last executing test programs: 50.912393796s ago: executing program 2 (id=461): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff0000"], 0x48) r2 = socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@tcp6=r2, 0x2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000000000000000000d03000000000000000000000300000000020000000300000000000002000000008000005f00"/78], 0x0, 0x4e, 0x0, 0x4, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x44, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/25, 0x19}, {&(0x7f00000002c0)=""/174, 0xae}, {&(0x7f0000000380)=""/2, 0x2}], 0x3, 0x7ff, 0xa46) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r5, 0x3) bind$inet(r4, &(0x7f0000000180)={0x2, 0xc620, @local}, 0x10) listen(r4, 0x3) close(0x3) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000140)=0xa5b, 0x12) r10 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) readv(r12, &(0x7f0000000700)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x6, 0xa0000002, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0xa, 0x45, 0x0, 0x5, 0x5, 0xba44, 0x3, 0x60b, 0x80000000, 0x5, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xfffffff8, 0x5, 0x8, 0x1a0055ea, 0x1, 0x1, 0xffff4226, 0x7, 0x0, 0x5, 0x101, 0x4, 0x1, 0x1, 0x800, 0x6, 0x9, 0x9, 0x2, 0x8, 0x2f, 0xfffffff8, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x5, 0x0, 0x6, 0x2, 0x5, 0x5, 0x2, 0x9b58, 0x4, 0xb, 0x4be, 0x6, 0x91, 0xa, 0xca6, 0x9, 0xfffeffff, 0x38, 0x4, 0x0, 0x7, 0x44d, 0x7, 0x200, 0x8008, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x9, 0x6, 0x9, 0x3, 0x7, 0x4, 0x6, 0x7, 0x8002, 0x0, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x8, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd5c, 0x4, 0x422dd3f4, 0x4, 0x8, 0x2, 0x8, 0x10000, 0xea, 0x0, 0x45ba, 0x9, 0x864b, 0x0, 0x0, 0x9, 0x1, 0x7, 0x81, 0x3, 0x800, 0xb, 0xffffff80, 0x43, 0xc22, 0x1, 0x6, 0x9, 0x9, 0x7fffffff, 0x4, 0xfff, 0x6, 0x0, 0x7c1, 0x136, 0x6, 0x5, 0x4, 0x3ff, 0x4, 0xb, 0x2, 0x10001, 0x0, 0x5, 0x4, 0x400, 0x101, 0xffffffff, 0x1b, 0xd589, 0xffffff81, 0x7ff, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0xffffffff, 0xfffffffe, 0x0, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0x2, 0x8, 0x28a6a52, 0x1ff, 0x7, 0x7fff, 0x9, 0x2e4c20b9, 0xb, 0x4, 0x9, 0x7, 0x4, 0x8, 0x3, 0x6, 0x8, 0x3, 0x7, 0x4, 0x3, 0x8, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff01, 0x894, 0x7, 0xfb3, 0x6, 0x6, 0x2, 0x6, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000000, 0x7, 0x656, 0x8, 0x80000001, 0x384, 0x9, 0x58a, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0x7, 0x0, 0x6, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x3ff, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) 50.2240971s ago: executing program 2 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x107}]}], {0x14}}, 0x64}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000f80)={'macvlan0\x00', 0x52c4}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000e00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000006800010028bd7045fedbdf250a0004000400ecff070001"], 0x2c}}, 0x0) 40.885985019s ago: executing program 2 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x107}]}], {0x14}}, 0x64}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000f80)={'macvlan0\x00', 0x52c4}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000e00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000006800010028bd7045fedbdf250a0004000400ecff070001"], 0x2c}}, 0x0) 26.903747464s ago: executing program 2 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x107}]}], {0x14}}, 0x64}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000f80)={'macvlan0\x00', 0x52c4}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000e00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000006800010028bd7045fedbdf250a0004000400ecff070001"], 0x2c}}, 0x0) 18.666448998s ago: executing program 2 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x107}]}], {0x14}}, 0x64}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000f80)={'macvlan0\x00', 0x52c4}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000e00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000006800010028bd7045fedbdf250a0004000400ecff070001"], 0x2c}}, 0x0) 7.656966979s ago: executing program 2 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x107}]}], {0x14}}, 0x64}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000f80)={'macvlan0\x00', 0x52c4}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000e00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000006800010028bd7045fedbdf250a0004000400ecff070001"], 0x2c}}, 0x0) 6.246127243s ago: executing program 4 (id=771): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="5124d69420e12829a5371a2132b8a7561808000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.087402434s ago: executing program 4 (id=773): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f0000001d80)=""/3, &(0x7f0000000c80)=0x3) tee(r0, r0, 0x2341, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000002684c2d8eb8cac98930fa6a893ca44c0f64c07a87eb7b05f56ca6c70cb3a0eb328a15fe96a88235155e6d64bd434f641ddf9db2245e47e5904453577895dd81d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002a80), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x2, &(0x7f0000000400)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x0, 0x0, 0xf6, 0x0, &(0x7f0000000300)=""/246, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000080)) sendmsg$AUDIT_GET(r6, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3e8, 0x400, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3ffc}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x25, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r7) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002b027000ffdbdf25210000000a0001007770616e31000000050020000000000009001f0070687931000000000a0001007770616e330000000500200081"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 5.928321137s ago: executing program 1 (id=774): getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xfffb, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000180)={r0, 0x78, "0ac95b2f2561bd9d3b5edbdd43655e9e625946556d6cc2bd05a6f52146f878558c2c96259b2c457489f622df57ebb7058ceeff123d1a8074f3cc4e3c618369476d0d4d57c1854239f89acc4ab499ab2366695a714fa1c5a5694fd2dfcae903456980f469b53f20c3391e144b0437ace5a2be1db0e9fd9ab4"}, &(0x7f0000000200)=0x80) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x92c01ab, &(0x7f0000000080)=[{&(0x7f0000000980)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r0, @in6={{0xa, 0x4e22, 0x8, @local, 0x3}}, 0x1, 0xff17, 0x64, 0x0, 0x3a, 0x10, 0x7f}, 0x9c) 5.387920686s ago: executing program 1 (id=777): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, 0x0) preadv(r2, &(0x7f0000000200), 0x1, 0x2, 0x9) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x32, 0x0) r4 = socket(0x2a, 0x2, 0x3fd) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x3b, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x4, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000000680001000100007f0000017f00000100186371ae9b1c03"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.762442606s ago: executing program 4 (id=782): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) accept4(r0, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000040)=0x80, 0x80000) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x88, &(0x7f0000000200), &(0x7f0000000280)=0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = epoll_create1(0x80000) r10 = socket(0x40000000015, 0x805, 0x0) epoll_create1(0x0) getsockopt(r10, 0x114, 0x2718, 0x0, &(0x7f0000000200)) ioctl$sock_inet_tcp_SIOCINQ(r9, 0x541b, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="3dc7183e8a0d62e0b2bed94bda99373e687e2567fe866a853874dbc0cc87a20e2d9d0ba63828afdda62c05f1d4b78fab84a3009e8ec1fc0b7aa3156f00c7da61b2ceecb41a9c59392f2fd5"], 0x4c}, 0x1, 0xba01}, 0x0) 4.119368216s ago: executing program 4 (id=786): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000015000100fdfffffffcdbdf2502000000", @ANYRES32=r1, @ANYBLOB="080002007b01010108000100ac1414bb14"], 0x3c}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="c235535a17ac64791bbe00309033", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000700850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x4000044) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) 3.132726303s ago: executing program 4 (id=788): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3a840f467ff1c887c88d660bcd7d28de1192ddd029dd8052a71c27b9956d46a82497c3acf280f9e31c8e7d2b3dedb429492fb6170f8709e5250615e8b25ed713b4326e8adc77fcae290936bb69f452e5b4ca1ed9b0e0d658d0c7f6f365a05b51797c61e99b69be2f784c1b509f3ca55c34d2be83dcbe3bd3bfb2cce51fbcf08361797ead0a8e9e9f8f60f8804b3da1cb9fa6564edd03b7", @ANYRESHEX=r0, @ANYRES64=r2, @ANYRESHEX=r0, @ANYRES8=r1], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4008081) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a05000000290000000000000000801400000011000100ffffffff000000000000000a"], 0x3c}, 0x1, 0x1200}, 0x0) 3.040045638s ago: executing program 4 (id=789): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r8, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r8], 0x40c}}, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) ppoll(&(0x7f0000000500)=[{r10}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 2.459716289s ago: executing program 3 (id=792): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)='7', 0x1}], 0x1, 0x0) (async) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)='7', 0x1}], 0x1, 0x0) vmsplice(r3, &(0x7f0000001500)=[{&(0x7f0000000180)="db", 0x1}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x138, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14d, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) listen(r0, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="07ff010000000000000300016106060000000000009adf0300ac1414e5e190599f8a1d7a8bb4cd825528d7ef1b09250d2d698d95ad82267d83b25ee9750a9d622c08fd24148100226163d554806c0b2fa01303fc5f3cd8b6cd5535ac7ec527d7436bda6637b75ff68f199770ea9295c8c193bb4e2930214a6998dd85153ad25b88f24926230acf62ba01441e"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x4, &(0x7f0000000000)=0xfffff493, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x20048881, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmmsg$inet6(r9, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f419132b", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="37b41d", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="f31394729a8350d51cb91b01a0e0", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="ad1b291f5e6edcd70a290f03e0ed", 0xe}, {&(0x7f0000000480)="ed8aceec79495e3f244871beba42470dff6f698633f4722e1b3b68855f25191bd55941cae77c10c95e58044531e018b549e56d4ff039fa4f27f4c06506eb69f27c61fc13761a94a0ab1c7db0039bf37a8fba26bb708cfd67eb12bf134af6f672779888bd3428c6080579ac633f57882dd8cbf0b6a27492ba95655d51e9702e5157d84f342b393af37bfd743f41937f704575c3a9bdba8883f8b07aac25f9f379453a1f910e6ef7b1b20574dfaf1712cd871a19b751471037ed48686c9e30dcdae1cc0e57121ef0c49b6814f725f87e820a679cdba4", 0xd5}, {&(0x7f0000000580)="ba424a93bf3b5f7977c8653d13a20a935f34467e5de669a2c7a71d17797fbab0b23a7b1d9b11961e9a7f92571d5763925933ad3a7e792086df1114db9274b7a61a64ab249709e6fd97f80a57d711b1057d53e2f27fb1d581cb", 0x59}], 0x3, &(0x7f0000000700)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r10}}}, @rthdrdstopts={{0xc8, 0x29, 0x37, {0x33, 0x15, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x50, {0x1, 0x12, 0x2, 0x9, [0xff, 0x2, 0x8, 0x5800000000000000, 0x2, 0x6, 0x1000, 0x5, 0x2]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0xf, 0x6, [0x8001, 0x9, 0x5, 0xddbd, 0x7f, 0x9]}}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x87, 0x0, '\x00', [@ra={0x5, 0x2, 0x40}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2078}}, @rthdr={{0xa8, 0x29, 0x39, {0x5e, 0x12, 0x0, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, @mcast1, @local, @private0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @private1]}}}], 0x1d0}}], 0x4, 0x4000001) (async) sendmmsg$inet6(r9, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f419132b", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="37b41d", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="f31394729a8350d51cb91b01a0e0", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="ad1b291f5e6edcd70a290f03e0ed", 0xe}, {&(0x7f0000000480)="ed8aceec79495e3f244871beba42470dff6f698633f4722e1b3b68855f25191bd55941cae77c10c95e58044531e018b549e56d4ff039fa4f27f4c06506eb69f27c61fc13761a94a0ab1c7db0039bf37a8fba26bb708cfd67eb12bf134af6f672779888bd3428c6080579ac633f57882dd8cbf0b6a27492ba95655d51e9702e5157d84f342b393af37bfd743f41937f704575c3a9bdba8883f8b07aac25f9f379453a1f910e6ef7b1b20574dfaf1712cd871a19b751471037ed48686c9e30dcdae1cc0e57121ef0c49b6814f725f87e820a679cdba4", 0xd5}, {&(0x7f0000000580)="ba424a93bf3b5f7977c8653d13a20a935f34467e5de669a2c7a71d17797fbab0b23a7b1d9b11961e9a7f92571d5763925933ad3a7e792086df1114db9274b7a61a64ab249709e6fd97f80a57d711b1057d53e2f27fb1d581cb", 0x59}], 0x3, &(0x7f0000000700)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r10}}}, @rthdrdstopts={{0xc8, 0x29, 0x37, {0x33, 0x15, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x50, {0x1, 0x12, 0x2, 0x9, [0xff, 0x2, 0x8, 0x5800000000000000, 0x2, 0x6, 0x1000, 0x5, 0x2]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0xf, 0x6, [0x8001, 0x9, 0x5, 0xddbd, 0x7f, 0x9]}}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x87, 0x0, '\x00', [@ra={0x5, 0x2, 0x40}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2078}}, @rthdr={{0xa8, 0x29, 0x39, {0x5e, 0x12, 0x0, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, @mcast1, @local, @private0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @private1]}}}], 0x1d0}}], 0x4, 0x4000001) syz_emit_ethernet(0xcd, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000020800471700bf00660000670190780a010102ac1414aa94047dbb940401000b01907800060000460c000600650005040c0400740101007f000001891fe57f000001ac1414aa000000007f00000164010102e00000027f000001440c4d936401010200000006890b056401010000000000863b00000001060200034b05072351daba6c060c32590a112f58e8179b91060356070b0da53affca23b032d20508d56ec24d3b1001058905e407020702890bfeac1414aae00000028606ffffffff4c4066"], 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000240)=@ethtool_cmd={0x2e, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0xfd, 0x0, 0xfc, 0x9, 0x1000000, 0x401, 0x2, 0x0, 0x4, 0x40000045, [0x3, 0x4]}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r13, 0x8b2c, &(0x7f0000000040)) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002cbd700000000000010000001c000180060001000200000008000300ac14141c0800060003002fda78c9c9ccc7690000"], 0x30}, 0x1, 0xff07}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002cbd700000000000010000001c000180060001000200000008000300ac14141c0800060003002fda78c9c9ccc7690000"], 0x30}, 0x1, 0xff07}, 0x0) 2.290635884s ago: executing program 1 (id=793): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x24}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) 2.151564734s ago: executing program 3 (id=794): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x34, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5396ebcfacd993b0}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac14", @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x4000) 1.898331494s ago: executing program 3 (id=795): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, &(0x7f00000000c0)="c6c0e61de355f2948c0aebf7bd5283cf6bdf0d294d768621850503b4a11456124a351a0d43dce938052b5039724283d4f074e4aabae356fc0fedb3a3e6691dc7352d841b6e6e87a326d138667cae48e8fc2941cb956dcfa31ac8d0afaaf634194e881b59c8b1070d445cbed5cae28d3156a89bf96373f12343a554ebac7577f5186409b7fec7fc2669806fa61335541d", 0x90, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000300)={&(0x7f0000000200)=@x25={0x9, @remote}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, &(0x7f00000002c0)=""/22, 0x16}, 0x40010041) (async) recvmsg(r1, &(0x7f0000000300)={&(0x7f0000000200)=@x25={0x9, @remote}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, &(0x7f00000002c0)=""/22, 0x16}, 0x40010041) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x2, 0xfffffffffffffff9, 0xac}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x42051}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x42051}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000880)={'syztnl2\x00', &(0x7f0000000800)={'ip6tnl0\x00', r2, 0x4, 0x7, 0x3, 0x5, 0x39, @mcast1, @mcast1, 0x8000, 0x80, 0x1, 0x3}}) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000004c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000500)="51e4dbb6b7c31f51d10b91b520e5605c8940b4a3c295108ad1e894fee9ef71c15dbe5de640f7632e1f8c2f980fc82cd5b50f15d8263ef97c0feff9", 0x3b}, {&(0x7f0000000540)="f2fe1da90e2c658608f1bfd26cbe6d410458002964d2d1ff5dbf5ed71479f74e21d0c2b8685d51539441826d66f3647f6325ff5b3c12251749853d3f9c5683493a8e33680fa4b0f2694a1e9e5573d575cf82e7fb0e91ce5e930fa3fd81ca0e02d5b6a6be325b139591fd063e6a2b12031b75", 0x72}, {&(0x7f00000005c0)="1ea888a37d18b6cbbf8a346a38fc50fa7e3e64bfc3c134801a3c3404b52a2489d21565a531d423810c25a2628110b60c56010475feeb5157519a9e3b1d48b8fd001794e8ab1f07b14797c3bf1ede4d1b02b9f3c31fa9d36ade169bdb869d01613d90cd102170356ea7e24f587f138ea7fd40384c97e26ffe01edd656f08ed0418dae4aeb6a618fa3c8c8daecd03107c6ff", 0x91}, {&(0x7f0000000680)="65da8e7671267bcca79fad0712f8c6838333c9667542f74c000fa08497c34404fc1e6dc8939b0dcde9dd9d454fafa5c6ca3d2bf9ac0cc1727f02b0b1c16ead5be9a7af38cea45770bd6d9c25e75fd40f7fb8e4c54e357c8c20f4d2cbf19b1b471b8d1be51eaf8a6693792759b34016f56131", 0x72}, {&(0x7f0000000700)="efeb4e22ca3089195caccbbc67b6386b384067aae725e7e4163d8bd6a824dac7faf7997aa9bf286d693a467ef1af22771c0f8b9a2e127d993e7d466a1870dd0d62dfb4f369f7088fde8199b8c1e88130f12faff402fd3c601e77a9a995e8fb5c", 0x60}], 0x5, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @dev={0xac, 0x14, 0x14, 0x40}}}}], 0x20}, 0x8080) (async) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000004c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000500)="51e4dbb6b7c31f51d10b91b520e5605c8940b4a3c295108ad1e894fee9ef71c15dbe5de640f7632e1f8c2f980fc82cd5b50f15d8263ef97c0feff9", 0x3b}, {&(0x7f0000000540)="f2fe1da90e2c658608f1bfd26cbe6d410458002964d2d1ff5dbf5ed71479f74e21d0c2b8685d51539441826d66f3647f6325ff5b3c12251749853d3f9c5683493a8e33680fa4b0f2694a1e9e5573d575cf82e7fb0e91ce5e930fa3fd81ca0e02d5b6a6be325b139591fd063e6a2b12031b75", 0x72}, {&(0x7f00000005c0)="1ea888a37d18b6cbbf8a346a38fc50fa7e3e64bfc3c134801a3c3404b52a2489d21565a531d423810c25a2628110b60c56010475feeb5157519a9e3b1d48b8fd001794e8ab1f07b14797c3bf1ede4d1b02b9f3c31fa9d36ade169bdb869d01613d90cd102170356ea7e24f587f138ea7fd40384c97e26ffe01edd656f08ed0418dae4aeb6a618fa3c8c8daecd03107c6ff", 0x91}, {&(0x7f0000000680)="65da8e7671267bcca79fad0712f8c6838333c9667542f74c000fa08497c34404fc1e6dc8939b0dcde9dd9d454fafa5c6ca3d2bf9ac0cc1727f02b0b1c16ead5be9a7af38cea45770bd6d9c25e75fd40f7fb8e4c54e357c8c20f4d2cbf19b1b471b8d1be51eaf8a6693792759b34016f56131", 0x72}, {&(0x7f0000000700)="efeb4e22ca3089195caccbbc67b6386b384067aae725e7e4163d8bd6a824dac7faf7997aa9bf286d693a467ef1af22771c0f8b9a2e127d993e7d466a1870dd0d62dfb4f369f7088fde8199b8c1e88130f12faff402fd3c601e77a9a995e8fb5c", 0x60}], 0x5, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @dev={0xac, 0x14, 0x14, 0x40}}}}], 0x20}, 0x8080) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r8, 0x10e, 0x3, 0x0, 0x0) (async) getsockopt$netlink(r8, 0x10e, 0x3, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x11, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x11, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b101c7510e19feecb90ee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd"}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11b, 0x75, 0x0, 0x1, [@nested={0x10, 0x105, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @fd=r10}, @typed={0x4, 0x98}]}, @nested={0x4, 0x8}, @typed={0x8, 0xe6, 0x0, 0x0, @fd=r10}, @generic="897a22072687e1d29eb84b27bdf276e019dccc0376ab6e", @typed={0x0, 0x109, 0x0, 0x0, @str='\\.-\x00'}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x8004) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r9, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r3) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r11, 0x1, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8fc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 1.895880999s ago: executing program 1 (id=796): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@setneightbl={0x14, 0x43, 0x1, 0x70bd29, 0x25dfdbfc, {0x2}}, 0x14}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2713, 0x0, &(0x7f00000000c0)) 1.768581893s ago: executing program 0 (id=797): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x430, 0x238, 0x0, 0x0, 0x348, 0x348, 0x348, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdda27f907a03732da3acbc650000010000000000f9d2f413b94a105f4bdf01425ce81c5d000000020000000500fffffffffcffffff00"}}}, {{@arp={@private, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 'wg2\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5cc9, 'syz0\x00', {0x8}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="fefaaf180786", @empty, @multicast1, @local, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x480) syz_emit_ethernet(0xe2, &(0x7f00000009c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb0800469c00d40068000020219078ac1e010164010102940400004e1d4e24047190783288330f0589f60b23b678d6dd8ab8914b30908eb061602bc9ca77410a251f259ec068fbdc7e77c63229d803c8f626e3acea1ffba67ac21e50e95c4fd7186b9f1dbf2fe2a39acaf1fe0458ee01db829b099d5653342b34fef08f8f7297a1814b98a5aa223d805d40ac0ce35ba94ba7fc82ff875fd1a1cd34899ad585d46eeb9c906b29a706f3d62b713efa38454a5f8c113d7ff99a045b6ed217a90afbd91151da0f385ceed4c00a548d8b189cbd2fce"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x4004805) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a89b60317cd78ea1dc8e0f77f2c1e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3f8f26283bcd93e80cacc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1522ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7b544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff310601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7affffffff7177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a00000000000000159596ac570c4b889106f937d56b2346c818917b727bf5e2741068ec000000000000000000ec84"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880)={0x0, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b0a041c56d0834de"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dafa7139f80fd01a"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0xc0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYRES64=r4], 0x10) 1.603830669s ago: executing program 1 (id=798): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000015000100fdfffffffcdbdf2502000000", @ANYRES32=r1, @ANYBLOB="080002007b01010108000100ac1414bb14"], 0x3c}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="c235535a17ac64791bbe00309033", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000700850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x4000044) 1.481029465s ago: executing program 0 (id=799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockname(r0, &(0x7f0000000100)=@ieee802154, &(0x7f0000000000)=0x80) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) close(0x3) 1.407983477s ago: executing program 0 (id=800): bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7f}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040004) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 632.002589ms ago: executing program 3 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x30, r1, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x30}, 0x1, 0x0, 0x600}, 0x0) 591.043991ms ago: executing program 0 (id=802): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2f7a}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040042}, 0x80) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x38, 0x80000000, 0x48, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x80, 0x3c7, 0x25}}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl2\x00', r2, 0x4, 0x9, 0xf9, 0x10, 0xc, @loopback, @private0, 0x7, 0x8, 0x6, 0xb}}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r4) r6 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @rose}, [@rose, @bcast, @null, @bcast, @bcast, @netrom, @bcast, @bcast]}, &(0x7f00000003c0)=0x48, 0x0) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000400)="ef5ddc6a34145b21997c6c09bb925fd2990e6fefbe7be1f2c737f6703e323a5ffc4b0feb44183097739701719519b674ea1f01ec0f37740c2f3b42edd706bb43784034127a262f502d804d7bf167fd850ec785b8fc1235cdad3d168a17dea2ac63c15fd3bbb42d8409b42f75bc08db30619a9bcb370812b073af6aa8cb185f8add986c2267476e830063b9b586a8830255ba858a67b78f1f2290a2a61919d643b62a84a2c45d7837b87fc11db4c1d27d9b2baf45048b0e8c93a6520f91cbe70c", 0xc0}], 0x1) (async) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000540)={r7, r8/1000+60000}, 0x10) unshare(0x400) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000580)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000005c0)=r9) (async) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) (async) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000680)={'wpan3\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r5, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x140080c0}, 0x40800) (async, rerun: 32) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r0) (rerun: 32) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r14, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000004) (async, rerun: 32) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000a40)={'wpan0\x00'}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) recvmmsg$unix(r16, &(0x7f0000003840)=[{{&(0x7f0000000ac0), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b40)=""/81, 0x51}], 0x1, &(0x7f0000000c00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000000d40)=@abs, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000dc0)=""/141, 0x8d}, {&(0x7f0000000e80)=""/122, 0x7a}, {&(0x7f0000000f00)=""/246, 0xf6}, {&(0x7f0000001000)=""/177, 0xb1}, {&(0x7f00000010c0)=""/92, 0x5c}], 0x5, &(0x7f00000011c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f00000012c0), 0x6e, &(0x7f0000001500)=[{&(0x7f0000001340)=""/120, 0x78}, {&(0x7f00000013c0)=""/213, 0xd5}, {&(0x7f00000014c0)=""/47, 0x2f}], 0x3, &(0x7f0000001540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f00000015c0), 0x6e, &(0x7f0000003780)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/188, 0xbc}, {&(0x7f0000003700)=""/84, 0x54}], 0x4, &(0x7f00000037c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x4, 0x2, &(0x7f0000003940)={0x77359400}) (async) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000003ac0)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a00)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x4000004) 537.666149ms ago: executing program 1 (id=803): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x7c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x13bb711e) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000100)={0x80fb, 0x1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x4, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0020001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 459.96031ms ago: executing program 3 (id=804): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x100) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='xprtrdma_err_chunk\x00', r4, 0x0, 0x10000}, 0x18) accept4(r0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000)={0xfe}, 0x1) 410.671235ms ago: executing program 0 (id=805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="d7268376", @ANYRES8=r2, @ANYBLOB="01072bbd70000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000cc0)={'lo\x00', &(0x7f0000000c80)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "25af22"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c003c2932b824f53186f101c97e9d6300005e633fd52eae4a3ad84456ad46a31246d0007dcfc5887bdab48bd1d866c2ffe5a38f128358d727bbd30e822f565bbf5d0c19df5b4edab91dceeea715a9ab29a2f30aed315c505c3d0600f36bad0e507db4ed2f1f83", @ANYBLOB="553f76fa0fe1ad6592b9fe35c1a38a2b4211d1c295b3bb913f49d7a8339276bfebc9aa4dff366ef2f0b91ebb0b3f2fdda1c657ecfea15d45139f917a0bdb492f28e67efc33bdaa13e05f233c5ee4b058ce8e1a35fc1797da76eb9fbc1b74af0f051a638f159f3ec91819f4c7533b5d4ed02a81f6492f738bc4200c0c2d802c24a1f3a2f1273df788db2828a8c59582d15cbc62a901108faedc1dd6192af428e9a7da237885c1063fedfd39fa46f3a090023d1ec27b21de1b", @ANYBLOB="010029bd7000fbdbdf250500000008000300", @ANYBLOB="368e4420ad13ac5818815c517c83994502d7c98025f7e998d949eb0a98961cda86663d31e6dfb1e631769f01eeb9e8a8ae5d2426cd21246613c4eaff70bd3dc714a95a1fbc26263ce7e5edeb6f1dae3c9f8060748ee96b2ebaa26c4f0ca8f077de59e8d531a1833c9cd20d367f59de02ba9a639c7fb1b001624886387963e1c14c5a555fad330d950756469f1c709122d35dcc97aa44a079f85a8e5f8020dc44290bfb3057ad48b32e52777e02a11797f41df7e246d5820754db1bdacbe153ce3b3d7dedbb769750c87c19bd875191ea392215d98dea24080612969b565c6cd51580", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x4008014) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000000000000004000400d7e72dc61f82c9f56d3e6aa14fe0c17a598ea2415a23373f4da5b347b3117cc4849dd521b2ca781da8e9be5d16a8218d43f15ff64ee1eee1b350ca2aa0ce0bda52df1ef81ca127a9ed99105b44046d16e36c8bcc0b9e3b36c5e84ebaedeae0eab04a4eddbf502fd980c562d6f4da1055fe1a1c7ec758a937f6d9c030fe898cdc0c3ceca0f194f25df5a8176c3581c2aa11dac93d61d9d2d6c9a9afbf5265ddcc1f61df77284bec0100000000000000768c1a3bdb22753c23e19ea1d5955262abee49753157cd8dc297cdc1ca59e9b6d411633fd032342c3d1e642cc7"], 0x1c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000006800643bf4171b010022bd7000fedbdf25000003"], 0x18}, 0x1, 0x0, 0x0, 0x24004084}, 0x20004000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000069000b0000000000000000000000000000000000080001000100000095af9a5386978b9fd8f6ef1f6e36d9a47c8da11b5d8574f135d951fcc0994510b26cba54a3e66b527026f9a249381112c2508c2063e705ac76571bd98506d6e576d590d16877ed3f236dc11bdfbc73e192a199b5b845a56050705b"], 0x20}}, 0x4000000) socket$inet6(0xa, 0x3, 0x6) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x0, 0x0, 0xfc}}, 0xe8) close(r10) socket$packet(0x11, 0x3, 0x300) 145.144286ms ago: executing program 3 (id=806): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) socket$igmp6(0xa, 0x3, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000180)={[{0x0, 'net'}]}, 0x5) (async) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x9) (async) splice(r3, 0x0, r6, 0x0, 0x25, 0x5) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0xa4, 0x10, 0x503, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x58, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @local}, {0xa, 0x4, @local}, {0xfe24, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, {0xa, 0x4, @remote}, {0xa, 0x4, @random="f37bb9edf99b"}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0xa4}}, 0x0) 0s ago: executing program 0 (id=807): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000040)='wi\n', 0x3}], 0x1, 0x1) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) close(r1) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r4 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x10, 0x20, 0x0, 0xfffd, {{0x5, 0x4, 0x1, 0x3a, 0x14, 0x64, 0x1, 0xd4, 0x0, 0x0, @broadcast, @initdev={0xac, 0x1e, 0xfa, 0x0}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xd4, r7, 0x8, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x10) connect$inet6(r3, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) splice(r0, 0x0, r1, 0x0, 0x1, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.15.203' (ED25519) to the list of known hosts. [ 85.273665][ T5827] cgroup: Unknown subsys name 'net' [ 85.401453][ T5827] cgroup: Unknown subsys name 'cpuset' [ 85.411258][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.197922][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.886584][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.908385][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.912002][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.923705][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.931891][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.947769][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.959941][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.967217][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.968184][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.977861][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.982430][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.996431][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.004182][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.012350][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.017256][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.024697][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.027167][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.044376][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.052379][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.060645][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.068705][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.068779][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.088128][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.088378][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.103167][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.560036][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 90.846289][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 90.973353][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.980724][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.989933][ T5837] bridge_slave_0: entered allmulticast mode [ 90.997879][ T5837] bridge_slave_0: entered promiscuous mode [ 91.006889][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.014297][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.021669][ T5837] bridge_slave_1: entered allmulticast mode [ 91.029724][ T5837] bridge_slave_1: entered promiscuous mode [ 91.063031][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 91.113309][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 91.156157][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.212610][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.230690][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 91.318367][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.325601][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.333025][ T5846] bridge_slave_0: entered allmulticast mode [ 91.342541][ T5846] bridge_slave_0: entered promiscuous mode [ 91.384427][ T5837] team0: Port device team_slave_0 added [ 91.409007][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.416222][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.424103][ T5846] bridge_slave_1: entered allmulticast mode [ 91.431686][ T5846] bridge_slave_1: entered promiscuous mode [ 91.475402][ T5837] team0: Port device team_slave_1 added [ 91.556788][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.616441][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.626417][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.634245][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.641916][ T5844] bridge_slave_0: entered allmulticast mode [ 91.650099][ T5844] bridge_slave_0: entered promiscuous mode [ 91.664637][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.671753][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.697824][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.709715][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.716922][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.727292][ T5838] bridge_slave_0: entered allmulticast mode [ 91.734562][ T5838] bridge_slave_0: entered promiscuous mode [ 91.743769][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.751053][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.758643][ T5838] bridge_slave_1: entered allmulticast mode [ 91.765957][ T5838] bridge_slave_1: entered promiscuous mode [ 91.785771][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.795690][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.803238][ T5844] bridge_slave_1: entered allmulticast mode [ 91.815188][ T5844] bridge_slave_1: entered promiscuous mode [ 91.839564][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.846561][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.873273][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.920724][ T9] cfg80211: failed to load regulatory.db [ 91.954932][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.962253][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.970723][ T5843] bridge_slave_0: entered allmulticast mode [ 91.981161][ T5843] bridge_slave_0: entered promiscuous mode [ 92.005567][ T5846] team0: Port device team_slave_0 added [ 92.028678][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.038854][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.046356][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.054161][ T5843] bridge_slave_1: entered allmulticast mode [ 92.061665][ T5843] bridge_slave_1: entered promiscuous mode [ 92.068327][ T5855] Bluetooth: hci0: command tx timeout [ 92.089596][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.104020][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.115573][ T5846] team0: Port device team_slave_1 added [ 92.147756][ T5855] Bluetooth: hci1: command tx timeout [ 92.153874][ T5855] Bluetooth: hci3: command tx timeout [ 92.160138][ T5850] Bluetooth: hci2: command tx timeout [ 92.170824][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.227627][ T5855] Bluetooth: hci4: command tx timeout [ 92.242301][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.249620][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.275733][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.302622][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.316704][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.331108][ T5838] team0: Port device team_slave_0 added [ 92.352823][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.359970][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.386520][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.426160][ T5838] team0: Port device team_slave_1 added [ 92.451896][ T5837] hsr_slave_0: entered promiscuous mode [ 92.458843][ T5837] hsr_slave_1: entered promiscuous mode [ 92.475041][ T5844] team0: Port device team_slave_0 added [ 92.484463][ T5844] team0: Port device team_slave_1 added [ 92.523246][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.530505][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.557134][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.597792][ T5843] team0: Port device team_slave_0 added [ 92.605387][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.613012][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.639178][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.681653][ T5843] team0: Port device team_slave_1 added [ 92.722106][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.732308][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.759178][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.811155][ T5846] hsr_slave_0: entered promiscuous mode [ 92.818119][ T5846] hsr_slave_1: entered promiscuous mode [ 92.824204][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.832280][ T5846] Cannot create hsr debugfs directory [ 92.839280][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.846247][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.872693][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.892050][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.900019][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.926684][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.002792][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.012146][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.038619][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.082188][ T5838] hsr_slave_0: entered promiscuous mode [ 93.088741][ T5838] hsr_slave_1: entered promiscuous mode [ 93.094895][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.102590][ T5838] Cannot create hsr debugfs directory [ 93.178854][ T5844] hsr_slave_0: entered promiscuous mode [ 93.185297][ T5844] hsr_slave_1: entered promiscuous mode [ 93.192247][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.199924][ T5844] Cannot create hsr debugfs directory [ 93.273713][ T5843] hsr_slave_0: entered promiscuous mode [ 93.280387][ T5843] hsr_slave_1: entered promiscuous mode [ 93.286528][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.294807][ T5843] Cannot create hsr debugfs directory [ 93.775248][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.789724][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.811806][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.830465][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.879169][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.923905][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.936332][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.962132][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.032911][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.044206][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.056808][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.101696][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.148089][ T5855] Bluetooth: hci0: command tx timeout [ 94.178516][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.193448][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.223581][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.227840][ T5855] Bluetooth: hci3: command tx timeout [ 94.235737][ T5850] Bluetooth: hci2: command tx timeout [ 94.236066][ T5857] Bluetooth: hci1: command tx timeout [ 94.254788][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.295362][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.312088][ T5857] Bluetooth: hci4: command tx timeout [ 94.403094][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.425111][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.436269][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.451240][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.468713][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.502885][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.510156][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.535389][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.542693][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.566615][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.689999][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.733260][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.740562][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.776101][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.783403][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.798907][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.963750][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.980288][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.044637][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.052170][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.091554][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.098904][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.125564][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.155276][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.162567][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.206686][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.220383][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.227623][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.263527][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.309540][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.343105][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.350327][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.386944][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.394177][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.415480][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.581919][ T5837] veth0_vlan: entered promiscuous mode [ 95.656716][ T5837] veth1_vlan: entered promiscuous mode [ 95.771147][ T5837] veth0_macvtap: entered promiscuous mode [ 95.806748][ T5837] veth1_macvtap: entered promiscuous mode [ 95.943495][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.973950][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.021326][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.043669][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.055280][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.065297][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.094764][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.224095][ T5838] veth0_vlan: entered promiscuous mode [ 96.229978][ T5857] Bluetooth: hci0: command tx timeout [ 96.269044][ T5838] veth1_vlan: entered promiscuous mode [ 96.286596][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.307986][ T5857] Bluetooth: hci2: command tx timeout [ 96.308044][ T5850] Bluetooth: hci3: command tx timeout [ 96.318201][ T5857] Bluetooth: hci1: command tx timeout [ 96.326275][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.375378][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.388307][ T5857] Bluetooth: hci4: command tx timeout [ 96.401743][ T5846] veth0_vlan: entered promiscuous mode [ 96.408009][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.479326][ T5838] veth0_macvtap: entered promiscuous mode [ 96.491365][ T5838] veth1_macvtap: entered promiscuous mode [ 96.501159][ T5846] veth1_vlan: entered promiscuous mode [ 96.537790][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.545689][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.572287][ T5844] veth0_vlan: entered promiscuous mode [ 96.593466][ T5844] veth1_vlan: entered promiscuous mode [ 96.623033][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.635688][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.649169][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.684680][ T5846] veth0_macvtap: entered promiscuous mode [ 96.696129][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.709823][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.722064][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.738566][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.760118][ T5846] veth1_macvtap: entered promiscuous mode [ 96.784011][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.794148][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.803687][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.812581][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.836072][ T5843] veth0_vlan: entered promiscuous mode [ 96.886486][ T5843] veth1_vlan: entered promiscuous mode [ 96.961949][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.973211][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.985754][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.997029][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.014924][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.079596][ T5844] veth0_macvtap: entered promiscuous mode [ 97.106434][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.120635][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.133332][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.144758][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.163257][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.184667][ T5844] veth1_macvtap: entered promiscuous mode [ 97.230830][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.268183][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.277013][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.295757][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.412312][ T5932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 97.423407][ T5932] Zero length message leads to an empty skb [ 97.439114][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.453634][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.466197][ T5843] veth0_macvtap: entered promiscuous mode [ 97.480570][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.494191][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.504811][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.516066][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.526211][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.537209][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.549158][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.563953][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.574651][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.585975][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.600755][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.612593][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.623137][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.634272][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.691904][ T5843] veth1_macvtap: entered promiscuous mode [ 97.702624][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.713043][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.722175][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.731129][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.769601][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.795292][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.034728][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.056589][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.065170][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.093700][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.106249][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.122450][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.141367][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.155701][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.170657][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.181331][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.197475][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.209386][ T5938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 98.308905][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.318717][ T5857] Bluetooth: hci0: command tx timeout [ 98.339125][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.366152][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.383307][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.396919][ T5857] Bluetooth: hci3: command tx timeout [ 98.396965][ T5850] Bluetooth: hci1: command tx timeout [ 98.402636][ T5857] Bluetooth: hci2: command tx timeout [ 98.416823][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.428403][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.438483][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.450048][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.462296][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.471160][ T5857] Bluetooth: hci4: command tx timeout [ 98.537569][ T5943] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.601648][ T5937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6'. [ 98.620975][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.625354][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.643839][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.664946][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.675159][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.685269][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.740414][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.785059][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.056024][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.076579][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.193651][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.232506][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.373795][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.382609][ T5950] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7'. [ 99.422777][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.504329][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 99.535135][ T5950] GUP no longer grows the stack in syz.1.7 (5950): 200000006000-20000000a000 (200000005000) [ 99.595145][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: syz.1.7 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 99.595176][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.595193][ T5950] Call Trace: [ 99.595202][ T5950] [ 99.595211][ T5950] dump_stack_lvl+0x241/0x360 [ 99.595256][ T5950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.595282][ T5950] ? __pfx__printk+0x10/0x10 [ 99.595303][ T5950] ? find_vma+0xfa/0x170 [ 99.595344][ T5950] __get_user_pages+0x3b46/0x4180 [ 99.595412][ T5950] ? rcu_is_watching+0x15/0xb0 [ 99.595436][ T5950] ? __pfx___get_user_pages+0x10/0x10 [ 99.595461][ T5950] ? bpf_bprintf_cleanup+0x9f/0xd0 [ 99.595489][ T5950] ? __gup_longterm_locked+0xd86/0x1850 [ 99.595517][ T5950] ? bpf_trace_printk+0x1ce/0x230 [ 99.595539][ T5950] ? __pfx_down_read_killable+0x10/0x10 [ 99.595570][ T5950] ? __lock_acquire+0xad5/0xd80 [ 99.595606][ T5950] __gup_longterm_locked+0xec1/0x1850 [ 99.595664][ T5950] ? try_get_folio+0xfd/0x6a0 [ 99.595699][ T5950] ? try_grab_folio_fast+0x1d6/0x500 [ 99.595731][ T5950] ? __pfx___gup_longterm_locked+0x10/0x10 [ 99.595770][ T5950] ? gup_fast_fallback+0x203f/0x2980 [ 99.595802][ T5950] gup_fast_fallback+0x2227/0x2980 [ 99.595867][ T5950] ? __pfx_gup_fast_fallback+0x10/0x10 [ 99.595897][ T5950] ? finish_task_switch+0x1e5/0x870 [ 99.595926][ T5950] ? lockdep_hardirqs_on+0x9d/0x150 [ 99.595955][ T5950] ? rcu_is_watching+0x15/0xb0 [ 99.595980][ T5950] ? trace_sched_exit_tp+0x3c/0x120 [ 99.596012][ T5950] ? __schedule+0x1ba6/0x5240 [ 99.596051][ T5950] ? __lock_acquire+0xad5/0xd80 [ 99.596075][ T5950] ? is_valid_gup_args+0x124/0x200 [ 99.596108][ T5950] get_user_pages_fast+0xd2/0x160 [ 99.596141][ T5950] ? __pfx_get_user_pages_fast+0x10/0x10 [ 99.596172][ T5950] ? rcu_is_watching+0x15/0xb0 [ 99.596197][ T5950] ? trace_contention_end+0x3c/0x120 [ 99.596227][ T5950] __iov_iter_get_pages_alloc+0x39d/0xa90 [ 99.596263][ T5950] ? schedule+0x90/0x360 [ 99.596287][ T5950] ? __se_sys_vmsplice+0x4bc/0x1430 [ 99.596320][ T5950] iov_iter_get_pages2+0xd1/0x130 [ 99.596351][ T5950] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 99.596391][ T5950] __se_sys_vmsplice+0x6c6/0x1430 [ 99.596446][ T5950] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 99.596476][ T5950] ? __pfx_futex_wait+0x10/0x10 [ 99.596509][ T5950] ? __lock_acquire+0xad5/0xd80 [ 99.596603][ T5950] ? do_syscall_64+0xb6/0x230 [ 99.596635][ T5950] do_syscall_64+0xf3/0x230 [ 99.596691][ T5950] ? clear_bhb_loop+0x45/0xa0 [ 99.596717][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.596744][ T5950] RIP: 0033:0x7f84bd38d169 [ 99.596768][ T5950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.596785][ T5950] RSP: 002b:00007f84be125038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 99.596810][ T5950] RAX: ffffffffffffffda RBX: 00007f84bd5a5fa0 RCX: 00007f84bd38d169 [ 99.596825][ T5950] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d [ 99.596838][ T5950] RBP: 00007f84bd40e990 R08: 0000000000000000 R09: 0000000000000000 [ 99.596851][ T5950] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 99.596863][ T5950] R13: 0000000000000000 R14: 00007f84bd5a5fa0 R15: 00007ffde4e77a28 [ 99.596896][ T5950] [ 99.609389][ T5952] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.919035][ T5961] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 100.160572][ T5952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 100.194665][ T5959] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.345460][ T5954] Bluetooth: MGMT ver 1.23 [ 100.502746][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 100.862786][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10'. [ 100.927457][ T5984] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 101.003539][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 101.033407][ T5987] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 101.055018][ T5984] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 101.637791][ T6003] nbd: must specify a size in bytes for the device [ 101.713861][ T6003] xt_hashlimit: size too large, truncated to 1048576 [ 101.791855][ T6004] batman_adv: batadv0: Adding interface: dummy0 [ 101.867293][ T6004] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.961879][ T6004] batman_adv: batadv0: Interface activated: dummy0 [ 102.347826][ T6007] batadv0: mtu less than device minimum [ 102.355293][ T6007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.367739][ T6007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.379830][ T6007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.392010][ T6007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.403968][ T6007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.416040][ T6007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.428022][ T6007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.440097][ T6007] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 102.878203][ T13] wlan1: Trigger new scan to find an IBSS to join [ 102.879079][ T6018] netlink: 224 bytes leftover after parsing attributes in process `syz.3.20'. [ 102.903400][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 102.983879][ T6024] pim6reg: entered allmulticast mode [ 103.022558][ T6026] pim6reg: left allmulticast mode [ 103.668064][ T6045] netlink: 48 bytes leftover after parsing attributes in process `syz.3.29'. [ 103.775573][ T6050] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 103.808554][ T6052] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 104.930171][ T6069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.34'. [ 104.947330][ T6069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.34'. [ 105.028728][ T6075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.36'. [ 105.125886][ T6067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.36'. [ 105.216945][ T6075] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (134217729), value rounded to 0 ms [ 105.263267][ T6075] bond1: entered promiscuous mode [ 105.268555][ T6075] bond1: entered allmulticast mode [ 105.881325][ T6093] Cannot find add_set index 0 as target [ 105.907804][ T1158] wlan1: Trigger new scan to find an IBSS to join [ 106.082709][ T6103] netlink: 48 bytes leftover after parsing attributes in process `syz.3.44'. [ 106.177973][ T6110] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 106.311016][ T6113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.43'. [ 106.778998][ T6132] sch_fq: defrate 2048 ignored. [ 106.803946][ T6135] netlink: 'syz.0.50': attribute type 10 has an invalid length. [ 106.826910][ T6136] netlink: 'syz.0.50': attribute type 10 has an invalid length. [ 106.852958][ T6136] tipc: Started in network mode [ 106.894552][ T6136] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 106.902263][ T6136] tipc: Enabled bearer , priority 10 [ 106.912382][ T6135] tipc: Enabling of bearer rejected, already enabled [ 106.928519][ T6139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'. [ 107.454134][ T6157] @ÿ: renamed from bond_slave_0 (while UP) [ 107.491980][ T6162] netlink: 'syz.3.56': attribute type 1 has an invalid length. [ 107.568334][ T6162] nbd: socks must be embedded in a SOCK_ITEM attr [ 107.582048][ T6162] block nbd0: shutting down sockets [ 107.732990][ T6174] gretap0: entered promiscuous mode [ 107.770565][ T6174] macsec1: entered promiscuous mode [ 107.820064][ T6174] gretap0: left promiscuous mode [ 107.898244][ T5894] tipc: Node number set to 43690 [ 107.906406][ T6183] __nla_validate_parse: 10 callbacks suppressed [ 107.906428][ T6183] netlink: 32 bytes leftover after parsing attributes in process `syz.0.62'. [ 107.925546][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 107.935373][ T6192] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 107.968402][ T6179] delete_channel: no stack [ 108.180438][ T6195] syz.3.69 uses obsolete (PF_INET,SOCK_PACKET) [ 108.947516][ T1081] wlan1: Trigger new scan to find an IBSS to join [ 109.858981][ T62] wlan1: Creating new IBSS network, BSSID ca:d4:88:ec:10:22 [ 132.870538][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.877609][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.898128][ T1081] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 157.334088][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 157.359341][ T6213] net_ratelimit: 11 callbacks suppressed [ 157.359362][ T6213] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 157.439952][ T5928] IPVS: starting estimator thread 0... [ 157.547946][ T6222] IPVS: using max 24 ests per chain, 57600 per kthread [ 158.282063][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 158.356724][ T6238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.76'. [ 158.806682][ T6258] syzkaller1: entered promiscuous mode [ 158.824843][ T6258] syzkaller1: entered allmulticast mode [ 158.971286][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 159.117003][ T6264] erspan1: entered promiscuous mode [ 159.124419][ T6264] erspan1: entered allmulticast mode [ 159.283747][ T6267] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 159.365087][ T6269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.83'. [ 159.792224][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 159.825688][ T6282] Driver unsupported XDP return value 0 on prog (id 54) dev N/A, expect packet loss! [ 159.850663][ T6284] netlink: 60 bytes leftover after parsing attributes in process `syz.2.87'. [ 159.986863][ T6290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.994553][ T6290] IPv6: NLM_F_CREATE should be set when creating new route [ 160.024795][ T6293] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 160.358252][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.91'. [ 160.476123][ T6319] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 160.541709][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.91'. [ 160.563041][ T6319] Cannot find set identified by id 0 to match [ 160.632831][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.91'. [ 160.954720][ T6349] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 161.064563][ T6351] tap0: tun_chr_ioctl cmd 2147767506 [ 161.314303][ T6360] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 162.291051][ T6389] veth1_macvtap: left promiscuous mode [ 162.331559][ T6389] macsec0: entered allmulticast mode [ 162.434593][ T6395] __nla_validate_parse: 5 callbacks suppressed [ 162.434612][ T6395] netlink: 44 bytes leftover after parsing attributes in process `syz.0.116'. [ 162.669016][ T6404] sctp: [Deprecated]: syz.0.117 (pid 6404) Use of int in maxseg socket option. [ 162.669016][ T6404] Use struct sctp_assoc_value instead [ 162.867199][ T978] page_pool_release_retry() stalled pool shutdown: id 23, 2 inflight 60 sec [ 162.884957][ T6412] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 162.894942][ T6412] macvtap1: entered promiscuous mode [ 162.904273][ T6412] macvtap1: entered allmulticast mode [ 162.912604][ T6412] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 162.937745][ T6412] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 162.960369][ T6412] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 162.991333][ T6420] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 163.317006][ T6427] netlink: 'syz.3.125': attribute type 21 has an invalid length. [ 163.761155][ T6440] netlink: 'syz.1.129': attribute type 1 has an invalid length. [ 163.785552][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.129'. [ 163.841072][ T6409] trusted_key: syz.0.120 sent an empty control message without MSG_MORE. [ 164.039704][ T6460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.133'. [ 164.061468][ T6461] netlink: 244 bytes leftover after parsing attributes in process `syz.2.134'. [ 164.068485][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'. [ 164.122333][ T6458] netlink: 32 bytes leftover after parsing attributes in process `syz.4.135'. [ 164.143256][ T6450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.132'. [ 164.207229][ T6450] netlink: 64 bytes leftover after parsing attributes in process `syz.3.132'. [ 164.286160][ T6450] tipc: Invalid UDP bearer configuration [ 164.286234][ T6450] tipc: Enabling of bearer rejected, failed to enable media [ 164.353659][ T6474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.136'. [ 164.363980][ T6450] nbd: socks must be embedded in a SOCK_ITEM attr [ 164.423736][ T6469] xt_hashlimit: size too large, truncated to 1048576 [ 164.912697][ T6500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.985169][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 164.998819][ T6505] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 165.144617][ T6506] IPVS: Scheduler module ip_vs_sip not found [ 165.742574][ T6532] Unsupported ieee802154 address type: 0 [ 166.187918][ T6559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.204026][ T6554] xt_CT: No such helper "netbios-ns" [ 166.211895][ T6558] Cannot find set identified by id 0 to match [ 166.272493][ T6559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.296545][ T6559] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 166.419714][ T6559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.446364][ T6559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.518510][ T6574] vlan2: entered allmulticast mode [ 166.527223][ T6574] bond0: entered allmulticast mode [ 166.535822][ T6574] bond_slave_0: entered allmulticast mode [ 166.565937][ T6574] bond_slave_1: entered allmulticast mode [ 166.890723][ T6589] syz_tun: entered allmulticast mode [ 167.197959][ T6606] netlink: 'syz.4.175': attribute type 1 has an invalid length. [ 167.477286][ T6611] netlink: 'syz.2.177': attribute type 1 has an invalid length. [ 167.499356][ T6611] netlink: 'syz.2.177': attribute type 10 has an invalid length. [ 167.527807][ T6611] netlink: 'syz.2.177': attribute type 4 has an invalid length. [ 167.581046][ T6611] __nla_validate_parse: 10 callbacks suppressed [ 167.581067][ T6611] netlink: 196 bytes leftover after parsing attributes in process `syz.2.177'. [ 167.581191][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.177'. [ 167.989497][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'. [ 168.640235][ T6643] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 169.942148][ T6684] netlink: 248 bytes leftover after parsing attributes in process `syz.4.199'. [ 170.124114][ T6693] netlink: 'syz.2.202': attribute type 5 has an invalid length. [ 170.145376][ T6693] netlink: 'syz.2.202': attribute type 5 has an invalid length. [ 170.165861][ T6694] netlink: 'syz.2.202': attribute type 5 has an invalid length. [ 170.182073][ T6694] netlink: 'syz.2.202': attribute type 5 has an invalid length. [ 170.313479][ T6697] netlink: 96 bytes leftover after parsing attributes in process `syz.0.203'. [ 170.335908][ T6698] netlink: 'syz.0.203': attribute type 12 has an invalid length. [ 170.356386][ T6698] netlink: 'syz.0.203': attribute type 29 has an invalid length. [ 170.368600][ T6698] netlink: 148 bytes leftover after parsing attributes in process `syz.0.203'. [ 170.420257][ T6698] netlink: 43 bytes leftover after parsing attributes in process `syz.0.203'. [ 170.445425][ T6700] tipc: Started in network mode [ 170.487451][ T6700] tipc: Node identity ac14140f, cluster identity 4711 [ 170.494968][ T6700] tipc: New replicast peer: 255.255.255.255 [ 170.626629][ T6700] tipc: Enabled bearer , priority 10 [ 170.724985][ T6702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.204'. [ 170.767332][ T6702] tipc: Disabling bearer [ 170.891256][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 170.915450][ T6710] vxcan1: entered allmulticast mode [ 170.957664][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.207'. [ 171.078658][ T6726] tipc: Resetting bearer [ 171.219125][ T6726] tipc: Disabling bearer [ 172.290703][ T6757] validate_nla: 2 callbacks suppressed [ 172.290724][ T6757] netlink: 'syz.0.215': attribute type 10 has an invalid length. [ 172.327339][ T6757] team0: entered promiscuous mode [ 172.332580][ T6757] team_slave_0: entered promiscuous mode [ 172.354226][ T6757] team_slave_1: entered promiscuous mode [ 172.378455][ T6757] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.412434][ T6757] bridge0: port 3(team0) entered blocking state [ 172.432938][ T6757] bridge0: port 3(team0) entered disabled state [ 172.445685][ T6757] team0: entered allmulticast mode [ 172.457553][ T6757] team_slave_0: entered allmulticast mode [ 172.475168][ T6757] team_slave_1: entered allmulticast mode [ 172.490560][ T6757] bridge0: port 3(team0) entered blocking state [ 172.497350][ T6757] bridge0: port 3(team0) entered forwarding state [ 172.605272][ T6774] __nla_validate_parse: 3 callbacks suppressed [ 172.605294][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.219'. [ 172.684131][ T6774] netlink: 'syz.4.219': attribute type 1 has an invalid length. [ 172.704628][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 172.718934][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 172.745520][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 172.749161][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.834684][ T6774] bridge_slave_1 (unregistering): left allmulticast mode [ 172.844007][ T6774] bridge_slave_1 (unregistering): left promiscuous mode [ 172.854213][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.855541][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.224'. [ 172.913517][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 172.944317][ T6790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.090881][ T6790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.119593][ T6800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.228'. [ 173.401920][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 173.433465][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 173.481552][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 174.026956][ T6842] batman_adv: batadv0: Interface deactivated: dummy0 [ 174.037309][ T6842] batman_adv: batadv0: Removing interface: dummy0 [ 174.078850][ T6842] bridge_slave_0: left allmulticast mode [ 174.103446][ T6842] bridge_slave_0: left promiscuous mode [ 174.116251][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.153090][ T6842] bridge_slave_1: left allmulticast mode [ 174.195563][ T6842] bridge_slave_1: left promiscuous mode [ 174.204297][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.249039][ T6842] bond0: (slave bond_slave_0): Releasing backup interface [ 174.305871][ T6842] bond0: (slave bond_slave_1): Releasing backup interface [ 174.378450][ T6842] team0: Port device team_slave_0 removed [ 174.396197][ T6842] team0: Port device team_slave_1 removed [ 174.406047][ T6842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.414028][ T6842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.426762][ T6842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.435930][ T6842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.451140][ T6863] netlink: 'syz.0.241': attribute type 1 has an invalid length. [ 174.479170][ T6863] netlink: 'syz.0.241': attribute type 2 has an invalid length. [ 174.522037][ T6860] bridge0: port 3(team0) entered disabled state [ 174.614503][ T6860] team0 (unregistering): left allmulticast mode [ 174.621985][ T6860] team_slave_0: left allmulticast mode [ 174.629413][ T6860] team_slave_1: left allmulticast mode [ 174.635005][ T6860] bridge0: port 3(team0) entered disabled state [ 174.644520][ T6860] team_slave_0: left promiscuous mode [ 174.660532][ T6860] team0 (unregistering): Port device team_slave_0 removed [ 174.668419][ T6860] team_slave_1: left promiscuous mode [ 174.679484][ T6860] team0 (unregistering): Port device team_slave_1 removed [ 174.704494][ T6861] 0·: renamed from hsr0 (while UP) [ 174.713973][ T6861] 0·: entered allmulticast mode [ 174.719798][ T6861] hsr_slave_0: entered allmulticast mode [ 174.725481][ T6861] hsr_slave_1: entered allmulticast mode [ 174.731647][ T6861] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 174.851095][ T6861] 1·: renamed from 70· (while UP) [ 174.870464][ T6861] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 174.892915][ T6861] 0·: renamed from 71· (while UP) [ 174.913078][ T6861] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 174.991835][ T6861] 1·: renamed from 70· (while UP) [ 175.014945][ T6877] netlink: 'syz.4.246': attribute type 4 has an invalid length. [ 175.076788][ T6861] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 175.107751][ T5857] Bluetooth: hci4: command tx timeout [ 175.126057][ T6861] 0·: renamed from 71· (while UP) [ 175.168986][ T6861] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 175.205479][ T6878] syz_tun: entered allmulticast mode [ 175.215790][ T6859] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 175.283889][ T6875] syz_tun: left allmulticast mode [ 175.307838][ T6861] 1·: renamed from 70· (while UP) [ 175.342296][ T6861] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 175.949194][ T6912] pimreg3: entered allmulticast mode [ 176.083412][ T6927] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 176.088006][ T6925] IPVS: stopping backup sync thread 6927 ... [ 176.227549][ T6935] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 176.485016][ T5857] Bluetooth: hci0: command 0x0401 tx timeout [ 177.657171][ T6985] netlink: 'syz.3.274': attribute type 10 has an invalid length. [ 177.659491][ T6993] __nla_validate_parse: 17 callbacks suppressed [ 177.659511][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'. [ 177.666993][ T6985] netlink: 40 bytes leftover after parsing attributes in process `syz.3.274'. [ 177.692931][ T6993] netlink: 'syz.4.276': attribute type 10 has an invalid length. [ 177.702630][ T6985] batman_adv: batadv0: Adding interface: virt_wifi0 [ 177.714317][ T6985] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.718439][ T6993] netlink: 40 bytes leftover after parsing attributes in process `syz.4.276'. [ 177.740912][ T6985] batman_adv: batadv0: Interface activated: virt_wifi0 [ 177.763918][ T6993] veth0_vlan: entered allmulticast mode [ 177.770863][ T6993] bridge0: port 2(veth0_vlan) entered blocking state [ 177.777960][ T6993] bridge0: port 2(veth0_vlan) entered disabled state [ 177.793528][ T6993] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 177.833029][ T6996] netlink: 'syz.0.277': attribute type 29 has an invalid length. [ 177.853581][ T6995] netlink: 'syz.0.277': attribute type 29 has an invalid length. [ 177.876260][ T6995] netlink: 500 bytes leftover after parsing attributes in process `syz.0.277'. [ 177.898593][ T6995] unsupported nla_type 58 [ 177.927685][ T6998] sctp: [Deprecated]: syz.3.278 (pid 6998) Use of int in max_burst socket option. [ 177.927685][ T6998] Use struct sctp_assoc_value instead [ 177.976385][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 178.532257][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.283'. [ 179.227910][ T7042] netlink: 'syz.0.291': attribute type 10 has an invalid length. [ 180.092071][ T7069] netlink: 60 bytes leftover after parsing attributes in process `syz.0.300'. [ 180.537987][ T7090] netlink: 48 bytes leftover after parsing attributes in process `syz.0.306'. [ 180.576973][ T7094] x_tables: duplicate underflow at hook 1 [ 181.106948][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'. [ 181.337422][ T7133] netlink: 516 bytes leftover after parsing attributes in process `syz.4.322'. [ 181.413498][ T7133] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 181.744122][ T7157] netlink: 'syz.4.328': attribute type 39 has an invalid length. [ 181.810782][ T7155] bond1: entered promiscuous mode [ 181.847599][ T7155] bond1: entered allmulticast mode [ 181.855740][ T7155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.412292][ T7170] syzkaller0: entered promiscuous mode [ 182.417942][ T7170] syzkaller0: entered allmulticast mode [ 184.002728][ T7201] __nla_validate_parse: 3 callbacks suppressed [ 184.002750][ T7201] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.343'. [ 184.120475][ T7210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.344'. [ 184.183786][ T7210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.344'. [ 184.334445][ T7210] geneve2: entered allmulticast mode [ 184.367011][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 184.384400][ T7210] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 184.495106][ T5857] Bluetooth: hci4: link tx timeout [ 184.500853][ T5857] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 184.518315][ T7225] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 184.536638][ T7225] netlink: 224 bytes leftover after parsing attributes in process `syz.2.348'. [ 184.610351][ T7225] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 184.640384][ T7225] netlink: 224 bytes leftover after parsing attributes in process `syz.2.348'. [ 184.664083][ T7234] FAULT_INJECTION: forcing a failure. [ 184.664083][ T7234] name failslab, interval 1, probability 0, space 0, times 1 [ 184.677002][ T7234] CPU: 0 UID: 0 PID: 7234 Comm: syz.1.350 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 184.677035][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.677048][ T7234] Call Trace: [ 184.677056][ T7234] [ 184.677065][ T7234] dump_stack_lvl+0x241/0x360 [ 184.677117][ T7234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.677146][ T7234] ? __pfx__printk+0x10/0x10 [ 184.677177][ T7234] ? __pfx___might_resched+0x10/0x10 [ 184.677207][ T7234] should_fail_ex+0x424/0x570 [ 184.677245][ T7234] should_failslab+0xac/0x100 [ 184.677276][ T7234] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 184.677305][ T7234] ? __alloc_skb+0x1c2/0x480 [ 184.677340][ T7234] __alloc_skb+0x1c2/0x480 [ 184.677377][ T7234] ? __pfx___alloc_skb+0x10/0x10 [ 184.677417][ T7234] ? netlink_autobind+0xd6/0x2f0 [ 184.677446][ T7234] ? netlink_autobind+0x2b0/0x2f0 [ 184.677481][ T7234] netlink_sendmsg+0x638/0xcd0 [ 184.677524][ T7234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.677557][ T7234] ? aa_sock_msg_perm+0x91/0x160 [ 184.677598][ T7234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.677624][ T7234] __sock_sendmsg+0x221/0x270 [ 184.677653][ T7234] ____sys_sendmsg+0x523/0x860 [ 184.677684][ T7234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.677702][ T7234] ? __fget_files+0x2a/0x420 [ 184.677736][ T7234] ? __fget_files+0x2a/0x420 [ 184.677775][ T7234] __sys_sendmsg+0x271/0x360 [ 184.677801][ T7234] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.677889][ T7234] ? do_syscall_64+0xb6/0x230 [ 184.677920][ T7234] do_syscall_64+0xf3/0x230 [ 184.677946][ T7234] ? clear_bhb_loop+0x45/0xa0 [ 184.677971][ T7234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.677992][ T7234] RIP: 0033:0x7f84bd38d169 [ 184.678015][ T7234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.678031][ T7234] RSP: 002b:00007f84be125038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.678061][ T7234] RAX: ffffffffffffffda RBX: 00007f84bd5a5fa0 RCX: 00007f84bd38d169 [ 184.678076][ T7234] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 184.678088][ T7234] RBP: 00007f84be125090 R08: 0000000000000000 R09: 0000000000000000 [ 184.678100][ T7234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.678112][ T7234] R13: 0000000000000000 R14: 00007f84bd5a5fa0 R15: 00007ffde4e77a28 [ 184.678145][ T7234] [ 185.088533][ T7239] netlink: 'syz.1.354': attribute type 3 has an invalid length. [ 185.097128][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 185.113779][ T7239] batadv1: entered allmulticast mode [ 185.226913][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 185.473527][ T7260] netlink: 56 bytes leftover after parsing attributes in process `syz.0.360'. [ 185.511807][ T7260] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 185.581415][ T7264] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.589468][ T7264] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.694769][ T7264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.709418][ T7264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.736023][ T7264] 1·: left allmulticast mode [ 185.740862][ T7264] hsr_slave_0: left allmulticast mode [ 185.746276][ T7264] hsr_slave_1: left allmulticast mode [ 185.762942][ T7264] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 185.813798][ T7264] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.823909][ T7264] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.832995][ T7264] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.841989][ T7264] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.888453][ T7264] erspan1: left promiscuous mode [ 185.893496][ T7264] erspan1: left allmulticast mode [ 185.941597][ T7260] veth1_to_team: entered promiscuous mode [ 186.133438][ T7279] netlink: 830 bytes leftover after parsing attributes in process `syz.4.367'. [ 186.151777][ T7279] bond_slave_0: entered promiscuous mode [ 186.157795][ T7279] bond_slave_1: entered promiscuous mode [ 186.549855][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 186.839188][ T7317] ieee802154 phy0 wpan0: encryption failed: -22 [ 186.856961][ T7320] FAULT_INJECTION: forcing a failure. [ 186.856961][ T7320] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 186.879719][ T7320] CPU: 0 UID: 0 PID: 7320 Comm: syz.3.380 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 186.879751][ T7320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 186.879764][ T7320] Call Trace: [ 186.879772][ T7320] [ 186.879780][ T7320] dump_stack_lvl+0x241/0x360 [ 186.879817][ T7320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.879846][ T7320] ? __pfx__printk+0x10/0x10 [ 186.879888][ T7320] should_fail_ex+0x424/0x570 [ 186.879926][ T7320] _copy_from_iter+0x211/0x1c70 [ 186.879959][ T7320] ? __build_skb_around+0x247/0x3d0 [ 186.879995][ T7320] ? __alloc_skb+0x298/0x480 [ 186.880024][ T7320] ? __pfx__copy_from_iter+0x10/0x10 [ 186.880053][ T7320] ? __pfx___alloc_skb+0x10/0x10 [ 186.880085][ T7320] ? skb_put+0x114/0x1f0 [ 186.880121][ T7320] netlink_sendmsg+0x73c/0xcd0 [ 186.880164][ T7320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.880197][ T7320] ? aa_sock_msg_perm+0x91/0x160 [ 186.880232][ T7320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.880258][ T7320] __sock_sendmsg+0x221/0x270 [ 186.880287][ T7320] ____sys_sendmsg+0x523/0x860 [ 186.880317][ T7320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.880335][ T7320] ? __fget_files+0x2a/0x420 [ 186.880375][ T7320] ? __fget_files+0x2a/0x420 [ 186.880415][ T7320] __sys_sendmsg+0x271/0x360 [ 186.880442][ T7320] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.880522][ T7320] ? do_syscall_64+0xb6/0x230 [ 186.880552][ T7320] do_syscall_64+0xf3/0x230 [ 186.880579][ T7320] ? clear_bhb_loop+0x45/0xa0 [ 186.880603][ T7320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.880624][ T7320] RIP: 0033:0x7f943d38d169 [ 186.880642][ T7320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.880659][ T7320] RSP: 002b:00007f943e154038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.880681][ T7320] RAX: ffffffffffffffda RBX: 00007f943d5a5fa0 RCX: 00007f943d38d169 [ 186.880696][ T7320] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 186.880713][ T7320] RBP: 00007f943e154090 R08: 0000000000000000 R09: 0000000000000000 [ 186.880726][ T7320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.880738][ T7320] R13: 0000000000000000 R14: 00007f943d5a5fa0 R15: 00007ffeb590a378 [ 186.880770][ T7320] [ 187.311591][ T7330] tipc: Enabled bearer , priority 0 [ 187.460313][ T7330] syzkaller0: entered promiscuous mode [ 187.465850][ T7330] syzkaller0: entered allmulticast mode [ 187.512882][ T7330] tipc: Resetting bearer [ 187.530517][ T7334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.537944][ T7334] IPv6: NLM_F_CREATE should be set when creating new route [ 187.545253][ T7334] IPv6: NLM_F_CREATE should be set when creating new route [ 187.572552][ T7327] tipc: Resetting bearer [ 188.307830][ T5904] tipc: Node number set to 2886997007 [ 188.630519][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 189.073964][ T7327] tipc: Disabling bearer [ 189.090377][ T7341] pim6reg: entered allmulticast mode [ 189.095956][ T7343] pim6reg: left allmulticast mode [ 189.343236][ T7368] __nla_validate_parse: 2 callbacks suppressed [ 189.343259][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 189.431254][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 189.530734][ T7385] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 189.725347][ T7388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.399'. [ 189.835710][ T7368] team0 (unregistering): Port device team_slave_0 removed [ 189.863670][ T7368] team0 (unregistering): Port device team_slave_1 removed [ 189.952591][ T7386] pimreg: entered allmulticast mode [ 189.958321][ T7383] pimreg: left allmulticast mode [ 190.124811][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 190.858514][ T7417] syzkaller1: entered promiscuous mode [ 190.867547][ T7417] syzkaller1: entered allmulticast mode [ 190.942618][ T7419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.409'. [ 190.954194][ T7419] netlink: 16 bytes leftover after parsing attributes in process `syz.4.409'. [ 190.965619][ T7419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.409'. [ 190.979732][ T7419] netlink: 36 bytes leftover after parsing attributes in process `syz.4.409'. [ 191.082090][ T7422] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 191.758334][ T7437] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.829538][ T7437] bond_slave_0: left promiscuous mode [ 191.858337][ T7437] bond_slave_1: left promiscuous mode [ 192.112961][ T7437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.154500][ T7437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.242429][ T7437] veth0_vlan: left allmulticast mode [ 192.354731][ T7437] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.369228][ T7437] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.380284][ T7437] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.391720][ T7437] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.410554][ T7437] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 192.471082][ T7437] bond1: left promiscuous mode [ 192.476051][ T7437] bond1: left allmulticast mode [ 192.495675][ T7442] bridge0: port 2(gretap0) entered blocking state [ 192.505794][ T7442] bridge0: port 2(gretap0) entered disabled state [ 192.515106][ T7442] gretap0: entered allmulticast mode [ 192.526100][ T7442] gretap0: entered promiscuous mode [ 192.813587][ T7463] netlink: 64 bytes leftover after parsing attributes in process `syz.0.421'. [ 192.870818][ T7466] bridge_slave_0: left allmulticast mode [ 192.917273][ T7466] bridge_slave_0: left promiscuous mode [ 192.923192][ T7466] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.999344][ T7466] bridge_slave_1: left allmulticast mode [ 193.005081][ T7466] bridge_slave_1: left promiscuous mode [ 193.032389][ T7466] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.054696][ T7466] bond0: (slave 1@ÿ): Releasing backup interface [ 193.083624][ T7466] bond0: (slave bond_slave_1): Releasing backup interface [ 193.116669][ T7466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.132145][ T7466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.145184][ T7466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.168299][ T7466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.708431][ T7494] netlink: 268 bytes leftover after parsing attributes in process `syz.4.429'. [ 193.852595][ T7509] netlink: 'syz.1.433': attribute type 58 has an invalid length. [ 194.148184][ T7510] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 194.154079][ T7510] syzkaller0: Linktype set failed because interface is up [ 194.299331][ T7528] --map-set only usable from mangle table [ 194.313714][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.454606][ T7552] __nla_validate_parse: 5 callbacks suppressed [ 196.454626][ T7552] netlink: 48 bytes leftover after parsing attributes in process `syz.0.442'. [ 196.563613][ T7559] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 196.577795][ T7557] ip6t_srh: unknown srh invflags 4449 [ 196.628575][ T7563] bridge0: entered promiscuous mode [ 196.634274][ T7563] macvlan2: entered promiscuous mode [ 196.658512][ T7563] bridge0: port 1(macvlan2) entered blocking state [ 196.677795][ T7563] bridge0: port 1(macvlan2) entered disabled state [ 196.685127][ T7563] macvlan2: entered allmulticast mode [ 196.697207][ T7563] bridge0: entered allmulticast mode [ 196.726238][ T7563] macvlan2: left allmulticast mode [ 196.748903][ T7563] bridge0: left allmulticast mode [ 196.755724][ T7563] bridge0: left promiscuous mode [ 196.783985][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 196.946489][ T7576] netlink: 'syz.4.450': attribute type 32 has an invalid length. [ 197.629081][ T7583] macsec0: left allmulticast mode [ 197.644396][ T7583] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.659666][ T7583] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.668996][ T7583] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.679103][ T7583] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.862168][ T7583] bond1: left promiscuous mode [ 197.879593][ T7583] bond1: left allmulticast mode [ 199.451607][ T7667] netlink: 'syz.1.480': attribute type 23 has an invalid length. [ 199.628575][ T7677] lo speed is unknown, defaulting to 1000 [ 199.646791][ T7677] lo speed is unknown, defaulting to 1000 [ 199.673453][ T7677] lo speed is unknown, defaulting to 1000 [ 199.731527][ T7679] netlink: 24 bytes leftover after parsing attributes in process `syz.1.485'. [ 199.775726][ T5894] IPVS: starting estimator thread 0... [ 199.843996][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.853253][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.909730][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.924109][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.932086][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.936546][ T7695] netlink: 'syz.1.487': attribute type 1 has an invalid length. [ 199.950649][ T7688] IPVS: using max 25 ests per chain, 60000 per kthread [ 200.019738][ T7695] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 200.088072][ T7677] infiniband syz0: set down [ 200.095353][ T7677] infiniband syz0: added lo [ 200.117181][ T975] lo speed is unknown, defaulting to 1000 [ 200.163029][ T7677] RDS/IB: syz0: added [ 200.167943][ T7677] smc: adding ib device syz0 with port count 1 [ 200.174427][ T7677] smc: ib device syz0 port 1 has pnetid [ 200.188974][ T975] lo speed is unknown, defaulting to 1000 [ 200.203656][ T7677] lo speed is unknown, defaulting to 1000 [ 200.220056][ T978] IPVS: starting estimator thread 0... [ 200.327159][ T7702] IPVS: using max 26 ests per chain, 62400 per kthread [ 200.482285][ T7689] chnl_net:caif_netlink_parms(): no params data found [ 200.691759][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 200.788756][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 200.819864][ T7720] netlink: 32 bytes leftover after parsing attributes in process `syz.0.493'. [ 200.883381][ T7689] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.891048][ T7689] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.898941][ T7689] bridge_slave_0: entered allmulticast mode [ 200.906939][ T7689] bridge_slave_0: entered promiscuous mode [ 200.916785][ T7677] lo speed is unknown, defaulting to 1000 [ 200.925292][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.945252][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.955457][ T7689] bridge_slave_1: entered allmulticast mode [ 200.977367][ T7689] bridge_slave_1: entered promiscuous mode [ 201.183905][ T7689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.253135][ T7689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.483601][ T7689] team0: Port device team_slave_0 added [ 201.528512][ T7689] team0: Port device team_slave_1 added [ 201.588283][ T7747] netlink: 'syz.0.499': attribute type 25 has an invalid length. [ 201.661329][ T7677] lo speed is unknown, defaulting to 1000 [ 201.663122][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.705377][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.759172][ T7689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.784269][ T7689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.801472][ T7752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.501'. [ 201.823176][ T7689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.880248][ T7689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.000568][ T5857] Bluetooth: hci2: command tx timeout [ 202.221230][ T7689] hsr_slave_0: entered promiscuous mode [ 202.240780][ T7689] hsr_slave_1: entered promiscuous mode [ 202.258353][ T7689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.271362][ T7689] Cannot create hsr debugfs directory [ 202.332431][ T7769] netlink: 156 bytes leftover after parsing attributes in process `syz.0.504'. [ 202.345849][ T7677] lo speed is unknown, defaulting to 1000 [ 202.668777][ T7785] netlink: 144 bytes leftover after parsing attributes in process `syz.4.510'. [ 202.703327][ T7783] netlink: zone id is out of range [ 202.717758][ T7783] netlink: zone id is out of range [ 202.723126][ T7783] netlink: zone id is out of range [ 202.797301][ T7783] netlink: zone id is out of range [ 202.802499][ T7783] netlink: zone id is out of range [ 202.827833][ T7783] netlink: zone id is out of range [ 202.833856][ T7783] netlink: zone id is out of range [ 202.857158][ T7783] netlink: zone id is out of range [ 202.862340][ T7783] netlink: zone id is out of range [ 202.887262][ T7783] netlink: zone id is out of range [ 202.923207][ T7677] lo speed is unknown, defaulting to 1000 [ 203.825602][ T7677] lo speed is unknown, defaulting to 1000 [ 203.840770][ T7812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.517'. [ 204.035841][ T7819] tipc: Enabled bearer , priority 10 [ 204.069777][ T5857] Bluetooth: hci2: command tx timeout [ 204.302735][ T7809] lo speed is unknown, defaulting to 1000 [ 204.403806][ T7826] netlink: 136 bytes leftover after parsing attributes in process `syz.1.520'. [ 204.444312][ T7689] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.461875][ T7689] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 204.501732][ T7689] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 204.534815][ T7689] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 204.751338][ T7834] bond1: (slave ip6gretap2): Releasing backup interface [ 204.787777][ T7677] lo speed is unknown, defaulting to 1000 [ 204.824322][ T7689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.890933][ T7689] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.983258][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.990560][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.062155][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.069451][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.891407][ T7689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.083515][ T7689] veth0_vlan: entered promiscuous mode [ 206.126907][ T7689] veth1_vlan: entered promiscuous mode [ 206.152536][ T5857] Bluetooth: hci2: command tx timeout [ 206.211009][ T7689] veth0_macvtap: entered promiscuous mode [ 206.231430][ T7689] veth1_macvtap: entered promiscuous mode [ 206.305496][ T7689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.330803][ T7689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.345501][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.384705][ T7689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.459546][ T7689] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.487638][ T7689] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.502001][ T7689] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.511588][ T7689] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.677608][ T7877] dvmrp8: entered allmulticast mode [ 206.768237][ T7874] lo speed is unknown, defaulting to 1000 [ 206.787620][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'. [ 206.797104][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.822055][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.979468][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.990208][ T7885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.536'. [ 207.015085][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.037516][ T7885] 8021q: VLANs not supported on caif0 [ 207.121250][ T7882] lo speed is unknown, defaulting to 1000 [ 207.749751][ T7913] lo speed is unknown, defaulting to 1000 [ 207.990471][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.541'. [ 208.368198][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 208.460354][ T7940] netlink: 312 bytes leftover after parsing attributes in process `syz.1.544'. [ 208.785843][ T30] audit: type=1800 audit(1744545842.035:2): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.544" name="cgroup.controllers" dev="tmpfs" ino=704 res=0 errno=0 [ 209.357227][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.366404][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.375085][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.383448][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.392677][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.564401][ T1081] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.593838][ T7951] lo speed is unknown, defaulting to 1000 [ 209.731603][ T1081] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.017745][ T1081] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.051395][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.551'. [ 210.075315][ T7971] tipc: Enabling not permitted [ 210.082793][ T7971] tipc: Enabling of bearer rejected, failed to enable media [ 210.108741][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'. [ 210.127323][ T7966] netlink: 16 bytes leftover after parsing attributes in process `syz.3.551'. [ 210.246533][ T1081] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.335624][ T7979] netlink: 'syz.1.554': attribute type 1 has an invalid length. [ 210.990959][ T7951] chnl_net:caif_netlink_parms(): no params data found [ 211.163958][ T8001] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 211.276149][ T1081] bridge_slave_1: left allmulticast mode [ 211.324130][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 211.335916][ T1081] bridge_slave_1: left promiscuous mode [ 211.373535][ T1081] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.405487][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 211.408610][ T1081] bridge_slave_0: left allmulticast mode [ 211.426732][ T1081] bridge_slave_0: left promiscuous mode [ 211.434761][ T1081] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.513725][ T5855] Bluetooth: hci2: command tx timeout [ 211.792006][ T1081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.803567][ T1081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.814041][ T1081] bond0 (unregistering): Released all slaves [ 211.957669][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'. [ 212.089159][ T7951] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.110247][ T7951] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.130406][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'. [ 212.133632][ T7951] bridge_slave_0: entered allmulticast mode [ 212.162811][ T7951] bridge_slave_0: entered promiscuous mode [ 212.240643][ T7951] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.264294][ T7951] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.285445][ T7951] bridge_slave_1: entered allmulticast mode [ 212.294613][ T8037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.568'. [ 212.298342][ T7951] bridge_slave_1: entered promiscuous mode [ 212.356178][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.568'. [ 212.516362][ T8042] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.565475][ T7951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.765982][ T7951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.935255][ T8056] syz.0.574: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 212.968164][ T8049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 212.982395][ T8056] CPU: 1 UID: 0 PID: 8056 Comm: syz.0.574 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 212.982429][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.982443][ T8056] Call Trace: [ 212.982451][ T8056] [ 212.982461][ T8056] dump_stack_lvl+0x241/0x360 [ 212.982512][ T8056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.982543][ T8056] ? __pfx__printk+0x10/0x10 [ 212.982570][ T8056] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 212.982604][ T8056] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 212.982633][ T8056] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 212.982666][ T8056] warn_alloc+0x27c/0x410 [ 212.982704][ T8056] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 212.982737][ T8056] ? __pfx_warn_alloc+0x10/0x10 [ 212.982772][ T8056] ? kasan_save_track+0x3f/0x80 [ 212.982792][ T8056] ? __kasan_kmalloc+0x9d/0xb0 [ 212.982816][ T8056] ? xsk_setsockopt+0x449/0x840 [ 212.982836][ T8056] ? do_sock_setsockopt+0x3b1/0x710 [ 212.982867][ T8056] ? __x64_sys_setsockopt+0x1ee/0x280 [ 212.982897][ T8056] ? do_syscall_64+0xf3/0x230 [ 212.982923][ T8056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.982956][ T8056] __vmalloc_node_range_noprof+0x128/0x1390 [ 212.983023][ T8056] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 212.983063][ T8056] ? __kasan_kmalloc+0x9d/0xb0 [ 212.983093][ T8056] vmalloc_user_noprof+0x74/0x80 [ 212.983126][ T8056] ? xskq_create+0xb6/0x170 [ 212.983147][ T8056] xskq_create+0xb6/0x170 [ 212.983173][ T8056] xsk_init_queue+0xa1/0x100 [ 212.983200][ T8056] xsk_setsockopt+0x449/0x840 [ 212.983225][ T8056] ? __pfx_xsk_setsockopt+0x10/0x10 [ 212.983254][ T8056] ? __lock_acquire+0xad5/0xd80 [ 212.983275][ T8056] ? __pfx_aa_sk_perm+0x10/0x10 [ 212.983306][ T8056] ? aa_sock_opt_perm+0x79/0x120 [ 212.983345][ T8056] ? __pfx_xsk_setsockopt+0x10/0x10 [ 212.983365][ T8056] do_sock_setsockopt+0x3b1/0x710 [ 212.983406][ T8056] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 212.983437][ T8056] ? __fget_files+0x2a/0x420 [ 212.983473][ T8056] ? __fget_files+0x39d/0x420 [ 212.983510][ T8056] ? __fget_files+0x2a/0x420 [ 212.983551][ T8056] __x64_sys_setsockopt+0x1ee/0x280 [ 212.983593][ T8056] do_syscall_64+0xf3/0x230 [ 212.983621][ T8056] ? clear_bhb_loop+0x45/0xa0 [ 212.983646][ T8056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.983667][ T8056] RIP: 0033:0x7fe6a858d169 [ 212.983687][ T8056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.983705][ T8056] RSP: 002b:00007fe6a63f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.983727][ T8056] RAX: ffffffffffffffda RBX: 00007fe6a87a5fa0 RCX: 00007fe6a858d169 [ 212.983743][ T8056] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 212.983756][ T8056] RBP: 00007fe6a860e990 R08: 0000000000000004 R09: 0000000000000000 [ 212.983768][ T8056] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.983781][ T8056] R13: 0000000000000000 R14: 00007fe6a87a5fa0 R15: 00007ffe63c1b9b8 [ 212.983816][ T8056] [ 212.985861][ T8056] Mem-Info: [ 213.011502][ T8040] lo speed is unknown, defaulting to 1000 [ 213.013903][ T8056] active_anon:6933 inactive_anon:0 isolated_anon:0 [ 213.013903][ T8056] active_file:1505 inactive_file:38347 isolated_file:0 [ 213.013903][ T8056] unevictable:768 dirty:258 writeback:0 [ 213.013903][ T8056] slab_reclaimable:10494 slab_unreclaimable:102761 [ 213.013903][ T8056] mapped:30584 shmem:4389 pagetables:739 [ 213.013903][ T8056] sec_pagetables:0 bounce:0 [ 213.013903][ T8056] kernel_misc_reclaimable:0 [ 213.013903][ T8056] free:1336840 free_pcp:1416 free_cma:0 [ 213.363173][ T8065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.575'. [ 213.388764][ T1081] hsr_slave_0: left promiscuous mode [ 213.397182][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.575'. [ 213.406097][ T1081] hsr_slave_1: left promiscuous mode [ 213.426618][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.436136][ T8056] Node 0 active_anon:28832kB inactive_anon:0kB active_file:6020kB inactive_file:153316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130636kB dirty:1032kB writeback:0kB shmem:16920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11912kB pagetables:3156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.481489][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.500898][ T1081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.518074][ T8056] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.557121][ T1081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.588154][ T5855] Bluetooth: hci2: command tx timeout [ 213.617528][ T8056] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.658340][ T1081] veth1_macvtap: left promiscuous mode [ 213.664327][ T1081] veth0_macvtap: left promiscuous mode [ 213.677494][ T1081] veth1_vlan: left promiscuous mode [ 213.683491][ T8056] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 213.686833][ T1081] veth0_vlan: left promiscuous mode [ 213.732234][ T8056] Node 0 DMA32 free:1420836kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:28724kB inactive_anon:0kB active_file:6020kB inactive_file:153216kB unevictable:1536kB writepending:1028kB present:3129332kB managed:2547532kB mlocked:0kB bounce:0kB free_pcp:1784kB local_pcp:828kB free_cma:0kB [ 213.779887][ T8056] lowmem_reserve[]: 0 0 0 0 0 [ 213.784870][ T8056] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.843846][ T8056] lowmem_reserve[]: 0 0 0 0 0 [ 213.860084][ T8056] Node 1 Normal free:3912464kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.929033][ T8056] lowmem_reserve[]: 0 0 0 0 0 [ 213.947581][ T8056] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 213.977422][ T8056] Node 0 DMA32: 1*4kB (M) 3*8kB (ME) 6*16kB (UME) 47*32kB (UME) 113*64kB (UME) 539*128kB (UME) 188*256kB (UM) 64*512kB (UM) 20*1024kB (UM) 14*2048kB (UME) 296*4096kB (UM) = 1420316kB [ 214.042985][ T8056] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 214.057141][ T8056] Node 1 Normal: 200*4kB (UE) 48*8kB (UME) 43*16kB (UME) 194*32kB (UME) 98*64kB (UME) 32*128kB (UME) 13*256kB (UME) 11*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 946*4096kB (UM) = 3912464kB [ 214.076687][ T8056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 214.096781][ T8056] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 214.106429][ T8056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 214.136156][ T8056] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 214.145793][ T8056] 44478 total pagecache pages [ 214.151098][ T8056] 0 pages in swap cache [ 214.155303][ T8056] Free swap = 124996kB [ 214.159704][ T8056] Total swap = 124996kB [ 214.163961][ T8056] 2097051 pages RAM [ 214.167941][ T8056] 0 pages HighMem/MovableOnly [ 214.172724][ T8056] 428510 pages reserved [ 214.176992][ T8056] 0 pages cma reserved [ 214.560139][ T1081] team0 (unregistering): Port device team_slave_1 removed [ 214.600734][ T1081] team0 (unregistering): Port device team_slave_0 removed [ 215.033214][ T7951] team0: Port device team_slave_0 added [ 215.045485][ T7951] team0: Port device team_slave_1 added [ 215.272189][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.311494][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.388893][ T7951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.444059][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.488469][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.545842][ T7951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.669907][ T5850] Bluetooth: hci2: command tx timeout [ 215.804312][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.812242][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.825921][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 216.000752][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.198641][ T8100] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.215589][ T8100] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.226674][ T8100] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.242409][ T8100] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.296331][ T8113] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20000 [ 216.373470][ T8100] vlan2: left allmulticast mode [ 216.378869][ T8100] bond0: left allmulticast mode [ 216.384031][ T8100] bond_slave_0: left allmulticast mode [ 216.403194][ T8100] bond_slave_1: left allmulticast mode [ 216.443376][ T7951] hsr_slave_0: entered promiscuous mode [ 216.469069][ T7951] hsr_slave_1: entered promiscuous mode [ 216.475483][ T7951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.491980][ T7951] Cannot create hsr debugfs directory [ 216.579600][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 216.607983][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'. [ 216.701763][ T8127] netlink: 'syz.4.590': attribute type 10 has an invalid length. [ 216.724515][ T8127] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 216.783720][ T8120] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.793476][ T8120] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.802527][ T8120] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.811546][ T8120] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.833986][ T8123] net_ratelimit: 444 callbacks suppressed [ 216.834009][ T8123] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 216.867233][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 216.873539][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 217.380085][ T8142] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 217.692289][ T8154] netlink: 'syz.1.595': attribute type 10 has an invalid length. [ 217.748930][ T5857] Bluetooth: hci2: command tx timeout [ 217.859166][ T8154] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 217.891123][ T8155] lo speed is unknown, defaulting to 1000 [ 217.902054][ T8154] syz.1.595 (8154) used greatest stack depth: 19176 bytes left [ 217.936940][ T7951] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.971824][ T7951] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.019150][ T7951] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.055506][ T7951] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.515658][ T8181] netlink: 16 bytes leftover after parsing attributes in process `syz.0.605'. [ 218.610130][ T7951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.667404][ T7951] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.710456][ T7903] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.717865][ T7903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.753957][ T8172] lo speed is unknown, defaulting to 1000 [ 218.812810][ T7903] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.820137][ T7903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.475135][ T8178] lo speed is unknown, defaulting to 1000 [ 219.588145][ T7951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.334913][ T7951] veth0_vlan: entered promiscuous mode [ 220.385114][ T7951] veth1_vlan: entered promiscuous mode [ 220.604722][ T7951] veth0_macvtap: entered promiscuous mode [ 220.650649][ T7951] veth1_macvtap: entered promiscuous mode [ 220.712762][ T7951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.764822][ T7951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.792366][ T7951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.804571][ T7951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.817056][ T7951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.837076][ T7951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.203713][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.222436][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.345458][ T7921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.364912][ T7921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.541524][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.615'. [ 221.769936][ T8243] geneve1: entered promiscuous mode [ 222.111386][ T7951] syz-executor (7951) used greatest stack depth: 18984 bytes left [ 222.933594][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 223.284129][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 223.293835][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 223.301865][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 223.310643][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 223.318566][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.361771][ T8273] lo speed is unknown, defaulting to 1000 [ 223.818211][ T8277] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.081328][ T8273] chnl_net:caif_netlink_parms(): no params data found [ 224.200330][ T8287] lo speed is unknown, defaulting to 1000 [ 224.399758][ T8295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.627'. [ 224.486126][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.500418][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.517522][ T8273] bridge_slave_0: entered allmulticast mode [ 224.528721][ T8273] bridge_slave_0: entered promiscuous mode [ 224.559632][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.587314][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.601821][ T8273] bridge_slave_1: entered allmulticast mode [ 224.619221][ T8273] bridge_slave_1: entered promiscuous mode [ 224.661459][ T8302] netlink: 'syz.1.632': attribute type 11 has an invalid length. [ 224.694689][ T8302] netlink: 224 bytes leftover after parsing attributes in process `syz.1.632'. [ 224.778562][ T8273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.801999][ T8273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.990670][ T8273] team0: Port device team_slave_0 added [ 225.010630][ T8273] team0: Port device team_slave_1 added [ 225.042390][ T8307] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.051063][ T8306] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.111564][ T8273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.126845][ T8273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.184354][ T8273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.209706][ T8273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.216701][ T8273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.242930][ T8273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.347445][ T5857] Bluetooth: hci2: command tx timeout [ 225.510858][ T8273] hsr_slave_0: entered promiscuous mode [ 225.530726][ T8273] hsr_slave_1: entered promiscuous mode [ 225.567816][ T8273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.575864][ T8273] Cannot create hsr debugfs directory [ 225.992010][ T8273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.149513][ T8273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.234482][ T8273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.376666][ T8273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.785440][ T8273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.812451][ T8273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.844292][ T8273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.863228][ T8273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 227.164650][ T8273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.216748][ T8273] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.242159][ T8346] netlink: 40 bytes leftover after parsing attributes in process `syz.4.640'. [ 227.252657][ T8344] batman_adv: batadv0: Adding interface: dummy0 [ 227.261378][ T8344] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.298503][ T8344] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 227.314887][ T8346] tipc: Invalid UDP bearer configuration [ 227.314943][ T8346] tipc: Enabling of bearer rejected, failed to enable media [ 227.359184][ T7921] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.366452][ T7921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.414663][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.422110][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.430176][ T5857] Bluetooth: hci2: command tx timeout [ 227.573516][ T8355] lo speed is unknown, defaulting to 1000 [ 227.725246][ T8367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.644'. [ 227.807846][ T8369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.648'. [ 227.843943][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.648'. [ 227.866184][ T8369] tipc: Enabling of bearer rejected, failed to enable media [ 227.881293][ T8369] netlink: 36 bytes leftover after parsing attributes in process `syz.0.648'. [ 228.044048][ T8273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.226285][ T8273] veth0_vlan: entered promiscuous mode [ 228.351694][ T8379] netlink: 'syz.0.651': attribute type 1 has an invalid length. [ 228.384388][ T8273] veth1_vlan: entered promiscuous mode [ 228.432848][ T8384] netlink: 'syz.3.652': attribute type 1 has an invalid length. [ 228.482891][ T8384] netlink: 'syz.3.652': attribute type 10 has an invalid length. [ 228.525058][ T8384] netlink: 'syz.3.652': attribute type 4 has an invalid length. [ 228.557398][ T8384] netlink: 196 bytes leftover after parsing attributes in process `syz.3.652'. [ 228.652075][ T8273] veth0_macvtap: entered promiscuous mode [ 228.710046][ T8273] veth1_macvtap: entered promiscuous mode [ 228.901479][ T8391] lo speed is unknown, defaulting to 1000 [ 228.927666][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.946938][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.968929][ T8273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.010108][ T8273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.044341][ T8273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.066367][ T8273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.153266][ T8273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.173319][ T8273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.197112][ T8273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.208712][ T8273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.424382][ T5913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.458170][ T5913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.507436][ T5857] Bluetooth: hci2: command tx timeout [ 229.553777][ T7903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.562725][ T7903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.895615][ T8390] lo speed is unknown, defaulting to 1000 [ 229.985435][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 230.197444][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.668'. [ 230.228216][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'. [ 230.505008][ T8426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.523680][ T8426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.544641][ T8426] bond0 (unregistering): Released all slaves [ 231.400411][ T8461] netlink: 'syz.0.677': attribute type 10 has an invalid length. [ 231.410220][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 231.446352][ T5928] IPVS: starting estimator thread 0... [ 231.580023][ T8463] IPVS: using max 26 ests per chain, 62400 per kthread [ 231.774359][ T8476] openvswitch: netlink: EtherType 0 is less than min 600 [ 231.797242][ T8477] netlink: 'syz.3.679': attribute type 1 has an invalid length. [ 232.184887][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.195604][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.205299][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.214081][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.222235][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.283877][ T8487] lo speed is unknown, defaulting to 1000 [ 232.764617][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 232.865703][ T8495] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.970262][ T8495] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.050757][ T8487] chnl_net:caif_netlink_parms(): no params data found [ 233.099818][ T8511] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 233.136581][ T8495] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.278193][ T8495] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.380926][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.389875][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.399951][ T8487] bridge_slave_0: entered allmulticast mode [ 233.408329][ T8487] bridge_slave_0: entered promiscuous mode [ 233.424980][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.436884][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.444373][ T8487] bridge_slave_1: entered allmulticast mode [ 233.452444][ T8487] bridge_slave_1: entered promiscuous mode [ 233.535948][ T8495] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.556221][ T8487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.580857][ T8495] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.612312][ T8487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.635116][ T8495] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.658305][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'. [ 233.715137][ T8495] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.740794][ T8487] team0: Port device team_slave_0 added [ 233.762576][ T8487] team0: Port device team_slave_1 added [ 233.861093][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.875021][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.894928][ T8544] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.698'. [ 233.919611][ T8544] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 233.931172][ T8487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.944120][ T8544] openvswitch: netlink: Message has 13 unknown bytes. [ 233.947490][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.975646][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.005385][ T8487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.141719][ T8487] hsr_slave_0: entered promiscuous mode [ 234.159712][ T8487] hsr_slave_1: entered promiscuous mode [ 234.173808][ T8487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.183980][ T8487] Cannot create hsr debugfs directory [ 234.284370][ T8552] syzkaller0: entered allmulticast mode [ 234.307265][ T5855] Bluetooth: hci2: command tx timeout [ 234.329225][ T8552] syzkaller0 (unregistering): left allmulticast mode [ 234.768597][ T8487] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.858369][ T8569] netlink: 128 bytes leftover after parsing attributes in process `syz.3.708'. [ 234.891602][ T8569] netlink: 128 bytes leftover after parsing attributes in process `syz.3.708'. [ 234.921402][ T8569] netlink: 82 bytes leftover after parsing attributes in process `syz.3.708'. [ 234.993048][ T8487] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.065503][ T8572] lo speed is unknown, defaulting to 1000 [ 235.120500][ T8487] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.232779][ T8585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.243499][ T8587] netlink: 32 bytes leftover after parsing attributes in process `syz.4.714'. [ 235.323805][ T8487] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.359495][ T8587] (unnamed net_device) (uninitialized): option ad_select: invalid value (47) [ 235.372447][ T8592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.715'. [ 235.389500][ T8592] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 235.477389][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'. [ 235.556566][ T8600] netlink: 220 bytes leftover after parsing attributes in process `syz.4.717'. [ 235.740238][ T8487] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 235.819598][ T8487] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 235.965823][ T8487] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 235.982003][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'. [ 236.025966][ T8611] pimreg: entered allmulticast mode [ 236.034876][ T8607] pimreg: left allmulticast mode [ 236.109173][ T8615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.719'. [ 236.129719][ T8610] netlink: 80 bytes leftover after parsing attributes in process `syz.1.720'. [ 236.145301][ T8487] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 236.221773][ T8607] nbd: must specify a size in bytes for the device [ 236.380919][ T8625] netlink: 32 bytes leftover after parsing attributes in process `syz.1.722'. [ 236.390603][ T5855] Bluetooth: hci2: command tx timeout [ 236.661751][ T8487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.760352][ T8487] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.801065][ T7921] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.808318][ T7921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.817997][ T8635] netlink: 'syz.4.726': attribute type 10 has an invalid length. [ 236.878309][ T8635] team0: Port device dummy0 added [ 236.914816][ T7921] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.922134][ T7921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.072473][ T8643] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 237.190544][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.729'. [ 237.550832][ T8487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.599113][ T8659] netlink: 248 bytes leftover after parsing attributes in process `syz.4.732'. [ 237.720515][ T8487] veth0_vlan: entered promiscuous mode [ 237.903464][ T8660] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 238.305247][ T8487] veth1_vlan: entered promiscuous mode [ 238.468442][ T5855] Bluetooth: hci2: command tx timeout [ 238.576788][ T8487] veth0_macvtap: entered promiscuous mode [ 238.622121][ T8487] veth1_macvtap: entered promiscuous mode [ 238.669864][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.702359][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.717233][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.733833][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.764766][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.802920][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.837833][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.875137][ T8487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.875207][ T8690] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 238.903274][ T8487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.935314][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.974373][ T8487] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.991594][ T8487] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.005171][ T8487] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.023979][ T8487] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.239530][ T7905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.255059][ T8734] tipc: Started in network mode [ 240.264458][ T8734] tipc: Node identity ac14140f, cluster identity 4711 [ 240.275877][ T7905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.295774][ T8734] tipc: New replicast peer: 255.255.255.255 [ 240.303351][ T8734] tipc: Enabled bearer , priority 10 [ 240.316750][ T8735] __nla_validate_parse: 4 callbacks suppressed [ 240.316772][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.752'. [ 240.344518][ T8739] @ÿ: renamed from bond_slave_0 [ 240.355060][ T8739] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 240.381758][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 240.432221][ T8730] tipc: Disabling bearer [ 240.546231][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.555072][ T5855] Bluetooth: hci2: command tx timeout [ 240.567731][ T8730] netlink: 5 bytes leftover after parsing attributes in process `syz.3.751'. [ 240.578098][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.591247][ T8745] vxcan3: entered allmulticast mode [ 240.804366][ T8758] lo speed is unknown, defaulting to 1000 [ 241.004173][ T8765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.757'. [ 241.160230][ T8767] netlink: 32 bytes leftover after parsing attributes in process `syz.1.760'. [ 241.539224][ T8773] netlink: 'syz.1.762': attribute type 21 has an invalid length. [ 241.561114][ T8773] netlink: 32 bytes leftover after parsing attributes in process `syz.1.762'. [ 243.068221][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.078353][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.086876][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.099484][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.110535][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.271220][ T8821] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.774'. [ 243.292023][ T8817] lo speed is unknown, defaulting to 1000 [ 243.304779][ T8821] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 243.979824][ T8845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.777'. [ 244.015399][ T8834] lo speed is unknown, defaulting to 1000 [ 244.145084][ T8848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.779'. [ 244.682389][ T8862] vlan2: entered allmulticast mode [ 244.697528][ T8862] bond0: entered allmulticast mode [ 244.702722][ T8862] @ÿ: entered allmulticast mode [ 244.717106][ T8862] bond_slave_1: entered allmulticast mode [ 244.723063][ T8862] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 244.955507][ T8817] chnl_net:caif_netlink_parms(): no params data found [ 244.992890][ T8839] lo speed is unknown, defaulting to 1000 [ 245.187342][ T5855] Bluetooth: hci2: command tx timeout [ 245.681214][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.697194][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.704484][ T8817] bridge_slave_0: entered allmulticast mode [ 245.729084][ T8817] bridge_slave_0: entered promiscuous mode [ 245.739349][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.757258][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.764570][ T8817] bridge_slave_1: entered allmulticast mode [ 245.808951][ T8817] bridge_slave_1: entered promiscuous mode [ 246.125626][ T8817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.160651][ T8817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.430933][ T8889] netlink: 'syz.3.791': attribute type 4 has an invalid length. [ 246.492741][ T8817] team0: Port device team_slave_0 added [ 246.532665][ T8817] team0: Port device team_slave_1 added [ 246.578428][ T8884] lo speed is unknown, defaulting to 1000 [ 246.607811][ T8892] netlink: 264 bytes leftover after parsing attributes in process `syz.3.792'. [ 246.712399][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.737476][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.819312][ T8817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.846194][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.881704][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.957515][ T8817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.267193][ T5855] Bluetooth: hci2: command tx timeout [ 247.278170][ T8817] hsr_slave_0: entered promiscuous mode [ 247.282542][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.795'. [ 247.307660][ T8817] hsr_slave_1: entered promiscuous mode [ 247.328192][ T8817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.352529][ T8817] Cannot create hsr debugfs directory [ 248.673392][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.803'. [ 248.822459][ T8931] vlan2: entered promiscuous mode [ 248.837092][ T8931] team0: entered promiscuous mode [ 249.083534][ T8944] [ 249.085931][ T8944] ====================================================== [ 249.093169][ T8944] WARNING: possible circular locking dependency detected [ 249.100218][ T8944] 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 Not tainted [ 249.107431][ T8944] ------------------------------------------------------ [ 249.114455][ T8944] syz.0.807/8944 is trying to acquire lock: [ 249.120352][ T8944] ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0x10f0/0x39c0 [ 249.129426][ T8944] [ 249.129426][ T8944] but task is already holding lock: [ 249.136808][ T8944] ffff8880565aa1a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 249.146957][ T8944] [ 249.146957][ T8944] which lock already depends on the new lock. [ 249.146957][ T8944] [ 249.157380][ T8944] [ 249.157380][ T8944] the existing dependency chain (in reverse order) is: [ 249.166410][ T8944] [ 249.166410][ T8944] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 249.175317][ T8944] lock_acquire+0x116/0x2f0 [ 249.180365][ T8944] __mutex_lock+0x1a5/0x10c0 [ 249.185505][ T8944] smc_switch_to_fallback+0x35/0xda0 [ 249.191335][ T8944] smc_sendmsg+0x11f/0x530 [ 249.196281][ T8944] __sock_sendmsg+0x221/0x270 [ 249.201489][ T8944] __sys_sendto+0x365/0x4c0 [ 249.206525][ T8944] __x64_sys_sendto+0xde/0x100 [ 249.211818][ T8944] do_syscall_64+0xf3/0x230 [ 249.216848][ T8944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.223267][ T8944] [ 249.223267][ T8944] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 249.230933][ T8944] lock_acquire+0x116/0x2f0 [ 249.235957][ T8944] lock_sock_nested+0x48/0x100 [ 249.241251][ T8944] do_ip_setsockopt+0x17e9/0x39c0 [ 249.246801][ T8944] ip_setsockopt+0x63/0x100 [ 249.251836][ T8944] do_sock_setsockopt+0x3b1/0x710 [ 249.257480][ T8944] __x64_sys_setsockopt+0x1ee/0x280 [ 249.263477][ T8944] do_syscall_64+0xf3/0x230 [ 249.268520][ T8944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.274956][ T8944] [ 249.274956][ T8944] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 249.282187][ T8944] validate_chain+0xa69/0x24e0 [ 249.287575][ T8944] __lock_acquire+0xad5/0xd80 [ 249.292778][ T8944] lock_acquire+0x116/0x2f0 [ 249.297808][ T8944] __mutex_lock+0x1a5/0x10c0 [ 249.302936][ T8944] do_ip_setsockopt+0x10f0/0x39c0 [ 249.308577][ T8944] ip_setsockopt+0x63/0x100 [ 249.313617][ T8944] smc_setsockopt+0x25c/0xd50 [ 249.318911][ T8944] do_sock_setsockopt+0x3b1/0x710 [ 249.324564][ T8944] __x64_sys_setsockopt+0x1ee/0x280 [ 249.330324][ T8944] do_syscall_64+0xf3/0x230 [ 249.335360][ T8944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.341864][ T8944] [ 249.341864][ T8944] other info that might help us debug this: [ 249.341864][ T8944] [ 249.352101][ T8944] Chain exists of: [ 249.352101][ T8944] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 249.352101][ T8944] [ 249.365694][ T8944] Possible unsafe locking scenario: [ 249.365694][ T8944] [ 249.373156][ T8944] CPU0 CPU1 [ 249.378525][ T8944] ---- ---- [ 249.383982][ T8944] lock(&smc->clcsock_release_lock); [ 249.389457][ T8944] lock(sk_lock-AF_INET); [ 249.396410][ T8944] lock(&smc->clcsock_release_lock); [ 249.404388][ T8944] lock(rtnl_mutex); [ 249.408393][ T8944] [ 249.408393][ T8944] *** DEADLOCK *** [ 249.408393][ T8944] [ 249.416534][ T8944] 1 lock held by syz.0.807/8944: [ 249.421470][ T8944] #0: ffff8880565aa1a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 249.432027][ T8944] [ 249.432027][ T8944] stack backtrace: [ 249.437924][ T8944] CPU: 1 UID: 0 PID: 8944 Comm: syz.0.807 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 249.437957][ T8944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 249.437980][ T8944] Call Trace: [ 249.437988][ T8944] [ 249.437996][ T8944] dump_stack_lvl+0x241/0x360 [ 249.438025][ T8944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.438048][ T8944] ? __pfx__printk+0x10/0x10 [ 249.438071][ T8944] ? print_lock+0x171/0x1a0 [ 249.438092][ T8944] print_circular_bug+0x2e1/0x300 [ 249.438115][ T8944] check_noncircular+0x142/0x160 [ 249.438144][ T8944] validate_chain+0xa69/0x24e0 [ 249.438175][ T8944] __lock_acquire+0xad5/0xd80 [ 249.438195][ T8944] lock_acquire+0x116/0x2f0 [ 249.438209][ T8944] ? do_ip_setsockopt+0x10f0/0x39c0 [ 249.438234][ T8944] __mutex_lock+0x1a5/0x10c0 [ 249.438255][ T8944] ? do_ip_setsockopt+0x10f0/0x39c0 [ 249.438272][ T8944] ? preempt_schedule+0xe4/0xf0 [ 249.438291][ T8944] ? preempt_schedule_common+0x84/0xd0 [ 249.438309][ T8944] ? look_up_lock_class+0x7b/0x170 [ 249.438331][ T8944] ? register_lock_class+0x54/0x330 [ 249.438358][ T8944] ? do_ip_setsockopt+0x10f0/0x39c0 [ 249.438377][ T8944] ? __pfx___mutex_lock+0x10/0x10 [ 249.438396][ T8944] ? __lock_acquire+0xad5/0xd80 [ 249.438416][ T8944] ? __pfx___mutex_trylock_common+0x10/0x10 [ 249.438439][ T8944] do_ip_setsockopt+0x10f0/0x39c0 [ 249.438462][ T8944] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 249.438483][ T8944] ? smc_setsockopt+0x1b2/0xd50 [ 249.438502][ T8944] ? __pfx___mutex_lock+0x10/0x10 [ 249.438523][ T8944] ? futex_wake+0x525/0x5d0 [ 249.438543][ T8944] ip_setsockopt+0x63/0x100 [ 249.438561][ T8944] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 249.438585][ T8944] smc_setsockopt+0x25c/0xd50 [ 249.438605][ T8944] ? __pfx_aa_sk_perm+0x10/0x10 [ 249.438625][ T8944] ? __pfx_smc_setsockopt+0x10/0x10 [ 249.438644][ T8944] ? aa_sock_opt_perm+0x79/0x120 [ 249.438669][ T8944] ? __pfx_smc_setsockopt+0x10/0x10 [ 249.438687][ T8944] do_sock_setsockopt+0x3b1/0x710 [ 249.438715][ T8944] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 249.438741][ T8944] ? __fget_files+0x2a/0x420 [ 249.438767][ T8944] ? __fget_files+0x39d/0x420 [ 249.438790][ T8944] ? __fget_files+0x2a/0x420 [ 249.438816][ T8944] __x64_sys_setsockopt+0x1ee/0x280 [ 249.438847][ T8944] do_syscall_64+0xf3/0x230 [ 249.438872][ T8944] ? clear_bhb_loop+0x45/0xa0 [ 249.438891][ T8944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.438915][ T8944] RIP: 0033:0x7fe6a858d169 [ 249.438931][ T8944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.438947][ T8944] RSP: 002b:00007fe6a63f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 249.438967][ T8944] RAX: ffffffffffffffda RBX: 00007fe6a87a5fa0 RCX: 00007fe6a858d169 [ 249.438980][ T8944] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000005 [ 249.438990][ T8944] RBP: 00007fe6a860e990 R08: 0000000000000000 R09: 0000000000000000 [ 249.439001][ T8944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.439011][ T8944] R13: 0000000000000000 R14: 00007fe6a87a5fa0 R15: 00007ffe63c1b9b8 [ 249.439031][ T8944] [ 249.457168][ T5855] Bluetooth: hci2: command tx timeout [ 249.810674][ T8817] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.885730][ T8817] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.952604][ T8817] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.007467][ T8817] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.075600][ T8817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 250.088108][ T8817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 250.106466][ T8817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.116289][ T8817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.172076][ T8817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.191975][ T8817] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.204025][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.211175][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.224236][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.231368][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.352760][ T8817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.391020][ T8817] veth0_vlan: entered promiscuous mode [ 250.403351][ T8817] veth1_vlan: entered promiscuous mode [ 250.427847][ T8817] veth0_macvtap: entered promiscuous mode [ 250.438386][ T8817] veth1_macvtap: entered promiscuous mode [ 250.455111][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.465954][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.476939][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.488455][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.498484][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.510250][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.526613][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.536967][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.548610][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.561002][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.572033][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.581940][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.593267][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.604050][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.617953][ T8817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.626803][ T8817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.638607][ T8817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.647586][ T8817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.676569][ T8817] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 250.703030][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.704695][ T8817] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 250.715632][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.741365][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.749612][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.750674][ T1300] ieee802154 phy0 wpan0: encryption failed: -22