last executing test programs: 1m36.893543194s ago: executing program 2 (id=1928): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x6c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="090300000000000000001f0000000400"], 0x18}, 0x1, 0xf000000}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xe, 0x8, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) write$binfmt_script(r8, 0x0, 0xfffffe5d) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r9, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r10 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) 1m23.63668696s ago: executing program 2 (id=1928): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x6c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="090300000000000000001f0000000400"], 0x18}, 0x1, 0xf000000}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xe, 0x8, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) write$binfmt_script(r8, 0x0, 0xfffffe5d) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r9, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r10 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) 1m17.912594281s ago: executing program 0 (id=2200): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r2, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x1, 0xff, 0x4}, 0x1}, 0x18) sendfile(r1, 0xffffffffffffffff, 0x0, 0x6) r3 = socket(0x18, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002780)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00f8b100000000000000", @ANYRES32=r7, @ANYBLOB='\b\x00\f\x00d\x00\x00\x00\b\x00\r\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) recvmmsg(r0, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f00000002c0)=""/68, 0x44}], 0x2}, 0x8001}], 0x1, 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x2, @local, 'geneve1\x00'}}, 0x1e) sendmmsg$unix(r3, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="57d3", 0x2}], 0x1}}], 0x58, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) bpf$MAP_CREATE(0xf, &(0x7f00000003c0), 0x48) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x3c, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x4}, @TCA_CAKE_INGRESS, @TCA_CAKE_MEMORY={0x8}, @TCA_CAKE_NAT={0x8}, @TCA_CAKE_FLOW_MODE, @TCA_CAKE_RAW={0x8}]}}]}, 0x6c}}, 0x0) 1m17.487531934s ago: executing program 0 (id=2204): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x20) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x5c}}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x124}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a0000000000000000000000000000000001000000000000000000000000000000010302907800000000600008108000000000000000000000000000ffffe0000002000000000000000000000000000000008143d91c3f17f0b99dbb64219735d3dc4264f2ab9b9d35d8c53dd99063af65595c4340b71fae9742c20799b7f912d0148dffa967b373a2f9e22a3a10270d49c71ce3fd792a4eacb0aae4a810dbc1539184d414c8f65f995b9b3fbcda15d7926aba45b32d2991ef9510bb2c83a9221a48bf001d196606b44e4f310d2e"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=r2], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @empty}], 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x9, 0x180, r4, 0x5, '\x00', 0x0, r4, 0x4, 0x0, 0x0, 0xa}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x1, 0x1, [0x75]}, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaafbe47c87bbbbbb86dd606410a600080000000000000000ffff00000000fe8000000000000000000000000000aa9000000000000000"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040), 0x213) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x312, &(0x7f0000000d80)=ANY=[@ANYBLOB="ffffffffffff2ac7fd5d244d86dd64c5ed8702dc3afffe880000000000000000000000000001fe8000000000000000000000000000143a150000000000000106000000000000c910fe80000000000000000000000000002904498416aa024d124a3f64ffe43ef7d15e0c367d73d04ad2eb516a2f5e2acb4b9be3681c12cd7605d290f389ea4d614441e7a09f66e3106e39e532892964c429b518c5eed613c4409f86e3c91000000000000000000000000000000001c910000000000000000000000000000000010106000000000000c20400000009c910fe880000000000000000000000001de30b38569bda39003c06000700000000ff02000000000000000000000000000100000000000000000000000000000000fc000000000000000000000000000000870e040701644000200100000000f7ff0000000000000001fe80000000000000000000000000003100000000000000000000000000000000fe8000000000000000000000000000bbfc010000000000000000000000000001fc01000000000000000000001700000100000000000000000000ffffe0000001060c040601200100fe8000000000000000000000000000bbfe8000000000000000000000000000aafc010000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001900000000000000000000ffff00000000331a000000000000c9100000000000000000000000000000000006b7e5ac97ced9dfcddb81d1353597b804dd1c0f2f1d770fb02724a0a30f5c4f384140e841fd7f8b8945c8f1a30fd2cf4ea08f19c315ad4a0358a9681138ea37a75e510be8c6569ea3cd194a76f318e9fca30918e2b4c32c4c1be037706fc55593333a0c810809f699f55dcb1429d8fd1e248cf10ed95b6b30bf9b9540417ac29fccb5a285fc469ac75e6adec90af65cbea2a16e52693d51453a56afc0ae1f3f660720f3e0e8a4d0d0d11c1c62baec62bd6a8878524ec4a49e0502c3e5c204ffffff67000000010204010d58d60a2001000000000000000000000000000087009078fe88000000000000000000000000010106a41425feca44031bfbefc7db85801f5d0d210a36e3bacf318aa06f7872dd1641796cf0e367b6ea1369e9e232192fb5eae94808d9878bb2ff9517"], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1m9.105767059s ago: executing program 2 (id=1928): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x6c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="090300000000000000001f0000000400"], 0x18}, 0x1, 0xf000000}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xe, 0x8, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) write$binfmt_script(r8, 0x0, 0xfffffe5d) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r9, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r10 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) 1m6.070655427s ago: executing program 0 (id=2204): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x20) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x5c}}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x124}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a0000000000000000000000000000000001000000000000000000000000000000010302907800000000600008108000000000000000000000000000ffffe0000002000000000000000000000000000000008143d91c3f17f0b99dbb64219735d3dc4264f2ab9b9d35d8c53dd99063af65595c4340b71fae9742c20799b7f912d0148dffa967b373a2f9e22a3a10270d49c71ce3fd792a4eacb0aae4a810dbc1539184d414c8f65f995b9b3fbcda15d7926aba45b32d2991ef9510bb2c83a9221a48bf001d196606b44e4f310d2e"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=r2], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @empty}], 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x9, 0x180, r4, 0x5, '\x00', 0x0, r4, 0x4, 0x0, 0x0, 0xa}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x1, 0x1, [0x75]}, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaafbe47c87bbbbbb86dd606410a600080000000000000000ffff00000000fe8000000000000000000000000000aa9000000000000000"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040), 0x213) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x312, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 49.910583172s ago: executing program 2 (id=1928): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x6c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="090300000000000000001f0000000400"], 0x18}, 0x1, 0xf000000}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xe, 0x8, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) write$binfmt_script(r8, 0x0, 0xfffffe5d) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r9, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r10 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) 48.070532513s ago: executing program 0 (id=2204): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x20) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x5c}}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x124}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a0000000000000000000000000000000001000000000000000000000000000000010302907800000000600008108000000000000000000000000000ffffe0000002000000000000000000000000000000008143d91c3f17f0b99dbb64219735d3dc4264f2ab9b9d35d8c53dd99063af65595c4340b71fae9742c20799b7f912d0148dffa967b373a2f9e22a3a10270d49c71ce3fd792a4eacb0aae4a810dbc1539184d414c8f65f995b9b3fbcda15d7926aba45b32d2991ef9510bb2c83a9221a48bf001d196606b44e4f310d2e"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=r2], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @empty}], 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x9, 0x180, r4, 0x5, '\x00', 0x0, r4, 0x4, 0x0, 0x0, 0xa}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x1, 0x1, [0x75]}, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaafbe47c87bbbbbb86dd606410a600080000000000000000ffff00000000fe8000000000000000000000000000aa9000000000000000"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040), 0x213) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x312, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 27.639953825s ago: executing program 0 (id=2204): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x20) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x5c}}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x124}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a0000000000000000000000000000000001000000000000000000000000000000010302907800000000600008108000000000000000000000000000ffffe0000002000000000000000000000000000000008143d91c3f17f0b99dbb64219735d3dc4264f2ab9b9d35d8c53dd99063af65595c4340b71fae9742c20799b7f912d0148dffa967b373a2f9e22a3a10270d49c71ce3fd792a4eacb0aae4a810dbc1539184d414c8f65f995b9b3fbcda15d7926aba45b32d2991ef9510bb2c83a9221a48bf001d196606b44e4f310d2e"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=r2], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @empty}], 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x9, 0x180, r4, 0x5, '\x00', 0x0, r4, 0x4, 0x0, 0x0, 0xa}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x1, 0x1, [0x75]}, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaafbe47c87bbbbbb86dd606410a600080000000000000000ffff00000000fe8000000000000000000000000000aa9000000000000000"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040), 0x213) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x312, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 26.671672598s ago: executing program 2 (id=1928): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x6c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="090300000000000000001f0000000400"], 0x18}, 0x1, 0xf000000}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xe, 0x8, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) write$binfmt_script(r8, 0x0, 0xfffffe5d) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r9, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r10 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) 8.643153239s ago: executing program 0 (id=2204): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x20) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x5c}}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x124}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a0000000000000000000000000000000001000000000000000000000000000000010302907800000000600008108000000000000000000000000000ffffe0000002000000000000000000000000000000008143d91c3f17f0b99dbb64219735d3dc4264f2ab9b9d35d8c53dd99063af65595c4340b71fae9742c20799b7f912d0148dffa967b373a2f9e22a3a10270d49c71ce3fd792a4eacb0aae4a810dbc1539184d414c8f65f995b9b3fbcda15d7926aba45b32d2991ef9510bb2c83a9221a48bf001d196606b44e4f310d2e"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=r2], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @empty}], 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x20}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x9, 0x180, r4, 0x5, '\x00', 0x0, r4, 0x4, 0x0, 0x0, 0xa}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x1, 0x1, [0x75]}, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaafbe47c87bbbbbb86dd606410a600080000000000000000ffff00000000fe8000000000000000000000000000aa9000000000000000"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040), 0x213) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x312, &(0x7f0000000d80)=ANY=[@ANYBLOB="ffffffffffff2ac7fd5d244d86dd64c5ed8702dc3afffe880000000000000000000000000001fe8000000000000000000000000000143a150000000000000106000000000000c910fe80000000000000000000000000002904498416aa024d124a3f64ffe43ef7d15e0c367d73d04ad2eb516a2f5e2acb4b9be3681c12cd7605d290f389ea4d614441e7a09f66e3106e39e532892964c429b518c5eed613c4409f86e3c91000000000000000000000000000000001c910000000000000000000000000000000010106000000000000c20400000009c910fe880000000000000000000000001de30b38569bda39003c06000700000000ff02000000000000000000000000000100000000000000000000000000000000fc000000000000000000000000000000870e040701644000200100000000f7ff0000000000000001fe80000000000000000000000000003100000000000000000000000000000000fe8000000000000000000000000000bbfc010000000000000000000000000001fc01000000000000000000001700000100000000000000000000ffffe0000001060c040601200100fe8000000000000000000000000000bbfe8000000000000000000000000000aafc010000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001900000000000000000000ffff00000000331a000000000000c9100000000000000000000000000000000006b7e5ac97ced9dfcddb81d1353597b804dd1c0f2f1d770fb02724a0a30f5c4f384140e841fd7f8b8945c8f1a30fd2cf4ea08f19c315ad4a0358a9681138ea37a75e510be8c6569ea3cd194a76f318e9fca30918e2b4c32c4c1be037706fc55593333a0c810809f699f55dcb1429d8fd1e248cf10ed95b6b30bf9b9540417ac29fccb5a285fc469ac75e6adec90af65cbea2a16e52693d51453a56afc0ae1f3f660720f3e0e8a4d0d0d11c1c62baec62bd6a8878524ec4a49e0502c3e5c204ffffff67000000010204010d58d60a2001000000000000000000000000000087009078fe88000000000000000000000000010106a41425feca44031bfbefc7db85801f5d0d210a36e3bacf318aa06f7872dd1641796cf0e367b6ea1369e9e232192fb5eae94808d9878bb2ff9517"], 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 8.642898353s ago: executing program 2 (id=1928): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000038c02d30600018044000400200001000a00000000000000fe800002000000000001000000000011f8000000200002190a00000000000000ff010000000000000000000000000001000000000d0041007564703a010001000000000078f6169010d6172275f4a8280f644f0a69f1fcf15cf53a57289ace5a000a5514ba2ce911cb65cf8036a482a519188e2d5218425af08a01b994f9b36f67a63cf3bf5fe1e6a58a1b6f973e7de5dfa2f05bca05bc6dcf869b59c27f5014baa90a6d35af9e1370d29de0489e731c4a93fcf961edf90afdbef9a0cdeff41a95b35f2820478e3ebe05d52531f73cec4a1d26cdbb0d1fd04ced22d68f811cffdf80f9868d59003f8fd372f06d7f26f0014c987458ddf3a51b707372c943f4677858e02077ea1a61e4390e2a9d44"], 0x6c}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="090300000000000000001f0000000400"], 0x18}, 0x1, 0xf000000}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xe, 0x8, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) write$binfmt_script(r8, 0x0, 0xfffffe5d) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r9, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r8, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r10 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) 3.601474225s ago: executing program 1 (id=2540): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b7020000910c0000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d640500000000006504040001000101040400000d000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b5ff0700009d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d57462026000000d2ce008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11beefc21907f28b8260ca8bd9da4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e26032176066599783568628f0309c3a01716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x0, 0xf}, 0x10}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000002600)=""/4096, 0x1000}], 0x1, 0xffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000100)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x24, 0x0, &(0x7f0000000300)) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="f7e8010000000000140012800b0001006d616373656300fd0300028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) r7 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f0000000640)=@framed={{0x18, 0xa}}, &(0x7f0000000080)='GPL\x00', 0x2}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, @ipv4={'\x00', '\xff\xff', @multicast1}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x400}, &(0x7f0000000080)=0x8) 3.144546175s ago: executing program 1 (id=2541): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000a80)={'gretap0\x00', 0x0, 0x80, 0x0, 0x8b, 0x7f, {{0x4a, 0x4, 0x3, 0x5, 0x128, 0x66, 0x0, 0x2, 0x2f, 0x0, @multicast2, @private=0xa010100, {[@cipso={0x86, 0x59, 0x0, [{0x6, 0x3, 'u'}, {0x0, 0x12, "a902036a4e8b6da83366904a92c5b68d"}, {0x2, 0xd, "da47def6e68ca1a92a4be5"}, {0x2, 0xc, "027cf6a585bd22c3fca3"}, {0x6, 0xa, "639a058dbcac78bf"}, {0x2, 0x12, "30211c710a23dffa9827733857bc85b9"}, {0x0, 0x9, "44e24450741010"}]}, @ssrr={0x89, 0x17, 0x0, [@empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback]}, @lsrr={0x83, 0x3, 0x97}, @cipso={0x86, 0x31, 0xfffffffffffffffd, [{0x0, 0x11, "9ed2dad0a46416cb2c23f720507a5a"}, {0x5, 0x9, "de59372f049cc4"}, {0x0, 0x11, "67c5ec33214d76f629b5588d7d124c"}]}, @timestamp_prespec={0x44, 0x44, 0x92, 0x3, 0xe, [{@broadcast, 0x4}, {@multicast2}, {@broadcast, 0x3}, {@local, 0x1}, {@rand_addr=0x64010102, 0x1}, {@rand_addr=0x64010100, 0x4}, {@broadcast, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}]}, @timestamp={0x44, 0x2c, 0x89, 0x0, 0x7, [0x0, 0x9, 0x0, 0x1, 0x9, 0x7ff, 0x0, 0xfffffffe, 0x0, 0x8000]}]}}}}}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040), 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) sendfile(r3, r1, 0x0, 0x10000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES16=r3, @ANYRES8=r0], 0xd8}, 0x1, 0x0, 0x0, 0x44890}, 0x2000c000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x1c8, 0x2f0, 0xffffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@ipv6={@local, @private2, [], [], 'team_slave_0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x100000001, 0x3, 0x5}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x7}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0414f9f407000904000200000001000000000000000800040001000000", 0x24) writev(r6, &(0x7f0000000d00)=[{&(0x7f0000000440)="57fde3ca7f9a92302ccc21e716ca36f5640a8c10f7b9e8356196f0d9332918dc6081b846a4d668f8cd86fbe22e556f7b8feb9741fed76e5054e0574954cdf1cd51f9d6a4feaed2e220937effb72fcc19af8792644ab6", 0x56}, {&(0x7f0000000700)="60fbea0deebfe89fd34476e54071ef5f5567f0d770d864e862c9a8a60d7109d4611be15a88180bea4c1eb315d795014859b422bff48798e59e3ea4cd2da6278bf8bb1cf5664ccf7e74c3f228811b6ef427b209a0f34b403020e410825dfad147012441e35b9ba2511ea2d76875d07f97bef6c69025f1c8493703d2f1d492c13ce09787f2203341edc2cc7e3287fe6a2b3109fb8f275772f54877c3ff59068704ffb2c949ccccbaf1c047569bb65c54876491200af4154586fce4d9b8d9e55853603ba82baeef46a8465dfeabdd2391550ee8", 0xd2}, {&(0x7f00000004c0)="f2a7505dbd756b060141cfc90f52aceb73c4c4ad0315d06ff576df6f645ba70be34e9065809181dd5295e5e32b1d58875e40bd93d57169d9bfb3044d5eff1604bae1ebd5f767da43c00cec8133ed1c2a7675a32083f526f60983", 0x5a}, {&(0x7f0000000800)="a2d9729557860bce77eab4c40b245f2e32ab4364558542114226fdfc95f986ebbf25b2402b44e877dae599f411b5dd113711d523ac1c4cc245431ab0fd08a7dccdd6006079f0a58a9c514a674fe4275085bed7ec0bdd21dcf655102959ab044524e694e8d9ca00a6d536f5adc2607ab4148b4b2693f577c47df1dd3fc907f3281dfa39bd7e4f58599fd0ad07a717e89e275d975b6eb5dc3974416f484b0afc75dfe15f95400ae6ffabc69f0c79ba216d42a6fcef2790613b4c7330002c130e7e6207cb42e88e7cc24a49a4cd2a520f2149f42791292fe11a62a41c9b3e423b8d92e76461428ca606613a6281", 0xec}, {&(0x7f0000000900)="5e641e9a68d7a3b71c0d68343266063861ce18ddb4dabdd86fad6a1292fc8ba7284d9ec48083166faaa2bb609a047c13be849a9b1ad52de92a730ccea40a06035a4cdb060cc8", 0x46}, {&(0x7f0000000c00)="c3f998aecca6b7256beb34941833b4326083e7e7dea42f33d488f2f5c6c6c024ff5f4473e86a531c7837c878df571d52fddb659386547c4c4648287744746d51c4780e5e2392e012720b52dc4b84bdc0fb81c3cf135bc93008b4822cddb191461c6b4ee08fa58213cf30582783c628d182ec056ea15291007591aba9620cc5d7c0f31c3ac3d60ea9d2d4c707e33dd6e837314de8da116c62df9daff7f1d7d52508a8484faa4de3642f320d71081bd632781f1a87a23f840b57a23a104db5506ab3655032f1c20c26cdc9794173baf248828efa", 0xd3}], 0x6) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) shutdown(r8, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) sendto$inet(r8, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r8, 0x0, r7, 0x0, 0x19, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'netpci0\x00'}) 2.694094673s ago: executing program 1 (id=2544): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRESDEC=r0], 0x78}}, 0x0) 2.41677381s ago: executing program 1 (id=2545): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, 0x0) r2 = accept$alg(r1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$alg(r2, &(0x7f0000001500)=[{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000003640)="60c82576efc9d0a70afe7d1f701514e8", 0x10}], 0x1, &(0x7f0000001380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000006400)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000140)=""/40, 0x28}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000005b00)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001780)='h', 0x1}], 0x1}}], 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000340), 0x208e24b) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000bc7ca51bf1b8923c6ee3c8acede9cf18d58a8ca71d8de2fdf87e0d62c25c9a46b20bf18bc9b69b35d4f2b91bf81bbb033856c0413dea77b18579db8eb9190ce1cedcab60bfe386b52a80ded3533a1c1d36bac5ad2e33d54514713ffbd544b5a40b3ff8357c2dbc3aa639218c8d669137e3661e10ea6aa9c5d9ed79a11135fca8b0b7287b53f55178a5ad07088b843e22f95e40f3546bbb3702e2c7650e9c4a2abe4793638b274b403061c1ab4a00865f1cefedf96257b4960273a46f8b367c9055ae2e66127ba4beed08acd9966416693b3aad605d67375f90cd65991418"], 0x3a) mmap(&(0x7f0000366000/0x2000)=nil, 0x2000, 0xa, 0x28011, r0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000490000100000a4de83", @ANYRES32=0x0, @ANYBLOB="06000000140001002001000000000000000000000000000214000100fe8800000000000000000000000001010800020005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r8 = accept4(r7, 0x0, 0x0, 0x0) write(r8, &(0x7f0000000040)="cb", 0xfffffdef) 1.902415184s ago: executing program 4 (id=2549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYBLOB="01000000000000004c0001800d00011c2edc893606e3a6d1a49b5185d49ccf1121b0fca8b1129c86a941d16169570beba9b55d5253d396c49ce0e800292c6a646654fdc75788f0599de427b005fabd5e0f851b353c0c1a5b7d54f97962d7d311e9c77e6fdd4fe5de8fbf14a6a910a67229e5c3cb9e24d0a8c8a3882f"], 0x60}}, 0x0) 1.680248927s ago: executing program 4 (id=2550): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) (async) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x200000000000011, 0x2, 0x0) (async) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) socket(0x200000000000011, 0x2, 0x0) (async) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r5, &(0x7f0000000080)={0x11, 0x18, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bind$packet(r5, &(0x7f0000000080)={0x11, 0x18, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000540)={@broadcast, @random="fcab26b3f67b", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000540)={@broadcast, @random="fcab26b3f67b", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x60, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x18, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x5, "03c0ab"}, @window={0x3, 0x3}, @mss={0x2, 0x4, 0x9}, @sack_perm={0x4, 0x2}, @generic={0x0, 0xa, "8bfbd54ae56dd076"}, @timestamp={0x8, 0xa}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0xa, "111fad2ea7434823"}, @exp_fastopen={0xfe, 0x9, 0xf989, "b43eb61a1a"}]}}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0x0, 0x803, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r9, &(0x7f0000000000)={0x11, 0x0, r11}, 0x14) write$binfmt_aout(r9, 0x0, 0x120) socket(0x22, 0x2, 0x4) (async) socket(0x22, 0x2, 0x4) 1.593104378s ago: executing program 3 (id=2551): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000140), 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="24005a8020000180140003000000000002000000000001000000000004000200040001"], 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000004200459aa0010a7701b6c4e34f7294000600220009440000"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x40008) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000004200459aa0010a7701b6c4e34f7294000600220009440000"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x40008) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) (async) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r7, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000632f4a056507515f3f7700050000", @ANYRES8], 0x3}}, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r8, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f00000011c0)="e6", 0x1}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000000000000000000007d12d09"], 0x10}}], 0x1, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r9, &(0x7f0000000600), 0x10) (async) bind$can_raw(r9, &(0x7f0000000600), 0x10) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) (async) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 1.288115308s ago: executing program 3 (id=2552): socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x73}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}]}, 0x88}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000880)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x10, 0x80, 0x5, 0x4, {{0x9, 0x4, 0x2, 0x3, 0x24, 0x165, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4}, @noop, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000980)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000009c0)={@loopback}, &(0x7f0000000a00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/3112], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff0b076859268cb89e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="09000016010000001800120008000100736974000c00020008000300bd"], 0x38}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 1.175075034s ago: executing program 4 (id=2553): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x18, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x8, 0xd, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0x18}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x7c, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x17, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x7c}}, 0x0) 1.03197734s ago: executing program 1 (id=2554): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x3b, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x86\xdd'}]}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001000000000030"], 0x58}}, 0x8000) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}]}, 0x28}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000004"], 0x24d8}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x38, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x38}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r8, @ANYBLOB="000000000000000020001280080001006772650014000280060010"], 0x40}}, 0x0) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r8, 0x1, {0x0, 0xff, 0x3}, 0x2}, 0x18) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000000), 0x4) 933.755408ms ago: executing program 3 (id=2555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x29, 0xe, [@chsw_timing={0x68, 0x4}, @ht={0x2d, 0x1a}, @challenge={0x10, 0x1}]}]]}, 0x48}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0xfc, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc}]}}]}, 0xac}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000240)={0x0, 0x3, 0xe1, 0x1, 0x7, 0x0, 0x8, 0x9, 0x8, 0x0, 0x3, 0x9, 0xf7, 0x3}, 0xe) recvmmsg(r9, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1, 0x1200}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x12, 0x0) splice(r6, 0x0, r8, 0x0, 0x4ffe0, 0x0) 828.744023ms ago: executing program 4 (id=2556): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f00000006c0), 0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000000)=0x3, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f00000001c0)="8e77ca3389787867582dd0b9999e5e7ce579fc6b2977bf71ab517f68a8ddb58b93c91675a4b5dde502242a66491162f75f9b28f59cd9746ff7140fde3923b99bcc4c2cc72443169b2ab2f90a0f03dd842adba400500327de779dc66f3ebd32a81ebea8b89c9cc7e0f46e28fc1ff127a0", 0x70, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) (async) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000640)={0xa, 0x0, {0x0, @struct={0x0, 0x8}, 0x0, 0x0, 0x0, 0x6, 0xb96b, 0x0, 0x0, @struct={0x0, 0xffffffe0}, 0x278, 0x95, [0x0, 0x0, 0x0, 0x6, 0x3ff, 0x2]}, {0x0, @usage=0x401, 0x0, 0x69bcd47e, 0x5, 0x0, 0x0, 0x0, 0x0, @usage=0x5, 0x0, 0x5, [0x0, 0x0, 0x8001, 0xba89, 0x4]}, {0x0, @usage=0x3, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, 0x400, @struct, 0x7f, 0x7913, [0x0, 0xfffffffffffffe00, 0xfff, 0x401, 0x8001]}, {0x4, 0xab}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000640)={0xa, 0x0, {0x0, @struct={0x0, 0x8}, 0x0, 0x0, 0x0, 0x6, 0xb96b, 0x0, 0x0, @struct={0x0, 0xffffffe0}, 0x278, 0x95, [0x0, 0x0, 0x0, 0x6, 0x3ff, 0x2]}, {0x0, @usage=0x401, 0x0, 0x69bcd47e, 0x5, 0x0, 0x0, 0x0, 0x0, @usage=0x5, 0x0, 0x5, [0x0, 0x0, 0x8001, 0xba89, 0x4]}, {0x0, @usage=0x3, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x4, 0x400, @struct, 0x7f, 0x7913, [0x0, 0xfffffffffffffe00, 0xfff, 0x401, 0x8001]}, {0x4, 0xab}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) shutdown(r1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x0, 0x3}, {}, {}, {}, {0x6}]}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x0, 0x3}, {}, {}, {}, {0x6}]}) 547.799838ms ago: executing program 4 (id=2557): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000eef000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000010000000000000000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000000000000000000005000500000000000a000000000000000080ff0000000000000000000000000000000000000000000100140000000000010015"], 0x80}, 0x1, 0x7}, 0x0) 528.475456ms ago: executing program 3 (id=2558): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000001d1ec521f77c29ed000000"], 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000400)=""/206, 0xce}, {&(0x7f0000000880)=""/249, 0xf9}], 0x2, &(0x7f0000000600)=[@fadd={0x58, 0x114, 0x6, {{0x4c, 0x9}, &(0x7f0000000580)=0x27a6, &(0x7f00000005c0)=0x203, 0xfffffffffffffffe, 0x4, 0x0, 0x473d, 0x86a56ffc617fc880, 0x1}}], 0x58, 0x24000000}, 0x4048845) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x2008, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000007c0)='syzkaller\x00'}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="48000000100005ff00"/18, @ANYBLOB="0000000004000000140012800b00010062617461647600000400028008000a0095dbb32de5a78b0980f548264e35c45ed6", @ANYRES32], 0x48}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a800160020000140000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad9", 0x92}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002400)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000180)=ANY=[]}, @devid}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000380), 0x14) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000001340)=@newtfilter={0x40, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xb, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb}}]}}]}, 0x40}}, 0x0) 506.194811ms ago: executing program 1 (id=2559): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) unshare(0x68060200) mmap(&(0x7f000080f000/0x13000)=nil, 0x13000, 0xb, 0x8031, 0xffffffffffffffff, 0xe8e0e000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x1e}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000b2e937e0a596781fa7925f3ebbc3e3c1b90cb5963ef4917729f13b14fc6e7eca94f1b3f37c1203096f652749778a8669c33e950c474b09eae31369217f544a18beebf94aae5c5e255666ede174f549fd0c91d4356c39f275a1", @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRES64=r2], 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) unshare(0x28000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0200000005000000000000000000766574683098c76f5f7465616d00000064756d6d79300000000000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffff7fff00000000000000087000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000001b700000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private1}, 0x55) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r5, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001f00)=[{0x0}, {&(0x7f0000000a80)=""/216, 0xd8}], 0x2}, 0xfffffffc}], 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x2, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 268.817966ms ago: executing program 4 (id=2560): r0 = socket$netlink(0x10, 0x3, 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000186800000000000090737c73267beee600000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x40000, 0x20}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x8, 0x17, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x3000000}, 0x0) r7 = socket(0x2, 0x2, 0x10000001) bind$unix(r7, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r9, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) accept4(r8, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 218.111701ms ago: executing program 3 (id=2561): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async, rerun: 32) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0xffffff1a, 0x240540d6, &(0x7f0000000200)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000240)="cf", 0x1, 0x0, 0x0, 0x0) (async) poll(&(0x7f0000000000)=[{r1}], 0x1, 0xef) (async) close(r1) (async, rerun: 32) r2 = socket(0x2a, 0x2, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20000000) (async) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x160, 0x0, 0xd6f9fcbc9cc2f411, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x17}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffe}]}, 0x40}, 0x1, 0x0, 0x0, 0x8090}, 0x20000015) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x1114, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10cc, 0x2, [@TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x82}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x800}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0xfffffffa}, @TCA_FLOWER_ACT={0x1090, 0x3, [@m_ct={0x108c, 0x1f, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfffffffc, 0x1, 0x7, 0xf3, 0x6}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x6}, @TCA_CT_LABELS_MASK={0x14, 0x8, "740408d61e2c3ce498eb07e1101c002e"}, @TCA_CT_LABELS={0x14, 0x7, "13fd93da933b89ed2339463e36df2ba3"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_ZONE={0x6, 0x4, 0x8}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x81}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x1114}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (rerun: 32) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f0000000500)={0x2a, 0x1}, 0xc) (async, rerun: 64) bind$qrtr(r5, &(0x7f0000000080), 0xc) (rerun: 64) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)}], 0x1}}], 0x2, 0x16da) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 3 (id=2562): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x9e2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x59}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'virt_wifi0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000), 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)}}, {{&(0x7f00000003c0)={0x2, 0x0, @private=0xa010103}, 0x10, &(0x7f0000000780)=[{&(0x7f00000006c0)='o', 0x1}], 0x1}}], 0x3, 0x0) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x1, 0x5, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r7}, 0x8) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r8, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): m netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.778905][T12347] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.789359][T12347] vxlan0: entered promiscuous mode [ 247.798876][T12349] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.806069][T12349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.946643][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2033'. [ 247.961951][T12360] sch_fq: defrate 0 ignored. [ 248.214148][T12370] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 248.242042][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'. [ 248.457236][T12383] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2041'. [ 248.470267][T12383] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2041'. [ 248.501453][T12383] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2041'. [ 248.510584][T12383] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2041'. [ 248.611287][T12390] netlink: 'syz.3.2044': attribute type 21 has an invalid length. [ 248.633888][T12390] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2044'. [ 248.648405][T12390] netlink: 'syz.3.2044': attribute type 4 has an invalid length. [ 248.656589][T12390] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2044'. [ 248.665979][T12391] netlink: 'syz.3.2044': attribute type 21 has an invalid length. [ 248.673854][T12391] netlink: 'syz.3.2044': attribute type 4 has an invalid length. [ 249.000804][T12412] netlink: 'syz.3.2050': attribute type 9 has an invalid length. [ 249.060787][T12414] Unsupported ieee802154 address type: 0 [ 249.078848][T12418] Dead loop on virtual device ipvlan1, fix it urgently! [ 249.258780][T12425] wg2: entered promiscuous mode [ 249.275141][T12425] wg2: entered allmulticast mode [ 249.312530][T12434] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 249.628668][ T1069] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.878254][T12455] netlink: 'syz.4.2061': attribute type 1 has an invalid length. [ 249.921828][T12455] bond7: entered promiscuous mode [ 249.955011][T12455] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 249.969430][T12455] bond7: (slave ip6gretap1): making interface the new active one [ 249.977658][T12455] ip6gretap1: entered promiscuous mode [ 249.984869][T12455] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 250.014909][T12455] bond7: left promiscuous mode [ 250.019718][T12455] ip6gretap1: left promiscuous mode [ 250.026355][T12455] 8021q: adding VLAN 0 to HW filter on device bond7 [ 250.258202][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.287214][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.317976][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 250.336101][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 250.344171][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 250.351783][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.457510][ T1069] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.468694][ C1] hrtimer: interrupt took 873665 ns [ 250.469072][T12469] Unsupported ieee802154 address type: 0 [ 250.610021][ T1069] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.639681][T12474] netlink: 'syz.3.2066': attribute type 3 has an invalid length. [ 250.768155][ T1069] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.235919][T12502] IPv6: NLM_F_REPLACE set, but no existing node found! [ 251.288382][ T1069] bridge_slave_1: left allmulticast mode [ 251.314859][ T1069] bridge_slave_1: left promiscuous mode [ 251.320899][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.421161][ T1069] bridge_slave_0: left allmulticast mode [ 251.451317][ T1069] bridge_slave_0: left promiscuous mode [ 251.486572][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.511863][T12521] Unsupported ieee802154 address type: 0 [ 252.119286][ T1069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.134211][ T1069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.147138][ T1069] bond0 (unregistering): Released all slaves [ 252.257362][T12526] pim6reg: entered allmulticast mode [ 252.280279][T12538] __nla_validate_parse: 11 callbacks suppressed [ 252.280300][T12538] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2081'. [ 252.296115][T12529] pim6reg: left allmulticast mode [ 252.458060][ T5233] Bluetooth: hci1: command tx timeout [ 252.571757][T12548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2084'. [ 252.634805][T12548] (unnamed net_device) (uninitialized): option ad_select: invalid value (36) [ 252.657614][T12549] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2084'. [ 252.685096][T12549] (unnamed net_device) (uninitialized): option ad_select: invalid value (36) [ 252.762228][T12464] chnl_net:caif_netlink_parms(): no params data found [ 253.104865][T12572] IPVS: stopping backup sync thread 12571 ... [ 253.113631][T12571] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 253.174730][ T1069] hsr_slave_0: left promiscuous mode [ 253.213276][ T1069] hsr_slave_1: left promiscuous mode [ 253.241199][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.257011][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.284078][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.301976][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.403765][ T1069] veth1_macvtap: left promiscuous mode [ 253.454364][ T1069] veth0_macvtap: left promiscuous mode [ 253.460202][ T1069] veth1_vlan: left promiscuous mode [ 253.479808][ T1069] veth0_vlan: left promiscuous mode [ 253.789040][T12596] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2094'. [ 254.326682][ T1069] team0 (unregistering): Port device team_slave_1 removed [ 254.377116][ T1069] team0 (unregistering): Port device team_slave_0 removed [ 254.536427][ T5233] Bluetooth: hci1: command tx timeout [ 255.060784][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2096'. [ 255.142629][T12464] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.151005][T12464] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.159009][T12464] bridge_slave_0: entered allmulticast mode [ 255.168591][T12464] bridge_slave_0: entered promiscuous mode [ 255.257221][T12610] syzkaller0: entered promiscuous mode [ 255.262770][T12610] syzkaller0: entered allmulticast mode [ 255.274893][T12464] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.296377][T12464] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.304301][T12464] bridge_slave_1: entered allmulticast mode [ 255.316100][T12464] bridge_slave_1: entered promiscuous mode [ 255.578128][T12618] validate_nla: 1 callbacks suppressed [ 255.578167][T12618] netlink: 'syz.4.2097': attribute type 7 has an invalid length. [ 255.593052][T12618] netlink: 'syz.4.2097': attribute type 39 has an invalid length. [ 255.683292][T12464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.727054][T12464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.803750][T12464] team0: Port device team_slave_0 added [ 255.824287][T12464] team0: Port device team_slave_1 added [ 255.893739][T12464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.922418][T12464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.976192][T12464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.983027][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.100103][T12464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.138701][T12464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.151354][T12631] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.233576][T12464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.463660][T12464] hsr_slave_0: entered promiscuous mode [ 256.496830][T12645] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2104'. [ 256.512096][T12464] hsr_slave_1: entered promiscuous mode [ 256.527694][T12464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.550300][T12464] Cannot create hsr debugfs directory [ 256.614591][ T5233] Bluetooth: hci1: command tx timeout [ 256.641235][T12656] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 256.714003][T12662] Dead loop on virtual device ipvlan1, fix it urgently! [ 256.734833][T12657] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2105'. [ 256.756192][T12662] Dead loop on virtual device ipvlan1, fix it urgently! [ 256.840098][T12662] syz.0.2108 (12662) used greatest stack depth: 3256 bytes left [ 256.952260][T12666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2109'. [ 256.995818][T12666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2109'. [ 257.122722][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2112'. [ 257.443407][T12464] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 257.468356][T12464] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 257.502433][T12464] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 257.545988][T12464] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 257.612769][T12691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2118'. [ 257.636788][T12691] tipc: Enabling of bearer rejected, failed to enable media [ 257.674754][T12691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.862250][T12464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.959076][T12464] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.994009][ T5284] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.001875][ T5284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.066970][T12703] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.079226][T12698] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2120'. [ 258.089406][T12703] bridge0: entered allmulticast mode [ 258.117346][ T5284] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.125211][ T5284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.164083][T12703] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.172580][T12703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.196387][T12703] bridge0: entered promiscuous mode [ 258.337178][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2121'. [ 258.364935][T12703] netlink: 'syz.4.2122': attribute type 10 has an invalid length. [ 258.694674][ T5233] Bluetooth: hci1: command tx timeout [ 259.297925][T12738] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 259.328554][T12464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.362748][T12738] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2130'. [ 259.437006][T12739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2129'. [ 259.448337][T12739] netlink: 'syz.4.2129': attribute type 25 has an invalid length. [ 259.641703][T12464] veth0_vlan: entered promiscuous mode [ 259.676623][T12464] veth1_vlan: entered promiscuous mode [ 259.763966][T12742] atomic_op ffff888062497998 conn xmit_atomic 0000000000000000 [ 259.769396][T12464] veth0_macvtap: entered promiscuous mode [ 259.963093][T12464] veth1_macvtap: entered promiscuous mode [ 260.062783][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.085596][T12750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2133'. [ 260.104714][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.126213][T12464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.242098][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.274755][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.291589][T12464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.303359][T12752] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2134'. [ 260.313240][T12464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.337749][T12464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.347826][T12759] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2136'. [ 260.364007][T12759] Unsupported ieee802154 address type: 0 [ 260.392436][T12464] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.427322][T12464] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.439673][T12464] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.452027][T12464] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.743431][T12765] xt_NFQUEUE: number of total queues is 0 [ 260.775240][T12765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2139'. [ 260.786758][ T5525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.798209][ T5525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.817597][T12765] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 260.838351][T12765] batadv2: entered promiscuous mode [ 260.850120][T12765] batadv2: entered allmulticast mode [ 260.859972][T12765] team0: Port device batadv2 added [ 260.999191][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.035477][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.168141][T12781] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2142'. [ 261.653963][T12791] Dead loop on virtual device ipvlan1, fix it urgently! [ 261.762565][T12791] atomic_op ffff8880633a3998 conn xmit_atomic 0000000000000000 [ 262.162201][T12803] Unsupported ieee802154 address type: 0 [ 262.667301][T12831] __nla_validate_parse: 3 callbacks suppressed [ 262.667325][T12831] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2159'. [ 262.728225][T12835] sctp: [Deprecated]: syz.1.2160 (pid 12835) Use of int in max_burst socket option. [ 262.728225][T12835] Use struct sctp_assoc_value instead [ 262.928543][ T5528] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.939226][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2163'. [ 263.027450][T12843] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2163'. [ 263.053708][T12841] atomic_op ffff888070c75998 conn xmit_atomic 0000000000000000 [ 263.338829][T12861] xt_bpf: check failed: parse error [ 263.655883][ T5528] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.735957][T12872] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2169'. [ 263.880100][ T5528] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.927572][T12874] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 0 [ 263.935496][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 263.947380][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 263.956867][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 263.966490][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 263.974386][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 263.997489][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.119128][ T5528] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.291209][T12893] dvmrp0: entered allmulticast mode [ 264.857617][ T5528] bridge_slave_1: left allmulticast mode [ 264.863892][ T5528] bridge_slave_1: left promiscuous mode [ 264.885016][ T5528] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.898511][ T5528] bridge_slave_0: left allmulticast mode [ 264.905209][ T5528] bridge_slave_0: left promiscuous mode [ 264.910980][ T5528] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.912002][T12906] atomic_op ffff888065df5998 conn xmit_atomic 0000000000000000 [ 265.042266][T12911] atomic_op ffff8880652b1998 conn xmit_atomic 0000000000000000 [ 265.533063][ T5528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.546417][ T5528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.559620][T12935] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2182'. [ 265.573252][ T5528] bond0 (unregistering): Released all slaves [ 265.627637][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2182'. [ 265.796148][T12877] chnl_net:caif_netlink_parms(): no params data found [ 266.057178][ T5237] Bluetooth: hci1: command tx timeout [ 266.290872][T12964] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 266.530186][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2186'. [ 266.717590][ T5528] hsr_slave_0: left promiscuous mode [ 266.735000][ T5528] hsr_slave_1: left promiscuous mode [ 266.778311][ T5528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.789943][ T5528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.824155][ T5528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.842509][ T5528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.940459][ T5528] veth1_macvtap: left promiscuous mode [ 266.947424][ T5528] veth0_macvtap: left promiscuous mode [ 266.953221][ T5528] veth1_vlan: left promiscuous mode [ 266.969266][ T5528] veth0_vlan: left promiscuous mode [ 267.125099][T12993] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20001 [ 267.230974][T12992] atomic_op ffff888061c27198 conn xmit_atomic 0000000000000000 [ 267.790093][ T5528] team0 (unregistering): Port device team_slave_1 removed [ 267.847211][ T5528] team0 (unregistering): Port device team_slave_0 removed [ 268.139294][ T5237] Bluetooth: hci1: command tx timeout [ 268.355756][T12877] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.363076][T12877] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.375154][T12877] bridge_slave_0: entered allmulticast mode [ 268.382653][T12877] bridge_slave_0: entered promiscuous mode [ 268.434104][T12877] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.465175][T12877] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.474017][T12877] bridge_slave_1: entered allmulticast mode [ 268.516942][T12877] bridge_slave_1: entered promiscuous mode [ 268.756393][T12877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.796069][T12877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.960483][T12877] team0: Port device team_slave_0 added [ 269.057146][T12877] team0: Port device team_slave_1 added [ 269.243082][T12877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.271335][T12877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.348751][T12877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.403310][T12877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.445699][T12877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.544556][T12877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.876937][T13046] netlink: 'syz.4.2210': attribute type 3 has an invalid length. [ 269.912630][T13046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2210'. [ 269.968651][T12877] hsr_slave_0: entered promiscuous mode [ 270.040792][T12877] hsr_slave_1: entered promiscuous mode [ 270.071519][T12877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.088285][T12877] Cannot create hsr debugfs directory [ 270.215440][ T5237] Bluetooth: hci1: command tx timeout [ 270.234196][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 270.249177][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 270.258641][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 270.268109][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 270.277789][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 270.285275][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.614159][T13063] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2212'. [ 270.647688][T13063] Unsupported ieee802154 address type: 0 [ 270.723047][T13062] netlink: 616 bytes leftover after parsing attributes in process `syz.4.2213'. [ 270.766781][T13062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2213'. [ 271.000696][T13054] chnl_net:caif_netlink_parms(): no params data found [ 271.180441][T13086] netlink: 196616 bytes leftover after parsing attributes in process `syz.4.2220'. [ 271.190339][T13086] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 271.409562][T13096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2221'. [ 271.428225][T13054] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.436676][T13054] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.436888][T13096] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2221'. [ 271.445733][T13054] bridge_slave_0: entered allmulticast mode [ 271.464023][T13054] bridge_slave_0: entered promiscuous mode [ 271.503726][T13096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2221'. [ 271.595221][T13054] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.608255][T13054] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.621670][T13054] bridge_slave_1: entered allmulticast mode [ 271.632267][T13054] bridge_slave_1: entered promiscuous mode [ 271.664062][T13095] delete_channel: no stack [ 271.740327][T13054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.770032][T12877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.813219][T13054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.836190][T12877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.963570][T12877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.989767][T12877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 272.056328][T13054] team0: Port device team_slave_0 added [ 272.107501][T13054] team0: Port device team_slave_1 added [ 272.186049][T13054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.193123][T13054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.230525][T13054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.247916][T13125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2226'. [ 272.288261][T13054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.303596][ T5233] Bluetooth: hci1: command tx timeout [ 272.304483][T13054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.380568][ T5233] Bluetooth: hci2: command tx timeout [ 272.398345][T13054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.593384][T13142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.672244][T13054] hsr_slave_0: entered promiscuous mode [ 272.690567][T13054] hsr_slave_1: entered promiscuous mode [ 272.715099][T13054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.727861][T13054] Cannot create hsr debugfs directory [ 272.952932][T13148] atomic_op ffff8880729a0998 conn xmit_atomic 0000000000000000 [ 272.982349][T13148] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 273.118094][T12877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.256508][T12877] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.322231][T13170] FAULT_INJECTION: forcing a failure. [ 273.322231][T13170] name failslab, interval 1, probability 0, space 0, times 0 [ 273.355299][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.362487][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.364588][T13170] CPU: 1 UID: 0 PID: 13170 Comm: syz.4.2235 Not tainted 6.11.0-rc1-syzkaller-00305-g91d516d4de48 #0 [ 273.380438][T13170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 273.390491][T13170] Call Trace: [ 273.393760][T13170] [ 273.396683][T13170] dump_stack_lvl+0x241/0x360 [ 273.401364][T13170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.406557][T13170] ? __pfx__printk+0x10/0x10 [ 273.411140][T13170] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 273.417114][T13170] ? __pfx___might_resched+0x10/0x10 [ 273.422404][T13170] should_fail_ex+0x3b0/0x4e0 [ 273.427080][T13170] should_failslab+0xac/0x100 [ 273.431755][T13170] ? __alloc_skb+0x1c3/0x440 [ 273.436346][T13170] kmem_cache_alloc_node_noprof+0x71/0x320 [ 273.442146][T13170] __alloc_skb+0x1c3/0x440 [ 273.446558][T13170] ? __pfx_validate_chain+0x10/0x10 [ 273.451747][T13170] ? __pfx___alloc_skb+0x10/0x10 [ 273.456679][T13170] ? count_memcg_event_mm+0x94/0x420 [ 273.461962][T13170] tipc_msg_build+0x150/0x1070 [ 273.466735][T13170] ? __pfx_tipc_msg_build+0x10/0x10 [ 273.471930][T13170] ? mark_lock+0x9a/0x350 [ 273.476257][T13170] ? __lock_acquire+0x137a/0x2040 [ 273.481277][T13170] __tipc_sendstream+0xa39/0x14e0 [ 273.486322][T13170] ? __pfx___tipc_sendstream+0x10/0x10 [ 273.491777][T13170] ? __local_bh_enable_ip+0x168/0x200 [ 273.497144][T13170] ? __pfx_woken_wake_function+0x10/0x10 [ 273.502865][T13170] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 273.508618][T13170] ? do_raw_spin_unlock+0x13c/0x8b0 [ 273.513874][T13170] ? __pfx_tipc_sendstream+0x10/0x10 [ 273.519179][T13170] tipc_sendstream+0x55/0x70 [ 273.523776][T13170] __sock_sendmsg+0x221/0x270 [ 273.528461][T13170] ____sys_sendmsg+0x525/0x7d0 [ 273.533226][T13170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.538517][T13170] __sys_sendmmsg+0x3b2/0x740 [ 273.543192][T13170] ? __pfx___sys_sendmmsg+0x10/0x10 [ 273.548407][T13170] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 273.554297][T13170] ? ksys_write+0x23e/0x2c0 [ 273.558881][T13170] ? __pfx_lock_release+0x10/0x10 [ 273.564424][T13170] ? vfs_write+0x7c4/0xc90 [ 273.568849][T13170] ? __mutex_unlock_slowpath+0x21d/0x750 [ 273.574476][T13170] ? __pfx_vfs_write+0x10/0x10 [ 273.579261][T13170] __x64_sys_sendmmsg+0xa0/0xb0 [ 273.584105][T13170] do_syscall_64+0xf3/0x230 [ 273.588608][T13170] ? clear_bhb_loop+0x35/0x90 [ 273.593275][T13170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.599165][T13170] RIP: 0033:0x7fe2f3d779f9 [ 273.603575][T13170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.623183][T13170] RSP: 002b:00007fe2f4adf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 273.631688][T13170] RAX: ffffffffffffffda RBX: 00007fe2f3f05f80 RCX: 00007fe2f3d779f9 [ 273.639651][T13170] RDX: 0400000000000203 RSI: 0000000020004400 RDI: 0000000000000003 [ 273.647611][T13170] RBP: 00007fe2f4adf090 R08: 0000000000000000 R09: 0000000000000000 [ 273.655574][T13170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.663533][T13170] R13: 0000000000000000 R14: 00007fe2f3f05f80 R15: 00007ffc6196abe8 [ 273.671512][T13170] [ 273.715701][T12877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.726221][T12877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.858114][T13054] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 273.889504][T13054] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.927303][ T5281] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.934528][ T5281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.104382][T13054] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 274.136447][T13054] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.397794][T13054] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 274.433262][T13054] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.454990][ T5233] Bluetooth: hci2: command tx timeout [ 274.624356][T13054] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 274.636304][T13054] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.677252][T12877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.909967][T12877] veth0_vlan: entered promiscuous mode [ 274.966626][T12877] veth1_vlan: entered promiscuous mode [ 275.062248][T13054] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 275.097831][T13054] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 275.140279][T12877] veth0_macvtap: entered promiscuous mode [ 275.168870][T13054] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 275.173474][T13212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2245'. [ 275.222256][T12877] veth1_macvtap: entered promiscuous mode [ 275.240099][T13054] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 275.318898][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.330720][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.344202][T12877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.402314][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.421044][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.433417][T12877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.444251][T12877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.456108][T12877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.476620][T12877] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.498336][T12877] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.508296][T12877] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.517096][T12877] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.692622][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.702723][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.741543][T13054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.781002][ T5525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.790824][ T5525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.799567][T13054] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.830604][ T5317] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.838470][ T5317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.886181][ T5317] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.893773][ T5317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.073053][T13217] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 276.179320][T13222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2250'. [ 276.320313][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2250'. [ 276.351962][T13230] netlink: 'syz.4.2251': attribute type 1 has an invalid length. [ 276.511476][T13230] bond8 (unregistering): Released all slaves [ 276.535221][ T5233] Bluetooth: hci2: command tx timeout [ 276.701027][T13248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2254'. [ 276.801591][T13054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.013715][T13054] veth0_vlan: entered promiscuous mode [ 277.066498][T13054] veth1_vlan: entered promiscuous mode [ 277.122729][T13258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2256'. [ 277.176185][T13054] veth0_macvtap: entered promiscuous mode [ 277.217692][T13054] veth1_macvtap: entered promiscuous mode [ 277.469865][ T5510] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.533948][T13054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.564528][T13054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.595066][T13054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.614575][T13054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.637585][T13054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.653605][T13054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.680108][T13054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.691594][T13054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.703463][T13054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.713714][T13054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.724398][T13054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.739159][T13054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.770655][T13054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.790022][T13054] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.811627][T13054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.835161][T13054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.971755][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.994740][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.028703][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.055130][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.203387][T13269] netlink: 47 bytes leftover after parsing attributes in process `syz.3.2260'. [ 278.490332][T13279] netlink: 'syz.4.2262': attribute type 4 has an invalid length. [ 278.700159][ T5510] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.756365][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 278.768870][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 278.791263][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 278.803051][T13300] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2266'. [ 278.813424][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 278.828500][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 278.841747][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 278.877012][T13300] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 278.915349][T13296] can: request_module (can-proto-4) failed. [ 278.924407][T13302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2267'. [ 278.978875][ T5510] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.220665][ T5510] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.438541][T13319] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.514876][T13320] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 279.730505][T13332] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2273'. [ 279.742552][T13332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2273'. [ 279.838102][ T5510] bridge_slave_1: left allmulticast mode [ 279.855099][ T5510] bridge_slave_1: left promiscuous mode [ 279.861533][ T5510] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.918253][ T5510] bridge_slave_0: left allmulticast mode [ 279.945509][ T5510] bridge_slave_0: left promiscuous mode [ 279.951963][ T5510] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.949630][ T5237] Bluetooth: hci1: command tx timeout [ 281.071595][ T5510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.107919][ T5510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.206634][ T5510] bond0 (unregistering): Released all slaves [ 281.325269][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.345372][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.365068][T13297] chnl_net:caif_netlink_parms(): no params data found [ 281.390218][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.407117][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.418492][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 281.431851][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.435174][T13361] __nla_validate_parse: 1 callbacks suppressed [ 281.435189][T13361] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2281'. [ 281.697862][T13374] xt_NFQUEUE: number of total queues is 0 [ 281.997038][T13297] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.018705][T13297] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.045076][T13297] bridge_slave_0: entered allmulticast mode [ 282.052443][T13297] bridge_slave_0: entered promiscuous mode [ 282.066456][T13297] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.074164][T13297] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.082112][T13297] bridge_slave_1: entered allmulticast mode [ 282.090234][T13297] bridge_slave_1: entered promiscuous mode [ 282.156481][ T5510] hsr_slave_0: left promiscuous mode [ 282.173965][ T5510] hsr_slave_1: left promiscuous mode [ 282.188313][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.197178][ T5510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.208344][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.233795][ T5510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.301938][ T5510] veth1_macvtap: left promiscuous mode [ 282.324736][ T5510] veth0_macvtap: left promiscuous mode [ 282.331385][ T5510] veth1_vlan: left promiscuous mode [ 282.337635][ T5510] veth0_vlan: left promiscuous mode [ 282.493251][T13401] netlink: 'syz.1.2290': attribute type 3 has an invalid length. [ 283.014741][ T5237] Bluetooth: hci1: command tx timeout [ 283.364054][ T5510] team0 (unregistering): Port device team_slave_1 removed [ 283.434284][ T5510] team0 (unregistering): Port device team_slave_0 removed [ 283.577630][ T5237] Bluetooth: hci2: command tx timeout [ 284.034200][T13393] wg2: left promiscuous mode [ 284.044753][T13393] wg2: left allmulticast mode [ 284.081931][T13396] wg2: entered promiscuous mode [ 284.087071][T13396] wg2: entered allmulticast mode [ 284.248716][T13297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.253553][T13417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2295'. [ 284.332652][T13297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.479196][T13297] team0: Port device team_slave_0 added [ 284.496648][T13297] team0: Port device team_slave_1 added [ 284.530598][T13424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2296'. [ 284.547602][T13424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2296'. [ 284.600911][T13297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.609052][T13297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.635342][T13297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.648819][T13297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.655840][T13297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.682333][T13297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.807188][T13297] hsr_slave_0: entered promiscuous mode [ 284.818414][T13297] hsr_slave_1: entered promiscuous mode [ 284.832980][T13297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.851474][T13297] Cannot create hsr debugfs directory [ 285.095701][ T5237] Bluetooth: hci1: command tx timeout [ 285.216087][T13442] netlink: 'syz.3.2302': attribute type 1 has an invalid length. [ 285.383753][T13446] bond13: (slave vcan0): The slave device specified does not support setting the MAC address [ 285.399874][T13446] bond13: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 285.490053][T13446] bond13: (slave vcan0): making interface the new active one [ 285.516441][T13446] bond13: (slave vcan0): Enslaving as an active interface with an up link [ 285.600409][T13458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2306'. [ 285.610298][T13357] chnl_net:caif_netlink_parms(): no params data found [ 285.657306][ T5237] Bluetooth: hci2: command tx timeout [ 285.896696][ T5510] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.149778][ T5510] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.296261][ T5510] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.421095][T13488] netlink: 'syz.3.2313': attribute type 1 has an invalid length. [ 286.520225][T13488] bond14: entered promiscuous mode [ 286.771201][ T5510] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.841069][T13492] team0: Port device team_slave_1 removed [ 286.852845][T13492] bond14: (slave team_slave_1): making interface the new active one [ 286.862264][T13492] team_slave_1: entered promiscuous mode [ 286.877926][T13492] bond14: (slave team_slave_1): Enslaving as an active interface with an up link [ 286.928490][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2313'. [ 286.940917][T13505] netlink: 'syz.1.2316': attribute type 1 has an invalid length. [ 286.950239][T13495] bond14: entered allmulticast mode [ 286.955702][T13495] team_slave_1: entered allmulticast mode [ 286.961543][T13505] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2316'. [ 286.973558][T13495] 8021q: adding VLAN 0 to HW filter on device bond14 [ 286.980551][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'. [ 287.003003][T13357] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.014863][T13357] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.034984][T13357] bridge_slave_0: entered allmulticast mode [ 287.042433][T13357] bridge_slave_0: entered promiscuous mode [ 287.052844][T13357] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.060259][T13357] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.067711][T13357] bridge_slave_1: entered allmulticast mode [ 287.075624][T13357] bridge_slave_1: entered promiscuous mode [ 287.088044][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2315'. [ 287.140237][T13508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2315'. [ 287.180486][ T5237] Bluetooth: hci1: command tx timeout [ 287.270527][T13513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2317'. [ 287.410674][T13357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.454984][T13357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.484900][T13519] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2320'. [ 287.518337][T13519] Unsupported ieee802154 address type: 0 [ 287.713296][T13357] team0: Port device team_slave_0 added [ 287.736014][ T5237] Bluetooth: hci2: command tx timeout [ 287.828109][T13357] team0: Port device team_slave_1 added [ 287.948925][T13297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 288.016046][T13537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2323'. [ 288.045650][ T5510] bridge_slave_1: left allmulticast mode [ 288.061650][ T5510] bridge_slave_1: left promiscuous mode [ 288.080578][ T5510] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.129366][ T5510] bridge_slave_0: left allmulticast mode [ 288.141270][ T5510] bridge_slave_0: left promiscuous mode [ 288.179556][ T5510] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.818830][ T5510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.831696][ T5510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.844469][ T5510] bond0 (unregistering): Released all slaves [ 288.859816][T13297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 288.871497][T13297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 288.907523][T13357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.923515][T13357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.971873][T13357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.004120][T13551] netlink: 'syz.1.2325': attribute type 2 has an invalid length. [ 289.074124][T13562] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.081895][T13562] bridge0: left promiscuous mode [ 289.100145][T13562] bridge0: left allmulticast mode [ 289.125315][T13297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 289.287904][T13357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.306263][T13570] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2329'. [ 289.316570][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2327'. [ 289.324525][T13357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.376983][ T1069] tipc: Subscription rejected, illegal request [ 289.418463][T13357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.662135][T13581] Unsupported ieee802154 address type: 0 [ 289.767918][T13357] hsr_slave_0: entered promiscuous mode [ 289.795200][T13357] hsr_slave_1: entered promiscuous mode [ 289.801794][T13357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.815399][ T5237] Bluetooth: hci2: command tx timeout [ 289.822683][T13357] Cannot create hsr debugfs directory [ 289.850027][ T5510] hsr_slave_0: left promiscuous mode [ 289.901681][ T5510] hsr_slave_1: left promiscuous mode [ 289.934406][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.955755][ T5510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.008920][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.024739][ T5510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.128017][ T5510] veth1_macvtap: left promiscuous mode [ 290.134176][ T5510] veth0_macvtap: left promiscuous mode [ 290.159215][ T5510] veth1_vlan: left promiscuous mode [ 290.172590][ T5510] veth0_vlan: left promiscuous mode [ 290.565348][T13614] xt_NFQUEUE: number of total queues is 0 [ 290.927437][T13627] Unsupported ieee802154 address type: 0 [ 291.223580][ T5510] team0 (unregistering): Port device team_slave_1 removed [ 291.269870][ T5510] team0 (unregistering): Port device team_slave_0 removed [ 291.866147][T13606] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (64) [ 292.384652][T13297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.523848][T13297] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.559755][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.566976][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.676106][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.683317][ T5234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.848832][T13297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.008436][T13659] __nla_validate_parse: 7 callbacks suppressed [ 293.008455][T13659] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2351'. [ 293.102191][T13357] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 293.149394][T13357] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.197839][T13357] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.218982][T13357] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.408830][T13673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2355'. [ 293.439449][T13673] Unsupported ieee802154 address type: 0 [ 293.440555][T13297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.531879][T13357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.603349][T13357] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.607890][T13675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2356'. [ 293.646014][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.653269][ T5234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.681762][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.688998][ T5234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.718939][T13297] veth0_vlan: entered promiscuous mode [ 293.795247][T13297] veth1_vlan: entered promiscuous mode [ 293.911435][T13297] veth0_macvtap: entered promiscuous mode [ 293.966663][T13297] veth1_macvtap: entered promiscuous mode [ 294.014231][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2358'. [ 294.061735][T13297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.089499][T13297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.111602][T13297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.147853][T13297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.185745][T13297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.206978][T13297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.234821][T13297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.256962][T13297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.315049][T13357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.334387][T13297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.357377][T13297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.376449][T13297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.385538][T13297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.536332][T13357] veth0_vlan: entered promiscuous mode [ 294.602071][T13357] veth1_vlan: entered promiscuous mode [ 294.652746][T13697] lo: left promiscuous mode [ 294.665467][T13697] tunl0: left promiscuous mode [ 294.724093][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2363'. [ 294.748072][T13700] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2363'. [ 294.756867][T13697] 0ªX¹¦D: left allmulticast mode [ 294.907824][ T5525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.961245][ T5525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.049817][T13357] veth0_macvtap: entered promiscuous mode [ 295.087844][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.103431][T13357] veth1_macvtap: entered promiscuous mode [ 295.121254][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.181907][T13357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.211569][T13357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.235827][T13357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.268069][T13357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.297412][T13357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.348747][T13357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.361720][T13357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.374057][T13357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.385565][T13357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.395438][T13357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.406257][T13357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.429216][T13357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.517739][T13357] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.528287][T13357] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.539593][T13357] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.548438][T13357] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.647365][T13711] netlink: 'syz.1.2367': attribute type 10 has an invalid length. [ 295.697500][T13711] team0: Port device netdevsim0 added [ 295.715167][T13709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2366'. [ 295.746841][T13709] Unsupported ieee802154 address type: 0 [ 295.758664][ T5510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.791843][ T5510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.860656][ T5525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.870520][ T5525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.015038][T13718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 296.365772][T13733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2374'. [ 296.617127][ T1069] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.130920][ T1069] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.203876][ T1069] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.303799][ T1069] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.428245][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2377'. [ 297.452885][T13746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2379'. [ 297.504777][T13744] Unsupported ieee802154 address type: 0 [ 297.635030][ T1069] bridge_slave_1: left allmulticast mode [ 297.641304][ T1069] bridge_slave_1: left promiscuous mode [ 297.667381][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.691157][T13750] netlink: 'syz.3.2381': attribute type 2 has an invalid length. [ 297.702841][ T1069] bridge_slave_0: left allmulticast mode [ 297.714799][ T1069] bridge_slave_0: left promiscuous mode [ 297.721457][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.844019][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.869203][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.892699][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.902335][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.911337][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 297.927434][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 298.335459][ T1069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.363929][ T1069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.382778][ T1069] bond0 (unregistering): Released all slaves [ 298.404065][T13753] netlink: 'syz.4.2382': attribute type 10 has an invalid length. [ 298.431612][T13753] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 298.462944][T13753] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 298.489971][T13753] team0: Port device netdevsim0 added [ 298.506553][T13751] __nla_validate_parse: 1 callbacks suppressed [ 298.506575][T13751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2380'. [ 298.642917][T13755] netlink: 'syz.4.2382': attribute type 10 has an invalid length. [ 298.663073][T13755] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 298.690688][T13755] team0: Port device netdevsim0 removed [ 298.699265][T13755] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 298.712194][T13755] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 298.724281][T13755] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 298.755295][T13759] netlink: 'syz.1.2380': attribute type 2 has an invalid length. [ 298.887170][T13764] netlink: 'syz.3.2383': attribute type 1 has an invalid length. [ 299.196032][T13764] bond15: entered promiscuous mode [ 299.353423][T13781] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 299.380299][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.396400][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.407711][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.419022][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.428464][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 299.445273][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.446556][T13781] bond15: (slave ip6gretap1): making interface the new active one [ 299.480592][T13781] ip6gretap1: entered promiscuous mode [ 299.543372][T13781] bond15: (slave ip6gretap1): Enslaving as an active interface with an up link [ 299.575493][T13786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2383'. [ 299.595693][T13786] bond15: left promiscuous mode [ 299.659434][T13786] ip6gretap1: left promiscuous mode [ 299.679924][T13786] 8021q: adding VLAN 0 to HW filter on device bond15 [ 299.683131][ T5281] IPVS: starting estimator thread 0... [ 299.700294][T13805] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 299.753090][ T1069] hsr_slave_0: left promiscuous mode [ 299.759788][ T1069] hsr_slave_1: left promiscuous mode [ 299.769883][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.780062][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.788458][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.797924][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.805423][T13807] IPVS: using max 18 ests per chain, 43200 per kthread [ 299.852526][ T1069] veth1_macvtap: left promiscuous mode [ 299.859396][ T1069] veth0_macvtap: left promiscuous mode [ 299.866516][ T1069] veth1_vlan: left promiscuous mode [ 299.874057][ T1069] veth0_vlan: left promiscuous mode [ 299.966027][T13815] Unsupported ieee802154 address type: 0 [ 299.975443][ T5233] Bluetooth: hci1: command tx timeout [ 300.582858][ T1069] team0 (unregistering): Port device team_slave_1 removed [ 300.643103][ T1069] team0 (unregistering): Port device team_slave_0 removed [ 301.208946][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2389'. [ 301.224945][T13809] netlink: 'syz.1.2390': attribute type 33 has an invalid length. [ 301.290353][T13810] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2390'. [ 301.314725][T13810] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2390'. [ 301.324366][T13813] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2391'. [ 301.494843][ T5233] Bluetooth: hci2: command tx timeout [ 302.053732][T13833] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 302.075174][ T5233] Bluetooth: hci1: command tx timeout [ 302.128680][T13757] chnl_net:caif_netlink_parms(): no params data found [ 302.176953][T13794] chnl_net:caif_netlink_parms(): no params data found [ 302.433843][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2399'. [ 302.464706][T13845] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 302.511414][T13845] FAULT_INJECTION: forcing a failure. [ 302.511414][T13845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.552669][T13845] CPU: 1 UID: 0 PID: 13845 Comm: syz.3.2399 Not tainted 6.11.0-rc1-syzkaller-00305-g91d516d4de48 #0 [ 302.563488][T13845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 302.573563][T13845] Call Trace: [ 302.576860][T13845] [ 302.579816][T13845] dump_stack_lvl+0x241/0x360 [ 302.584537][T13845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.589732][T13845] ? __pfx__printk+0x10/0x10 [ 302.594310][T13845] ? __pfx_lock_release+0x10/0x10 [ 302.599337][T13845] should_fail_ex+0x3b0/0x4e0 [ 302.604009][T13845] _copy_from_iter+0x1f6/0x1960 [ 302.608857][T13845] ? __virt_addr_valid+0x183/0x530 [ 302.613978][T13845] ? __pfx_lock_release+0x10/0x10 [ 302.619035][T13845] ? __alloc_skb+0x28f/0x440 [ 302.623641][T13845] ? __pfx__copy_from_iter+0x10/0x10 [ 302.628945][T13845] ? __virt_addr_valid+0x183/0x530 [ 302.634078][T13845] ? __virt_addr_valid+0x183/0x530 [ 302.639209][T13845] ? __virt_addr_valid+0x45f/0x530 [ 302.644338][T13845] ? __check_object_size+0x49c/0x900 [ 302.649651][T13845] netlink_sendmsg+0x73d/0xcb0 [ 302.654455][T13845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.659756][T13845] ? __import_iovec+0x536/0x820 [ 302.664635][T13845] ? aa_sock_msg_perm+0x91/0x160 [ 302.669563][T13845] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 302.674834][T13845] ? security_socket_sendmsg+0x87/0xb0 [ 302.680289][T13845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.685579][T13845] __sock_sendmsg+0x221/0x270 [ 302.690276][T13845] ____sys_sendmsg+0x525/0x7d0 [ 302.695052][T13845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.700351][T13845] __sys_sendmsg+0x2b0/0x3a0 [ 302.704972][T13845] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.710101][T13845] ? vfs_write+0x7c4/0xc90 [ 302.714543][T13845] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 302.720884][T13845] ? do_syscall_64+0x100/0x230 [ 302.725668][T13845] ? do_syscall_64+0xb6/0x230 [ 302.730359][T13845] do_syscall_64+0xf3/0x230 [ 302.734871][T13845] ? clear_bhb_loop+0x35/0x90 [ 302.739542][T13845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.745438][T13845] RIP: 0033:0x7f82861779f9 [ 302.749865][T13845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.769572][T13845] RSP: 002b:00007f828701d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.777977][T13845] RAX: ffffffffffffffda RBX: 00007f8286305f80 RCX: 00007f82861779f9 [ 302.785938][T13845] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000007 [ 302.793903][T13845] RBP: 00007f828701d090 R08: 0000000000000000 R09: 0000000000000000 [ 302.801866][T13845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.809866][T13845] R13: 0000000000000000 R14: 00007f8286305f80 R15: 00007fff03de81b8 [ 302.817851][T13845] [ 302.907478][T13757] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.936016][T13757] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.954862][T13757] bridge_slave_0: entered allmulticast mode [ 302.962443][T13757] bridge_slave_0: entered promiscuous mode [ 303.031462][T13757] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.040119][T13757] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.055278][T13757] bridge_slave_1: entered allmulticast mode [ 303.076222][T13868] Unsupported ieee802154 address type: 0 [ 303.082541][T13757] bridge_slave_1: entered promiscuous mode [ 303.177741][ T1069] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.204671][T13865] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2404'. [ 303.219341][T13794] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.243927][T13794] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.276613][T13794] bridge_slave_0: entered allmulticast mode [ 303.294640][T13794] bridge_slave_0: entered promiscuous mode [ 303.317105][T13757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.352923][T13757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.353113][T13872] netlink: 'syz.4.2405': attribute type 1 has an invalid length. [ 303.372196][T13872] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2405'. [ 303.439329][ T1069] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.485366][T13794] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.509357][T13794] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.519847][T13874] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 303.520005][T13794] bridge_slave_1: entered allmulticast mode [ 303.539403][T13794] bridge_slave_1: entered promiscuous mode [ 303.575558][ T5233] Bluetooth: hci2: command tx timeout [ 303.754802][ T1069] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.790337][T13881] IPVS: set_ctl: invalid protocol: 51 172.20.20.14:20002 [ 303.821889][T13874] netlink: 'syz.3.2407': attribute type 10 has an invalid length. [ 303.833001][T13874] bond0: (slave bond_slave_0): Releasing backup interface [ 303.866444][T13757] team0: Port device team_slave_0 added [ 303.914308][ T1069] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.939409][T13794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.963737][T13794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.984847][T13757] team0: Port device team_slave_1 added [ 304.135001][ T5233] Bluetooth: hci1: command tx timeout [ 304.186677][T13757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.214117][T13757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.259857][T13757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.299699][T13794] team0: Port device team_slave_0 added [ 304.306453][T13892] tipc: Enabling of bearer rejected, failed to enable media [ 304.343714][T13794] team0: Port device team_slave_1 added [ 304.374884][T13757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.396944][T13757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.493150][T13757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.588056][ T2974] tipc: Subscription rejected, illegal request [ 304.607406][T13905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2414'. [ 304.624780][T13905] tc_dump_action: action bad kind [ 304.656617][T13908] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2416'. [ 304.675245][T13794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.682230][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.743378][T13794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.800255][T13794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.808780][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.845106][T13794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.858972][T13914] netlink: 'syz.1.2418': attribute type 1 has an invalid length. [ 304.987368][T13757] hsr_slave_0: entered promiscuous mode [ 305.007967][T13757] hsr_slave_1: entered promiscuous mode [ 305.019276][T13757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.034680][T13757] Cannot create hsr debugfs directory [ 305.176863][ T1069] bridge_slave_1: left allmulticast mode [ 305.204759][ T1069] bridge_slave_1: left promiscuous mode [ 305.210975][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.245611][ T1069] bridge_slave_0: left allmulticast mode [ 305.264970][ T1069] bridge_slave_0: left promiscuous mode [ 305.271390][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.660630][ T5233] Bluetooth: hci2: command tx timeout [ 305.671043][ T1069] bond11 (unregistering): (slave ip6gretap1): Releasing active interface [ 306.214709][ T5233] Bluetooth: hci1: command tx timeout [ 306.455959][ T1069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.468937][ T1069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.496105][ T1069] bond0 (unregistering): Released all slaves [ 306.646535][ T1069] bond0 (unregistering): Released all slaves [ 306.661614][ T1069] bond1 (unregistering): Released all slaves [ 306.676753][ T1069] bond2 (unregistering): Released all slaves [ 306.694183][ T1069] bond3 (unregistering): Released all slaves [ 306.723738][ T1069] bond4 (unregistering): Released all slaves [ 306.739002][ T1069] bond5 (unregistering): Released all slaves [ 306.761832][ T1069] bond6 (unregistering): Released all slaves [ 306.779281][ T1069] bond7 (unregistering): Released all slaves [ 306.798506][ T1069] bond8 (unregistering): Released all slaves [ 306.817361][ T1069] bond9 (unregistering): Released all slaves [ 306.836909][ T1069] bond10 (unregistering): Released all slaves [ 306.969291][ T1069] bond11 (unregistering): Released all slaves [ 307.045133][T13794] hsr_slave_0: entered promiscuous mode [ 307.073719][T13794] hsr_slave_1: entered promiscuous mode [ 307.109223][T13794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.136980][T13794] Cannot create hsr debugfs directory [ 307.329434][T13949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2427'. [ 307.567861][T13949] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2427'. [ 307.631799][T13953] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2428'. [ 307.735374][ T5233] Bluetooth: hci2: command tx timeout [ 307.830972][T13963] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 307.845227][T13963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2430'. [ 307.978681][T13963] FAULT_INJECTION: forcing a failure. [ 307.978681][T13963] name failslab, interval 1, probability 0, space 0, times 0 [ 308.012656][T13963] CPU: 1 UID: 0 PID: 13963 Comm: syz.4.2430 Not tainted 6.11.0-rc1-syzkaller-00305-g91d516d4de48 #0 [ 308.023472][T13963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 308.033548][T13963] Call Trace: [ 308.036844][T13963] [ 308.039787][T13963] dump_stack_lvl+0x241/0x360 [ 308.044503][T13963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.049723][T13963] ? __pfx__printk+0x10/0x10 [ 308.054333][T13963] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 308.059901][T13963] ? __pfx___might_resched+0x10/0x10 [ 308.065212][T13963] should_fail_ex+0x3b0/0x4e0 [ 308.069913][T13963] should_failslab+0xac/0x100 [ 308.074609][T13963] ? rtnl_newlink+0xf2/0x20a0 [ 308.079307][T13963] __kmalloc_cache_noprof+0x6c/0x2c0 [ 308.084615][T13963] rtnl_newlink+0xf2/0x20a0 [ 308.089151][T13963] ? __pfx_lock_acquire+0x10/0x10 [ 308.094191][T13963] ? __mutex_lock+0x99b/0xd70 [ 308.098889][T13963] ? __pfx_lock_release+0x10/0x10 [ 308.103930][T13963] ? do_raw_spin_lock+0x14f/0x370 [ 308.108978][T13963] ? __pfx_rtnl_newlink+0x10/0x10 [ 308.114023][T13963] ? do_raw_spin_unlock+0x13c/0x8b0 [ 308.119247][T13963] ? __mutex_lock+0x9a5/0xd70 [ 308.123943][T13963] ? __mutex_lock+0x527/0xd70 [ 308.128638][T13963] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 308.133770][T13963] ? __pfx___mutex_lock+0x10/0x10 [ 308.138828][T13963] ? __pfx_rtnl_newlink+0x10/0x10 [ 308.143880][T13963] rtnetlink_rcv_msg+0x73f/0xcf0 [ 308.148835][T13963] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 308.153970][T13963] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 308.159458][T13963] ? ref_tracker_free+0x643/0x7e0 [ 308.164517][T13963] netlink_rcv_skb+0x1e3/0x430 [ 308.169313][T13963] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 308.174798][T13963] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.180134][T13963] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.185355][T13963] netlink_unicast+0x7f0/0x990 [ 308.190118][T13963] ? __pfx_netlink_unicast+0x10/0x10 [ 308.195392][T13963] ? __check_object_size+0x49c/0x900 [ 308.200661][T13963] ? bpf_lsm_netlink_send+0x9/0x10 [ 308.205761][T13963] netlink_sendmsg+0x8e4/0xcb0 [ 308.210521][T13963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.215803][T13963] ? __import_iovec+0x536/0x820 [ 308.220657][T13963] ? aa_sock_msg_perm+0x91/0x160 [ 308.225584][T13963] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 308.230859][T13963] ? security_socket_sendmsg+0x87/0xb0 [ 308.236334][T13963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.241656][T13963] __sock_sendmsg+0x221/0x270 [ 308.246366][T13963] ____sys_sendmsg+0x525/0x7d0 [ 308.251163][T13963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.256487][T13963] __sys_sendmsg+0x2b0/0x3a0 [ 308.261085][T13963] ? __pfx___sys_sendmsg+0x10/0x10 [ 308.266200][T13963] ? vfs_write+0x7c4/0xc90 [ 308.270683][T13963] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 308.277039][T13963] ? do_syscall_64+0x100/0x230 [ 308.281831][T13963] ? do_syscall_64+0xb6/0x230 [ 308.286542][T13963] do_syscall_64+0xf3/0x230 [ 308.291069][T13963] ? clear_bhb_loop+0x35/0x90 [ 308.295768][T13963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.301681][T13963] RIP: 0033:0x7fe2f3d779f9 [ 308.306100][T13963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.325729][T13963] RSP: 002b:00007fe2f4adf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.334169][T13963] RAX: ffffffffffffffda RBX: 00007fe2f3f05f80 RCX: 00007fe2f3d779f9 [ 308.342142][T13963] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000007 [ 308.350108][T13963] RBP: 00007fe2f4adf090 R08: 0000000000000000 R09: 0000000000000000 [ 308.358089][T13963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.366080][T13963] R13: 0000000000000000 R14: 00007fe2f3f05f80 R15: 00007ffc6196abe8 [ 308.374161][T13963] [ 308.438613][T13969] ebtables: ebtables: counters copy to user failed while replacing table [ 308.872167][T13983] sctp: [Deprecated]: syz.3.2437 (pid 13983) Use of int in maxseg socket option. [ 308.872167][T13983] Use struct sctp_assoc_value instead [ 309.023262][T13983] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2437'. [ 309.200950][T13992] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 309.213810][T13992] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 309.413894][ T1069] hsr_slave_0: left promiscuous mode [ 309.432432][ T1069] hsr_slave_1: left promiscuous mode [ 309.447704][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.464710][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.483083][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.504851][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.538333][ T1069] hsr_slave_0: left promiscuous mode [ 309.545385][ T1069] hsr_slave_1: left promiscuous mode [ 309.598478][ T1069] veth1_macvtap: left promiscuous mode [ 309.604305][ T1069] veth0_macvtap: left promiscuous mode [ 309.610407][ T1069] veth1_vlan: left promiscuous mode [ 309.624595][ T1069] veth0_vlan: left promiscuous mode [ 309.633301][ T1069] veth1_macvtap: left promiscuous mode [ 309.644521][ T1069] veth0_macvtap: left promiscuous mode [ 309.651632][ T1069] veth1_vlan: left promiscuous mode [ 310.445988][ T1069] team0 (unregistering): Port device team_slave_1 removed [ 310.494190][ T1069] team0 (unregistering): Port device team_slave_0 removed [ 311.084256][ T1069] pim6reg (unregistering): left allmulticast mode [ 312.041069][T13996] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2440'. [ 312.054653][T14000] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.2441'. [ 312.196090][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2443'. [ 312.278112][T14015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2444'. [ 312.305735][T14015] FAULT_INJECTION: forcing a failure. [ 312.305735][T14015] name failslab, interval 1, probability 0, space 0, times 0 [ 312.338149][T14010] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 312.364748][T14015] CPU: 0 UID: 0 PID: 14015 Comm: syz.4.2444 Not tainted 6.11.0-rc1-syzkaller-00305-g91d516d4de48 #0 [ 312.375558][T14015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 312.385632][T14015] Call Trace: [ 312.388922][T14015] [ 312.391868][T14015] dump_stack_lvl+0x241/0x360 [ 312.396573][T14015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.401790][T14015] ? __pfx__printk+0x10/0x10 [ 312.406400][T14015] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 312.411884][T14015] ? __pfx___might_resched+0x10/0x10 [ 312.417194][T14015] ? netlink_sendmsg+0x8e4/0xcb0 [ 312.422160][T14015] should_fail_ex+0x3b0/0x4e0 [ 312.426871][T14015] should_failslab+0xac/0x100 [ 312.431575][T14015] ? rtnl_newlink+0xf2/0x20a0 [ 312.436261][T14015] __kmalloc_cache_noprof+0x6c/0x2c0 [ 312.441637][T14015] rtnl_newlink+0xf2/0x20a0 [ 312.446157][T14015] ? __mutex_trylock_common+0x183/0x2e0 [ 312.451702][T14015] ? __pfx___might_resched+0x10/0x10 [ 312.456984][T14015] ? __pfx_rtnl_newlink+0x10/0x10 [ 312.462005][T14015] ? __pfx___mutex_trylock_common+0x10/0x10 [ 312.467898][T14015] ? rcu_is_watching+0x15/0xb0 [ 312.472658][T14015] ? trace_contention_end+0x3c/0x120 [ 312.477940][T14015] ? __mutex_lock+0x2ef/0xd70 [ 312.482616][T14015] ? rcu_read_unlock+0x87/0xa0 [ 312.487379][T14015] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 312.492488][T14015] ? __pfx_lock_release+0x10/0x10 [ 312.497511][T14015] ? __pfx___mutex_lock+0x10/0x10 [ 312.502541][T14015] ? __pfx_rtnl_newlink+0x10/0x10 [ 312.507563][T14015] rtnetlink_rcv_msg+0x73f/0xcf0 [ 312.512503][T14015] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 312.517617][T14015] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.523082][T14015] ? ref_tracker_free+0x643/0x7e0 [ 312.528112][T14015] netlink_rcv_skb+0x1e3/0x430 [ 312.532876][T14015] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.538339][T14015] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.543642][T14015] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.548840][T14015] netlink_unicast+0x7f0/0x990 [ 312.553607][T14015] ? __pfx_netlink_unicast+0x10/0x10 [ 312.558885][T14015] ? __virt_addr_valid+0x183/0x530 [ 312.563992][T14015] ? __check_object_size+0x49c/0x900 [ 312.569270][T14015] ? bpf_lsm_netlink_send+0x9/0x10 [ 312.574381][T14015] netlink_sendmsg+0x8e4/0xcb0 [ 312.579159][T14015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.584448][T14015] ? __import_iovec+0x536/0x820 [ 312.589295][T14015] ? aa_sock_msg_perm+0x91/0x160 [ 312.594229][T14015] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 312.599512][T14015] ? security_socket_sendmsg+0x87/0xb0 [ 312.604972][T14015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.610254][T14015] __sock_sendmsg+0x221/0x270 [ 312.614930][T14015] ____sys_sendmsg+0x525/0x7d0 [ 312.619699][T14015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.624997][T14015] __sys_sendmsg+0x2b0/0x3a0 [ 312.629583][T14015] ? __pfx___sys_sendmsg+0x10/0x10 [ 312.634684][T14015] ? vfs_write+0x7c4/0xc90 [ 312.639130][T14015] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 312.645454][T14015] ? do_syscall_64+0x100/0x230 [ 312.650221][T14015] ? do_syscall_64+0xb6/0x230 [ 312.654892][T14015] do_syscall_64+0xf3/0x230 [ 312.659395][T14015] ? clear_bhb_loop+0x35/0x90 [ 312.664067][T14015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.669959][T14015] RIP: 0033:0x7fe2f3d779f9 [ 312.674366][T14015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.693970][T14015] RSP: 002b:00007fe2f4abe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.702384][T14015] RAX: ffffffffffffffda RBX: 00007fe2f3f06058 RCX: 00007fe2f3d779f9 [ 312.710350][T14015] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000007 [ 312.718319][T14015] RBP: 00007fe2f4abe090 R08: 0000000000000000 R09: 0000000000000000 [ 312.726370][T14015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.734336][T14015] R13: 0000000000000000 R14: 00007fe2f3f06058 R15: 00007ffc6196abe8 [ 312.742317][T14015] [ 313.054006][T14034] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2448'. [ 313.108016][T13794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 313.123520][T14033] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2448'. [ 313.140644][T13794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 313.190710][T13794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 313.250013][T13794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 313.337881][T14042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2447'. [ 313.363121][T14039] netlink: 632 bytes leftover after parsing attributes in process `syz.3.2447'. [ 313.423717][T14044] netlink: 'syz.4.2450': attribute type 63 has an invalid length. [ 313.454623][T14044] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2450'. [ 313.578818][T14048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2451'. [ 313.604714][T14048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.627635][T14048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.653851][T14048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.663017][T14048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.720428][T13757] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 313.756216][T13757] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 313.814994][T13757] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 313.913371][T13757] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 313.936145][T14053] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 313.998451][T14052] netlink: 'syz.4.2452': attribute type 10 has an invalid length. [ 314.026251][T14052] bond0: (slave bond_slave_0): Releasing backup interface [ 314.044297][T14052] bond_slave_0: left promiscuous mode [ 314.142630][T14062] Unsupported ieee802154 address type: 0 [ 314.375108][ T5237] Bluetooth: hci4: command 0x0405 tx timeout [ 314.379064][T13794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.479521][T13794] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.532500][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.539727][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.597758][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.604972][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.672397][T13757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.794100][T13757] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.837649][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.844852][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.898910][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.906130][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.316908][T13794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.499377][T13794] veth0_vlan: entered promiscuous mode [ 315.542801][T13794] veth1_vlan: entered promiscuous mode [ 315.649010][T13757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.701614][T13794] veth0_macvtap: entered promiscuous mode [ 315.739659][T14116] Unsupported ieee802154 address type: 0 [ 315.741406][T13794] veth1_macvtap: entered promiscuous mode [ 315.922905][T13794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.003550][T13757] veth0_vlan: entered promiscuous mode [ 316.076675][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.090034][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.117365][T13794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.183616][T13794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.224681][T13794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.234019][T13794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.264518][T13794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.317243][T13757] veth1_vlan: entered promiscuous mode [ 316.644019][T13757] veth0_macvtap: entered promiscuous mode [ 316.680754][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.713994][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.741730][T14139] netlink: 'syz.1.2474': attribute type 16 has an invalid length. [ 316.764066][T13757] veth1_macvtap: entered promiscuous mode [ 316.770210][T14139] netlink: 'syz.1.2474': attribute type 3 has an invalid length. [ 316.815751][ T1069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.851136][T14136] atomic_op ffff88802d505998 conn xmit_atomic 0000000000000000 [ 316.862149][ T1069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.875935][T14136] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 316.957392][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.989443][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.021796][T13757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.073505][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.119118][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.142736][T13757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.164596][T13757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.197052][T13757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.296056][T14153] __nla_validate_parse: 6 callbacks suppressed [ 317.296077][T14153] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2478'. [ 317.390115][T14153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2478'. [ 317.439657][T14157] Unsupported ieee802154 address type: 0 [ 317.499438][T13757] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.544840][T13757] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.553610][T13757] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.575436][T13757] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.611450][T14156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2479'. [ 317.909060][T14163] netlink: 'syz.3.2481': attribute type 1 has an invalid length. [ 317.962061][T14163] 8021q: adding VLAN 0 to HW filter on device bond16 [ 317.997564][ T1069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.006375][ T1069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.140299][ T3023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.171295][ T3023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.801630][T14188] netlink: 'syz.1.2487': attribute type 1 has an invalid length. [ 318.811483][T14188] netlink: 'syz.1.2487': attribute type 2 has an invalid length. [ 318.820378][T14188] netlink: 'syz.1.2487': attribute type 2 has an invalid length. [ 318.829078][T14188] netlink: 'syz.1.2487': attribute type 2 has an invalid length. [ 318.838919][T14188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2487'. [ 318.920368][ T5513] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.981813][T14188] bridge_slave_0: left allmulticast mode [ 318.990708][T14188] bridge_slave_0: left promiscuous mode [ 319.004143][T14188] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.023525][T14188] bridge_slave_1: left allmulticast mode [ 319.030053][T14188] bridge_slave_1: left promiscuous mode [ 319.036269][T14188] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.058597][T14188] bond0: (slave bond_slave_0): Releasing backup interface [ 319.106735][T14188] bond0: (slave bond_slave_1): Releasing backup interface [ 319.157818][T14188] team0: Port device team_slave_0 removed [ 319.209887][T14188] team0: Port device team_slave_1 removed [ 319.252693][T14188] team0: Port device netdevsim0 removed [ 319.668043][ T5513] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.006936][ T5513] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.046986][T14216] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2490'. [ 320.074221][T14218] Unsupported ieee802154 address type: 0 [ 320.173910][T14220] netlink: 'syz.4.2490': attribute type 5 has an invalid length. [ 320.203013][ T5513] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.240740][T14215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2492'. [ 320.255434][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.276313][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.285879][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.300458][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.310961][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 320.318800][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.438611][ T5513] bridge_slave_1: left allmulticast mode [ 320.449256][ T5513] bridge_slave_1: left promiscuous mode [ 320.458030][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.481646][ T5513] bridge_slave_0: left allmulticast mode [ 320.487942][ T5513] bridge_slave_0: left promiscuous mode [ 320.493930][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.973246][T14228] sctp: [Deprecated]: syz.3.2494 (pid 14228) Use of int in maxseg socket option. [ 320.973246][T14228] Use struct sctp_assoc_value instead [ 321.287271][ T5513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.315840][ T5513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.331864][ T5513] bond0 (unregistering): Released all slaves [ 321.375502][T14228] netlink: 'syz.3.2494': attribute type 64 has an invalid length. [ 321.385188][T14228] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 321.437581][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2496'. [ 321.465812][T14238] veth0_vlan: left promiscuous mode [ 321.465943][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.481873][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.490836][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.507509][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.538785][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 321.556305][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.659279][T14244] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 321.930604][T14255] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 321.947176][T14255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2500'. [ 322.063445][T14257] netlink: 'syz.4.2500': attribute type 10 has an invalid length. [ 322.182177][ T5513] hsr_slave_0: left promiscuous mode [ 322.206470][ T5513] hsr_slave_1: left promiscuous mode [ 322.212811][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.232106][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.246811][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.262266][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.273614][T14270] Unsupported ieee802154 address type: 0 [ 322.328110][ T5513] veth1_macvtap: left promiscuous mode [ 322.340477][ T5513] veth0_macvtap: left promiscuous mode [ 322.355467][ T5513] veth1_vlan: left promiscuous mode [ 322.380321][ T5513] veth0_vlan: left promiscuous mode [ 322.383126][ T5233] Bluetooth: hci1: command tx timeout [ 322.622043][T14282] netlink: 'syz.3.2505': attribute type 3 has an invalid length. [ 322.634641][T14282] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2505'. [ 323.556379][ T5513] team0 (unregistering): Port device team_slave_1 removed [ 323.640077][ T5513] team0 (unregistering): Port device team_slave_0 removed [ 323.660590][ T5233] Bluetooth: hci2: command tx timeout [ 324.238886][T14268] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2503'. [ 324.454656][ T5233] Bluetooth: hci1: command tx timeout [ 324.589395][T14221] chnl_net:caif_netlink_parms(): no params data found [ 324.632976][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2509'. [ 324.706834][T14241] chnl_net:caif_netlink_parms(): no params data found [ 324.944893][T14311] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 325.023914][T14322] Bluetooth: hci3: unsupported parameter 64512 [ 325.037635][T14311] bond1: entered promiscuous mode [ 325.044181][T14322] Bluetooth: hci3: invalid len left 3, exp >= 190 [ 325.121205][T14317] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 325.138123][T14317] bond1: (slave netdevsim0): Enslaving as an active interface with a down link [ 325.149150][T14221] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.176809][T14221] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.184087][T14221] bridge_slave_0: entered allmulticast mode [ 325.216036][T14221] bridge_slave_0: entered promiscuous mode [ 325.252219][T14221] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.282380][T14221] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.296584][T14221] bridge_slave_1: entered allmulticast mode [ 325.303913][T14221] bridge_slave_1: entered promiscuous mode [ 325.332079][T14241] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.347623][T14241] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.365949][T14241] bridge_slave_0: entered allmulticast mode [ 325.375693][T14241] bridge_slave_0: entered promiscuous mode [ 325.419712][T14333] netlink: 'syz.1.2515': attribute type 6 has an invalid length. [ 325.430495][T14241] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.464594][T14241] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.471905][T14241] bridge_slave_1: entered allmulticast mode [ 325.504290][T14241] bridge_slave_1: entered promiscuous mode [ 325.544579][T14221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.572971][T14221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.631285][T14241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.677884][T14241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.723336][ T5513] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.734865][ T5233] Bluetooth: hci2: command tx timeout [ 325.753958][T14221] team0: Port device team_slave_0 added [ 325.767536][T14221] team0: Port device team_slave_1 added [ 325.846640][ T5513] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.892106][T14221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.899837][T14221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.931855][T14221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.951089][T14241] team0: Port device team_slave_0 added [ 325.986665][ T5513] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.004872][T14221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.011839][T14221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.038945][T14221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.054259][T14241] team0: Port device team_slave_1 added [ 326.083939][ T5513] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.179306][T14241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.190806][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.225264][T14241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.257231][T14221] hsr_slave_0: entered promiscuous mode [ 326.263863][T14221] hsr_slave_1: entered promiscuous mode [ 326.270362][T14221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.278153][T14221] Cannot create hsr debugfs directory [ 326.285291][T14241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.292251][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.322187][T14241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.428790][T14241] hsr_slave_0: entered promiscuous mode [ 326.437540][T14241] hsr_slave_1: entered promiscuous mode [ 326.455781][T14241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.463687][T14241] Cannot create hsr debugfs directory [ 326.534836][ T5233] Bluetooth: hci1: command tx timeout [ 326.546449][ T5513] bridge_slave_1: left allmulticast mode [ 326.552128][ T5513] bridge_slave_1: left promiscuous mode [ 326.558890][ T5513] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.570222][ T5513] bridge_slave_0: left allmulticast mode [ 326.576536][ T5513] bridge_slave_0: left promiscuous mode [ 326.582279][ T5513] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.998435][ T5513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.011136][ T5513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.024016][ T5513] bond0 (unregistering): Released all slaves [ 327.415855][ T5513] hsr_slave_0: left promiscuous mode [ 327.426905][ T5513] hsr_slave_1: left promiscuous mode [ 327.436431][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.443870][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.452591][ T5513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.461348][ T5513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.492984][ T5513] veth1_macvtap: left promiscuous mode [ 327.498792][ T5513] veth0_macvtap: left promiscuous mode [ 327.504618][ T5513] veth1_vlan: left promiscuous mode [ 327.509958][ T5513] veth0_vlan: left promiscuous mode [ 327.815206][ T5233] Bluetooth: hci2: command tx timeout [ 328.136831][ T5513] team0 (unregistering): Port device team_slave_1 removed [ 328.181507][ T5513] team0 (unregistering): Port device team_slave_0 removed [ 328.623000][ T5233] Bluetooth: hci1: command tx timeout [ 329.227241][T14221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 329.243033][T14221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 329.270481][T14221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 329.299709][T14221] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 329.338095][T14241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 329.361835][T14241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 329.377835][T14241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 329.389373][T14241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 329.532623][T14221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.567180][T14221] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.586477][ T5317] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.593906][ T5317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.627954][ T5281] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.635140][ T5281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.699579][T14241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.734149][T14241] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.776128][ T5285] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.783289][ T5285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.808980][ T5285] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.816185][ T5285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.878848][T14241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.907306][ T5233] Bluetooth: hci2: command tx timeout [ 330.011043][T14221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.076033][T14221] veth0_vlan: entered promiscuous mode [ 330.102165][T14221] veth1_vlan: entered promiscuous mode [ 330.168593][T14221] veth0_macvtap: entered promiscuous mode [ 330.184256][T14221] veth1_macvtap: entered promiscuous mode [ 330.247425][T14221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.259360][T14241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.279847][T14221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.300102][T14221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.311753][T14221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.328264][T14221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.337857][T14221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.349708][T14221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.358525][T14221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.471381][T14241] veth0_vlan: entered promiscuous mode [ 330.503561][ T1069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.516121][ T1069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.571566][ T5510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.572278][T14241] veth1_vlan: entered promiscuous mode [ 330.579614][ T5510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.669434][T14241] veth0_macvtap: entered promiscuous mode [ 330.749654][T14241] veth1_macvtap: entered promiscuous mode [ 330.775437][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.799494][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.812483][T14241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.824754][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.835326][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.845538][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.856893][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.868553][T14241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.886673][T14241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.895721][T14241] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.909792][T14241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.919011][T14241] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.024250][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.033332][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.077228][ T5510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.086501][ T5510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.008328][ T5510] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.587196][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.602327][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.611553][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.623920][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.632115][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.643412][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.837351][T14347] chnl_net:caif_netlink_parms(): no params data found [ 333.934964][T14347] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.942500][T14347] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.950889][T14347] bridge_slave_0: entered allmulticast mode [ 333.961086][T14347] bridge_slave_0: entered promiscuous mode [ 333.969674][T14347] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.977628][T14347] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.986190][T14347] bridge_slave_1: entered allmulticast mode [ 333.993423][T14347] bridge_slave_1: entered promiscuous mode [ 334.043984][T14347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.058706][T14347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.141618][T14347] team0: Port device team_slave_0 added [ 334.163788][T14347] team0: Port device team_slave_1 added [ 334.229880][T14347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.244470][T14347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.281364][T14347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.309217][T14347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.324583][T14347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.363368][T14347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.398706][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.412355][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.420424][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.439677][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.447500][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.456320][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.479919][T14347] hsr_slave_0: entered promiscuous mode [ 334.488641][T14347] hsr_slave_1: entered promiscuous mode [ 334.496990][T14347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.505290][T14347] Cannot create hsr debugfs directory [ 334.851093][T14356] chnl_net:caif_netlink_parms(): no params data found [ 334.866978][ T5237] Bluetooth: hci3: command 0x0405 tx timeout [ 334.980033][T14356] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.987677][T14356] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.994959][T14356] bridge_slave_0: entered allmulticast mode [ 335.002299][T14356] bridge_slave_0: entered promiscuous mode [ 335.011285][T14356] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.021955][T14356] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.029281][T14356] bridge_slave_1: entered allmulticast mode [ 335.037012][T14356] bridge_slave_1: entered promiscuous mode [ 335.088790][T14356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.102771][T14356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.161701][T14356] team0: Port device team_slave_0 added [ 335.170732][T14356] team0: Port device team_slave_1 added [ 335.232471][ T5510] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.251317][T14356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.264921][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.292946][T14356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.307321][T14356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.314286][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.340962][T14356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.369523][ T5510] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.429507][T14356] hsr_slave_0: entered promiscuous mode [ 335.436345][T14356] hsr_slave_1: entered promiscuous mode [ 335.442644][T14356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.455562][T14356] Cannot create hsr debugfs directory [ 335.512220][ T5510] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.736159][ T5233] Bluetooth: hci1: command tx timeout [ 335.760512][ T5510] bridge_slave_1: left allmulticast mode [ 335.768575][ T5510] bridge_slave_1: left promiscuous mode [ 335.775163][ T5510] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.789258][ T5510] bridge_slave_0: left allmulticast mode [ 335.804306][ T5510] bridge_slave_0: left promiscuous mode [ 335.810302][ T5510] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.287527][ T5510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.300593][ T5510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.313412][ T5510] bond0 (unregistering): Released all slaves [ 336.534709][ T5233] Bluetooth: hci2: command tx timeout [ 336.643926][ T5510] hsr_slave_0: left promiscuous mode [ 336.651253][ T5510] hsr_slave_1: left promiscuous mode [ 336.670688][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.678258][ T5510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.687860][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.695635][ T5510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.728811][ T5510] veth1_macvtap: left promiscuous mode [ 336.734448][ T5510] veth0_macvtap: left promiscuous mode [ 336.740194][ T5510] veth1_vlan: left promiscuous mode [ 336.746777][ T5510] veth0_vlan: left promiscuous mode [ 337.297125][ T5510] team0 (unregistering): Port device team_slave_1 removed [ 337.341818][ T5510] team0 (unregistering): Port device team_slave_0 removed [ 337.826573][ T5233] Bluetooth: hci1: command tx timeout [ 338.084958][T14356] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.087685][T14369] atomic_op ffff8880456aa998 conn xmit_atomic 0000000000000000 [ 338.106239][T14372] atomic_op ffff88802ea10198 conn xmit_atomic 0000000000000000 [ 338.135650][T14372] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 338.163210][T14372] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2519'. [ 338.172673][T14369] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 338.248636][T14356] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.272070][T14369] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2518'. [ 338.306925][T14375] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2520'. [ 338.370767][T14356] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.445688][T14375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2520'. [ 338.505285][T14356] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.616671][ T5233] Bluetooth: hci2: command tx timeout [ 338.749527][ T5510] bridge_slave_1: left allmulticast mode [ 338.768632][ T5510] bridge_slave_1: left promiscuous mode [ 338.775034][ T5510] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.790334][ T5510] bridge_slave_0: left allmulticast mode [ 338.796181][ T5510] bridge_slave_0: left promiscuous mode [ 338.802064][ T5510] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.283579][ T5510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.301348][ T5510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.323748][ T5510] bond0 (unregistering): Released all slaves [ 339.642155][T14356] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.728785][T14356] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.740101][T14356] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 339.786509][T14356] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 339.847326][ T5510] hsr_slave_0: left promiscuous mode [ 339.866033][ T5510] hsr_slave_1: left promiscuous mode [ 339.874007][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.894832][ T5510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.896539][ T5233] Bluetooth: hci1: command tx timeout [ 339.926645][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.942837][ T5510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.981215][ T5510] veth1_macvtap: left promiscuous mode [ 339.987122][ T5510] veth0_macvtap: left promiscuous mode [ 339.993165][ T5510] veth1_vlan: left promiscuous mode [ 339.998921][ T5510] veth0_vlan: left promiscuous mode [ 340.694855][ T5233] Bluetooth: hci2: command tx timeout [ 341.007366][ T5510] team0 (unregistering): Port device team_slave_1 removed [ 341.062638][ T5510] team0 (unregistering): Port device team_slave_0 removed [ 341.628970][T14419] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 341.680630][T14347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 341.792787][T14347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 341.813842][T14347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 341.846780][T14347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 341.974534][ T5233] Bluetooth: hci1: command tx timeout [ 342.076569][T14435] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2534'. [ 342.116215][T14432] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2533'. [ 342.161600][T14432] Unsupported ieee802154 address type: 0 [ 342.356322][T14356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.419420][T14347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.449144][T14356] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.520650][ T5281] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.527879][ T5281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.558474][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.565680][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.607073][T14347] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.633919][T14447] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2538'. [ 342.681093][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.688311][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.724917][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.732113][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.777088][ T5233] Bluetooth: hci2: command tx timeout [ 342.967351][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2540'. [ 343.322068][T14356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.522836][T14356] veth0_vlan: entered promiscuous mode [ 343.580157][T14356] veth1_vlan: entered promiscuous mode [ 343.616173][T14347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.764386][T14356] veth0_macvtap: entered promiscuous mode [ 343.809816][T14356] veth1_macvtap: entered promiscuous mode [ 343.947376][T14347] veth0_vlan: entered promiscuous mode [ 343.960089][T14356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.978124][T14347] veth1_vlan: entered promiscuous mode [ 343.998822][T14356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.010309][T14356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.022332][T14356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.043237][T14356] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.068259][T14356] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.086552][T14356] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.098889][T14356] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.303203][T14498] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2547'. [ 344.349979][T14498] Unsupported ieee802154 address type: 0 [ 344.379374][T14347] veth0_macvtap: entered promiscuous mode [ 344.449509][T14347] veth1_macvtap: entered promiscuous mode [ 344.474504][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.482362][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.595779][ T134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.608108][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.624530][ T134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.644919][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.666943][T14347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.698573][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.740722][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.751792][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.771799][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.818429][T14347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.853371][T14510] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 344.867588][T14347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.890942][T14347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.914454][T14347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.923200][T14347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.407871][T14528] netlink: 'syz.4.2553': attribute type 16 has an invalid length. [ 345.425282][T14528] netlink: 'syz.4.2553': attribute type 17 has an invalid length. [ 345.449503][T14528] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2553'. [ 345.598551][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.629601][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.647650][T14532] openvswitch: netlink: Missing key (keys=40, expected=100) [ 345.698356][T14532] netlink: 'syz.1.2554': attribute type 1 has an invalid length. [ 345.722676][ T5510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.741782][ T5510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.752785][T14532] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.2554'. [ 345.770838][T14532] netlink: 'syz.1.2554': attribute type 1 has an invalid length. [ 345.806105][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2554'. [ 346.069834][T14543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2558'. [ 346.105861][T14543] Unsupported ieee802154 address type: 0 [ 346.371329][T14547] ebtables: ebtables: counters copy to user failed while replacing table [ 346.432899][T14565] [ 346.435271][T14565] ====================================================== [ 346.442382][T14565] WARNING: possible circular locking dependency detected [ 346.449406][T14565] 6.11.0-rc1-syzkaller-00305-g91d516d4de48 #0 Not tainted [ 346.456521][T14565] ------------------------------------------------------ [ 346.463546][T14565] syz.3.2562/14565 is trying to acquire lock: [ 346.469619][T14565] ffff888023092768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_netdev_notifier_call+0x308/0x1490 [ 346.480271][T14565] [ 346.480271][T14565] but task is already holding lock: [ 346.487643][T14565] ffff888066424d40 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xad/0x2760 [ 346.497419][T14565] [ 346.497419][T14565] which lock already depends on the new lock. [ 346.497419][T14565] [ 346.507816][T14565] [ 346.507816][T14565] the existing dependency chain (in reverse order) is: [ 346.516819][T14565] [ 346.516819][T14565] -> #1 (team->team_lock_key#3){+.+.}-{3:3}: [ 346.524987][T14565] lock_acquire+0x1ed/0x550 [ 346.530010][T14565] __mutex_lock+0x136/0xd70 [ 346.535038][T14565] team_port_change_check+0x51/0x1e0 [ 346.540842][T14565] team_device_event+0x161/0x5b0 [ 346.546293][T14565] notifier_call_chain+0x19f/0x3e0 [ 346.551919][T14565] dev_close_many+0x33c/0x4c0 [ 346.557108][T14565] unregister_netdevice_many_notify+0x50b/0x1c40 [ 346.564037][T14565] macvlan_device_event+0x7e0/0x870 [ 346.569753][T14565] notifier_call_chain+0x19f/0x3e0 [ 346.575379][T14565] unregister_netdevice_many_notify+0xd81/0x1c40 [ 346.582226][T14565] unregister_netdevice_queue+0x303/0x370 [ 346.588465][T14565] _cfg80211_unregister_wdev+0x162/0x560 [ 346.594614][T14565] ieee80211_if_remove+0x25d/0x3a0 [ 346.600247][T14565] ieee80211_del_iface+0x19/0x30 [ 346.605697][T14565] cfg80211_remove_virtual_intf+0x23f/0x410 [ 346.612106][T14565] genl_rcv_msg+0xb14/0xec0 [ 346.617127][T14565] netlink_rcv_skb+0x1e3/0x430 [ 346.622418][T14565] genl_rcv+0x28/0x40 [ 346.626910][T14565] netlink_unicast+0x7f0/0x990 [ 346.632186][T14565] netlink_sendmsg+0x8e4/0xcb0 [ 346.637461][T14565] __sock_sendmsg+0x221/0x270 [ 346.642653][T14565] ____sys_sendmsg+0x525/0x7d0 [ 346.647926][T14565] __sys_sendmsg+0x2b0/0x3a0 [ 346.653025][T14565] do_syscall_64+0xf3/0x230 [ 346.658041][T14565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.664454][T14565] [ 346.664454][T14565] -> #0 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 346.672182][T14565] validate_chain+0x18e0/0x5900 [ 346.677544][T14565] __lock_acquire+0x137a/0x2040 [ 346.682915][T14565] lock_acquire+0x1ed/0x550 [ 346.687929][T14565] __mutex_lock+0x136/0xd70 [ 346.692948][T14565] cfg80211_netdev_notifier_call+0x308/0x1490 [ 346.699528][T14565] notifier_call_chain+0x19f/0x3e0 [ 346.705163][T14565] dev_open+0x13a/0x1b0 [ 346.709837][T14565] team_add_slave+0x9c8/0x2760 [ 346.715111][T14565] do_setlink+0xe70/0x41f0 [ 346.720068][T14565] rtnl_newlink+0x180d/0x20a0 [ 346.725255][T14565] rtnetlink_rcv_msg+0x73f/0xcf0 [ 346.730704][T14565] netlink_rcv_skb+0x1e3/0x430 [ 346.735980][T14565] netlink_unicast+0x7f0/0x990 [ 346.741253][T14565] netlink_sendmsg+0x8e4/0xcb0 [ 346.746530][T14565] __sock_sendmsg+0x221/0x270 [ 346.751720][T14565] ____sys_sendmsg+0x525/0x7d0 [ 346.756991][T14565] __sys_sendmsg+0x2b0/0x3a0 [ 346.762090][T14565] do_syscall_64+0xf3/0x230 [ 346.767111][T14565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.773525][T14565] [ 346.773525][T14565] other info that might help us debug this: [ 346.773525][T14565] [ 346.783741][T14565] Possible unsafe locking scenario: [ 346.783741][T14565] [ 346.791262][T14565] CPU0 CPU1 [ 346.796615][T14565] ---- ---- [ 346.801985][T14565] lock(team->team_lock_key#3); [ 346.806920][T14565] lock(&rdev->wiphy.mtx); [ 346.813933][T14565] lock(team->team_lock_key#3); [ 346.821385][T14565] lock(&rdev->wiphy.mtx); [ 346.825881][T14565] [ 346.825881][T14565] *** DEADLOCK *** [ 346.825881][T14565] [ 346.834010][T14565] 2 locks held by syz.3.2562/14565: [ 346.839191][T14565] #0: ffffffff8fc801c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 346.848590][T14565] #1: ffff888066424d40 (team->team_lock_key#3){+.+.}-{3:3}, at: team_add_slave+0xad/0x2760 [ 346.858682][T14565] [ 346.858682][T14565] stack backtrace: [ 346.864649][T14565] CPU: 0 UID: 0 PID: 14565 Comm: syz.3.2562 Not tainted 6.11.0-rc1-syzkaller-00305-g91d516d4de48 #0 [ 346.875400][T14565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 346.885440][T14565] Call Trace: [ 346.888795][T14565] [ 346.891719][T14565] dump_stack_lvl+0x241/0x360 [ 346.896393][T14565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.901608][T14565] ? print_circular_bug+0x130/0x1a0 [ 346.906822][T14565] check_noncircular+0x36a/0x4a0 [ 346.911765][T14565] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 346.917921][T14565] ? __pfx_check_noncircular+0x10/0x10 [ 346.923371][T14565] ? lockdep_lock+0x123/0x2b0 [ 346.928051][T14565] ? _find_first_zero_bit+0xd3/0x100 [ 346.933343][T14565] validate_chain+0x18e0/0x5900 [ 346.938189][T14565] ? mark_lock+0x9a/0x350 [ 346.942520][T14565] ? __pfx_stack_trace_save+0x10/0x10 [ 346.947893][T14565] ? __pfx_validate_chain+0x10/0x10 [ 346.953083][T14565] ? mark_lock+0x9a/0x350 [ 346.957409][T14565] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 346.963394][T14565] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 346.969722][T14565] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 346.975607][T14565] ? lockdep_hardirqs_on+0x99/0x150 [ 346.980801][T14565] ? mark_lock+0x9a/0x350 [ 346.985134][T14565] __lock_acquire+0x137a/0x2040 [ 346.989987][T14565] lock_acquire+0x1ed/0x550 [ 346.994484][T14565] ? cfg80211_netdev_notifier_call+0x308/0x1490 [ 347.000716][T14565] ? __pfx_lock_acquire+0x10/0x10 [ 347.005738][T14565] ? __pfx___might_resched+0x10/0x10 [ 347.011016][T14565] ? rtmsg_fib+0x3a3/0x630 [ 347.015437][T14565] __mutex_lock+0x136/0xd70 [ 347.019933][T14565] ? cfg80211_netdev_notifier_call+0x308/0x1490 [ 347.026180][T14565] ? __lock_acquire+0x137a/0x2040 [ 347.031199][T14565] ? cfg80211_netdev_notifier_call+0x308/0x1490 [ 347.037435][T14565] ? __pfx___mutex_lock+0x10/0x10 [ 347.042459][T14565] cfg80211_netdev_notifier_call+0x308/0x1490 [ 347.048522][T14565] ? __pfx_lock_release+0x10/0x10 [ 347.053557][T14565] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 347.060055][T14565] ? __pfx_arp_key_eq+0x10/0x10 [ 347.064899][T14565] ? neigh_lookup+0x417/0x500 [ 347.069577][T14565] ? __pfx_fib_magic+0x10/0x10 [ 347.074328][T14565] ? neigh_lookup+0xb1/0x500 [ 347.078906][T14565] ? __pfx_neigh_lookup+0x10/0x10 [ 347.083918][T14565] ? fib_rebalance+0x8e/0xed0 [ 347.088592][T14565] ? dev_get_flags+0x147/0x1d0 [ 347.093356][T14565] ? fib_sync_up+0x74b/0x7d0 [ 347.097967][T14565] ? igmp_netdev_event+0x7c/0x770 [ 347.102984][T14565] notifier_call_chain+0x19f/0x3e0 [ 347.108095][T14565] dev_open+0x13a/0x1b0 [ 347.112245][T14565] ? __pfx_dev_open+0x10/0x10 [ 347.116912][T14565] ? team_add_slave+0x69e/0x2760 [ 347.121842][T14565] ? team_add_slave+0x69e/0x2760 [ 347.126768][T14565] ? team_add_slave+0x8b5/0x2760 [ 347.131704][T14565] team_add_slave+0x9c8/0x2760 [ 347.136459][T14565] ? deref_stack_reg+0x1c7/0x260 [ 347.141397][T14565] ? __pfx_team_add_slave+0x10/0x10 [ 347.146589][T14565] ? 0xffffffffa00007dc [ 347.150728][T14565] ? 0xffffffffa00007dc [ 347.154870][T14565] ? is_bpf_text_address+0x285/0x2a0 [ 347.160150][T14565] ? is_bpf_text_address+0x26/0x2a0 [ 347.165339][T14565] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 347.171486][T14565] ? kernel_text_address+0xa7/0xe0 [ 347.176585][T14565] ? nla_strscpy+0x100/0x180 [ 347.181165][T14565] ? mutex_is_locked+0x12/0x50 [ 347.185919][T14565] do_setlink+0xe70/0x41f0 [ 347.190330][T14565] ? stack_trace_save+0x118/0x1d0 [ 347.195347][T14565] ? __pfx_stack_trace_save+0x10/0x10 [ 347.200713][T14565] ? __pfx_do_setlink+0x10/0x10 [ 347.205556][T14565] ? __nla_validate_parse+0x26ce/0x3090 [ 347.211092][T14565] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 347.216629][T14565] ? rtnl_newlink+0xf2/0x20a0 [ 347.221301][T14565] ? __pfx___nla_validate_parse+0x10/0x10 [ 347.227126][T14565] ? nla_strscpy+0x100/0x180 [ 347.231707][T14565] ? full_name_hash+0x93/0xe0 [ 347.236375][T14565] ? validate_linkmsg+0x71e/0x900 [ 347.241403][T14565] rtnl_newlink+0x180d/0x20a0 [ 347.246078][T14565] ? rtnl_newlink+0x4e1/0x20a0 [ 347.250839][T14565] ? __pfx_rtnl_newlink+0x10/0x10 [ 347.255852][T14565] ? __pfx___mutex_trylock_common+0x10/0x10 [ 347.261745][T14565] ? __pfx_lock_release+0x10/0x10 [ 347.266780][T14565] ? __pfx_rtnl_newlink+0x10/0x10 [ 347.271793][T14565] rtnetlink_rcv_msg+0x73f/0xcf0 [ 347.276725][T14565] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 347.281834][T14565] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 347.287288][T14565] ? ref_tracker_free+0x643/0x7e0 [ 347.292303][T14565] netlink_rcv_skb+0x1e3/0x430 [ 347.297061][T14565] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 347.302507][T14565] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.307794][T14565] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.312986][T14565] netlink_unicast+0x7f0/0x990 [ 347.317744][T14565] ? __pfx_netlink_unicast+0x10/0x10 [ 347.323021][T14565] ? __virt_addr_valid+0x183/0x530 [ 347.328122][T14565] ? __check_object_size+0x49c/0x900 [ 347.333391][T14565] ? bpf_lsm_netlink_send+0x9/0x10 [ 347.338500][T14565] netlink_sendmsg+0x8e4/0xcb0 [ 347.343269][T14565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.348551][T14565] ? __import_iovec+0x536/0x820 [ 347.353397][T14565] ? aa_sock_msg_perm+0x91/0x160 [ 347.358326][T14565] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 347.363605][T14565] ? security_socket_sendmsg+0x87/0xb0 [ 347.369063][T14565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.374338][T14565] __sock_sendmsg+0x221/0x270 [ 347.379103][T14565] ____sys_sendmsg+0x525/0x7d0 [ 347.383860][T14565] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.389140][T14565] __sys_sendmsg+0x2b0/0x3a0 [ 347.393720][T14565] ? __pfx___sys_sendmsg+0x10/0x10 [ 347.398854][T14565] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 347.405181][T14565] ? do_syscall_64+0x100/0x230 [ 347.409938][T14565] ? do_syscall_64+0xb6/0x230 [ 347.414620][T14565] do_syscall_64+0xf3/0x230 [ 347.419120][T14565] ? clear_bhb_loop+0x35/0x90 [ 347.423793][T14565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.429681][T14565] RIP: 0033:0x7f82861779f9 [ 347.434086][T14565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.453683][T14565] RSP: 002b:00007f828701d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.462089][T14565] RAX: ffffffffffffffda RBX: 00007f8286305f80 RCX: 00007f82861779f9 [ 347.470085][T14565] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 347.478046][T14565] RBP: 00007f82861e58ee R08: 0000000000000000 R09: 0000000000000000 [ 347.486008][T14565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.493964][T14565] R13: 0000000000000000 R14: 00007f8286305f80 R15: 00007fff03de81b8 [ 347.501939][T14565] [ 347.516895][T14565] team0: Port device virt_wifi0 added [ 347.919471][ T5510] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.875272][ T5510] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.932418][ T5510] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.000341][ T5510] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.066694][ T5510] bridge_slave_1: left allmulticast mode [ 349.072365][ T5510] bridge_slave_1: left promiscuous mode [ 349.079149][ T5510] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.089735][ T5510] bridge_slave_0: left allmulticast mode [ 349.096181][ T5510] bridge_slave_0: left promiscuous mode [ 349.101931][ T5510] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.252421][ T5510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.263759][ T5510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.274375][ T5510] bond0 (unregistering): Released all slaves [ 349.474066][ T5510] hsr_slave_0: left promiscuous mode [ 349.480146][ T5510] hsr_slave_1: left promiscuous mode [ 349.487889][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.495665][ T5510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.503574][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.516298][ T5510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.526719][ T5510] veth1_macvtap: left promiscuous mode [ 349.532262][ T5510] veth0_macvtap: left promiscuous mode [ 349.537981][ T5510] veth1_vlan: left promiscuous mode [ 349.543275][ T5510] veth0_vlan: left promiscuous mode [ 349.820100][ T5510] team0 (unregistering): Port device team_slave_1 removed [ 349.851496][ T5510] team0 (unregistering): Port device team_slave_0 removed [ 350.321599][ T5510] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.379754][ T5510] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.422345][ T5510] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.499317][ T5510] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.562755][ T5510] bridge_slave_1: left allmulticast mode [ 350.568679][ T5510] bridge_slave_1: left promiscuous mode [ 350.574433][ T5510] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.583381][ T5510] bridge_slave_0: left allmulticast mode [ 350.589374][ T5510] bridge_slave_0: left promiscuous mode [ 350.595317][ T5510] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.763480][ T5510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.776257][ T5510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.787331][ T5510] bond0 (unregistering): Released all slaves [ 351.013286][ T5510] hsr_slave_0: left promiscuous mode [ 351.019273][ T5510] hsr_slave_1: left promiscuous mode [ 351.026954][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.034371][ T5510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.042557][ T5510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.050101][ T5510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.062797][ T5510] veth1_macvtap: left promiscuous mode [ 351.068421][ T5510] veth0_macvtap: left promiscuous mode [ 351.074025][ T5510] veth1_vlan: left promiscuous mode [ 351.079503][ T5510] veth0_vlan: left promiscuous mode [ 351.344882][ T5510] team0 (unregistering): Port device team_slave_1 removed [ 351.383114][ T5510] team0 (unregistering): Port device team_slave_0 removed