T11682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1415'. [ 264.774368][T11684] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21 [ 264.874916][T11688] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1417'. [ 265.018050][T11691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1418'. [ 265.346449][ T6678] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.503590][T11699] netlink: 'syz.3.1421': attribute type 24 has an invalid length. [ 265.532745][T11702] netlink: 'syz.1.1422': attribute type 4 has an invalid length. [ 265.540815][ T55] Bluetooth: hci4: command tx timeout [ 265.543986][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1422'. [ 265.564128][T11702] netlink: 'syz.1.1422': attribute type 4 has an invalid length. [ 265.998160][T11661] chnl_net:caif_netlink_parms(): no params data found [ 266.241715][T11736] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 266.264567][T11661] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.284779][T11661] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.311321][T11661] bridge_slave_0: entered allmulticast mode [ 266.329103][T11661] bridge_slave_0: entered promiscuous mode [ 266.350530][T11661] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.366663][T11661] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.377616][T11661] bridge_slave_1: entered allmulticast mode [ 266.410804][T11661] bridge_slave_1: entered promiscuous mode [ 266.475488][T11661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.497532][ T6682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.531808][T11661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.542043][T11749] __nla_validate_parse: 3 callbacks suppressed [ 266.542060][T11749] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1433'. [ 266.585017][T11753] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 266.614900][T11753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1434'. [ 266.651880][T11753] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 266.698454][T11756] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1435'. [ 266.707379][T11661] team0: Port device team_slave_0 added [ 266.747525][T11661] team0: Port device team_slave_1 added [ 266.764192][T11760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1436'. [ 266.843800][T11765] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 266.878093][T11765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1438'. [ 266.890159][T11661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.913501][T11661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.944206][T11661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.960028][T11661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.970026][T11661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.019800][T11661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.083079][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'. [ 267.144012][T11661] hsr_slave_0: entered promiscuous mode [ 267.151339][T11661] hsr_slave_1: entered promiscuous mode [ 267.162648][T11661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.170793][T11661] Cannot create hsr debugfs directory [ 267.618994][ T55] Bluetooth: hci4: command tx timeout [ 267.629276][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 267.694954][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 267.705143][T11800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1450'. [ 267.714842][T11800] netlink: 'syz.3.1450': attribute type 20 has an invalid length. [ 267.797938][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 268.083583][T11661] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 268.131196][T11661] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 268.158778][T11661] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 268.206577][T11661] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.503063][T11830] netlink: 592 bytes leftover after parsing attributes in process `syz.0.1457'. [ 268.523463][T11661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.573984][T11835] netlink: 'syz.2.1458': attribute type 1 has an invalid length. [ 268.609045][T11661] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.654325][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.661610][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.776467][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.783731][ T6686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.793804][ T6679] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 268.816200][T11843] team0: Mode changed to "roundrobin" [ 268.838620][T11843] rose0: entered promiscuous mode [ 268.899581][T11857] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 269.139921][T11868] netlink: 'syz.3.1468': attribute type 29 has an invalid length. [ 269.245234][T11873] lo: entered allmulticast mode [ 269.336179][T11871] lo: left allmulticast mode [ 269.440411][T11889] netlink: 'syz.2.1475': attribute type 12 has an invalid length. [ 269.666034][T11661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.698423][ T55] Bluetooth: hci4: command tx timeout [ 269.770010][T11902] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 269.948487][ T6679] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.170835][T11918] xt_CT: No such helper "snmp" [ 270.477238][T11941] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 270.799298][T11661] veth0_vlan: entered promiscuous mode [ 270.833106][T11661] veth1_vlan: entered promiscuous mode [ 270.919400][T11975] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 270.941062][T11661] veth0_macvtap: entered promiscuous mode [ 270.971965][T11661] veth1_macvtap: entered promiscuous mode [ 271.043745][T11661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.066972][ T6679] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 271.068992][T11661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.110807][T11661] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.129020][T11661] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.146312][T11661] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.167917][T11661] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.180601][T11984] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 271.443226][ T6687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.451365][ T6687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.525659][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.551859][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.659039][T12002] xt_hashlimit: overflow, try lower: 4294967295/0 [ 271.792569][ T5834] Bluetooth: hci4: command tx timeout [ 271.985059][T11986] infiniband syz1: set down [ 271.996938][T11986] infiniband syz1: added ipvlan0 [ 272.028589][T11985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.198348][ T6682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 272.328833][T11986] RDS/IB: syz1: added [ 272.332973][T11986] smc: adding ib device syz1 with port count 1 [ 272.353580][T11986] smc: ib device syz1 port 1 has pnetid [ 272.416182][T12031] batadv0: Device is already in use. [ 272.824892][T12054] netlink: 'syz.3.1519': attribute type 1 has an invalid length. [ 272.857958][T12054] __nla_validate_parse: 7 callbacks suppressed [ 272.857979][T12054] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1519'. [ 272.962838][T12064] wg2: entered promiscuous mode [ 272.981722][T12064] wg2: entered allmulticast mode [ 273.022975][T12066] netlink: 'syz.1.1523': attribute type 1 has an invalid length. [ 273.317263][T12077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1526'. [ 273.349948][ T6682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 273.583040][T12087] bond1: entered promiscuous mode [ 273.589245][T12087] bond1: entered allmulticast mode [ 273.595115][T12087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.664108][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'. [ 273.857524][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 274.094815][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1538'. [ 274.201645][ T6687] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.335663][T12129] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 274.359509][T12126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1538'. [ 274.385121][T12126] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1538'. [ 274.460379][ T6687] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.490449][ T6682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 274.632724][ T6687] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.755380][ T6687] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.885472][ T6687] bridge_slave_1: left allmulticast mode [ 274.891504][ T6687] bridge_slave_1: left promiscuous mode [ 274.897561][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.907512][ T6687] bridge_slave_0: left allmulticast mode [ 274.913180][ T6687] bridge_slave_0: left promiscuous mode [ 274.919989][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.253069][ T6687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.265062][ T6687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.275874][ T6687] bond0 (unregistering): Released all slaves [ 275.654591][ T6682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 275.732852][ T6687] hsr_slave_0: left promiscuous mode [ 275.739432][ T6687] hsr_slave_1: left promiscuous mode [ 275.745353][ T6687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.764640][ T6687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.772911][ T6687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.781241][ T6687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.805219][ T6687] veth1_macvtap: left promiscuous mode [ 275.811184][ T6687] veth0_macvtap: left promiscuous mode [ 275.817544][ T6687] veth1_vlan: left promiscuous mode [ 275.822907][ T6687] veth0_vlan: left promiscuous mode [ 276.090234][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1543'. [ 276.136937][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1543'. [ 276.427030][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 276.784330][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.796898][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.805656][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.814759][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.816939][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 276.839541][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.100298][ T6687] team0 (unregistering): Port device team_slave_1 removed [ 277.150311][ T6687] team0 (unregistering): Port device team_slave_0 removed [ 277.600578][T12140] vxcan1: Master is either lo or non-ether device [ 277.630141][T12159] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.654336][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 277.734686][T12168] virt_wifi0 speed is unknown, defaulting to 1000 [ 277.801992][T12172] virt_wifi0 speed is unknown, defaulting to 1000 [ 277.924285][T12181] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1551'. [ 277.928863][T12183] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 277.983847][T12181] tipc: Enabling of bearer rejected, already enabled [ 277.992157][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 278.108613][T12185] syzkaller0: entered promiscuous mode [ 278.121087][T12185] syzkaller0: entered allmulticast mode [ 278.901901][ T55] Bluetooth: hci4: command tx timeout [ 279.117899][ T6687] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 279.699748][T12194] veth0_to_hsr: entered promiscuous mode [ 279.717383][T12195] veth0_to_hsr: left promiscuous mode [ 279.893033][T12202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1556'. [ 280.053317][T12210] netlink: 'syz.0.1560': attribute type 16 has an invalid length. [ 280.062216][T12210] netlink: 'syz.0.1560': attribute type 17 has an invalid length. [ 280.161934][T12210] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.169570][T12210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.247322][ T6686] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 280.279856][ T9318] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 280.980153][ T55] Bluetooth: hci4: command tx timeout [ 281.217120][ T9319] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 281.230025][T12242] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 281.372788][ T6678] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 281.387106][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1570'. [ 281.554067][T12172] chnl_net:caif_netlink_parms(): no params data found [ 281.772416][T12263] openvswitch: netlink: Key type 272 is out of range max 32 [ 281.825457][T12172] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.844018][T12172] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.858366][T12172] bridge_slave_0: entered allmulticast mode [ 281.876954][T12172] bridge_slave_0: entered promiscuous mode [ 281.899252][T12172] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.917931][T12172] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.932991][T12172] bridge_slave_1: entered allmulticast mode [ 281.944662][T12270] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1576'. [ 281.961559][T12172] bridge_slave_1: entered promiscuous mode [ 281.977629][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1576'. [ 282.144749][T12172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.178831][T12172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.302122][T12172] team0: Port device team_slave_0 added [ 282.322269][T12172] team0: Port device team_slave_1 added [ 282.391871][T12172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.403314][T12172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.487610][T12172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.545963][T12172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.564615][T12172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.602762][T12172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.604591][ T6678] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 282.704790][T12298] ip6gre2: entered allmulticast mode [ 282.759113][T12172] hsr_slave_0: entered promiscuous mode [ 282.765901][T12172] hsr_slave_1: entered promiscuous mode [ 282.782746][T12172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.790519][T12172] Cannot create hsr debugfs directory [ 283.060939][ T55] Bluetooth: hci4: command tx timeout [ 283.169109][T12321] netlink: 'syz.0.1590': attribute type 5 has an invalid length. [ 283.311473][T12334] ip6t_rpfilter: unknown options [ 283.327508][T12333] ip6t_rpfilter: unknown options [ 283.593584][T12350] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1598'. [ 283.629729][T12356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1596'. [ 283.645599][T12356] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1596'. [ 283.664031][T12356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1596'. [ 283.675655][T12356] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1596'. [ 283.689056][T12356] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1596'. [ 283.771191][ T6682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 283.873254][T12367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1600'. [ 283.892605][T12368] netlink: 'syz.0.1601': attribute type 29 has an invalid length. [ 283.901168][T12368] netlink: 'syz.0.1601': attribute type 29 has an invalid length. [ 283.917460][T12368] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1601'. [ 283.923615][T12367] : left promiscuous mode [ 283.982174][T12374] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1602'. [ 284.110725][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'. [ 284.214693][T12172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 284.233520][T12172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 284.258706][T12172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 284.288709][T12172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 284.368743][T12391] xt_l2tp: v2 sid > 0xffff: 262144 [ 284.473417][T12172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.502979][T12172] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.525329][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.532624][ T6686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.559017][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.566249][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.898522][ T6682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 284.913098][T12404] sctp: [Deprecated]: syz.2.1610 (pid 12404) Use of int in max_burst socket option. [ 284.913098][T12404] Use struct sctp_assoc_value instead [ 285.050620][T12172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.137001][ T55] Bluetooth: hci4: command tx timeout [ 285.299334][T12416] IPv6: NLM_F_CREATE should be specified when creating new route [ 285.829003][T12440] syzkaller1: entered promiscuous mode [ 285.834719][T12440] syzkaller1: entered allmulticast mode [ 286.050518][T12172] veth0_vlan: entered promiscuous mode [ 286.068346][ T6679] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 286.111548][T12172] veth1_vlan: entered promiscuous mode [ 286.193716][T12172] veth0_macvtap: entered promiscuous mode [ 286.220685][T12172] veth1_macvtap: entered promiscuous mode [ 286.255665][T12172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.272046][T12172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.302851][T12172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.331418][T12172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.358213][T12172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.379117][T12172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.620072][ T6679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.641957][ T6679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.758520][ T6678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.766412][ T6678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.856349][T12478] tun0: tun_chr_ioctl cmd 1074025675 [ 286.871966][T12478] tun0: persist disabled [ 286.884319][T12478] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 286.893478][T12478] xt_CONNSECMARK: invalid mode: 0 [ 287.179136][ T6678] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 287.422407][T12511] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 287.612580][T12522] netlink: 'syz.2.1644': attribute type 1 has an invalid length. [ 287.695817][T12520] virt_wifi0 speed is unknown, defaulting to 1000 [ 287.771779][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.866446][T12524] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 287.944426][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.033469][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.298301][ T6687] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 288.361986][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.587802][ T53] bridge_slave_1: left allmulticast mode [ 288.593605][ T53] bridge_slave_1: left promiscuous mode [ 288.604167][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.617341][ T53] bridge_slave_0: left allmulticast mode [ 288.623089][ T53] bridge_slave_0: left promiscuous mode [ 288.633644][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.058066][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.072746][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.083896][ T53] bond0 (unregistering): Released all slaves [ 289.414691][ T6678] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 289.722062][T12560] IPVS: length: 8 != 1152 [ 289.954166][T12568] __nla_validate_parse: 12 callbacks suppressed [ 289.954188][T12568] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1654'. [ 290.221906][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 290.238963][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 290.251148][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 290.268053][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 290.278135][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 290.305116][T12579] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1658'. [ 290.462648][ T53] hsr_slave_0: left promiscuous mode [ 290.482334][ T53] hsr_slave_1: left promiscuous mode [ 290.488627][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.498986][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.527760][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.535354][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.598355][ T6682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 290.627440][ T53] veth1_macvtap: left promiscuous mode [ 290.637536][ T53] veth0_macvtap: left promiscuous mode [ 290.653603][ T53] veth1_vlan: left promiscuous mode [ 290.663746][ T53] veth0_vlan: left promiscuous mode [ 290.743177][T12604] openvswitch: netlink: Duplicate or invalid key (type 0). [ 290.761588][T12604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.781340][T12604] openvswitch: netlink: Duplicate or invalid key (type 0). [ 290.801564][T12604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.044033][T12615] netlink: 'syz.2.1664': attribute type 1 has an invalid length. [ 291.131476][T12618] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.322131][T12623] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 291.500946][ T53] team0 (unregistering): Port device team_slave_1 removed [ 291.549487][ T53] team0 (unregistering): Port device team_slave_0 removed [ 291.758629][ T6682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 292.001178][T12574] virt_wifi0 speed is unknown, defaulting to 1000 [ 292.013055][T12599] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1662'. [ 292.034027][T12615] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 292.074534][T12626] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode 802.3ad(4) [ 292.315159][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'. [ 292.345157][T12642] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1674'. [ 292.369532][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1673'. [ 292.414966][T12637] netlink: 'syz.1.1673': attribute type 12 has an invalid length. [ 292.423164][ T5834] Bluetooth: hci4: command tx timeout [ 292.517493][T12637] netlink: 'syz.1.1673': attribute type 11 has an invalid length. [ 292.525678][T12645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1675'. [ 292.624843][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 292.908499][ T6686] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 292.955874][T12666] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1684'. [ 292.972057][T12666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.049739][T12669] netlink: 'syz.0.1682': attribute type 2 has an invalid length. [ 293.080788][T12670] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.097562][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1682'. [ 293.254613][T12679] netlink: 'syz.1.1687': attribute type 8 has an invalid length. [ 293.448020][T12686] netlink: 'syz.1.1689': attribute type 1 has an invalid length. [ 293.672231][T12697] sit0: entered promiscuous mode [ 293.701924][T12697] netlink: 'syz.1.1691': attribute type 1 has an invalid length. [ 293.724100][T12695] netlink: 'syz.2.1692': attribute type 1 has an invalid length. [ 294.097855][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 294.186613][T12574] chnl_net:caif_netlink_parms(): no params data found [ 294.498823][ T5834] Bluetooth: hci4: command tx timeout [ 294.565554][T12746] netlink: 'syz.2.1706': attribute type 1 has an invalid length. [ 294.595888][T12574] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.605377][T12574] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.633691][T12574] bridge_slave_0: entered allmulticast mode [ 294.641924][T12574] bridge_slave_0: entered promiscuous mode [ 294.654569][T12574] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.662448][T12574] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.670799][T12574] bridge_slave_1: entered allmulticast mode [ 294.680020][T12574] bridge_slave_1: entered promiscuous mode [ 294.874697][T12574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.922257][T12574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.085791][T12574] team0: Port device team_slave_0 added [ 295.148413][T12574] team0: Port device team_slave_1 added [ 295.161975][T12776] __nla_validate_parse: 4 callbacks suppressed [ 295.161995][T12776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1715'. [ 295.216099][T12574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.224093][T12574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.250997][T12574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.262385][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 295.292986][T12574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.319970][T12574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.361657][T12574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.480744][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1720'. [ 295.628632][T12574] hsr_slave_0: entered promiscuous mode [ 295.655231][T12574] hsr_slave_1: entered promiscuous mode [ 295.669089][T12574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.683916][T12574] Cannot create hsr debugfs directory [ 295.818273][T12800] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.1723'. [ 295.890511][T12800] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1723'. [ 295.942338][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1727'. [ 295.951677][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1727'. [ 296.235668][T12823] syzkaller0: entered promiscuous mode [ 296.263996][T12823] syzkaller0: entered allmulticast mode [ 296.397630][ T6679] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 296.520953][T12827] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1730'. [ 296.588202][ T5834] Bluetooth: hci4: command tx timeout [ 296.650500][T12842] netlink: 'syz.0.1733': attribute type 30 has an invalid length. [ 296.821078][T12827] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 296.832587][T12827] bond0 (unregistering): Released all slaves [ 297.131589][T12870] netlink: 212404 bytes leftover after parsing attributes in process `syz.0.1740'. [ 297.527336][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 298.461068][T12864] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1740'. [ 298.527958][T12574] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 298.563147][T12574] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 298.639041][T12574] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 298.645297][T12879] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1742'. [ 298.657305][ T5834] Bluetooth: hci4: command tx timeout [ 298.680951][T12574] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 298.697473][ T6682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 298.921413][T12893] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.930331][T12893] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.939463][T12893] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.948552][T12893] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.977414][T12893] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.986430][T12893] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.995839][T12893] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.005387][T12893] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.118787][T12574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.166518][T12574] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.195344][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.202656][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.254475][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.261740][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.492548][T12917] netlink: 'syz.0.1753': attribute type 4 has an invalid length. [ 299.521967][T12918] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.762911][T12926] netlink: 'syz.2.1755': attribute type 11 has an invalid length. [ 299.819218][ T6686] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 299.855741][T12574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.014979][T12938] delete_channel: no stack [ 300.021959][T12940] netlink: 'syz.3.1760': attribute type 18 has an invalid length. [ 300.270407][T12954] __nla_validate_parse: 4 callbacks suppressed [ 300.270438][T12954] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1762'. [ 300.312218][T12959] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1762'. [ 300.388787][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'. [ 300.460530][T12965] netlink: 'syz.2.1766': attribute type 4 has an invalid length. [ 300.539910][T12969] netlink: 'syz.1.1767': attribute type 1 has an invalid length. [ 300.557717][T12965] netlink: 'syz.2.1766': attribute type 4 has an invalid length. [ 300.644846][T12971] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 300.704987][T12969] 8021q: adding VLAN 0 to HW filter on device bond7 [ 300.716004][ T6678] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 300.785813][T12969] veth7: entered promiscuous mode [ 300.794066][T12969] bond7: (slave veth7): Enslaving as a backup interface with a down link [ 300.814526][T12973] tipc: Started in network mode [ 300.823779][T12973] tipc: Node identity 2e89abae7a7f, cluster identity 4711 [ 300.838142][T12973] tipc: Enabled bearer , priority 0 [ 300.869430][ T13] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 300.914059][T12983] syzkaller0: entered promiscuous mode [ 300.921812][T12983] syzkaller0: entered allmulticast mode [ 300.931639][T12983] tipc: Resetting bearer [ 300.940257][T12574] veth0_vlan: entered promiscuous mode [ 300.962631][T12972] tipc: Resetting bearer [ 300.979870][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 301.622580][T12998] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1775'. [ 301.947197][ T9310] tipc: Node number set to 1425451950 [ 302.098941][ T6678] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 302.524452][T12972] tipc: Disabling bearer [ 302.539832][T12574] veth1_vlan: entered promiscuous mode [ 302.681038][T12574] veth0_macvtap: entered promiscuous mode [ 302.704522][T12574] veth1_macvtap: entered promiscuous mode [ 302.715535][T13002] netlink: 'syz.2.1776': attribute type 12 has an invalid length. [ 302.725943][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1777'. [ 302.748035][T13002] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1776'. [ 302.877661][T12574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.964918][T12574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.993295][T12574] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.031044][T12574] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.057702][T12574] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.066476][T12574] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.070374][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 303.090052][T13025] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 303.101108][T13025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.190220][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1783'. [ 303.199019][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1784'. [ 303.232058][ T6687] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 303.301321][ T6679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.312557][T13030] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1783'. [ 303.332753][ T6679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.354994][T13025] xt_hashlimit: invalid rate [ 303.390487][T13036] netlink: 'syz.3.1786': attribute type 1 has an invalid length. [ 303.433956][ T6679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.467683][ T6679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.606786][T13043] Cannot find add_set index 3 as target [ 303.965899][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.110803][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.195955][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.333659][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.367950][ T6679] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 304.429835][ T13] bridge_slave_1: left allmulticast mode [ 304.435562][ T13] bridge_slave_1: left promiscuous mode [ 304.441516][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.451395][ T13] bridge_slave_0: left allmulticast mode [ 304.457891][ T13] bridge_slave_0: left promiscuous mode [ 304.463665][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.820026][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.833522][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.844781][ T13] bond0 (unregistering): Released all slaves [ 305.313958][ T13] hsr_slave_0: left promiscuous mode [ 305.331484][ T13] hsr_slave_1: left promiscuous mode [ 305.338225][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.345829][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.356667][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.364827][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.389419][ T13] veth1_macvtap: left promiscuous mode [ 305.394995][ T13] veth0_macvtap: left promiscuous mode [ 305.401008][ T13] veth1_vlan: left promiscuous mode [ 305.406361][ T13] veth0_vlan: left promiscuous mode [ 305.488654][ T6686] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 306.074531][T13093] xt_l2tp: v2 doesn't support IP mode [ 306.380009][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 306.391926][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 306.401924][ T13] team0 (unregistering): Port device team_slave_1 removed [ 306.411709][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 306.436422][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 306.452922][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.462057][ T13] team0 (unregistering): Port device team_slave_0 removed [ 306.600725][ T6687] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 307.113597][T13100] virt_wifi0 speed is unknown, defaulting to 1000 [ 307.186593][T13112] netlink: 'syz.0.1805': attribute type 4 has an invalid length. [ 307.631649][T13131] __nla_validate_parse: 4 callbacks suppressed [ 307.631671][T13131] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1810'. [ 307.670868][T13131] batadv0: entered allmulticast mode [ 307.684683][T13135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1811'. [ 307.727997][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 307.995961][T13153] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1818'. [ 308.009875][T13153] netlink: 'syz.2.1818': attribute type 1 has an invalid length. [ 308.019968][T13153] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1818'. [ 308.092396][T13149] virt_wifi0 speed is unknown, defaulting to 1000 [ 308.168242][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1820'. [ 308.192295][T13161] pim6reg1: entered promiscuous mode [ 308.198556][T13161] pim6reg1: entered allmulticast mode [ 308.497507][ T5834] Bluetooth: hci4: command tx timeout [ 308.628309][T13100] chnl_net:caif_netlink_parms(): no params data found [ 308.638670][T13175] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1822'. [ 308.682943][T13173] virt_wifi0 speed is unknown, defaulting to 1000 [ 308.690083][T13179] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1822'. [ 308.826854][ T6677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 309.005308][T13100] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.047336][T13100] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.054591][T13100] bridge_slave_0: entered allmulticast mode [ 309.065761][T13188] delete_channel: no stack [ 309.099664][T13100] bridge_slave_0: entered promiscuous mode [ 309.109161][T13100] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.118986][T13100] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.126273][T13100] bridge_slave_1: entered allmulticast mode [ 309.144719][T13100] bridge_slave_1: entered promiscuous mode [ 309.146048][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1825'. [ 309.174069][T13189] delete_channel: no stack [ 309.298888][T13196] netlink: 'syz.0.1825': attribute type 23 has an invalid length. [ 309.335302][T13100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.383312][T13100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.591821][T13100] team0: Port device team_slave_0 added [ 309.638620][T13202] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 309.647853][T13202] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1828'. [ 309.679506][T13100] team0: Port device team_slave_1 added [ 309.902688][T13100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.929689][T13100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.957719][ T6686] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 309.974542][T13100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.992751][T13100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.001139][T13100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.032787][T13100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.307602][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1834'. [ 310.331488][T13100] hsr_slave_0: entered promiscuous mode [ 310.362123][T13100] hsr_slave_1: entered promiscuous mode [ 310.373198][T13100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.393589][T13100] Cannot create hsr debugfs directory [ 310.592104][ T5834] Bluetooth: hci4: command tx timeout [ 311.088976][ T6677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 311.758833][T13276] SET target dimension over the limit! [ 311.764734][T13274] C: renamed from lo (while UP) [ 311.799067][T13274] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 311.895930][T13283] netlink: 'syz.1.1852': attribute type 39 has an invalid length. [ 311.930374][T13284] netlink: 'syz.0.1851': attribute type 1 has an invalid length. [ 312.210015][ T6677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 312.256292][T13284] bond8: entered promiscuous mode [ 312.269854][T13284] 8021q: adding VLAN 0 to HW filter on device bond8 [ 312.581338][T13312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.627022][T13100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 312.644612][T13318] __nla_validate_parse: 5 callbacks suppressed [ 312.644632][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1860'. [ 312.666864][ T5834] Bluetooth: hci4: command tx timeout [ 312.684849][T13100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 312.717741][T13100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 312.732064][T13100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 312.926079][T13100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.973652][T13100] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.009690][T13333] netlink: 'syz.1.1864': attribute type 2 has an invalid length. [ 313.018099][T13333] netlink: 'syz.1.1864': attribute type 8 has an invalid length. [ 313.020582][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.029425][T13333] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1864'. [ 313.033173][ T6677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.080886][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.088194][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.331915][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 313.704219][T13100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.821431][T13373] virt_wifi0 speed is unknown, defaulting to 1000 [ 313.884015][T13379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1872'. [ 313.901108][T13379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1872'. [ 314.301719][T13388] syzkaller0: entered promiscuous mode [ 314.318232][T13388] syzkaller0: entered allmulticast mode [ 314.520977][ T6686] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 314.737038][ T5834] Bluetooth: hci4: command tx timeout [ 315.661241][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 315.842588][T13100] veth0_vlan: entered promiscuous mode [ 315.889855][T13100] veth1_vlan: entered promiscuous mode [ 315.985308][T13100] veth0_macvtap: entered promiscuous mode [ 316.022096][T13100] veth1_macvtap: entered promiscuous mode [ 316.075500][T13100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.135553][T13100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.167356][T13100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.186609][T13100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.208183][T13100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.224601][T13100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.484972][T13425] netlink: 'syz.1.1884': attribute type 6 has an invalid length. [ 316.580058][ T6678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.608263][ T6678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.767884][T13428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.789756][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 316.809843][T13433] netlink: 'syz.0.1886': attribute type 8 has an invalid length. [ 316.825384][ T5834] Bluetooth: hci4: command tx timeout [ 316.857605][T13435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1888'. [ 316.863913][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.867611][T13435] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1888'. [ 316.884561][T13435] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1888'. [ 316.884878][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.107371][T13444] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1890'. [ 317.532558][T13454] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1895'. [ 317.649924][ T6678] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.772112][ T6678] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.872027][ T6678] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.942720][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 317.953574][ T6678] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.105936][ T6678] bridge_slave_1: left allmulticast mode [ 318.112274][ T6678] bridge_slave_1: left promiscuous mode [ 318.118154][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.128243][ T6678] bridge_slave_0: left allmulticast mode [ 318.133939][ T6678] bridge_slave_0: left promiscuous mode [ 318.141129][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.463706][ T6678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.474906][ T6678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.487664][ T6678] bond0 (unregistering): Released all slaves [ 318.963545][ T6678] hsr_slave_0: left promiscuous mode [ 318.970310][ T6678] hsr_slave_1: left promiscuous mode [ 318.976502][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.990455][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.999205][ T6678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.006935][ T6678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.029156][ T6678] veth1_macvtap: left promiscuous mode [ 319.034741][ T6678] veth0_macvtap: left promiscuous mode [ 319.040841][ T6678] veth1_vlan: left promiscuous mode [ 319.046144][ T6678] veth0_vlan: left promiscuous mode [ 319.087759][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 319.561442][T13465] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1898'. [ 319.604905][ T6678] team0 (unregistering): Port device team_slave_1 removed [ 319.693567][ T6678] team0 (unregistering): Port device team_slave_0 removed [ 319.883496][T13478] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1903'. [ 319.956473][T13481] netlink: 186508 bytes leftover after parsing attributes in process `syz.3.1903'. [ 320.106327][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.123235][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.134338][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.153447][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.175378][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.237523][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 320.382178][T13472] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1900'. [ 320.397053][T13472] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1900'. [ 320.406216][T13474] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1903'. [ 320.523777][T13485] virt_wifi0 speed is unknown, defaulting to 1000 [ 320.628493][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1906'. [ 320.663061][T13496] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1904'. [ 320.678121][T13496] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1904'. [ 320.885142][T13501] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1909'. [ 321.194116][T13514] netlink: 'syz.3.1914': attribute type 6 has an invalid length. [ 321.420661][ T6678] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 321.855260][T13554] netlink: 'syz.0.1928': attribute type 4 has an invalid length. [ 321.915631][T13485] chnl_net:caif_netlink_parms(): no params data found [ 322.238922][T13485] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.257683][ T5834] Bluetooth: hci4: command tx timeout [ 322.265418][T13485] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.296960][T13485] bridge_slave_0: entered allmulticast mode [ 322.304325][T13485] bridge_slave_0: entered promiscuous mode [ 322.339986][T13485] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.369531][T13485] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.385049][T13485] bridge_slave_1: entered allmulticast mode [ 322.399010][T13485] bridge_slave_1: entered promiscuous mode [ 322.501756][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.570160][ T6671] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 322.656607][T13485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.780527][T13485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.087508][T13485] team0: Port device team_slave_0 added [ 323.128680][T13485] team0: Port device team_slave_1 added [ 323.235887][T13485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.249126][T13485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.309270][T13485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.341657][T13485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.357468][T13485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.417681][T13485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.552155][T13485] hsr_slave_0: entered promiscuous mode [ 323.568771][T13485] hsr_slave_1: entered promiscuous mode [ 323.579149][T13485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.594567][T13485] Cannot create hsr debugfs directory [ 323.728564][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 324.339448][ T5834] Bluetooth: hci4: command tx timeout [ 324.373790][T13667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.553063][T13668] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 324.571256][T13668] syzkaller0: Linktype set failed because interface is up [ 324.603372][T13672] virt_wifi0 speed is unknown, defaulting to 1000 [ 324.648527][T13679] netlink: 'syz.3.1958': attribute type 10 has an invalid length. [ 324.663401][T13679] hsr0: entered promiscuous mode [ 324.739492][ T9310] syzkaller0: tun_net_xmit 76 [ 324.928348][ T6676] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 324.953946][T13485] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 324.983022][T13485] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 325.019515][T13485] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 325.032003][T13485] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 326.067395][ T4586] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 326.417598][ T5834] Bluetooth: hci4: command tx timeout [ 326.705357][T13697] macvlan3: entered promiscuous mode [ 326.710951][T13697] macvlan3: entered allmulticast mode [ 326.935252][T13485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.015564][T13485] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.045321][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.052596][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.068493][T13718] __nla_validate_parse: 17 callbacks suppressed [ 327.068512][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1969'. [ 327.112383][T13717] veth0: entered promiscuous mode [ 327.135993][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.143309][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.178270][ T6685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 327.357763][T13725] netlink: 'syz.0.1971': attribute type 1 has an invalid length. [ 327.376914][T13725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1971'. [ 327.580282][T13733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1974'. [ 327.593557][T13733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1974'. [ 327.604406][T13733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1974'. [ 327.624809][T13733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1974'. [ 327.884156][T13732] virt_wifi0 speed is unknown, defaulting to 1000 [ 327.884933][T13742] netem: change failed [ 327.971676][T13747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1977'. [ 328.040641][T13485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.333999][ T6676] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 328.375799][T13756] netlink: 'syz.0.1981': attribute type 30 has an invalid length. [ 328.462815][T13762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1981'. [ 328.507800][ T5834] Bluetooth: hci4: command tx timeout [ 328.517360][T13762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1981'. [ 328.863908][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1985'. [ 328.957286][T13485] veth0_vlan: entered promiscuous mode [ 328.966424][T13783] netlink: 'syz.1.1986': attribute type 3 has an invalid length. [ 328.998414][T13485] veth1_vlan: entered promiscuous mode [ 329.093525][T13485] veth0_macvtap: entered promiscuous mode [ 329.102328][ T30] audit: type=1107 audit(1746959765.589:6): pid=13784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 329.102815][ T30] audit: type=1107 audit(1746959765.599:7): pid=13784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 329.203400][T13485] veth1_macvtap: entered promiscuous mode [ 329.398758][T13790] dvmrp0: entered allmulticast mode [ 329.468793][T13485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.491869][T13485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.524198][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 329.531889][T13485] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.562844][T13485] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.585296][T13485] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.589196][T13803] netlink: 'syz.0.1993': attribute type 1 has an invalid length. [ 329.611060][T13485] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.679142][T13803] 8021q: adding VLAN 0 to HW filter on device bond9 [ 329.795812][T13809] xt_time: unknown flags 0x4 [ 329.961639][ T6677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.996777][ T6677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.071894][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.086566][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.474561][T13836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.698860][ T6687] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 330.739801][ T6677] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.932692][ T6677] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.027571][ T6677] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.196236][ T6677] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.334414][ T6677] bridge_slave_1: left allmulticast mode [ 331.341755][ T6677] bridge_slave_1: left promiscuous mode [ 331.351563][ T6677] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.362298][ T6677] bridge_slave_0: left allmulticast mode [ 331.369315][ T6677] bridge_slave_0: left promiscuous mode [ 331.375273][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.721936][ T6677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.733291][ T6677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.743996][ T6677] bond0 (unregistering): Released all slaves [ 331.817272][ T6685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 332.163843][ T6677] hsr_slave_0: left promiscuous mode [ 332.170394][ T6677] hsr_slave_1: left promiscuous mode [ 332.176486][ T6677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.188444][ T6677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.198435][ T6677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.205931][ T6677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.238354][ T6677] veth1_macvtap: left promiscuous mode [ 332.243961][ T6677] veth0_macvtap: left promiscuous mode [ 332.253460][ T6677] veth1_vlan: left promiscuous mode [ 332.259571][ T6677] veth0_vlan: left promiscuous mode [ 332.695497][ T6677] team0 (unregistering): Port device team_slave_1 removed [ 332.819172][T13853] netlink: 'syz.2.2009': attribute type 11 has an invalid length. [ 332.837753][T13853] __nla_validate_parse: 2 callbacks suppressed [ 332.837774][T13853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2009'. [ 332.855880][ T6677] team0 (unregistering): Port device team_slave_0 removed [ 332.948518][ T6685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 333.204976][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.219175][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.240216][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.266417][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.289624][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.560499][T13864] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 333.593642][T13864] team0: Device ipvlan3 is already an upper device of the team interface [ 333.733392][T13876] veth0: entered promiscuous mode [ 333.753844][T13876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2012'. [ 333.808272][T13882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2012'. [ 333.845993][T13882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2012'. [ 333.896939][T13882] netlink: 'syz.0.2012': attribute type 20 has an invalid length. [ 333.975817][T13869] virt_wifi0 speed is unknown, defaulting to 1000 [ 334.074385][ T6687] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 334.457624][T13908] veth1_macvtap: left promiscuous mode [ 334.464739][T13908] macsec0: entered promiscuous mode [ 334.505216][T13908] veth1_macvtap: entered promiscuous mode [ 334.524542][T13908] macsec0: left promiscuous mode [ 335.193071][T13935] sctp: [Deprecated]: syz.0.2028 (pid 13935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.193071][T13935] Use struct sctp_sack_info instead [ 335.197682][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 335.225593][T13932] xt_connbytes: Forcing CT accounting to be enabled [ 335.254635][T13932] --map-set only usable from mangle table [ 335.282626][T13940] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2026'. [ 335.388592][ T55] Bluetooth: hci4: command tx timeout [ 335.563069][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2032'. [ 335.833887][T13869] chnl_net:caif_netlink_parms(): no params data found [ 335.934215][T13977] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2039'. [ 336.359933][ T6677] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 336.374513][T13869] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.408745][T13869] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.433991][T13869] bridge_slave_0: entered allmulticast mode [ 336.443155][T13869] bridge_slave_0: entered promiscuous mode [ 336.461175][T13869] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.473773][T13869] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.504785][T13869] bridge_slave_1: entered allmulticast mode [ 336.519686][T13869] bridge_slave_1: entered promiscuous mode [ 336.639674][T14024] ªªªªªª: renamed from vlan0 [ 336.649538][T14027] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 336.692911][T13869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.714979][T14030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2052'. [ 336.718630][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2050'. [ 336.768511][T13869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.997881][T13869] team0: Port device team_slave_0 added [ 337.012307][T13869] team0: Port device team_slave_1 added [ 337.130978][T14043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2055'. [ 337.210029][T13869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.235355][T13869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.266402][T13869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.283240][T13869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.291336][T13869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.330695][T13869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.460562][ T55] Bluetooth: hci4: command tx timeout [ 337.472137][T14058] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 337.511423][ T6685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.552546][T13869] hsr_slave_0: entered promiscuous mode [ 337.563629][T13869] hsr_slave_1: entered promiscuous mode [ 337.571163][T13869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.579031][T13869] Cannot create hsr debugfs directory [ 337.984023][T14078] __nla_validate_parse: 2 callbacks suppressed [ 337.984046][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2065'. [ 338.248557][T14070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2062'. [ 338.307622][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2062'. [ 338.346085][T14088] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2067'. [ 338.596540][T14100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2071'. [ 338.628579][ T2984] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 338.800864][T13869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 338.876035][T13869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 338.931256][T14111] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 338.933410][T13869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 338.961499][T14111] syz_tun: entered allmulticast mode [ 338.967809][T14115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 338.975371][T14115] IPv6: NLM_F_CREATE should be set when creating new route [ 338.983625][T13869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 338.998747][T14114] netlink: 'syz.3.2076': attribute type 4 has an invalid length. [ 339.020145][T14111] dvmrp0: left allmulticast mode [ 339.055525][T14117] netlink: 'syz.3.2076': attribute type 4 has an invalid length. [ 339.074514][T14119] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 339.167477][T14107] syz_tun: left allmulticast mode [ 339.292006][T13869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.293514][T14128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2080'. [ 339.345904][T14128] xfrm1: entered promiscuous mode [ 339.363179][T14128] xfrm1: entered allmulticast mode [ 339.412503][T13869] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.462574][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.469860][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.520852][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.528152][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.541390][ T55] Bluetooth: hci4: command tx timeout [ 339.585514][T14139] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 339.670732][T14142] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2083'. [ 339.759333][ T2984] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 339.842793][T14151] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2084'. [ 339.933211][T14155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2086'. [ 340.433384][T14178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.466275][T13869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.595119][T14185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2093'. [ 340.919846][ T6685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 341.010578][T14200] 8021q: adding VLAN 0 to HW filter on device bond5 [ 341.153455][T13869] veth0_vlan: entered promiscuous mode [ 341.205422][T13869] veth1_vlan: entered promiscuous mode [ 341.299148][T13869] veth0_macvtap: entered promiscuous mode [ 341.332661][T13869] veth1_macvtap: entered promiscuous mode [ 341.393718][T14218] SET target dimension over the limit! [ 341.399236][T13869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.422891][T13869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.451905][T13869] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.542314][T13869] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.562551][T13869] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.580531][T13869] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.617692][ T55] Bluetooth: hci4: command tx timeout [ 341.666335][T14224] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 341.667563][T14223] IPVS: stopping master sync thread 14224 ... [ 341.854499][ T6685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.906490][ T6685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.961796][T14233] netlink: 'syz.0.2106': attribute type 7 has an invalid length. [ 341.994064][T14230] netlink: 'syz.3.2105': attribute type 29 has an invalid length. [ 342.040659][T14233] : entered promiscuous mode [ 342.069929][ T4586] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 342.079430][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.100543][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.328183][T14245] nbd: illegal input index -8454144 [ 342.429700][T14245] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 342.841703][ T6685] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.018721][ T6685] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.188369][ T6685] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.229150][ T2984] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 343.295364][ T6685] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.503934][ T6685] bridge_slave_1: left allmulticast mode [ 343.510652][ T6685] bridge_slave_1: left promiscuous mode [ 343.516471][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.526136][ T6685] bridge_slave_0: left allmulticast mode [ 343.531965][ T6685] bridge_slave_0: left promiscuous mode [ 343.539552][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.860686][ T6685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.873124][ T6685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.884169][ T6685] bond0 (unregistering): Released all slaves [ 344.327211][ T6685] hsr_slave_0: left promiscuous mode [ 344.333163][ T6685] hsr_slave_1: left promiscuous mode [ 344.340248][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.347905][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.355395][ T2984] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 344.364207][ T6685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.373093][ T6685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.400759][ T6685] veth1_macvtap: left promiscuous mode [ 344.406317][ T6685] veth0_macvtap: left promiscuous mode [ 344.414156][ T6685] veth1_vlan: left promiscuous mode [ 344.419785][ T6685] veth0_vlan: left promiscuous mode [ 344.862395][ T6685] team0 (unregistering): Port device team_slave_1 removed [ 344.905070][ T6685] team0 (unregistering): Port device team_slave_0 removed [ 345.290002][T14290] __nla_validate_parse: 3 callbacks suppressed [ 345.290025][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2122'. [ 345.480416][ T2984] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 345.543160][T14297] netlink: 'syz.3.2122': attribute type 58 has an invalid length. [ 345.578880][T14297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2122'. [ 345.634364][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.657295][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.676067][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.693531][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.703504][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.815811][T14280] bridge0: port 3(team0) entered disabled state [ 345.835570][T14280] team0 (unregistering): left allmulticast mode [ 345.847659][T14280] team_slave_0: left allmulticast mode [ 345.859096][T14280] team_slave_1: left allmulticast mode [ 345.868886][T14280] team0 (unregistering): left promiscuous mode [ 345.875356][T14280] team_slave_0: left promiscuous mode [ 345.883086][T14280] team_slave_1: left promiscuous mode [ 345.890608][T14280] bridge0: port 3(team0) entered disabled state [ 345.912777][T14280] team0 (unregistering): Port device team_slave_0 removed [ 345.926549][T14280] team0 (unregistering): Port device team_slave_1 removed [ 345.999236][T14287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2122'. [ 346.074833][T14304] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20002 [ 346.087943][T14302] syzkaller1: entered promiscuous mode [ 346.105520][T14302] syzkaller1: entered allmulticast mode [ 346.135466][T14304] veth0_to_bridge: entered promiscuous mode [ 346.150098][T14299] virt_wifi0 speed is unknown, defaulting to 1000 [ 346.590326][T14326] sctp: [Deprecated]: syz.0.2130 (pid 14326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.590326][T14326] Use struct sctp_sack_info instead [ 346.622846][ T13] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 346.729638][T14334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2127'. [ 346.858253][T14341] netlink: 'syz.0.2132': attribute type 1 has an invalid length. [ 346.868144][T14339] C: entered promiscuous mode [ 346.889068][T14341] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2132'. [ 346.895734][T14339] C: entered allmulticast mode [ 346.923501][T14339] tunl0: entered promiscuous mode [ 346.945235][T14339] tunl0: entered allmulticast mode [ 346.964235][T14339] gre0: entered promiscuous mode [ 346.986891][T14339] gre0: entered allmulticast mode [ 346.992675][T14339] 0ªî{X¹¦: entered promiscuous mode [ 347.017937][T14339] erspan0: entered promiscuous mode [ 347.024454][T14339] erspan0: entered allmulticast mode [ 347.034647][T14339] ip_vti0: entered promiscuous mode [ 347.040248][T14339] ip_vti0: entered allmulticast mode [ 347.050189][T14339] ip6_vti0: entered promiscuous mode [ 347.055695][T14339] ip6_vti0: entered allmulticast mode [ 347.073995][T14339] sit0: entered promiscuous mode [ 347.079319][T14339] sit0: entered allmulticast mode [ 347.085429][T14346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2133'. [ 347.096397][T14339] ip6tnl0: entered promiscuous mode [ 347.106565][T14339] ip6tnl0: entered allmulticast mode [ 347.113104][T14339] ip6gre0: entered promiscuous mode [ 347.124530][T14339] ip6gre0: entered allmulticast mode [ 347.130900][T14339] ip6gretap0: entered promiscuous mode [ 347.139987][T14339] ip6gretap0: entered allmulticast mode [ 347.146492][T14339] bond0: entered promiscuous mode [ 347.152561][T14339] bond0: entered allmulticast mode [ 347.163302][T14339] team0: entered promiscuous mode [ 347.168546][T14339] team0: entered allmulticast mode [ 347.175287][T14339] dummy0: entered promiscuous mode [ 347.184204][T14339] dummy0: entered allmulticast mode [ 347.190261][T14339] nlmon0: entered promiscuous mode [ 347.195555][T14339] nlmon0: entered allmulticast mode [ 347.204080][T14339] caif0: entered promiscuous mode [ 347.211414][T14339] caif0: entered allmulticast mode [ 347.220955][T14339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.773250][T14373] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2141'. [ 347.774338][ T4586] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 347.786748][ T55] Bluetooth: hci4: command tx timeout [ 347.824170][T14299] chnl_net:caif_netlink_parms(): no params data found [ 348.094187][T14299] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.111995][T14299] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.120297][T14299] bridge_slave_0: entered allmulticast mode [ 348.128616][T14299] bridge_slave_0: entered promiscuous mode [ 348.146070][T14299] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.156494][T14299] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.186620][T14299] bridge_slave_1: entered allmulticast mode [ 348.207448][T14299] bridge_slave_1: entered promiscuous mode [ 348.291108][T14392] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 348.310153][T14299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.349662][T14299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.440984][T14299] team0: Port device team_slave_0 added [ 348.532017][T14299] team0: Port device team_slave_1 added [ 348.591467][T14406] netlink: 'syz.3.2149': attribute type 3 has an invalid length. [ 348.641022][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.661514][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.677150][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.686462][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.697098][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.808210][T14299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.829262][T14299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.883089][T14299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.914046][T14299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.922594][T14299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.949493][ T6685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 348.966486][T14299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.996853][T14410] virt_wifi0 speed is unknown, defaulting to 1000 [ 349.093265][T14430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2153'. [ 349.103207][T14299] hsr_slave_0: entered promiscuous mode [ 349.122229][T14299] hsr_slave_1: entered promiscuous mode [ 349.148941][T14299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.156574][T14299] Cannot create hsr debugfs directory [ 349.422105][T14442] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 349.700238][T14446] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2159'. [ 349.710061][T14446] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2159'. [ 349.857177][ T5834] Bluetooth: hci4: command tx timeout [ 350.057130][ T4586] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 350.255383][T14299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 350.269928][T14299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 350.325600][T14299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 350.362923][T14299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 350.371944][T14478] ipt_REJECT: TCP_RESET invalid for non-tcp [ 350.470007][T14481] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2170'. [ 350.504149][T14410] chnl_net:caif_netlink_parms(): no params data found [ 350.737464][ T5834] Bluetooth: hci3: command tx timeout [ 351.090109][T14488] netlink: 'syz.2.2173': attribute type 29 has an invalid length. [ 351.107160][T14492] netlink: 'syz.2.2173': attribute type 29 has an invalid length. [ 351.178336][ T4586] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 351.427666][T14410] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.434870][T14410] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.448721][T14410] bridge_slave_0: entered allmulticast mode [ 351.456639][T14410] bridge_slave_0: entered promiscuous mode [ 351.468590][T14410] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.475825][T14410] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.483716][T14410] bridge_slave_1: entered allmulticast mode [ 351.492555][T14410] bridge_slave_1: entered promiscuous mode [ 351.563926][T14410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.606431][T14410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.684888][T14410] team0: Port device team_slave_0 added [ 351.701032][T14299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.724620][T14410] team0: Port device team_slave_1 added [ 351.823369][T14523] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 351.825710][T14299] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.849530][T14410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.862434][T14410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.900003][T14410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.927527][T14410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.934558][T14410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.961018][ T55] Bluetooth: hci4: command tx timeout [ 351.978986][T14410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.002376][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.009593][ T6685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.043149][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.050419][ T6685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.157299][T14410] hsr_slave_0: entered promiscuous mode [ 352.164707][T14410] hsr_slave_1: entered promiscuous mode [ 352.171670][T14410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.183777][T14410] Cannot create hsr debugfs directory [ 352.186288][T14539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2186'. [ 352.209751][T14538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2187'. [ 352.223264][T14533] bridge4: entered allmulticast mode [ 352.242616][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2186'. [ 352.279000][T14537] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 352.299174][ T6685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 352.653045][T14559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2192'. [ 352.821391][ T55] Bluetooth: hci3: command tx timeout [ 352.992174][T14410] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 353.025608][T14575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2193'. [ 353.119973][T14410] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 353.229286][T14410] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 353.315739][T14299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.414600][T14410] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 353.491799][ T6685] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 353.681399][T14410] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 353.693659][T14410] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 353.718547][T14410] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 353.743474][T14608] tipc: Enabling of bearer rejected, failed to enable media [ 353.752908][T14410] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 353.982163][T14410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.992424][T14617] netlink: 'syz.0.2205': attribute type 1 has an invalid length. [ 354.018123][ T55] Bluetooth: hci4: command tx timeout [ 354.102592][T14410] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.140524][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.147783][ T6687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.174627][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.181861][ T6687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.278973][T14299] veth0_vlan: entered promiscuous mode [ 354.316206][T14299] veth1_vlan: entered promiscuous mode [ 354.429650][T14299] veth0_macvtap: entered promiscuous mode [ 354.454517][T14299] veth1_macvtap: entered promiscuous mode [ 354.539757][T14299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.590085][T14299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.630369][T14630] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2208'. [ 354.633592][T14299] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.650157][T14630] openvswitch: netlink: Flow key attr not present in new flow. [ 354.660864][T14299] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.670616][ T6687] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 354.673541][T14299] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.687927][T14299] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.896875][ T55] Bluetooth: hci3: command 0x040f tx timeout [ 354.935117][T14644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2210'. [ 355.027999][ T6676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.052462][ T6676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.102051][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.121697][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.129755][T14410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.309677][T14410] veth0_vlan: entered promiscuous mode [ 355.346200][T14410] veth1_vlan: entered promiscuous mode [ 355.541375][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'. [ 355.553588][T14410] veth0_macvtap: entered promiscuous mode [ 355.600043][T14663] macsec0: entered promiscuous mode [ 355.694906][T14410] veth1_macvtap: entered promiscuous mode [ 355.741441][T14665] syz.3.2219: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 355.765271][T14665] CPU: 1 UID: 0 PID: 14665 Comm: syz.3.2219 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 355.765301][T14665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 355.765326][T14665] Call Trace: [ 355.765335][T14665] [ 355.765344][T14665] dump_stack_lvl+0x189/0x250 [ 355.765385][T14665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.765414][T14665] ? __pfx__printk+0x10/0x10 [ 355.765434][T14665] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 355.765468][T14665] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 355.765503][T14665] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 355.765539][T14665] warn_alloc+0x214/0x310 [ 355.765576][T14665] ? __pfx_warn_alloc+0x10/0x10 [ 355.765614][T14665] ? __get_vm_area_node+0x1c5/0x2d0 [ 355.765639][T14665] ? __get_vm_area_node+0x25a/0x2d0 [ 355.765672][T14665] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 355.765728][T14665] ? up_write+0x1c4/0x420 [ 355.765752][T14665] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 355.765781][T14665] ? __kasan_kmalloc_large+0x1a/0xa0 [ 355.765810][T14665] ? rcu_is_watching+0x15/0xb0 [ 355.765841][T14665] ? fq_pie_init+0x430/0x840 [ 355.765870][T14665] ? fq_pie_init+0x430/0x840 [ 355.765897][T14665] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 355.765923][T14665] ? fq_pie_init+0x430/0x840 [ 355.765951][T14665] ? tcf_block_get+0x67/0xa0 [ 355.765970][T14665] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 355.765997][T14665] fq_pie_init+0x430/0x840 [ 355.766029][T14665] ? __pfx_fq_pie_init+0x10/0x10 [ 355.766059][T14665] qdisc_create+0x78a/0xe80 [ 355.766106][T14665] tc_modify_qdisc+0x1808/0x20b0 [ 355.766152][T14665] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 355.766217][T14665] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 355.766245][T14665] rtnetlink_rcv_msg+0x779/0xb70 [ 355.766272][T14665] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 355.766292][T14665] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 355.766318][T14665] ? ref_tracker_free+0x63a/0x7d0 [ 355.766339][T14665] ? __copy_skb_header+0xa7/0x550 [ 355.766377][T14665] netlink_rcv_skb+0x219/0x490 [ 355.766401][T14665] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 355.766425][T14665] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.766470][T14665] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.766491][T14665] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.766519][T14665] netlink_unicast+0x758/0x8d0 [ 355.766551][T14665] netlink_sendmsg+0x805/0xb30 [ 355.766585][T14665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.766612][T14665] ? aa_sock_msg_perm+0x94/0x160 [ 355.766636][T14665] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.766662][T14665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.766683][T14665] __sock_sendmsg+0x219/0x270 [ 355.766704][T14665] ____sys_sendmsg+0x505/0x830 [ 355.766738][T14665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.766775][T14665] ? import_iovec+0x74/0xa0 [ 355.766807][T14665] ___sys_sendmsg+0x21f/0x2a0 [ 355.766837][T14665] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.766905][T14665] ? __fget_files+0x2a/0x420 [ 355.766930][T14665] ? __fget_files+0x3a0/0x420 [ 355.766968][T14665] __x64_sys_sendmsg+0x19b/0x260 [ 355.766997][T14665] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.767043][T14665] ? do_syscall_64+0xba/0x210 [ 355.767073][T14665] do_syscall_64+0xf6/0x210 [ 355.767104][T14665] ? clear_bhb_loop+0x45/0xa0 [ 355.767129][T14665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.767149][T14665] RIP: 0033:0x7f388c18e969 [ 355.767168][T14665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.767185][T14665] RSP: 002b:00007f388d012038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.767207][T14665] RAX: ffffffffffffffda RBX: 00007f388c3b5fa0 RCX: 00007f388c18e969 [ 355.767222][T14665] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 355.767234][T14665] RBP: 00007f388c210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 355.767247][T14665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.767258][T14665] R13: 0000000000000000 R14: 00007f388c3b5fa0 R15: 00007fff5bb7c058 [ 355.767292][T14665] [ 356.162065][ T6676] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 356.171144][T14665] Mem-Info: [ 356.174297][T14665] active_anon:3251 inactive_anon:0 isolated_anon:0 [ 356.174297][T14665] active_file:1349 inactive_file:39964 isolated_file:0 [ 356.174297][T14665] unevictable:768 dirty:45 writeback:0 [ 356.174297][T14665] slab_reclaimable:11175 slab_unreclaimable:109576 [ 356.174297][T14665] mapped:23664 shmem:1372 pagetables:512 [ 356.174297][T14665] sec_pagetables:0 bounce:0 [ 356.174297][T14665] kernel_misc_reclaimable:0 [ 356.174297][T14665] free:1341937 free_pcp:4671 free_cma:0 [ 356.220381][T14665] Node 0 active_anon:12932kB inactive_anon:0kB active_file:5396kB inactive_file:159660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94608kB dirty:180kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11888kB pagetables:1968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 356.255131][T14665] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 356.289249][T14665] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.316595][T14665] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 356.323119][T14665] Node 0 DMA32 free:1444564kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:12924kB inactive_anon:0kB active_file:5396kB inactive_file:159568kB unevictable:1536kB writepending:180kB present:3129332kB managed:2564136kB mlocked:0kB bounce:0kB free_pcp:18588kB local_pcp:648kB free_cma:0kB [ 356.355260][T14665] lowmem_reserve[]: 0 0 0 0 0 [ 356.361156][T14665] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 356.388379][T14665] lowmem_reserve[]: 0 0 0 0 0 [ 356.393127][T14665] Node 1 Normal free:3908444kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 356.423831][T14665] lowmem_reserve[]: 0 0 0 0 0 [ 356.430211][T14665] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 356.443967][T14665] Node 0 DMA32: 1041*4kB (UM) 1990*8kB (UME) 777*16kB (UME) 155*32kB (UME) 74*64kB (UME) 75*128kB (UME) 76*256kB (UME) 48*512kB (UME) 13*1024kB (UM) 6*2048kB (UME) 323*4096kB (UM) = 1444452kB [ 356.464313][T14665] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 356.475991][T14665] Node 1 Normal: 259*4kB (UME) 60*8kB (UME) 61*16kB (UME) 241*32kB (UME) 96*64kB (UME) 37*128kB (UME) 17*256kB (UM) 6*512kB (UME) 5*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3908444kB [ 356.495271][T14665] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.505068][T14665] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 356.514463][T14665] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 356.524521][T14665] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 356.534024][T14665] 42682 total pagecache pages [ 356.538860][T14665] 0 pages in swap cache [ 356.543456][T14665] Free swap = 124996kB [ 356.548370][T14665] Total swap = 124996kB [ 356.552547][T14665] 2097051 pages RAM [ 356.556397][T14665] 0 pages HighMem/MovableOnly [ 356.563712][T14665] 424359 pages reserved [ 356.568002][T14665] 0 pages cma reserved [ 356.615529][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.653668][T14410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.666194][T14410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.700620][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.722276][T14410] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.731804][T14410] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.742047][T14410] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.751269][T14410] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.811341][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.881579][ T6687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.890868][ T6687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.925667][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.937663][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.977142][ T5834] Bluetooth: hci3: command 0x040f tx timeout [ 356.998299][T14602] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 357.010236][T14602] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 357.018655][T14602] CPU: 1 UID: 0 PID: 14602 Comm: kbnepd bnep0 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 357.030906][T14602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.040975][T14602] RIP: 0010:klist_del+0x49/0x110 [ 357.045917][T14602] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 6f d5 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b 6f d5 f6 4d 8b 7e 58 4c 89 f7 e8 bf 41 [ 357.065534][T14602] RSP: 0018:ffffc9000451f7a8 EFLAGS: 00010202 [ 357.071614][T14602] RAX: 000000000000000b RBX: ffff88804fddd860 RCX: ffff88807ebeda00 [ 357.079615][T14602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 357.087586][T14602] RBP: ffffc9000451f8d0 R08: ffff88805123f783 R09: 1ffff1100a247ef0 [ 357.095567][T14602] R10: dffffc0000000000 R11: ffffed100a247ef1 R12: dffffc0000000000 [ 357.103551][T14602] R13: 1ffff11009fbbb0c R14: 0000000000000000 R15: ffff888056a9c768 [ 357.111532][T14602] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 357.120467][T14602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.127056][T14602] CR2: 00007ffda2ee8f60 CR3: 0000000050b04000 CR4: 00000000003526f0 [ 357.135038][T14602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.143012][T14602] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 357.151026][T14602] Call Trace: [ 357.154327][T14602] [ 357.157276][T14602] device_del+0x280/0x8e0 [ 357.161624][T14602] ? _raw_spin_unlock_irq+0x2e/0x50 [ 357.166828][T14602] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 357.172902][T14602] ? __pfx_device_del+0x10/0x10 [ 357.177773][T14602] ? netdev_unregister_kobject+0x344/0x450 [ 357.183593][T14602] unregister_netdevice_many_notify+0x1d5d/0x2330 [ 357.190033][T14602] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 357.196814][T14602] ? rcu_is_watching+0x15/0xb0 [ 357.201612][T14602] ? trace_contention_end+0x39/0x120 [ 357.206901][T14602] ? __mutex_lock+0x330/0xe80 [ 357.211588][T14602] ? __lock_acquire+0xaac/0xd20 [ 357.216477][T14602] unregister_netdevice_queue+0x33c/0x380 [ 357.222211][T14602] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 357.228475][T14602] ? rtnl_net_dev_lock+0x36/0x2f0 [ 357.233534][T14602] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 357.238658][T14602] unregister_netdev+0x1f/0x60 [ 357.243442][T14602] bnep_session+0x294d/0x2b40 [ 357.248147][T14602] ? trace_sched_exit_tp+0x38/0x120 [ 357.253372][T14602] ? __schedule+0x1700/0x4cd0 [ 357.258086][T14602] ? __lock_acquire+0xaac/0xd20 [ 357.262973][T14602] ? __pfx_bnep_session+0x10/0x10 [ 357.268016][T14602] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 357.273920][T14602] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 357.280318][T14602] ? __pfx_woken_wake_function+0x10/0x10 [ 357.285968][T14602] ? __kthread_parkme+0x7b/0x200 [ 357.290917][T14602] ? __kthread_parkme+0x1a1/0x200 [ 357.295954][T14602] kthread+0x70e/0x8a0 [ 357.300040][T14602] ? __pfx_bnep_session+0x10/0x10 [ 357.305092][T14602] ? __pfx_kthread+0x10/0x10 [ 357.309695][T14602] ? __pfx_kthread+0x10/0x10 [ 357.314306][T14602] ? _raw_spin_unlock_irq+0x23/0x50 [ 357.319517][T14602] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.324728][T14602] ? __pfx_kthread+0x10/0x10 [ 357.329333][T14602] ret_from_fork+0x4b/0x80 [ 357.333761][T14602] ? __pfx_kthread+0x10/0x10 [ 357.338379][T14602] ret_from_fork_asm+0x1a/0x30 [ 357.343184][T14602] [ 357.346230][T14602] Modules linked in: [ 357.351941][T14602] ---[ end trace 0000000000000000 ]--- [ 357.363587][T14602] RIP: 0010:klist_del+0x49/0x110 [ 357.370474][T14602] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 6f d5 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b 6f d5 f6 4d 8b 7e 58 4c 89 f7 e8 bf 41 [ 357.391511][T14602] RSP: 0018:ffffc9000451f7a8 EFLAGS: 00010202 [ 357.397887][T14602] RAX: 000000000000000b RBX: ffff88804fddd860 RCX: ffff88807ebeda00 [ 357.405895][T14602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 357.414060][T14602] RBP: ffffc9000451f8d0 R08: ffff88805123f783 R09: 1ffff1100a247ef0 [ 357.422613][T14602] R10: dffffc0000000000 R11: ffffed100a247ef1 R12: dffffc0000000000 [ 357.430848][T14602] R13: 1ffff11009fbbb0c R14: 0000000000000000 R15: ffff888056a9c768 [ 357.438913][T14602] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 357.448615][T14602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.455256][T14602] CR2: 00007ffda2ee8f60 CR3: 0000000051358000 CR4: 00000000003526f0 [ 357.463881][T14602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.474460][T14602] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 357.483021][T14602] Kernel panic - not syncing: Fatal exception [ 357.489452][T14602] Kernel Offset: disabled [ 357.493782][T14602] Rebooting in 86400 seconds..