last executing test programs: 1m2.640154992s ago: executing program 1 (id=596): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xd, 0x8c4b815a546582b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) 1m2.147907111s ago: executing program 1 (id=600): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async, rerun: 64) recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x7}], 0x1, 0x2000, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000100)={0x2}) (async) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000140)={0x20000004}) epoll_pwait(r7, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) (async, rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r13, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e617481e6ea5e6faf259800000000000000000000000000000000000000000004"], &(0x7f0000001740)=0x2c) (async, rerun: 32) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x4, 0x2, @TCA_HFSC_USC={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x70}}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071124500000000009500000004000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000007a8584074a2275d835889c8b8c08024a5083aa304a068958fe804442180f1a58bd2622b2433f25faabec0096b06a7956b4c2d3c61c42118aac0afb39bfc88aa922edafeeaf903172b270c8b3249f2896c3fabf3dc83d32ad8187a4329993c2d8bea10a33a31c1dd7816a76bd0cc4326afcc4b1e4f9e5cdb570e4e0fcae73d1e7ce1ff19574d9f9c0ab7be563fda2c84f04d68bbdd046f22b48ee0e0d242dd9c718c1270e1939e3d4355df8924392b63d7e56b88d5540d425d569b66251e845d6cd6bdcbea5a2f218ab1f78f858b8db98214dae34658916e1", @ANYRES16=r14, @ANYBLOB="eb7a2bbd7000fcdbdf25210000000500200001000000050020000100000009001f00706879310000000005002000010000000c0005000200aaaaaaaaaaaa0a0001007770616e3300000005002000000000000c0005000202aaaaaaaaaaaa"], 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 43.990092066s ago: executing program 1 (id=600): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async, rerun: 64) recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x7}], 0x1, 0x2000, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000100)={0x2}) (async) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000140)={0x20000004}) epoll_pwait(r7, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) (async, rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r13, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e617481e6ea5e6faf259800000000000000000000000000000000000000000004"], &(0x7f0000001740)=0x2c) (async, rerun: 32) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x4, 0x2, @TCA_HFSC_USC={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x70}}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071124500000000009500000004000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000007a8584074a2275d835889c8b8c08024a5083aa304a068958fe804442180f1a58bd2622b2433f25faabec0096b06a7956b4c2d3c61c42118aac0afb39bfc88aa922edafeeaf903172b270c8b3249f2896c3fabf3dc83d32ad8187a4329993c2d8bea10a33a31c1dd7816a76bd0cc4326afcc4b1e4f9e5cdb570e4e0fcae73d1e7ce1ff19574d9f9c0ab7be563fda2c84f04d68bbdd046f22b48ee0e0d242dd9c718c1270e1939e3d4355df8924392b63d7e56b88d5540d425d569b66251e845d6cd6bdcbea5a2f218ab1f78f858b8db98214dae34658916e1", @ANYRES16=r14, @ANYBLOB="eb7a2bbd7000fcdbdf25210000000500200001000000050020000100000009001f00706879310000000005002000010000000c0005000200aaaaaaaaaaaa0a0001007770616e3300000005002000000000000c0005000202aaaaaaaaaaaa"], 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 32.074270642s ago: executing program 1 (id=600): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async, rerun: 64) recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x7}], 0x1, 0x2000, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000100)={0x2}) (async) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000140)={0x20000004}) epoll_pwait(r7, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) (async, rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r13, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e617481e6ea5e6faf259800000000000000000000000000000000000000000004"], &(0x7f0000001740)=0x2c) (async, rerun: 32) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x4, 0x2, @TCA_HFSC_USC={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x70}}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071124500000000009500000004000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000007a8584074a2275d835889c8b8c08024a5083aa304a068958fe804442180f1a58bd2622b2433f25faabec0096b06a7956b4c2d3c61c42118aac0afb39bfc88aa922edafeeaf903172b270c8b3249f2896c3fabf3dc83d32ad8187a4329993c2d8bea10a33a31c1dd7816a76bd0cc4326afcc4b1e4f9e5cdb570e4e0fcae73d1e7ce1ff19574d9f9c0ab7be563fda2c84f04d68bbdd046f22b48ee0e0d242dd9c718c1270e1939e3d4355df8924392b63d7e56b88d5540d425d569b66251e845d6cd6bdcbea5a2f218ab1f78f858b8db98214dae34658916e1", @ANYRES16=r14, @ANYBLOB="eb7a2bbd7000fcdbdf25210000000500200001000000050020000100000009001f00706879310000000005002000010000000c0005000200aaaaaaaaaaaa0a0001007770616e3300000005002000000000000c0005000202aaaaaaaaaaaa"], 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 19.521864089s ago: executing program 1 (id=600): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async, rerun: 64) recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x7}], 0x1, 0x2000, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000100)={0x2}) (async) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000140)={0x20000004}) epoll_pwait(r7, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) (async, rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r13, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e617481e6ea5e6faf259800000000000000000000000000000000000000000004"], &(0x7f0000001740)=0x2c) (async, rerun: 32) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x4, 0x2, @TCA_HFSC_USC={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x70}}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071124500000000009500000004000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000007a8584074a2275d835889c8b8c08024a5083aa304a068958fe804442180f1a58bd2622b2433f25faabec0096b06a7956b4c2d3c61c42118aac0afb39bfc88aa922edafeeaf903172b270c8b3249f2896c3fabf3dc83d32ad8187a4329993c2d8bea10a33a31c1dd7816a76bd0cc4326afcc4b1e4f9e5cdb570e4e0fcae73d1e7ce1ff19574d9f9c0ab7be563fda2c84f04d68bbdd046f22b48ee0e0d242dd9c718c1270e1939e3d4355df8924392b63d7e56b88d5540d425d569b66251e845d6cd6bdcbea5a2f218ab1f78f858b8db98214dae34658916e1", @ANYRES16=r14, @ANYBLOB="eb7a2bbd7000fcdbdf25210000000500200001000000050020000100000009001f00706879310000000005002000010000000c0005000200aaaaaaaaaaaa0a0001007770616e3300000005002000000000000c0005000202aaaaaaaaaaaa"], 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 4.894188418s ago: executing program 1 (id=600): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x6, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async, rerun: 64) recvmmsg(r5, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x7}], 0x1, 0x2000, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000100)={0x2}) (async) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000140)={0x20000004}) epoll_pwait(r7, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) (async, rerun: 32) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r13, 0x0, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6e617481e6ea5e6faf259800000000000000000000000000000000000000000004"], &(0x7f0000001740)=0x2c) (async, rerun: 32) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x70, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x4, 0x2, @TCA_HFSC_USC={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x70}}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071124500000000009500000004000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000007a8584074a2275d835889c8b8c08024a5083aa304a068958fe804442180f1a58bd2622b2433f25faabec0096b06a7956b4c2d3c61c42118aac0afb39bfc88aa922edafeeaf903172b270c8b3249f2896c3fabf3dc83d32ad8187a4329993c2d8bea10a33a31c1dd7816a76bd0cc4326afcc4b1e4f9e5cdb570e4e0fcae73d1e7ce1ff19574d9f9c0ab7be563fda2c84f04d68bbdd046f22b48ee0e0d242dd9c718c1270e1939e3d4355df8924392b63d7e56b88d5540d425d569b66251e845d6cd6bdcbea5a2f218ab1f78f858b8db98214dae34658916e1", @ANYRES16=r14, @ANYBLOB="eb7a2bbd7000fcdbdf25210000000500200001000000050020000100000009001f00706879310000000005002000010000000c0005000200aaaaaaaaaaaa0a0001007770616e3300000005002000000000000c0005000202aaaaaaaaaaaa"], 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 2.326336076s ago: executing program 2 (id=1140): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x0, 0xa, 0x148, 0x368, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x64, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {}, 0xa}}, 0x26) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x38, &(0x7f00000004c0)={@random="c3ad7f0ceb48", @random="f8794fda5bd6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x16, 0x0, @opaque="bdff40e3beba6ebea353b7576830"}}}}}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5b}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.255887794s ago: executing program 0 (id=1141): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0xf27, 0x1004001, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r7) write$cgroup_pid(r7, &(0x7f00000005c0), 0x12) write$cgroup_pid(r7, &(0x7f0000000340), 0x12) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'tunl0\x00', r1, 0x8, 0x7, 0xe43, 0x5, {{0x9, 0x4, 0x3, 0x6, 0x24, 0x66, 0x0, 0x7f, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0x25, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}]}}}}}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r11, 0x0, r10, 0x0, 0xffffffffffff8000, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x10, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='syzkaller\x00', 0xd, 0xe8, &(0x7f0000000780)=""/232, 0xf575ad0193818f4c, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000900)=[{0x5, 0x1, 0x2, 0xb}, {0x2, 0x1, 0x7, 0x4}], 0x10, 0x3, @void, @value}, 0x94) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r13, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r13, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0x1f, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x705}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x3, 0x1, 0x0, r8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x7ab0889f3a4cc9d4, 0x0, '\x00', r9, @fallback=0x11, r11, 0x8, &(0x7f0000000680)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r12, 0x0, &(0x7f0000000a00)=[0xffffffffffffffff, 0xffffffffffffffff, r13, 0xffffffffffffffff], 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r14 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000001c0)={0x2}, 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008100}, 0x0) 2.128109263s ago: executing program 2 (id=1144): readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000180)={0x1, 0x72, "60178b0955655552a2751cbd62a745320736931c91a51f63ac48d4359f9a535117729f3a0b35915cc9d6006d6656f40f1579168e076990b703d58c816b3032c87e4df50b84c50119b4a1285e8a74176e4e1efc95675dd422d03bba9801347fd4185849cc56a356ce60d0ffba63505c889e8e"}) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) clock_gettime(0x3, &(0x7f0000000080)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000006000061104c00000000005f500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x9) write$cgroup_int(r2, &(0x7f0000000140)=0x5, 0x12) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a3200000000140000001100"], 0x80}}, 0x0) syz_emit_ethernet(0x22, &(0x7f00000013c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @loopback}}}}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r4) splice(r5, 0x0, r4, 0x0, 0x8000, 0xc) setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000280), 0x4) 1.79693978s ago: executing program 4 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001cc0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x3, [0xa, 0x9, 0xc, 0x8, 0x5, 0xb, 0x10, 0x5, 0xe, 0xf, 0xa, 0xf, 0x8, 0x7, 0x1, 0xf], 0x1, [0x5f1, 0x3, 0xdd64, 0x7, 0xfffa, 0x200, 0x5, 0xdb7, 0x9, 0x9d, 0xa, 0x5cb6, 0x4, 0x2, 0xd, 0xfbff], [0x0, 0x8, 0x4, 0x4, 0x6, 0x4, 0x2, 0x1, 0x4, 0xfffd, 0x2, 0x0, 0x5, 0x4d, 0x7, 0x3ff]}}}}]}, 0x88}}, 0x0) 1.266297324s ago: executing program 4 (id=1149): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.22798637s ago: executing program 0 (id=1150): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket(0x14, 0x4, 0x81fa) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'wg1\x00', {0x2, 0x4e23, @loopback=0x7f000000}}) 1.112031585s ago: executing program 3 (id=1151): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="15000000220200000000000000e60710d4dd137bed8c28fc19d0144b9abeac874e72e280fb9fb7d1cd3f54da1c85b5f30a043365d04264620258f1efcdbae5c098839cad01000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) socket(0x15, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$igmp6(0xa, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x9, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r2, &(0x7f00000001c0)="c12d2f1a3f6870b3", &(0x7f00000000c0)=""/185}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) socket(0x10, 0x3, 0x0) 1.110416064s ago: executing program 4 (id=1152): r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="c51b7735f70fe17fe7258081", 0xc}, {&(0x7f0000000040)="ffceb74ccb91fe153cf4b3a5ce9d84792841a8f8a1c095c6c2edaf14155ba646204fa3850003ad71cd7efec3c05604e6db794cbe6a44efa14b22d25d09d25a681cccdbf1c73e5d70fbe17c3e3c3e88d9f6b7cc1ec01f1c87fa3a7b1c60cedd0b0148076fddc1191c07c8fefc5e286fbe5d6d345d89", 0x75}, {&(0x7f00000000c0)="d6aeb5d784f40a8f9b7736de16dca5f2546c2e2eefb0c54dcbc72e271ad99682fb81592af768fc85790e711598c40d7da6b5a228af77130df3e6d236ff27f8d6f555e0f978e6eda2ac80be8206902b62e2c9c633b4aa93077c061283d87d49f05343aa408b1ce3cce5d08d1c06d7087baac758b099366d09796b05c4d30022c005598c3938f9e9cfd90629e7103994ace8a4314fcd2b6cad49ca84", 0x9b}], 0x3}, 0x800) r1 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@private, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000380)={0x3, @default, r3}) close(r0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x5ff, 0x6, 0xffffffff, 0x400, 0xffffffffffffffff, 0x5, '\x00', r2, r4, 0x3, 0x1, 0x4, 0xc, @void, @value, @void, @value}, 0x50) r6 = socket$inet_sctp(0x2, 0x5, 0x84) recvfrom$inet(r6, &(0x7f0000000480)=""/199, 0xc7, 0x10002, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000600)={r5, &(0x7f0000000580)="6564582a9a3f09ff5706a930a57422e87df7f33743698d148299e8af125853756f37e1a6cd8a6200bbef602a70252a19494cf77363e22b5c6634a8cee481cc2df3fa1666d0db85fcbfe0b273185739bb3b698ad99076d607941831b01ffd"}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) socketpair(0x29, 0x4, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r7, &(0x7f0000000680)={0x1f, @none}, 0x8) bpf$ENABLE_STATS(0x20, &(0x7f00000006c0), 0x4) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000000700)) connect$l2tp6(r8, &(0x7f0000000740)={0xa, 0x0, 0x0, @loopback, 0xfae, 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000780)={0x0, 0xf57, 0x1, [0x4]}, &(0x7f00000007c0)=0xa) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000800)={r10, @in={{0x2, 0x4e22, @rand_addr=0x64010101}}, 0x4, 0x2}, &(0x7f00000008c0)=0x90) setsockopt$inet_mreq(r6, 0x0, 0x24, &(0x7f0000000900)={@empty, @local}, 0x8) connect$bt_rfcomm(r7, &(0x7f0000000940)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xa) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0xf4, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x99, 0x7, 0x1, 0x0, "182475d3bfd582511d39c850d6374f4fb22ce7d7365a3cf7de391f6a66a377e83bc7eb94b53afe9201765cf96960168b9337a1cbdefbe0d5a22b24aa0da54553be540941ed26e4670d72953b4f3b1d55cc07e43e59bfc9bb3e8e6f753e44ea4f83a7e9346419aa134e04645cc333c90fb8eb01173e7327c823e7a9e53210172f10a2b178b6f19cb4752ea8690cc100083a524746c0"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x1ac}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r12, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x48, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000000) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) shutdown(r9, 0x0) r13 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r13, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000d40)=""/84, 0x54}, {&(0x7f0000000dc0)=""/114, 0x72}, {&(0x7f0000000e40)=""/64, 0x40}, {&(0x7f0000000e80)=""/60, 0x3c}, {&(0x7f0000000ec0)=""/220, 0xdc}, {&(0x7f0000000fc0)=""/64, 0x40}, {&(0x7f0000001000)=""/32, 0x20}], 0x7, &(0x7f00000010c0)=""/224, 0xe0}, 0x4}], 0x1, 0x12020, 0xfffffffffffffffe) 1.109100959s ago: executing program 2 (id=1153): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) preadv(r4, &(0x7f0000000600)=[{&(0x7f0000001700)=""/172, 0xac}], 0x1, 0x103, 0x0) r5 = socket(0x1d, 0x5, 0xe0c4) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000040), 0x4) listen(r5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="0200"], 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x8, 0x1, 0x1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x1, 0x8000, 0x5}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="4cd13ff58001f387cdb6af696ee35a67ad3ca48fad5e87511d3661483279012ff44ba234a8a630ac00ae64", @ANYRES64=0x0], 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711046000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000fddbdf256c00000008000300", @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) 844.963969ms ago: executing program 3 (id=1154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000100007010000000000000000037c0010180001801400e2fffd8000000000000000000000000000aa"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800c001a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x10d, 0xc6, &(0x7f0000001040), &(0x7f00000000c0)=0x4) sendmmsg$unix(r5, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000840)="d5fb0e94563c7165271b534424ab2d78116b36f2a42ef24a037f97f60e9a92e42afe8d84174bb43d73a626eaf3f431f285373766552da08bfa3e0e7905c3bd132ac94955a4b57da5b67dfebd2193247691a49496a528170c903aa7c22fe0631fb9e3b8681c", 0x65}], 0x2, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001d40)="194ade15c2dd372906", 0x9}, {&(0x7f0000001f00)="cdea", 0x2}], 0x2, 0x0, 0x0, 0x20040000}}], 0x2, 0x20008090) 827.990557ms ago: executing program 4 (id=1155): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r0, 0x8001, 0xe00000000, 0x4}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x12, 0x8001, 0xffffffffffffffff, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r1, @void, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000280), &(0x7f0000000340)}, 0x20) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28e) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xc064}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000003c001280080001006772650030000280040012"], 0x5c}}, 0x0) 712.284902ms ago: executing program 0 (id=1156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfff}, @CTA_SYNPROXY={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4894}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180a8000000aaaaaaaaadbb08004500001c0000000000119078ac1e0001e000007400004e2200089078"], 0x0) 709.744848ms ago: executing program 2 (id=1157): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYBLOB="bc5500ffa338af1c8b39bbc6286b4bc3c86c155c37df68deda1d872b1f64b763341a2e64981f3620892ba09183fe77cbf6f5920d96ab5722354c5f0bc7af6868cb6ef2f3633aec3ec33c7e45b447d3823ac8b2ff13443ba985d639dc5ef230d434cea3fabe9c931c87458619db64477fefadcab8450378e1e3fd3038c3852bd78c5548"], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {0xfff3}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 609.401403ms ago: executing program 0 (id=1158): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSGCAUSE(r3, 0x8917, 0x0) (async) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c) 603.216608ms ago: executing program 3 (id=1159): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x25dfdbfe, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) 416.050729ms ago: executing program 0 (id=1160): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000140)=0x60, 0x80000) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff104300003000128008000100687372002400028008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="05000600030000cb3165e9f501211ae8"], 0x50}}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) openat$cgroup_int(r6, &(0x7f0000000240)='cgroup.clone_children\x00', 0x2, 0x0) 397.606354ms ago: executing program 3 (id=1161): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@nat={'nat\x00', 0x1b, 0x5, 0x3e0, 0x0, 0x0, 0xffffffff, 0x2a0, 0xd0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x4, 0x9}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x4, @rand_addr=0x64010100, @remote, @icmp_id=0x64, @gre_key=0xffff}}}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x510, 0x810, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xe, @private=0xa010100, @multicast2, @icmp_id=0x65, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x2, 0x2, 0x1}, {0x4c, 0x7}, {0x1, 0xf0a}, 0x60}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x6, @rand_addr=0x64010100, @local, @port=0x4e23, @gre_key=0x1}}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x16}, 0xffffffff, 0xff000000, 'veth1_virt_wifi\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x1}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @broadcast, @broadcast, @gre_key=0x7, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 319.702924ms ago: executing program 4 (id=1162): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {0x0, 0x3}, {0x1c, 0xfff9}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x7}}]}, 0x2c}}, 0x24000000) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0xd, 0x3, 0x4, 0x48, @private1={0xfc, 0x1, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @empty}, 0x40, 0x700, 0x8, 0x1}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0x2c, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 247.241641ms ago: executing program 2 (id=1163): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$inet(0x2, 0x3, 0x7) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000400)={r1, 0xffffffff, 0x8, "52553e8a70b0b2f2099de2710b0d7bafb40b67bb376f37e3a1cffe896da40469f7cc30c76bcd0eb8a12990d90fa71fb7fcaf248f5cf9bb2c8568c74250b4f61a5b2345539c720575b397a70f911f8e5324255312399af549f5af93a5a0bd1f2b10ccf9334b1ad15422f93f7a6d0bb698f1bd7cdc186512cf62d4a091f53ae2ee5b4b8776dadb95a59b4320e873b52400c67e66e9d3d766380befbbfb07595d8bd408f144d9bee6ca3f65551650740ca631f4d4b62b2371828fce3bc2e422f034b13372688d84db31d48a0e98eeb5742d9f83595d48b57dc643f3cb1df5e7"}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad4104c60000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="0005d70000fe", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @broadcast, @remote}}}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='netlink_extack\x00', r2}, 0x10) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_virt_wifi\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x0, @broadcast, 'gretap0\x00'}}, 0x1e) r7 = socket$netlink(0x10, 0x3, 0xf) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xff}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}, 0x1, 0x0, 0x0, 0x44006}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r8}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="94120000180029"], 0x1294}}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r10, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 198.690822ms ago: executing program 3 (id=1164): ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @broadcast}, {0x6, @random="9d54bf6cd70b"}, 0x8, {0x2, 0x4e22, @local}, 'caif0\x00'}) (async) socket(0x21, 0x3, 0x9) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x1}, 0x8050) 86.70285ms ago: executing program 0 (id=1165): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x2, 0x4}, 0xc) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x9, 0x6, 0x1, 0x20408, r0, 0x7, '\x00', 0x0, r1, 0x3, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x700, 0x4, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @broadcast, @rand_addr=0x64010100}}}}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0x2, 0x0, 0x70bd2d}, 0x10}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12094}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @local}, @IFLA_GENEVE_ID={0x8}]}}}]}, 0x48}}, 0x20000050) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x15, r7}, 0x14) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x2, 0x4}, 0xc) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x9, 0x6, 0x1, 0x20408, r0, 0x7, '\x00', 0x0, r1, 0x3, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x700, 0x4, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @broadcast, @rand_addr=0x64010100}}}}) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0x2, 0x0, 0x70bd2d}, 0x10}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12094}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @local}, @IFLA_GENEVE_ID={0x8}]}}}]}, 0x48}}, 0x20000050) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) (async) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) (async) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x15, r7}, 0x14) (async) 3.957405ms ago: executing program 3 (id=1166): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0xd, 0x5, 0xfff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x20, 0x9, 0xfff}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300"], 0x58}}, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "19b03600", "6ba492e353f0b8ab7c662bad0610d3c4", "3b47b3c7", "e984975c07815a6e"}, 0x28) setsockopt$inet6_tcp_int(r4, 0x11a, 0x1, &(0x7f0000000100)=0x304, 0x17) sendmsg$xdp(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x2c, 0x0, r3, 0x38}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="6c815e47fde05fa647f4615abcfda28e2909c75f89a4bc5a0a392a204e6f2e26ff1bd32ccf0b8a547363dcad5b1c797dbe29a2c30655895da86ed35c79b62c7e710582595ade2af31ddf28cb0a67414645ace16531780619", 0x58}, {&(0x7f0000000280)="f23db870a2e1764624c03c53c0b33ab926a06921f3f8fc31e2ef2a944f6796db3b5f53e4af83c992674349e294d5be8157bb98827d3382f11141e24162d75bbac8ef152eabc730e24cf6a20e125cb3b47172506d0ad011743f7377b0c2bb83140b6706f515ec0d97cdad78c0667c9de534142ab5cf29c22314a74f18030da7c2abf229599a7f3ddf59fc1edbb1a141b4a4ab1f761db62071fdc8467ead3994b989e4ec8fc9814959becc27fbe7b2fb15da70c4f2dab5e49c8dac", 0xba}, {&(0x7f0000000340)="dc1b8a52498a810df898f040edf8c03bffcdccbe0e2a0c0ea55a072c8fb9d64863e61a6c5e47c1dbc783e6faf26c5f62d7d706bc8a8b2a9d2021f2db7d43e555d0055646a9904eb22aba0c20ffe746fad5bd4c3a5edf8785f6d3475aa4ddc81f7a4e798168dd13a18ed94874a03723f87a15a395d0182c1933c2bff495900e5c190ea2", 0x83}, {&(0x7f0000000400)="d82c90a8d7f9ceed7ec8d0a22f876ec6e6ac3023d435e7d75e52fa485c0169c4770065c4ed8354525f7cd8e4bc99f300b4007332982a42c1d763df384a98564dc0eecb86145cfd48f9c05b83bfd42c09daf3d5d3eac50e2e7aeaadc8651d7fa0d5463e044003928dea74330ae82c69fa774dc871756056749dd9315f65ddade3c5c7c54c394ae7c4810fd468ef7f45703d718ffc785c1145e017296a97c4ae781a62cb08d6dc216e16bdd36758274fe2484bf14026c7f0", 0xb7}], 0x4, 0x0, 0x0, 0x20}, 0x800) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f00000006c0)={'nat\x00', 0x0, 0x0, 0x0, [0xb, 0x0, 0x4, 0x0, 0x6, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) setsockopt(r7, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmsg$alg(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="62daa1f3e2cf89479e33fd2f049c527341db5d1fe6513185a657858336a87de35f384024e8efcb63fd1c7ab1c501e7d3bf3f6118cd35e422445d9e2379dce8592e", 0x41}], 0x1}, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r11, 0x0, 0x30, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c55ac22610000001800fb8d00000000fdffffff02004008fd00000600000000060015000500000008000f00f78600001b164bafea5bb5a123b81fe1671c40d79e623ad76eecaba557b244b37b4350a6f847164f325f0f635b5f3e23d917da19761693790762b3ee8ae961e19affc78fb79713e1a99f0abcae6e55757bedf68259dd0e43e42495d1823d069e239f1b4f518df03c14deacc9"], 0x2c}}, 0x44008) 1.127838ms ago: executing program 2 (id=1167): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x30f}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x0, 0x0, 0x4}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r7 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003800000008000300", @ANYRES32=r8, @ANYBLOB='\f\x00X'], 0x28}}, 0x0) r9 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r9, 0x10d, 0xbb, &(0x7f0000000040), &(0x7f0000000080)=0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r10}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf2534000000080003003fddc5a3ac211c6cab11daa664485f944b5d67dab4ccb9360b136acaa85d4bb544c4021df8cf7cfd76db64596bd9069dfafdffea8bddb86f6cc187719eb313a9027a12ef084dd2ca47962833281e51622a24ded5917a456748320c37f72e62aec8ed8639ab2c351241f171da4b3f82dfb8caeb0529d5fd707dcaf50e904ed680bc274b7dcfec5328659202e7004f36d377ec57896b6423d3e47c69348697b1b749", @ANYRES32=r4, @ANYBLOB="08001f01010000800a0006005050505050500000140055003460a2d6ca715fe0c1ae787dec86fe74"], 0x44}, 0x1, 0x0, 0x0, 0x200040d0}, 0x800) 0s ago: executing program 4 (id=1168): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x17, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x8b, &(0x7f0000000100)=""/139, 0x0, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r1, @ANYBLOB="040046000a003400020202020202000008002600a01400"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. [ 81.882806][ T5829] cgroup: Unknown subsys name 'net' [ 82.013633][ T5829] cgroup: Unknown subsys name 'cpuset' [ 82.023833][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.656181][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.918701][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.946608][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.954096][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.962502][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.969404][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.970357][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.978603][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.991928][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.000112][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.000835][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.042015][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.050294][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.059874][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.069995][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.077765][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.085829][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.094161][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.102127][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.110630][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.120189][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.127535][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.142660][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.151336][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.163888][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.172139][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.832000][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 88.894864][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 88.920553][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 89.052211][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 89.105470][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 89.239424][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.246768][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.256078][ T5840] bridge_slave_0: entered allmulticast mode [ 89.263706][ T5840] bridge_slave_0: entered promiscuous mode [ 89.325682][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.333186][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.340500][ T5840] bridge_slave_1: entered allmulticast mode [ 89.347820][ T5840] bridge_slave_1: entered promiscuous mode [ 89.362023][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.369278][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.376700][ T5849] bridge_slave_0: entered allmulticast mode [ 89.384349][ T5849] bridge_slave_0: entered promiscuous mode [ 89.394127][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.401317][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.408546][ T5848] bridge_slave_0: entered allmulticast mode [ 89.416069][ T5848] bridge_slave_0: entered promiscuous mode [ 89.474462][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.481728][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.492728][ T5849] bridge_slave_1: entered allmulticast mode [ 89.500477][ T5849] bridge_slave_1: entered promiscuous mode [ 89.507780][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.515610][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.522909][ T5848] bridge_slave_1: entered allmulticast mode [ 89.530962][ T5848] bridge_slave_1: entered promiscuous mode [ 89.622133][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.635052][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.642351][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.650153][ T5839] bridge_slave_0: entered allmulticast mode [ 89.657653][ T5839] bridge_slave_0: entered promiscuous mode [ 89.692963][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.700284][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.707498][ T5853] bridge_slave_0: entered allmulticast mode [ 89.715092][ T5853] bridge_slave_0: entered promiscuous mode [ 89.726921][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.752537][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.760207][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.767404][ T5839] bridge_slave_1: entered allmulticast mode [ 89.775099][ T5839] bridge_slave_1: entered promiscuous mode [ 89.797408][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.813478][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.823149][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.830692][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.837902][ T5853] bridge_slave_1: entered allmulticast mode [ 89.845346][ T5853] bridge_slave_1: entered promiscuous mode [ 89.896370][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.923982][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.951051][ T5840] team0: Port device team_slave_0 added [ 89.960459][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.972767][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.987179][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.024655][ T5840] team0: Port device team_slave_1 added [ 90.046719][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.056755][ T55] Bluetooth: hci0: command tx timeout [ 90.057116][ T5843] Bluetooth: hci1: command tx timeout [ 90.100845][ T5849] team0: Port device team_slave_0 added [ 90.155123][ T5853] team0: Port device team_slave_0 added [ 90.177724][ T5849] team0: Port device team_slave_1 added [ 90.200948][ T5848] team0: Port device team_slave_0 added [ 90.208032][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.215230][ T5843] Bluetooth: hci4: command tx timeout [ 90.220886][ T55] Bluetooth: hci3: command tx timeout [ 90.221217][ T5843] Bluetooth: hci2: command tx timeout [ 90.230364][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.258394][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.272876][ T5853] team0: Port device team_slave_1 added [ 90.282234][ T5839] team0: Port device team_slave_0 added [ 90.321161][ T5848] team0: Port device team_slave_1 added [ 90.327886][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.335024][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.362386][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.383473][ T5839] team0: Port device team_slave_1 added [ 90.418400][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.425638][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.452016][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.494588][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.502247][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.529617][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.555428][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.562746][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.588851][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.601965][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.609064][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.635138][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.646919][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.656557][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.682843][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.701806][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.708784][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.735130][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.747058][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.754080][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.780492][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.798473][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.805553][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.831793][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.880324][ T5840] hsr_slave_0: entered promiscuous mode [ 90.886942][ T5840] hsr_slave_1: entered promiscuous mode [ 91.042259][ T5849] hsr_slave_0: entered promiscuous mode [ 91.048817][ T5849] hsr_slave_1: entered promiscuous mode [ 91.056075][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.064695][ T5849] Cannot create hsr debugfs directory [ 91.076692][ T5848] hsr_slave_0: entered promiscuous mode [ 91.083532][ T5848] hsr_slave_1: entered promiscuous mode [ 91.091185][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.098811][ T5848] Cannot create hsr debugfs directory [ 91.125722][ T5853] hsr_slave_0: entered promiscuous mode [ 91.132335][ T5853] hsr_slave_1: entered promiscuous mode [ 91.138617][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.146848][ T5853] Cannot create hsr debugfs directory [ 91.197573][ T5839] hsr_slave_0: entered promiscuous mode [ 91.204228][ T5839] hsr_slave_1: entered promiscuous mode [ 91.211069][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.218673][ T5839] Cannot create hsr debugfs directory [ 91.848127][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.866287][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.877529][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.902708][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.977400][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.988672][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.005566][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.032866][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.111705][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.123794][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.129608][ T55] Bluetooth: hci0: command tx timeout [ 92.136184][ T5843] Bluetooth: hci1: command tx timeout [ 92.170919][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.183004][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.284942][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.289367][ T5843] Bluetooth: hci2: command tx timeout [ 92.297131][ T5843] Bluetooth: hci3: command tx timeout [ 92.303298][ T55] Bluetooth: hci4: command tx timeout [ 92.317677][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.355696][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.364589][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.377292][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.466124][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.522441][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.536822][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.544203][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.570663][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.591557][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.598801][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.624971][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.635918][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.662349][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.740692][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.761130][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.814477][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.821711][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.836095][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.843253][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.882817][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.916188][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.923619][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.954461][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.961771][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.001443][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.144124][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.181943][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.189415][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.218332][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.243589][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.250804][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.355641][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.397638][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.404885][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.434000][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.456850][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.464116][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.678004][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.758115][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.832008][ T5840] veth0_vlan: entered promiscuous mode [ 93.875603][ T5840] veth1_vlan: entered promiscuous mode [ 93.944206][ T5848] veth0_vlan: entered promiscuous mode [ 93.955126][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.005346][ T5853] veth0_vlan: entered promiscuous mode [ 94.028365][ T5848] veth1_vlan: entered promiscuous mode [ 94.057710][ T5840] veth0_macvtap: entered promiscuous mode [ 94.105084][ T5840] veth1_macvtap: entered promiscuous mode [ 94.123221][ T5853] veth1_vlan: entered promiscuous mode [ 94.182377][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.217570][ T55] Bluetooth: hci1: command tx timeout [ 94.217596][ T5843] Bluetooth: hci0: command tx timeout [ 94.232815][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.266861][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.277944][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.288633][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.298798][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.307706][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.369788][ T5843] Bluetooth: hci4: command tx timeout [ 94.370800][ T55] Bluetooth: hci3: command tx timeout [ 94.375249][ T5856] Bluetooth: hci2: command tx timeout [ 94.401767][ T5848] veth0_macvtap: entered promiscuous mode [ 94.440953][ T5853] veth0_macvtap: entered promiscuous mode [ 94.481917][ T5848] veth1_macvtap: entered promiscuous mode [ 94.499057][ T5853] veth1_macvtap: entered promiscuous mode [ 94.531088][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.545063][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.575022][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.586630][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.600444][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.638740][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.649732][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.661494][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.683444][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.695581][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.705696][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.716376][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.727720][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.749421][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.751091][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.757267][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.778570][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.788215][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.797071][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.821555][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.832507][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.847559][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.866155][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.878742][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.914416][ T5839] veth0_vlan: entered promiscuous mode [ 94.956602][ T5853] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.968502][ T5853] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.978799][ T5853] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.986209][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.004172][ T5853] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.044019][ T5849] veth0_vlan: entered promiscuous mode [ 95.054924][ T5839] veth1_vlan: entered promiscuous mode [ 95.147669][ T5849] veth1_vlan: entered promiscuous mode [ 95.245461][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.263787][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.273231][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.291154][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.314706][ T5839] veth0_macvtap: entered promiscuous mode [ 95.345286][ T5849] veth0_macvtap: entered promiscuous mode [ 95.347386][ T9] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 95.363569][ T9] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 95.370931][ T5839] veth1_macvtap: entered promiscuous mode [ 95.387754][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.390259][ T9] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 95.398553][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.412222][ T9] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 95.420630][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.425536][ T9] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 95.437376][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.442010][ T9] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 95.460439][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.462692][ T9] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x3 [ 95.472013][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.484163][ T9] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x1 [ 95.491671][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.513831][ T9] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 95.519369][ T5849] veth1_macvtap: entered promiscuous mode [ 95.548354][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.556440][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.571384][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.587286][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.599706][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.613514][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.625555][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.637988][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.654723][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.691777][ T5930] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6'. [ 95.722638][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.731851][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.745478][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.754722][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.775891][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 95.808789][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.826538][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.843227][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.857361][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.872365][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.902670][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.913412][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.924500][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.935234][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.947295][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.967400][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.982729][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.000046][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.010069][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.020639][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.030543][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.041358][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.051481][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.062022][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.074582][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.093693][ T5934] netlink: 'syz.1.7': attribute type 29 has an invalid length. [ 96.132582][ T5935] netlink: 'syz.1.7': attribute type 29 has an invalid length. [ 96.181937][ T5849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.210048][ T5849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.218828][ T5849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.242647][ T5939] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 96.253814][ T5939] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 96.259068][ T5849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.262954][ T5939] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4'. [ 96.290017][ T5843] Bluetooth: hci0: command tx timeout [ 96.295849][ T5856] Bluetooth: hci1: command tx timeout [ 96.454350][ T5856] Bluetooth: hci3: command tx timeout [ 96.460774][ T5856] Bluetooth: hci2: command tx timeout [ 96.466243][ T5856] Bluetooth: hci4: command tx timeout [ 96.468054][ T5946] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 96.479441][ T5948] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.529709][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.570309][ T5949] warning: `syz.1.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.582037][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.731200][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.744662][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.792207][ T5953] netlink: 'syz.3.10': attribute type 11 has an invalid length. [ 96.823278][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.843346][ T5953] netlink: 'syz.3.10': attribute type 11 has an invalid length. [ 96.859613][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.890360][ T5953] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10'. [ 96.977565][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 97.015061][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 97.068032][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.077309][ T5959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12'. [ 97.094383][ T975] cfg80211: failed to load regulatory.db [ 97.098999][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.213912][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 97.286692][ T5965] netlink: 'syz.3.13': attribute type 29 has an invalid length. [ 97.351046][ T5965] netlink: 88 bytes leftover after parsing attributes in process `syz.3.13'. [ 97.394166][ T5965] netem: invalid attributes len -24 [ 97.418752][ T5965] netem: change failed [ 97.558517][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 97.824855][ T5994] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.488030][ T2972] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.528056][ T2972] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.538532][ T5923] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.712419][ T6023] syzkaller0: entered allmulticast mode [ 98.936959][ T5923] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.979926][ T6032] tc_dump_action: action bad kind [ 99.012178][ T6032] tc_dump_action: action bad kind [ 99.159215][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 99.242313][ T6041] netlink: 'syz.1.34': attribute type 12 has an invalid length. [ 99.295767][ T6041] netlink: 'syz.1.34': attribute type 29 has an invalid length. [ 99.860823][ T6080] Zero length message leads to an empty skb [ 100.344486][ T6106] sctp: failed to load transform for md5: -4 [ 100.395906][ T6102] vxcan0: tx address claim with dest, not broadcast [ 100.801760][ T6131] __nla_validate_parse: 9 callbacks suppressed [ 100.801781][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 100.838747][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 100.990850][ T6139] netlink: 'syz.1.60': attribute type 10 has an invalid length. [ 101.005284][ T6140] netlink: 'syz.4.58': attribute type 29 has an invalid length. [ 101.086410][ T6139] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.110966][ T6146] netlink: 'syz.4.58': attribute type 29 has an invalid length. [ 101.195980][ T6149] netlink: 'syz.2.64': attribute type 1 has an invalid length. [ 101.394672][ T6158] x_tables: duplicate underflow at hook 1 [ 102.071369][ T6198] netlink: 'syz.2.77': attribute type 4 has an invalid length. [ 102.187451][ T6194] xt_CT: No such helper "pptp" [ 102.369422][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 102.596199][ T6215] xt_connbytes: Forcing CT accounting to be enabled [ 102.630696][ T6215] Cannot find add_set index 0 as target [ 102.672500][ T6217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.84'. [ 102.726171][ T6217] erspan0: entered promiscuous mode [ 102.736622][ T6217] erspan0: left promiscuous mode [ 102.953905][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.89'. [ 103.761121][ T30] audit: type=1800 audit(1744382769.941:2): pid=6264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.102" name=45CB390407251FA4188CC219BFFC053ED5A81F25EF0D0F976994AFB2C8BF6AE44A44659AF5EBC90174AD57D7D2BBF87F229A90AB05087FBD84ADD787AACFFDD153137BF89BCF9532CE96AEF1DC32D611F082D5F13DC317FCCBB8E4DA254609889183436067EABA5B151D313B57CF20567D4E8DC59DEC9EE307C0E373938D3701605066668BF7352A437106179353B938DE1CF93EF57CB6325F48E25527 dev="tmpfs" ino=134 res=0 errno=0 [ 103.824337][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 104.039820][ T6278] netlink: 666 bytes leftover after parsing attributes in process `syz.4.104'. [ 104.095642][ T6278] syz.4.104 uses obsolete (PF_INET,SOCK_PACKET) [ 104.122843][ T6278] veth1_macvtap: left promiscuous mode [ 104.128493][ T6278] macsec0: entered allmulticast mode [ 104.213441][ T6282] veth1_macvtap: entered promiscuous mode [ 104.220039][ T6282] veth1_macvtap: entered allmulticast mode [ 104.226039][ T6282] macsec0: left allmulticast mode [ 104.266379][ T6282] veth1_macvtap: left allmulticast mode [ 104.297228][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 104.317460][ T6296] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 104.339739][ T6290] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 104.391768][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 104.438096][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 105.282300][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.308555][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.336289][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.348266][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.352114][ T6352] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 105.359286][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.377998][ T6352] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 105.381280][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.402176][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.418354][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.436249][ T6345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.502843][ T6345] batadv_slave_0: entered promiscuous mode [ 105.525985][ T6345] batadv_slave_0: entered allmulticast mode [ 105.598813][ T6364] netlink: 36 bytes leftover after parsing attributes in process `syz.0.128'. [ 105.945084][ T6374] bridge_slave_0: left allmulticast mode [ 105.972258][ T6374] bridge_slave_0: left promiscuous mode [ 105.989380][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.042832][ T6374] bridge_slave_1: left allmulticast mode [ 106.048554][ T6374] bridge_slave_1: left promiscuous mode [ 106.091848][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.124173][ T6374] bond0: (slave bond_slave_0): Releasing backup interface [ 106.160411][ T6374] bond0: (slave bond_slave_1): Releasing backup interface [ 106.186166][ T6374] team0: Port device team_slave_0 removed [ 106.198610][ T6374] team0: Port device team_slave_1 removed [ 106.205783][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.217774][ T6374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.250675][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.258249][ T6374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.346139][ T6403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 106.374309][ T6384] team0: Mode changed to "loadbalance" [ 106.469176][ T6406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.141'. [ 106.575425][ T6411] netlink: 44 bytes leftover after parsing attributes in process `syz.4.142'. [ 106.643387][ T6411] netlink: 43 bytes leftover after parsing attributes in process `syz.4.142'. [ 106.671226][ T6411] netlink: 'syz.4.142': attribute type 6 has an invalid length. [ 106.712058][ T6411] netlink: 'syz.4.142': attribute type 5 has an invalid length. [ 106.734530][ T6411] netlink: 43 bytes leftover after parsing attributes in process `syz.4.142'. [ 106.867252][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 107.038163][ T6427] veth1_macvtap: left promiscuous mode [ 107.060141][ T6427] macsec0: entered promiscuous mode [ 107.105371][ T6427] veth1_macvtap: entered promiscuous mode [ 107.136932][ T6427] macsec0: left promiscuous mode [ 107.161771][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.237325][ T6439] netlink: 24 bytes leftover after parsing attributes in process `syz.4.151'. [ 107.566971][ T6462] netlink: 'syz.3.157': attribute type 1 has an invalid length. [ 107.683623][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 107.735691][ T6462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.775029][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 107.806736][ T6481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.159'. [ 107.814735][ T6465] bond1: (slave gretap1): making interface the new active one [ 107.871805][ T6465] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 108.273355][ T6512] ipt_REJECT: TCP_RESET invalid for non-tcp [ 108.497958][ T6520] vlan2: entered allmulticast mode [ 108.518982][ T6520] bond0: entered allmulticast mode [ 108.528793][ T6520] bond_slave_0: entered allmulticast mode [ 108.548116][ T6520] bond_slave_1: entered allmulticast mode [ 108.585832][ T6520] dummy0: entered allmulticast mode [ 108.684271][ T6527] tipc: Enabling of bearer rejected, failed to enable media [ 109.482940][ T6567] xt_cgroup: path and classid specified [ 109.504566][ T6572] netlink: 'syz.2.186': attribute type 49 has an invalid length. [ 109.658602][ T6577] Can't find ip_set type [ 109.826439][ T6586] tipc: Started in network mode [ 109.838820][ T6586] tipc: Node identity ac14140f, cluster identity 4711 [ 109.864440][ T6586] tipc: New replicast peer: 255.255.255.255 [ 109.880637][ T6586] tipc: Enabled bearer , priority 10 [ 109.889309][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.941797][ T6593] gre1: entered promiscuous mode [ 109.954190][ T6593] gre1: entered allmulticast mode [ 110.019257][ T6603] netlink: 'syz.2.193': attribute type 5 has an invalid length. [ 110.030528][ T10] IPVS: starting estimator thread 0... [ 110.091518][ T6594] gre1: entered promiscuous mode [ 110.107058][ T6594] gre1: entered allmulticast mode [ 110.129358][ T6601] IPVS: using max 28 ests per chain, 67200 per kthread [ 110.146393][ T6604] [H: renamed from veth0_vlan (while UP) [ 110.332933][ T6614] veth0: entered promiscuous mode [ 110.583283][ T6627] veth0: left promiscuous mode [ 110.811183][ T6646] syzkaller1: entered promiscuous mode [ 110.816728][ T6646] syzkaller1: entered allmulticast mode [ 110.890330][ T2154] tipc: Node number set to 2886997007 [ 112.621412][ T6682] __nla_validate_parse: 13 callbacks suppressed [ 112.621433][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 112.715356][ T6689] netlink: 9 bytes leftover after parsing attributes in process `syz.3.218'. [ 112.740924][ T6689] gretap0: entered promiscuous mode [ 112.964398][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 112.993458][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 113.313756][ T6727] sctp: [Deprecated]: syz.3.226 (pid 6727) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.313756][ T6727] Use struct sctp_sack_info instead [ 113.344696][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 113.372928][ T6726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.227'. [ 113.826608][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 113.876402][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 113.888485][ T6747] netlink: 32 bytes leftover after parsing attributes in process `syz.4.234'. [ 114.238592][ T6756] netlink: 44 bytes leftover after parsing attributes in process `syz.4.237'. [ 114.847616][ T6783] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 114.857565][ T6783] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 115.028400][ T6783] netlink: 'syz.1.246': attribute type 5 has an invalid length. [ 115.283271][ T6802] netlink: 'syz.0.252': attribute type 33 has an invalid length. [ 115.915097][ T6832] Driver unsupported XDP return value 0 on prog (id 56) dev N/A, expect packet loss! [ 116.353411][ T6856] netlink: 'syz.4.269': attribute type 1 has an invalid length. [ 116.399061][ T6861] nbd: must specify a size in bytes for the device [ 116.410984][ T6858] netlink: 'syz.1.270': attribute type 12 has an invalid length. [ 116.683758][ T6872] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 117.074485][ T6893] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 117.396580][ T6906] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.481883][ T6909] : renamed from bond0 (while UP) [ 118.422714][ T6951] __nla_validate_parse: 9 callbacks suppressed [ 118.422737][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'. [ 118.444524][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'. [ 118.454011][ T6951] netlink: 'syz.4.295': attribute type 3 has an invalid length. [ 118.547043][ T6950] bond0: entered promiscuous mode [ 118.563588][ T6950] bond0: entered allmulticast mode [ 118.577733][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 118.637576][ T6963] netlink: 'syz.0.299': attribute type 11 has an invalid length. [ 118.645768][ T6963] netlink: 224 bytes leftover after parsing attributes in process `syz.0.299'. [ 118.688063][ T6962] netlink: 'syz.0.299': attribute type 1 has an invalid length. [ 118.705365][ T6962] netlink: 'syz.0.299': attribute type 2 has an invalid length. [ 118.771133][ T6965] veth0_vlan: mtu less than device minimum [ 118.967710][ T6978] netlink: 40 bytes leftover after parsing attributes in process `syz.1.303'. [ 119.035362][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 119.092285][ T6970] veth0_virt_wifi: entered promiscuous mode [ 119.102888][ T6970] veth0_virt_wifi: left promiscuous mode [ 119.457124][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'. [ 119.713151][ T7009] netlink: 'syz.0.313': attribute type 3 has an invalid length. [ 120.226391][ T7042] netlink: 16 bytes leftover after parsing attributes in process `syz.4.320'. [ 120.236520][ T7043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.320'. [ 120.366902][ T7051] C: renamed from lo (while UP) [ 120.483188][ T7051] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 120.575698][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.324'. [ 120.627109][ T7070] netlink: 'syz.4.324': attribute type 1 has an invalid length. [ 120.674101][ T7070] netlink: 'syz.4.324': attribute type 1 has an invalid length. [ 120.728994][ T7070] netlink: 'syz.4.324': attribute type 2 has an invalid length. [ 121.535234][ T7129] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 122.079824][ T7149] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.089032][ T7149] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.098586][ T7149] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.108003][ T7149] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.233957][ T7149] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.243797][ T7149] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.253066][ T7149] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.262045][ T7149] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.401455][ T7146] netlink: 'syz.4.343': attribute type 21 has an invalid length. [ 122.547284][ T7149] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.556182][ T7149] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.566241][ T7149] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.575053][ T7149] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.666543][ T7149] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.675630][ T7149] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.684640][ T7149] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 122.698085][ T7149] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 123.102906][ T7197] : (slave dummy0): Releasing backup interface [ 123.117348][ T7197] dummy0: left allmulticast mode [ 123.200032][ T7197] bridge_slave_0: left allmulticast mode [ 123.237773][ T7197] bridge_slave_0: left promiscuous mode [ 123.273010][ T7197] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.309501][ T7197] bridge_slave_1: left allmulticast mode [ 123.332743][ T7197] bridge_slave_1: left promiscuous mode [ 123.348031][ T7197] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.367604][ T7197] : (slave bond_slave_0): Releasing backup interface [ 123.386275][ T7197] bond_slave_0: left allmulticast mode [ 123.407199][ T2154] IPVS: starting estimator thread 0... [ 123.428858][ T7197] : (slave bond_slave_1): Releasing backup interface [ 123.454808][ T7197] bond_slave_1: left allmulticast mode [ 123.501103][ T7221] IPVS: using max 26 ests per chain, 62400 per kthread [ 123.513408][ T7197] team0: Failed to send options change via netlink (err -105) [ 123.543275][ T7197] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 123.554639][ T7197] team0: Port device team_slave_0 removed [ 123.571707][ T7197] team0: Failed to send options change via netlink (err -105) [ 123.580547][ T7197] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 123.591343][ T7197] team0: Port device team_slave_1 removed [ 123.598614][ T7197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.606968][ T7197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.617292][ T7197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.625692][ T7197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.687590][ T7215] lo speed is unknown, defaulting to 1000 [ 123.737356][ T7215] lo speed is unknown, defaulting to 1000 [ 123.884368][ T7215] lo speed is unknown, defaulting to 1000 [ 124.505946][ T7260] __nla_validate_parse: 11 callbacks suppressed [ 124.505968][ T7260] netlink: 516 bytes leftover after parsing attributes in process `syz.0.370'. [ 124.618334][ T7215] infiniband syz0: set active [ 124.624915][ T10] lo speed is unknown, defaulting to 1000 [ 124.652695][ T7215] infiniband syz0: added lo [ 124.668000][ T7215] syz0: rxe_create_cq: returned err = -12 [ 124.680242][ T7215] infiniband syz0: Couldn't create ib_mad CQ [ 124.697211][ T7215] infiniband syz0: Couldn't open port 1 [ 124.809246][ T7215] RDS/IB: syz0: added [ 124.817408][ T7215] smc: adding ib device syz0 with port count 1 [ 124.836022][ T7215] smc: ib device syz0 port 1 has pnetid [ 124.839638][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.373'. [ 124.883181][ T7215] lo speed is unknown, defaulting to 1000 [ 124.894545][ T7271] hsr_slave_0: left promiscuous mode [ 124.929211][ T7271] hsr_slave_1: left promiscuous mode [ 125.072658][ T24] lo speed is unknown, defaulting to 1000 [ 125.121027][ T7281] netlink: 'syz.4.375': attribute type 4 has an invalid length. [ 125.190293][ T7282] netlink: 'syz.4.375': attribute type 4 has an invalid length. [ 125.250496][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.391303][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.377'. [ 125.534150][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 125.566371][ T7292] netlink: 5 bytes leftover after parsing attributes in process `syz.4.378'. [ 125.977354][ T7215] lo speed is unknown, defaulting to 1000 [ 126.284227][ T7326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.385'. [ 126.487226][ T7335] netlink: 24 bytes leftover after parsing attributes in process `syz.1.388'. [ 126.545494][ T7342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.388'. [ 126.786405][ T7353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.391'. [ 126.795694][ T7353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.391'. [ 127.123798][ T7215] lo speed is unknown, defaulting to 1000 [ 127.146306][ T7366] netlink: 'syz.4.394': attribute type 32 has an invalid length. [ 128.022347][ T7393] nbd: must specify an index to disconnect [ 128.055480][ T7215] lo speed is unknown, defaulting to 1000 [ 128.892818][ T7440] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.948800][ T7440] netlink: 'syz.1.410': attribute type 1 has an invalid length. [ 128.966835][ T7440] netlink: 'syz.1.410': attribute type 1 has an invalid length. [ 128.994268][ T7444] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 129.003873][ T7440] netlink: 'syz.1.410': attribute type 2 has an invalid length. [ 129.088699][ T7451] netlink: 'syz.2.412': attribute type 1 has an invalid length. [ 129.245010][ T7215] lo speed is unknown, defaulting to 1000 [ 129.556012][ T7469] netlink: 'syz.2.417': attribute type 21 has an invalid length. [ 129.660213][ T7471] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 129.692170][ T7469] __nla_validate_parse: 12 callbacks suppressed [ 129.692192][ T7469] netlink: 132 bytes leftover after parsing attributes in process `syz.2.417'. [ 129.718688][ T7474] netlink: 'syz.4.419': attribute type 12 has an invalid length. [ 129.731035][ T7474] netlink: 'syz.4.419': attribute type 29 has an invalid length. [ 129.738824][ T7474] netlink: 148 bytes leftover after parsing attributes in process `syz.4.419'. [ 129.814772][ T7474] netlink: 'syz.4.419': attribute type 2 has an invalid length. [ 129.855923][ T7474] netlink: 'syz.4.419': attribute type 3 has an invalid length. [ 129.881351][ T7474] netlink: 35 bytes leftover after parsing attributes in process `syz.4.419'. [ 129.945883][ T7480] netlink: 64 bytes leftover after parsing attributes in process `syz.1.420'. [ 130.125355][ T7490] 8021q: VLANs not supported on vcan0 [ 130.215809][ T7496] netlink: 256 bytes leftover after parsing attributes in process `syz.0.423'. [ 130.283065][ T7496] unsupported nlmsg_type 40 [ 130.305935][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.425'. [ 130.669943][ T7520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.430'. [ 130.724408][ T7521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.431'. [ 130.843085][ T7521] team0: Port device geneve0 added [ 130.891807][ T7527] hsr0: entered promiscuous mode [ 130.910020][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 130.963972][ T7527] hsr_slave_0: left promiscuous mode [ 130.994126][ T7527] hsr_slave_1: left promiscuous mode [ 131.109941][ T7527] hsr0 (unregistering): left promiscuous mode [ 131.226428][ T7548] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 131.549149][ T7560] netlink: 132 bytes leftover after parsing attributes in process `syz.3.439'. [ 131.737480][ T7568] ªªªªª»: renamed from sit0 (while UP) [ 132.046007][ T7580] bridge_slave_0: left allmulticast mode [ 132.101575][ T7580] bridge_slave_0: left promiscuous mode [ 132.118860][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.144338][ T7580] bridge_slave_1: left allmulticast mode [ 132.150858][ T7580] bridge_slave_1: left promiscuous mode [ 132.161386][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.219616][ T7580] bond0: (slave bond_slave_0): Releasing backup interface [ 132.279974][ T7580] bond0: (slave bond_slave_1): Releasing backup interface [ 132.349075][ T7580] team0: Port device team_slave_0 removed [ 132.388448][ T7580] team0: Port device team_slave_1 removed [ 132.404765][ T7580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.445838][ T7580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.470503][ T7580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.526643][ T7583] team0: Mode changed to "loadbalance" [ 132.939359][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.151992][ T7613] syzkaller0: entered allmulticast mode [ 133.265459][ T7647] validate_nla: 2 callbacks suppressed [ 133.265479][ T7647] netlink: 'syz.1.459': attribute type 10 has an invalid length. [ 134.715046][ T7649] __nla_validate_parse: 3 callbacks suppressed [ 134.715068][ T7649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.458'. [ 134.732213][ T7647] bridge0: port 1(team0) entered blocking state [ 134.738668][ T7647] bridge0: port 1(team0) entered disabled state [ 134.761157][ T7647] team0: entered allmulticast mode [ 134.766352][ T7647] geneve0: entered allmulticast mode [ 134.784703][ T7647] team0: entered promiscuous mode [ 134.804334][ T7647] geneve0: entered promiscuous mode [ 134.834928][ T7647] bridge0: port 1(team0) entered blocking state [ 134.841425][ T7647] bridge0: port 1(team0) entered forwarding state [ 135.095756][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 135.147559][ T7673] trusted_key: syz.0.467 sent an empty control message without MSG_MORE. [ 135.390048][ T7679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.470'. [ 135.906183][ T7709] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.952312][ T7715] SET target dimension over the limit! [ 136.051397][ T7722] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 136.078354][ T7722] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 136.340276][ T7733] ÿ: renamed from dummy0 (while UP) [ 136.614804][ T7745] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 137.373668][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 137.410788][ T7783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.498'. [ 137.423090][ T7787] netlink: 36 bytes leftover after parsing attributes in process `syz.0.500'. [ 137.434719][ T7783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.498'. [ 137.631436][ T7801] netlink: 'syz.1.503': attribute type 15 has an invalid length. [ 137.927148][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 138.182778][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.2.510'. [ 138.299970][ T7834] x_tables: duplicate underflow at hook 3 [ 138.332120][ T7834] sctp: [Deprecated]: syz.0.512 (pid 7834) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.332120][ T7834] Use struct sctp_sack_info instead [ 138.403754][ T7838] dccp_invalid_packet: P.Data Offset(101) too large [ 138.441351][ T7841] veth0: entered promiscuous mode [ 138.465066][ T7841] veth0: left promiscuous mode [ 138.494132][ T7841] tc_dump_action: action bad kind [ 138.532993][ T7846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.516'. [ 138.735653][ T7853] pim6reg: entered allmulticast mode [ 138.787497][ T7853] pim6reg: left allmulticast mode [ 138.920216][ T5906] IPVS: starting estimator thread 0... [ 138.930193][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 139.014949][ T7867] IPVS: using max 28 ests per chain, 67200 per kthread [ 139.042738][ T7856] delete_channel: no stack [ 139.409054][ T7885] lo: entered allmulticast mode [ 139.500232][ T7890] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 139.610180][ T7890] pimreg: entered allmulticast mode [ 139.982350][ T7912] __nla_validate_parse: 8 callbacks suppressed [ 139.982371][ T7912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.541'. [ 141.135865][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.145121][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.368204][ T7923] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 141.575969][ T7936] netlink: 'syz.2.548': attribute type 3 has an invalid length. [ 142.102480][ T7966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.558'. [ 142.291279][ T7976] netlink: 14 bytes leftover after parsing attributes in process `syz.0.561'. [ 142.508224][ T7976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.527766][ T7976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.545886][ T7976] bond0 (unregistering): Released all slaves [ 142.592261][ T7983] netlink: 'syz.3.562': attribute type 3 has an invalid length. [ 142.959291][ T8003] netlink: 9 bytes leftover after parsing attributes in process `syz.2.569'. [ 143.007385][ T8003] gretap0: entered promiscuous mode [ 143.025779][ T8017] netlink: 5 bytes leftover after parsing attributes in process `syz.2.569'. [ 143.049154][ T8017] 0ªî{X¹¦: renamed from gretap0 [ 143.070908][ T8017] 0ªî{X¹¦: left promiscuous mode [ 143.108463][ T8017] 0ªî{X¹¦: entered allmulticast mode [ 143.144805][ T8017] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 143.583933][ T5854] IPVS: starting estimator thread 0... [ 143.583968][ T8031] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 143.627805][ T8045] xt_hashlimit: max too large, truncated to 1048576 [ 143.710781][ T8042] IPVS: using max 25 ests per chain, 60000 per kthread [ 144.004245][ T8066] netlink: 16 bytes leftover after parsing attributes in process `syz.4.579'. [ 144.042844][ T8066] netlink: 6 bytes leftover after parsing attributes in process `syz.4.579'. [ 144.108719][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 144.157264][ T8072] netlink: 'syz.4.579': attribute type 1 has an invalid length. [ 144.517343][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.583'. [ 144.673488][ T8101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.585'. [ 145.420299][ T8135] __nla_validate_parse: 1 callbacks suppressed [ 145.420321][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.593'. [ 145.940917][ T8147] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 145.970610][ T8147] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 145.991756][ T8147] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 146.086476][ T7056] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.024413][ T8163] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 147.057387][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'. [ 147.141442][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.151162][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.160330][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.173301][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.173405][ T8170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.604'. [ 147.198045][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.530929][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.609'. [ 147.540409][ T8178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.609'. [ 149.252944][ T55] Bluetooth: hci1: command tx timeout [ 149.769724][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 149.823974][ T8186] Bluetooth: MGMT ver 1.23 [ 149.938582][ T7056] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.004364][ T8193] netlink: 'syz.0.615': attribute type 1 has an invalid length. [ 150.077319][ T7056] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.223612][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 150.377018][ T8193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.392877][ T8196] wireguard: wg1: Could not create IPv4 socket [ 150.593264][ T8197] bond0 (unregistering): Released all slaves [ 150.638253][ T7056] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.728055][ T8167] lo speed is unknown, defaulting to 1000 [ 150.849853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.089943][ T8245] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 151.272110][ T8253] bridge0: entered promiscuous mode [ 151.277767][ T8253] macvlan0: entered promiscuous mode [ 151.304090][ T7056] team0: left allmulticast mode [ 151.312439][ T7056] geneve0: left allmulticast mode [ 151.317773][ T7056] team0: left promiscuous mode [ 151.344627][ T5856] Bluetooth: hci1: command tx timeout [ 151.377214][ T7056] geneve0: left promiscuous mode [ 151.386737][ T7056] bridge0: port 1(team0) entered disabled state [ 151.674508][ T8277] netlink: 788 bytes leftover after parsing attributes in process `syz.0.630'. [ 151.883394][ T8286] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 151.999813][ T7056] team0: Port device geneve0 removed [ 152.155352][ T7056]  (unregistering): Released all slaves [ 152.171766][ T7056] bond0 (unregistering): Released all slaves [ 152.189102][ T7056] bond1 (unregistering): Released all slaves [ 152.226064][ T8254] macvlan1: entered promiscuous mode [ 152.749732][ T8308] netlink: 116 bytes leftover after parsing attributes in process `syz.4.633'. [ 152.857226][ T8310] netlink: 48 bytes leftover after parsing attributes in process `syz.3.634'. [ 152.889224][ T8310] netlink: 48 bytes leftover after parsing attributes in process `syz.3.634'. [ 152.947608][ T8167] chnl_net:caif_netlink_parms(): no params data found [ 153.207103][ T8319] netlink: 'syz.2.637': attribute type 21 has an invalid length. [ 153.239207][ T8319] netlink: 128 bytes leftover after parsing attributes in process `syz.2.637'. [ 153.388818][ T8319] netlink: 'syz.2.637': attribute type 5 has an invalid length. [ 153.412192][ T5856] Bluetooth: hci1: command 0x040f tx timeout [ 153.425652][ T8319] netlink: 3 bytes leftover after parsing attributes in process `syz.2.637'. [ 153.477648][ T8342] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 153.530275][ T8345] netlink: 48 bytes leftover after parsing attributes in process `syz.3.640'. [ 153.549044][ T8345] netlink: 48 bytes leftover after parsing attributes in process `syz.3.640'. [ 153.578700][ T8345] netlink: 48 bytes leftover after parsing attributes in process `syz.3.640'. [ 153.660398][ T8167] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.681347][ T8167] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.688667][ T8167] bridge_slave_0: entered allmulticast mode [ 153.708033][ T8167] bridge_slave_0: entered promiscuous mode [ 153.759076][ T8167] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.776558][ T8167] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.799640][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 153.804196][ T8167] bridge_slave_1: entered allmulticast mode [ 153.831464][ T8167] bridge_slave_1: entered promiscuous mode [ 153.890129][ T8354] netlink: 'syz.4.644': attribute type 11 has an invalid length. [ 154.002858][ T8167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.037745][ T8167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.139769][ T7056] tipc: Disabling bearer [ 154.151120][ T7056] tipc: Left network mode [ 154.313770][ T8167] team0: Port device team_slave_0 added [ 154.544044][ T8383] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 154.631626][ T8167] team0: Port device team_slave_1 added [ 155.027520][ T8167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.043523][ T8167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.072135][ T8167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.151504][ T8167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.197128][ T8167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.292647][ T8167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.332430][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 155.361860][ T8418] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 155.497217][ T55] Bluetooth: hci1: command 0x040f tx timeout [ 156.153884][ T8167] hsr_slave_0: entered promiscuous mode [ 156.192551][ T8167] hsr_slave_1: entered promiscuous mode [ 156.497811][ T7056] veth1_macvtap: left promiscuous mode [ 156.505111][ T7056] veth0_macvtap: left promiscuous mode [ 156.511832][ T7056] veth1_vlan: left promiscuous mode [ 156.517405][ T7056] veth0_vlan: left promiscuous mode [ 156.648815][ T7056] pimreg (unregistering): left allmulticast mode [ 157.571721][ T55] Bluetooth: hci1: command 0x040f tx timeout [ 158.672427][ T8513] __nla_validate_parse: 3 callbacks suppressed [ 158.672448][ T8513] netlink: 830 bytes leftover after parsing attributes in process `syz.0.680'. [ 158.854672][ T8522] netlink: 64 bytes leftover after parsing attributes in process `syz.0.684'. [ 158.958333][ T8526] syzkaller1: entered promiscuous mode [ 158.995094][ T8530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.686'. [ 159.004283][ T8526] syzkaller1: entered allmulticast mode [ 159.092105][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.687'. [ 159.165338][ T8167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 159.263013][ T8167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 159.306655][ T8167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 159.315492][ T8545] netlink: 'syz.4.691': attribute type 23 has an invalid length. [ 159.341009][ T8167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 159.388793][ T8538] lo speed is unknown, defaulting to 1000 [ 159.990853][ T8167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.072951][ T8167] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.142273][ T7077] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.150334][ T7077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.231767][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.239207][ T7085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.779036][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 161.029707][ T8593] tipc: Started in network mode [ 161.039543][ T8593] tipc: Node identity ac14140f, cluster identity 4711 [ 161.057913][ T8593] tipc: New replicast peer: 255.255.255.255 [ 161.079843][ T8593] tipc: Enabled bearer , priority 10 [ 161.187609][ T8167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.470907][ T8167] veth0_vlan: entered promiscuous mode [ 161.514308][ T8167] veth1_vlan: entered promiscuous mode [ 161.672129][ T8167] veth0_macvtap: entered promiscuous mode [ 161.703671][ T8167] veth1_macvtap: entered promiscuous mode [ 161.792242][ T8622] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 161.807313][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.853417][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.883942][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.915303][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.942031][ T8167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.962462][ T8628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.709'. [ 161.973312][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.004594][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.033414][ T8167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.059471][ T8167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.071704][ T8167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.192258][ T8628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.199485][ T10] tipc: Node number set to 2886997007 [ 162.309869][ T8167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.324939][ T8167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.337715][ T8167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.357296][ T8167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.971235][ T7076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.019600][ T7076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.100135][ T8681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.717'. [ 163.142316][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.717'. [ 163.274565][ T7062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.304667][ T7062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.324285][ T8698] IPVS: ip_vs_edit_dest(): server weight less than zero [ 163.653843][ T8713] netlink: 'syz.3.723': attribute type 1 has an invalid length. [ 164.216735][ T8750] netlink: 168 bytes leftover after parsing attributes in process `syz.4.725'. [ 164.835753][ T8764] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 165.161590][ T30] audit: type=1107 audit(1744382831.361:3): pid=8779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='äëÖXç-' [ 165.161716][ T8782] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 165.881187][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.897662][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.907991][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.918048][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.927573][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.119763][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 166.137703][ T8815] lo speed is unknown, defaulting to 1000 [ 166.294133][ T8832] netlink: 'syz.3.751': attribute type 10 has an invalid length. [ 166.461573][ T8832] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 166.507958][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'. [ 166.945227][ T8858] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.957708][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.979461][ T8858] bridge_slave_0: entered allmulticast mode [ 166.993904][ T8858] bridge_slave_0: entered promiscuous mode [ 167.001955][ T8858] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.009491][ T8858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.268664][ T8875] netlink: 72 bytes leftover after parsing attributes in process `syz.4.764'. [ 167.309856][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.764'. [ 167.327484][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 167.575917][ T8896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.769'. [ 167.722950][ T8815] chnl_net:caif_netlink_parms(): no params data found [ 167.895933][ T8914] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 167.969701][ T55] Bluetooth: hci1: command tx timeout [ 168.046113][ T8815] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.066696][ T8815] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.078755][ T8815] bridge_slave_0: entered allmulticast mode [ 168.109736][ T8815] bridge_slave_0: entered promiscuous mode [ 168.142502][ T8815] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.164112][ T8923] sctp: [Deprecated]: syz.0.775 (pid 8923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.164112][ T8923] Use struct sctp_sack_info instead [ 168.181230][ T8815] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.188534][ T8815] bridge_slave_1: entered allmulticast mode [ 168.210309][ T8815] bridge_slave_1: entered promiscuous mode [ 168.393982][ T8815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.415130][ T8932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.778'. [ 168.427546][ T8815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.449096][ T8932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.778'. [ 168.525072][ T8936] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 168.535128][ T975] IPVS: starting estimator thread 0... [ 168.629326][ T8939] IPVS: using max 25 ests per chain, 60000 per kthread [ 168.742612][ T8815] team0: Port device team_slave_0 added [ 168.766323][ T8946] netlink: 'syz.0.782': attribute type 1 has an invalid length. [ 168.777879][ T8815] team0: Port device team_slave_1 added [ 168.853161][ T8951] netlink: 52 bytes leftover after parsing attributes in process `syz.0.782'. [ 168.881414][ T8954] netlink: 'syz.2.784': attribute type 1 has an invalid length. [ 168.927026][ T8946] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.975271][ T8954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.984564][ T8815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.992204][ T8815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.019565][ T8815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.094275][ T8960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.114963][ T8960] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 169.134327][ T8960] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 169.179990][ T8815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.192585][ T8815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.268624][ T8815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.293297][ T8954] ip6erspan0: entered promiscuous mode [ 169.305336][ T8954] bond2: (slave ip6erspan0): making interface the new active one [ 169.315589][ T8954] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 169.325845][ T8968] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 169.482344][ T8815] hsr_slave_0: entered promiscuous mode [ 169.495263][ T8815] hsr_slave_1: entered promiscuous mode [ 169.504732][ T8815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.514054][ T8815] Cannot create hsr debugfs directory [ 169.552371][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'. [ 169.618081][ T8978] erspan0: entered promiscuous mode [ 169.628004][ T8978] macvtap1: entered promiscuous mode [ 169.634225][ T8978] macvtap1: entered allmulticast mode [ 169.642607][ T8978] erspan0: entered allmulticast mode [ 169.850499][ T8991] netlink: 44 bytes leftover after parsing attributes in process `syz.3.793'. [ 169.902258][ T8991] netlink: 2 bytes leftover after parsing attributes in process `syz.3.793'. [ 170.051621][ T55] Bluetooth: hci1: command tx timeout [ 170.183920][ T8815] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.244093][ T9003] tipc: Started in network mode [ 170.254684][ T9003] tipc: Node identity 76b01717a8b3, cluster identity 4711 [ 170.271753][ T9003] tipc: Enabled bearer , priority 0 [ 170.304866][ T8815] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.375272][ T9003] syzkaller0: entered promiscuous mode [ 170.382010][ T9003] syzkaller0: entered allmulticast mode [ 170.389919][ T9003] tipc: Resetting bearer [ 170.415325][ T8815] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.435178][ T9002] tipc: Resetting bearer [ 171.282078][ T5923] tipc: Node number set to 3724744471 [ 171.957888][ T9002] tipc: Disabling bearer [ 171.984265][ T8815] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.130341][ T55] Bluetooth: hci1: command tx timeout [ 172.247999][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 172.299462][ T9030] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.425632][ T9030] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.445525][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'. [ 172.459453][ T9042] netlink: 48 bytes leftover after parsing attributes in process `syz.4.808'. [ 172.533992][ T8815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.553129][ T9044] netlink: 'syz.3.809': attribute type 7 has an invalid length. [ 172.590410][ T9044] netlink: 140 bytes leftover after parsing attributes in process `syz.3.809'. [ 172.697663][ T9030] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.723372][ T8815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.751644][ T8815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.791835][ T8815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.877587][ T9030] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.128139][ T9063] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20000 [ 173.289140][ T8815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.366436][ T8815] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.410700][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.417945][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.464856][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.472221][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.543434][ T9083] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gretap0, syncid = 0, id = 0 [ 173.766509][ T9095] netlink: 'syz.3.825': attribute type 11 has an invalid length. [ 173.777230][ T9095] netlink: 224 bytes leftover after parsing attributes in process `syz.3.825'. [ 173.844061][ T9098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.827'. [ 174.180758][ T8815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.210118][ T55] Bluetooth: hci1: command tx timeout [ 174.284319][ T8815] veth0_vlan: entered promiscuous mode [ 174.313272][ T8815] veth1_vlan: entered promiscuous mode [ 174.412555][ T8815] veth0_macvtap: entered promiscuous mode [ 174.438647][ T8815] veth1_macvtap: entered promiscuous mode [ 174.501638][ T8815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.548273][ T8815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.576211][ T8815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.592293][ T8815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.609237][ T8815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.628675][ T8815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.647288][ T8815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.679193][ T8815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.727040][ T8815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.758582][ T8815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.770122][ T8815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.780633][ T8815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.792133][ T8815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.813329][ T8815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.881108][ T8815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.898939][ T8815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.925179][ T8815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.956778][ T8815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.052977][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.844'. [ 175.301962][ T7085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.325589][ T7085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.379869][ T9156] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.452373][ T7062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.478466][ T7062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.562489][ T9168] veth0: entered promiscuous mode [ 175.666609][ T9171] netlink: 'syz.4.852': attribute type 10 has an invalid length. [ 175.722458][ T9171] team0: Device veth0_macvtap failed to register rx_handler [ 175.793821][ T9171] syz.4.852 (9171) used greatest stack depth: 18520 bytes left [ 176.280467][ T9159] veth0: left promiscuous mode [ 176.413840][ T9187] bridge0: port 1(syz_tun) entered blocking state [ 176.432157][ T9190] netlink: 96 bytes leftover after parsing attributes in process `syz.4.860'. [ 176.442175][ T9187] bridge0: port 1(syz_tun) entered disabled state [ 176.453586][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 176.463266][ T9187] syz_tun: entered allmulticast mode [ 176.480648][ T9187] syz_tun: entered promiscuous mode [ 176.487252][ T9190] xt_l2tp: wrong L2TP version: 0 [ 176.499033][ T9187] bridge0: port 1(syz_tun) entered blocking state [ 176.505640][ T9187] bridge0: port 1(syz_tun) entered forwarding state [ 176.534310][ T9189] bridge0: port 2(vlan0) entered blocking state [ 176.555879][ T9189] bridge0: port 2(vlan0) entered disabled state [ 176.574720][ T9189] vlan0: entered allmulticast mode [ 176.589268][ T9189] bridge0: entered allmulticast mode [ 176.607419][ T9189] vlan0: left allmulticast mode [ 176.623487][ T9189] bridge0: left allmulticast mode [ 177.049435][ T9208] xt_l2tp: v2 tid > 0xffff: 150994944 [ 177.067635][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.077167][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.091336][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.101507][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.119683][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.168397][ T9211] lo speed is unknown, defaulting to 1000 [ 177.667350][ T9228] bond1: entered promiscuous mode [ 177.672947][ T9228] bond1: entered allmulticast mode [ 177.681650][ T9228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.876912][ T9250] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 177.981725][ T9228] bond1 (unregistering): Released all slaves [ 178.008117][ T9245] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 178.096957][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 178.135870][ T9253] syz_tun: entered allmulticast mode [ 178.142220][ T9252] tipc: Started in network mode [ 178.147218][ T9252] tipc: Node identity ffffa848, cluster identity 4711 [ 178.163171][ T9252] tipc: Node number set to 4294944840 [ 178.182123][ T9258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.877'. [ 178.199971][ T9244] syz_tun: left allmulticast mode [ 178.205458][ T9259] netlink: 132 bytes leftover after parsing attributes in process `syz.0.876'. [ 178.226245][ T9258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.877'. [ 178.268534][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.4.877'. [ 178.309402][ T9260] IPVS: length: 145 != 24 [ 178.396559][ T9265] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 178.453447][ T9265] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 178.742207][ T9273] netlink: 'syz.4.881': attribute type 5 has an invalid length. [ 178.898790][ T9211] chnl_net:caif_netlink_parms(): no params data found [ 179.170703][ T55] Bluetooth: hci1: command tx timeout [ 179.350976][ T9211] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.369067][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.376376][ T9211] bridge_slave_0: entered allmulticast mode [ 179.431056][ T9211] bridge_slave_0: entered promiscuous mode [ 179.490144][ T9211] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.522593][ T9211] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.548011][ T9211] bridge_slave_1: entered allmulticast mode [ 179.586903][ T9211] bridge_slave_1: entered promiscuous mode [ 179.855023][ T9211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.875337][ T9326] xt_hashlimit: size too large, truncated to 1048576 [ 179.887111][ T9211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.911654][ T9322] netlink: 'syz.2.894': attribute type 10 has an invalid length. [ 180.004028][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 180.024004][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.895'. [ 180.068816][ T9322] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 180.129759][ T9334] netlink: 76 bytes leftover after parsing attributes in process `syz.0.895'. [ 180.198088][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.896'. [ 180.254078][ T9211] team0: Port device team_slave_0 added [ 180.296123][ T9211] team0: Port device team_slave_1 added [ 180.441452][ T9342] netlink: 224 bytes leftover after parsing attributes in process `syz.2.898'. [ 180.651656][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.662821][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.704796][ T9211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.775302][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.796661][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.807656][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.903'. [ 180.843063][ T9211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.864932][ T9360] netlink: 36 bytes leftover after parsing attributes in process `syz.0.904'. [ 180.926797][ T9363] netlink: 'syz.4.903': attribute type 12 has an invalid length. [ 180.938342][ T9363] netlink: 'syz.4.903': attribute type 29 has an invalid length. [ 180.946764][ T9363] netlink: 148 bytes leftover after parsing attributes in process `syz.4.903'. [ 180.956484][ T9358] netlink: 'syz.4.903': attribute type 12 has an invalid length. [ 180.974746][ T9358] netlink: 'syz.4.903': attribute type 29 has an invalid length. [ 180.985013][ T9358] netlink: 148 bytes leftover after parsing attributes in process `syz.4.903'. [ 181.120823][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.906'. [ 181.158022][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'. [ 181.219376][ T9211] hsr_slave_0: entered promiscuous mode [ 181.224639][ T9380] openvswitch: netlink: Flow actions attr not present in new flow. [ 181.226251][ T9211] hsr_slave_1: entered promiscuous mode [ 181.268900][ T55] Bluetooth: hci1: command tx timeout [ 181.303032][ T9211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.314341][ T9211] Cannot create hsr debugfs directory [ 181.356832][ T9367] (unnamed net_device) (uninitialized): peer notification delay (16) is not a multiple of miimon (100), value rounded to 0 ms [ 181.592231][ T9395] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 181.659813][ T9398] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 182.348145][ T9211] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.407469][ T9418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.920'. [ 182.471959][ T9436] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 182.528224][ T9438] x_tables: duplicate underflow at hook 3 [ 182.582017][ T9211] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.804328][ T9211] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.918398][ T9211] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.964378][ T9448] syzkaller1: entered promiscuous mode [ 182.976021][ T9448] syzkaller1: entered allmulticast mode [ 183.026640][ T9454] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 183.145441][ T9454] bond2: entered promiscuous mode [ 183.206540][ T9454] bond2: entered allmulticast mode [ 183.243158][ T9454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.329724][ T55] Bluetooth: hci1: command tx timeout [ 183.375950][ T5893] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 183.389601][ T5893] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 183.402753][ T5893] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 183.418993][ T5893] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 183.506695][ T5893] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 183.544070][ T5893] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 183.579610][ T5893] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x3 [ 183.579836][ T9211] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 183.598402][ T5893] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x1 [ 183.642424][ T5893] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 183.688462][ T9211] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 183.783041][ T9211] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 183.891843][ T9211] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 184.023128][ T9504] netlink: 'syz.2.940': attribute type 21 has an invalid length. [ 184.086439][ T9505] xt_recent: Unsupported userspace flags (00000042) [ 184.492758][ T9211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.564257][ T9211] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.640451][ T9525] netlink: 'syz.0.944': attribute type 1 has an invalid length. [ 184.652938][ T7077] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.660177][ T7077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.674683][ T9526] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000 [ 184.682728][ T9525] netlink: 'syz.0.944': attribute type 4 has an invalid length. [ 184.737340][ T9525] NCSI netlink: No device for ifindex 65542 [ 184.794474][ T7077] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.801738][ T7077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.159650][ T9541] : renamed from bond0 (while UP) [ 185.320195][ T9544] tipc: Enabled bearer , priority 10 [ 185.412458][ T55] Bluetooth: hci1: command tx timeout [ 185.504351][ T9559] __nla_validate_parse: 7 callbacks suppressed [ 185.504372][ T9559] netlink: 132 bytes leftover after parsing attributes in process `syz.0.954'. [ 185.539546][ T9558] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 185.564214][ T9559] netlink: 132 bytes leftover after parsing attributes in process `syz.0.954'. [ 185.694698][ T9211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.929875][ T9570] veth0: mtu less than device minimum [ 186.073406][ T9211] veth0_vlan: entered promiscuous mode [ 186.075007][ T9579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.960'. [ 186.160231][ T9211] veth1_vlan: entered promiscuous mode [ 186.307089][ T9211] veth0_macvtap: entered promiscuous mode [ 186.353042][ T9593] netlink: 36 bytes leftover after parsing attributes in process `syz.4.962'. [ 186.370353][ T9211] veth1_macvtap: entered promiscuous mode [ 186.437872][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 186.483813][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.510457][ T9598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'. [ 186.517338][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.553224][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.568106][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.595086][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.625350][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.643717][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.663421][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.708641][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.889871][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.925883][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.948985][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.985958][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.007554][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.027618][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.037810][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.055097][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.080349][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.107900][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.970'. [ 187.162041][ T9211] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.189089][ T9618] xt_CT: No such helper "pptp" [ 187.199005][ T9211] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.229069][ T9211] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.237836][ T9211] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.466190][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.972'. [ 187.561721][ T9639] netlink: 14 bytes leftover after parsing attributes in process `syz.3.974'. [ 187.667883][ T7076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.716320][ T7076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.759590][ T9650] netlink: 'syz.2.976': attribute type 29 has an invalid length. [ 187.800689][ T7085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.808574][ T7085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.839580][ T9654] netlink: 'syz.0.977': attribute type 1 has an invalid length. [ 187.964594][ T9662] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 188.477279][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 188.579427][ T9690] netlink: 'syz.0.984': attribute type 29 has an invalid length. [ 188.616974][ T9690] netlink: 'syz.0.984': attribute type 29 has an invalid length. [ 188.664147][ T9690] netlink: 'syz.0.984': attribute type 29 has an invalid length. [ 189.864840][ T9738] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 189.928678][ T9738] team0: Device ipvlan0 is already an upper device of the team interface [ 190.298517][ T9756] netlink: 'syz.4.995': attribute type 2 has an invalid length. [ 190.413961][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.424538][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.433077][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.447150][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.457251][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.649738][ T9768] __nla_validate_parse: 2 callbacks suppressed [ 190.649759][ T9768] netlink: 32 bytes leftover after parsing attributes in process `syz.3.999'. [ 190.686584][ T9760] lo speed is unknown, defaulting to 1000 [ 190.708365][ T9770] sctp: [Deprecated]: syz.4.1000 (pid 9770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.708365][ T9770] Use struct sctp_sack_info instead [ 191.179194][ T9792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1006'. [ 191.799505][ T9819] sctp: [Deprecated]: syz.4.1014 (pid 9819) Use of int in max_burst socket option. [ 191.799505][ T9819] Use struct sctp_assoc_value instead [ 191.883387][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1016'. [ 192.111861][ T9830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1020'. [ 192.135237][ T9838] netlink: 'syz.2.1021': attribute type 1 has an invalid length. [ 192.227058][ T9845] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1019'. [ 192.280469][ T9838] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.532239][ T5843] Bluetooth: hci1: command tx timeout [ 192.638290][ T9845]  (unregistering): (slave wlan1): Releasing backup interface [ 192.664444][ T9845]  (unregistering): Released all slaves [ 192.697995][ T9848] tipc: Enabled bearer , priority 10 [ 192.844154][ T9855] bridge0: port 3(syz_tun) entered blocking state [ 192.869243][ T9855] bridge0: port 3(syz_tun) entered disabled state [ 192.909159][ T9855] syz_tun: entered allmulticast mode [ 192.947298][ T9855] syz_tun: entered promiscuous mode [ 192.975560][ T9856] bridge0: port 4(vlan3) entered blocking state [ 193.014787][ T9856] bridge0: port 4(vlan3) entered disabled state [ 193.032527][ T9856] vlan3: entered allmulticast mode [ 193.037968][ T9856] bridge0: entered allmulticast mode [ 193.054781][ T9856] vlan3: left allmulticast mode [ 193.072028][ T9856] bridge0: left allmulticast mode [ 193.112531][ T9866] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 193.123981][ T9866] macsec1: entered allmulticast mode [ 193.133041][ T9866] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 193.147541][ T9866] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 193.165979][ T9866] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 193.215942][ T9760] chnl_net:caif_netlink_parms(): no params data found [ 193.362435][ T9871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1029'. [ 193.461756][ T9880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1031'. [ 193.676107][ T9885] netlink: 'syz.4.1033': attribute type 39 has an invalid length. [ 193.737994][ T9888] x_tables: unsorted underflow at hook 4 [ 193.790451][ T9760] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.801694][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.810980][ T9760] bridge_slave_0: entered allmulticast mode [ 193.819634][ T9760] bridge_slave_0: entered promiscuous mode [ 193.827523][ T9894] tipc: Started in network mode [ 193.835330][ T9894] tipc: Node identity ac14142f, cluster identity 4711 [ 193.844921][ T9894] tipc: New replicast peer: 0.0.0.0 [ 193.851172][ T9894] tipc: Enabled bearer , priority 10 [ 193.864478][ T9760] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.879174][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.899185][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 193.910676][ T9760] bridge_slave_1: entered allmulticast mode [ 193.927613][ T9760] bridge_slave_1: entered promiscuous mode [ 193.937158][ T9899] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 193.970027][ T9894] macsec0: entered promiscuous mode [ 194.194027][ T9760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.234284][ T9912] tipc: Enabling of bearer rejected, already enabled [ 194.252024][ T9760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.356345][ T9760] team0: Port device team_slave_0 added [ 194.368346][ T9760] team0: Port device team_slave_1 added [ 194.380987][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.577779][ T9760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.589465][ T9760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.620051][ T5843] Bluetooth: hci1: command tx timeout [ 194.626657][ T9760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.648144][ T9929] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 194.658172][ T9760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.665693][ T9760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.695943][ T9760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.884414][ T9933] netlink: 'syz.2.1045': attribute type 4 has an invalid length. [ 194.896912][ T9760] hsr_slave_0: entered promiscuous mode [ 194.916251][ T9760] hsr_slave_1: entered promiscuous mode [ 194.930143][ T9760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.940343][ T9760] Cannot create hsr debugfs directory [ 194.969086][ T5923] tipc: Node number set to 2886997039 [ 195.604572][ T9958] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1050'. [ 195.767853][ T9760] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.845796][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1052'. [ 195.991868][ T9760] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.250659][ T9760] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.465553][ T9760] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.696335][ T5843] Bluetooth: hci1: command tx timeout [ 196.767433][T10013] syzkaller0: entered allmulticast mode [ 196.936219][ T9760] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.994671][ T9760] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.045761][ T9760] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.123655][ T9760] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.157433][T10027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1069'. [ 197.195514][T10029] pimreg3: entered allmulticast mode [ 197.532158][ T9760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.620460][ T9760] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.635327][T10057] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1077'. [ 197.655033][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.662233][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.724129][ T7077] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.731377][ T7077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.887372][ T9760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.011727][T10077] netlink: 'syz.3.1081': attribute type 4 has an invalid length. [ 198.173964][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1083'. [ 198.425810][ T9760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.457666][T10093] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1087'. [ 198.611942][ T9760] veth0_vlan: entered promiscuous mode [ 198.656147][ T9760] veth1_vlan: entered promiscuous mode [ 198.772668][ T5843] Bluetooth: hci1: command tx timeout [ 198.777597][ T9760] veth0_macvtap: entered promiscuous mode [ 198.851468][ T9760] veth1_macvtap: entered promiscuous mode [ 198.886268][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.913253][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.939977][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.965347][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.992821][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.022303][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.057638][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.070998][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1092'. [ 199.095393][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.117990][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.139453][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.164455][ T9760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.185155][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.240600][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.258617][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.271182][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.285700][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.303640][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.367253][T10129] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1095'. [ 199.368902][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.411049][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.429749][ T9760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.441248][ T9760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.453864][ T9760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.638364][ T9760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.661667][ T9760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.682977][ T9760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.697309][ T9760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.800842][T10139] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 200.021982][T10146] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 200.033851][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.066827][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.132936][T10124] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 200.186981][T10155] GUP no longer grows the stack in syz.3.1104 (10155): 200000006000-20000000a000 (200000005000) [ 200.218332][T10155] CPU: 0 UID: 0 PID: 10155 Comm: syz.3.1104 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 200.218365][T10155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 200.218383][T10155] Call Trace: [ 200.218392][T10155] [ 200.218402][T10155] dump_stack_lvl+0x241/0x360 [ 200.218454][T10155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.218485][T10155] ? __pfx__printk+0x10/0x10 [ 200.218509][T10155] ? find_vma+0xfa/0x170 [ 200.218553][T10155] __get_user_pages+0x3b46/0x4180 [ 200.218618][T10155] ? __lock_acquire+0xad5/0xd80 [ 200.218644][T10155] ? __pfx___get_user_pages+0x10/0x10 [ 200.218675][T10155] ? __gup_longterm_locked+0xd86/0x1850 [ 200.218707][T10155] ? __pfx_down_read_killable+0x10/0x10 [ 200.218738][T10155] ? __lock_acquire+0xad5/0xd80 [ 200.218779][T10155] __gup_longterm_locked+0xec1/0x1850 [ 200.218842][T10155] ? try_get_folio+0xfd/0x6a0 [ 200.218865][T10155] ? try_grab_folio_fast+0x1d6/0x500 [ 200.218885][T10155] ? __pfx___gup_longterm_locked+0x10/0x10 [ 200.218928][T10155] ? gup_fast_fallback+0x203f/0x2980 [ 200.218963][T10155] gup_fast_fallback+0x2227/0x2980 [ 200.219031][T10155] ? __pfx_gup_fast_fallback+0x10/0x10 [ 200.219074][T10155] ? kvm_sched_clock_read+0x11/0x20 [ 200.219119][T10155] ? __lock_acquire+0xad5/0xd80 [ 200.219146][T10155] ? is_valid_gup_args+0x124/0x200 [ 200.219181][T10155] get_user_pages_fast+0xd2/0x160 [ 200.219216][T10155] ? __pfx_get_user_pages_fast+0x10/0x10 [ 200.219249][T10155] ? rcu_is_watching+0x15/0xb0 [ 200.219276][T10155] ? trace_contention_end+0x3c/0x120 [ 200.219309][T10155] __iov_iter_get_pages_alloc+0x39d/0xa90 [ 200.219352][T10155] ? __se_sys_vmsplice+0x4bc/0x1430 [ 200.219388][T10155] iov_iter_get_pages2+0xd1/0x130 [ 200.219422][T10155] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 200.219466][T10155] __se_sys_vmsplice+0x6c6/0x1430 [ 200.219522][T10155] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 200.219550][T10155] ? cgroup_bpf_prog_query+0xba/0x12c0 [ 200.219577][T10155] ? __pfx_futex_wake+0x10/0x10 [ 200.219608][T10155] ? __pfx_cgroup_bpf_prog_query+0x10/0x10 [ 200.219697][T10155] ? do_syscall_64+0xb6/0x230 [ 200.219727][T10155] do_syscall_64+0xf3/0x230 [ 200.219754][T10155] ? clear_bhb_loop+0x45/0xa0 [ 200.219780][T10155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.219819][T10155] RIP: 0033:0x7f169ab8d169 [ 200.219843][T10155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.219861][T10155] RSP: 002b:00007f169b906038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 200.219891][T10155] RAX: ffffffffffffffda RBX: 00007f169ada5fa0 RCX: 00007f169ab8d169 [ 200.219906][T10155] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 200.219919][T10155] RBP: 00007f169ac0e990 R08: 0000000000000000 R09: 0000000000000000 [ 200.219931][T10155] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 200.219943][T10155] R13: 0000000000000000 R14: 00007f169ada5fa0 R15: 00007fffb4472598 [ 200.219977][T10155] [ 200.617713][ T7062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.658760][ T7062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.425288][T10164] netlink: 'syz.2.1106': attribute type 29 has an invalid length. [ 202.536978][T10174] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1108'. [ 202.554787][T10174] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1108'. [ 204.631657][T10250] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1123'. [ 204.765426][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'. [ 204.941246][T10268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'. [ 204.979561][T10272] tipc: Enabled bearer , priority 10 [ 204.999515][T10276] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 205.023431][T10274] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1128'. [ 205.057181][T10274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 205.064875][T10274] IPv6: NLM_F_CREATE should be set when creating new route [ 205.072289][T10274] IPv6: NLM_F_CREATE should be set when creating new route [ 205.203166][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1130'. [ 205.212292][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1130'. [ 205.400390][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 205.509820][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.520580][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.528586][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.537733][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.547387][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 205.687994][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1139'. [ 205.727255][T10292] lo speed is unknown, defaulting to 1000 [ 205.841011][T10313] xt_bpf: check failed: parse error [ 206.290109][T10335] netlink: 'syz.4.1145': attribute type 11 has an invalid length. [ 206.841003][T10292] chnl_net:caif_netlink_parms(): no params data found [ 207.480237][T10384] netlink: 'syz.3.1154': attribute type 1 has an invalid length. [ 207.658913][ T5843] Bluetooth: hci1: command tx timeout [ 207.713817][T10292] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.749848][T10292] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.757179][T10292] bridge_slave_0: entered allmulticast mode [ 207.811210][T10392] x_tables: duplicate underflow at hook 1 [ 207.813037][T10292] bridge_slave_0: entered promiscuous mode [ 207.863253][T10395] __nla_validate_parse: 7 callbacks suppressed [ 207.863274][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1160'. [ 207.891959][T10292] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.920176][T10292] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.936373][T10292] bridge_slave_1: entered allmulticast mode [ 207.955210][T10292] bridge_slave_1: entered promiscuous mode [ 208.227376][T10410] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1168'. [ 208.251723][T10292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.256229][T10416] [ 208.263175][T10416] ====================================================== [ 208.270306][T10416] WARNING: possible circular locking dependency detected [ 208.277332][T10416] 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 Not tainted [ 208.284462][T10416] ------------------------------------------------------ [ 208.291504][T10416] syz.3.1166/10416 is trying to acquire lock: [ 208.297575][T10416] ffffffff900fd3c8 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_getsockopt+0x11ae/0x2ba0 [ 208.306660][T10416] [ 208.306660][T10416] but task is already holding lock: [ 208.314122][T10416] ffff8880292ab8a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0x131/0x400 [ 208.324262][T10416] [ 208.324262][T10416] which lock already depends on the new lock. [ 208.324262][T10416] [ 208.334778][T10416] [ 208.334778][T10416] the existing dependency chain (in reverse order) is: [ 208.343819][T10416] [ 208.343819][T10416] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 208.352460][T10416] lock_acquire+0x116/0x2f0 [ 208.357595][T10416] __mutex_lock+0x1a5/0x10c0 [ 208.362722][T10416] smc_switch_to_fallback+0x35/0xda0 [ 208.368535][T10416] smc_sendmsg+0x11f/0x530 [ 208.373477][T10416] __sock_sendmsg+0x221/0x270 [ 208.378688][T10416] __sys_sendto+0x365/0x4c0 [ 208.383715][T10416] __x64_sys_sendto+0xde/0x100 [ 208.389014][T10416] do_syscall_64+0xf3/0x230 [ 208.394150][T10416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.400572][T10416] [ 208.400572][T10416] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 208.408230][T10416] lock_acquire+0x116/0x2f0 [ 208.413264][T10416] lock_sock_nested+0x48/0x100 [ 208.418570][T10416] do_ip_setsockopt+0x17e9/0x39c0 [ 208.424135][T10416] ip_setsockopt+0x63/0x100 [ 208.429265][T10416] do_sock_setsockopt+0x3b1/0x710 [ 208.434834][T10416] __x64_sys_setsockopt+0x1ee/0x280 [ 208.440564][T10416] do_syscall_64+0xf3/0x230 [ 208.445596][T10416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.452112][T10416] [ 208.452112][T10416] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 208.459347][T10416] validate_chain+0xa69/0x24e0 [ 208.464655][T10416] __lock_acquire+0xad5/0xd80 [ 208.469872][T10416] lock_acquire+0x116/0x2f0 [ 208.474904][T10416] __mutex_lock+0x1a5/0x10c0 [ 208.480043][T10416] do_ip_getsockopt+0x11ae/0x2ba0 [ 208.485783][T10416] ip_getsockopt+0xef/0x2e0 [ 208.490970][T10416] tcp_getsockopt+0x16f/0x1d0 [ 208.496214][T10416] smc_getsockopt+0x1c6/0x400 [ 208.501434][T10416] do_sock_getsockopt+0x391/0x740 [ 208.507165][T10416] __x64_sys_getsockopt+0x2a3/0x370 [ 208.512984][T10416] do_syscall_64+0xf3/0x230 [ 208.518044][T10416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.524560][T10416] [ 208.524560][T10416] other info that might help us debug this: [ 208.524560][T10416] [ 208.534803][T10416] Chain exists of: [ 208.534803][T10416] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 208.534803][T10416] [ 208.548394][T10416] Possible unsafe locking scenario: [ 208.548394][T10416] [ 208.555940][T10416] CPU0 CPU1 [ 208.561307][T10416] ---- ---- [ 208.566676][T10416] lock(&smc->clcsock_release_lock); [ 208.572059][T10416] lock(sk_lock-AF_INET); [ 208.579010][T10416] lock(&smc->clcsock_release_lock); [ 208.586931][T10416] lock(rtnl_mutex); [ 208.590924][T10416] [ 208.590924][T10416] *** DEADLOCK *** [ 208.590924][T10416] [ 208.599082][T10416] 1 lock held by syz.3.1166/10416: [ 208.604215][T10416] #0: ffff8880292ab8a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_getsockopt+0x131/0x400 [ 208.614778][T10416] [ 208.614778][T10416] stack backtrace: [ 208.620675][T10416] CPU: 0 UID: 0 PID: 10416 Comm: syz.3.1166 Not tainted 6.15.0-rc1-syzkaller-00141-gcfe82469a00f #0 PREEMPT(full) [ 208.620699][T10416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.620710][T10416] Call Trace: [ 208.620719][T10416] [ 208.620728][T10416] dump_stack_lvl+0x241/0x360 [ 208.620759][T10416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.620785][T10416] ? __pfx__printk+0x10/0x10 [ 208.620811][T10416] ? print_lock+0x171/0x1a0 [ 208.620833][T10416] print_circular_bug+0x2e1/0x300 [ 208.620858][T10416] check_noncircular+0x142/0x160 [ 208.620884][T10416] validate_chain+0xa69/0x24e0 [ 208.620918][T10416] __lock_acquire+0xad5/0xd80 [ 208.620939][T10416] lock_acquire+0x116/0x2f0 [ 208.620956][T10416] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 208.620982][T10416] __mutex_lock+0x1a5/0x10c0 [ 208.621003][T10416] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 208.621031][T10416] ? __lock_acquire+0xad5/0xd80 [ 208.621051][T10416] ? do_ip_getsockopt+0x11ae/0x2ba0 [ 208.621072][T10416] ? __pfx___mutex_lock+0x10/0x10 [ 208.621101][T10416] do_ip_getsockopt+0x11ae/0x2ba0 [ 208.621125][T10416] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 208.621153][T10416] ? look_up_lock_class+0x7b/0x170 [ 208.621174][T10416] ? register_lock_class+0x54/0x330 [ 208.621194][T10416] ? __lock_acquire+0xad5/0xd80 [ 208.621212][T10416] ? __mutex_trylock_common+0x184/0x2e0 [ 208.621238][T10416] ? __pfx___mutex_trylock_common+0x10/0x10 [ 208.621265][T10416] ip_getsockopt+0xef/0x2e0 [ 208.621288][T10416] ? __pfx_ip_getsockopt+0x10/0x10 [ 208.621311][T10416] ? smc_getsockopt+0x131/0x400 [ 208.621333][T10416] tcp_getsockopt+0x16f/0x1d0 [ 208.621359][T10416] ? __pfx_tcp_getsockopt+0x10/0x10 [ 208.621385][T10416] ? sock_common_getsockopt+0x2e/0xb0 [ 208.621411][T10416] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 208.621435][T10416] smc_getsockopt+0x1c6/0x400 [ 208.621455][T10416] ? __pfx_smc_getsockopt+0x10/0x10 [ 208.621477][T10416] ? __pfx_smc_getsockopt+0x10/0x10 [ 208.621497][T10416] do_sock_getsockopt+0x391/0x740 [ 208.621518][T10416] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 208.621533][T10416] ? __fget_files+0x2a/0x420 [ 208.621550][T10416] ? __fget_files+0x39d/0x420 [ 208.621563][T10416] ? __fget_files+0x2a/0x420 [ 208.621581][T10416] __x64_sys_getsockopt+0x2a3/0x370 [ 208.621601][T10416] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 208.621622][T10416] ? do_syscall_64+0xb6/0x230 [ 208.621645][T10416] do_syscall_64+0xf3/0x230 [ 208.621666][T10416] ? clear_bhb_loop+0x45/0xa0 [ 208.621685][T10416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.621703][T10416] RIP: 0033:0x7f169ab8d169 [ 208.621720][T10416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.621734][T10416] RSP: 002b:00007f16989f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 208.621753][T10416] RAX: ffffffffffffffda RBX: 00007f169ada6080 RCX: 00007f169ab8d169 [ 208.621767][T10416] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 000000000000000c [ 208.621779][T10416] RBP: 00007f169ac0e990 R08: 00002000000000c0 R09: 0000000000000000 [ 208.621791][T10416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 208.621801][T10416] R13: 0000000000000000 R14: 00007f169ada6080 R15: 00007fffb4472598 [ 208.621820][T10416] [ 209.054393][T10292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.124173][T10424] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1167'. [ 209.700321][T10420] bridge0: port 1(syz_tun) entered disabled state [ 209.716591][T10420] syz_tun (unregistering): left allmulticast mode [ 209.725212][T10420] syz_tun (unregistering): left promiscuous mode [ 209.752887][T10420] bridge0: port 1(syz_tun) entered disabled state [ 209.782613][T10418] syz_tun (unregistering): left allmulticast mode [ 209.789191][T10418] syz_tun (unregistering): left promiscuous mode [ 209.795690][T10418] bridge0: port 3(syz_tun) entered disabled state