last executing test programs: 11.700260614s ago: executing program 4 (id=692): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x9, 0x7}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782", 0xc}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_emit_ethernet(0xf3, &(0x7f00000001c0)={@multicast, @random="32cd96c95755", @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@ipv4={0x800, @igmp={{0x1d, 0x4, 0x1, 0x35, 0xe1, 0x68, 0xa73, 0x9, 0x2, 0x0, @local, @remote, {[@generic={0x88, 0x8, "635cd3c03180"}, @timestamp={0x44, 0x14, 0x14, 0x0, 0x1, [0x7, 0x9, 0x1, 0x4b]}, @timestamp_prespec={0x44, 0xc, 0x70, 0x3, 0x2, [{@local}]}, @timestamp_addr={0x44, 0xc, 0x39, 0x1, 0xc, [{@empty, 0x3}]}, @timestamp={0x44, 0x2c, 0x80, 0x0, 0x2, [0x2, 0x7, 0x8000, 0x2bf21fa0, 0x9, 0x9, 0x2, 0x3, 0x0, 0x200]}]}}, {0x16, 0x7, 0x0, @broadcast, "2b5dafa51953b1eb15f0b46bced854b034c14398b2b5b435e31d9cc3048684d41c3a3fce9f491da0bf0797387d15f0ec4b1cf1fee824aa1ef2ef46cbbd47a2eaebfd0e95c7f000b5f0ab4f2c84b0c3afc18d66c27d1b76bbb8cb6edc4a74280c670d233a53"}}}}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x8044}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x1, 0x5, 0x400000, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r8, 0x0, 0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) getpeername$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvfrom(r1, 0x0, 0xfffffffffffffea5, 0x60000040, 0x0, 0x0) 11.493089574s ago: executing program 4 (id=696): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xe002, 0x60, &(0x7f0000000380)={'filter\x00', 0x2, 0x4, 0x3c8, 0x108, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xff, 0x4, 0x0, {@empty, {[0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x8, 0x5, 0x6, 0xfff9, 0x2, 0x3, 'syzkaller0\x00', 'ipvlan1\x00', {0xff}, {}, 0x0, 0x124}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0xfe, 0x4db, {0x4000000000000000}}}}, {{@arp={@empty, @broadcast, 0x0, 0xffffffff, 0x7, 0x2, {@mac, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x4, 0x3, 0x54c, 0x1, 0x3, 0xd, 'veth1\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x108}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 11.243984918s ago: executing program 4 (id=700): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0x6, 0x7}, {0x0, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000840) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="00000000400000001400128009000100766574680000000004000280080040"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0x6, 0x7}, {0x0, 0xfff1}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000840) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="00000000400000001400128009000100766574680000000004000280080040"], 0x48}}, 0x0) (async) 10.879606574s ago: executing program 4 (id=705): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) close(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = socket$isdn(0x22, 0x2, 0x3) close(r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x64}, @initr0, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10.276313694s ago: executing program 4 (id=708): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x25, &(0x7f0000000080)=0x9, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) unshare(0x24020400) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001a40)={0x0, &(0x7f0000000740)}, 0x10) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r3, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001200)=""/97, 0x61}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000001300)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}], 0x2e3, &(0x7f00000014c0)=""/45, 0x38}}], 0x3, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4}}, 0x10) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000380)=""/71, 0x47}) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x5) sendmsg$IPSET_CMD_TEST(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0xfffffff3}, 0x1, 0x0, 0x0, 0xc000}, 0x48880) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0xfffffffffffffe80, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x0, 0x300}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x90}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="00050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100", @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000000) 10.061085124s ago: executing program 4 (id=714): syz_emit_ethernet(0x268, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff000086dd600100000232110000000000000000000000ffffac1414aafe8000000000000000000000000000aa3c000400006dff"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x7}, {0x5}, {0x6, 0x0, 0x0, 0x3fe2}]}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x170, 0xd0, 0x8, 0x170, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [], [], 'pim6reg0\x00', 'veth0\x00'}, 0x0, 0x108, 0x170, 0x0, {0x0, 0x2000000000000}, [@common=@srh={{0x30}}, @common=@frag={{0x30}, {[], 0x0, 0x0, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000440)=0xd, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x140, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x238, 0x3a8, 0x3a8, 0x238, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0xff], [], '\x00', 'veth0_to_team\x00'}, 0x0, 0x118, 0x140, 0x700, {}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@unspec=@limit={{0x48}, {0x0, 0x3, 0x0, 0x4, 0x20000, 0xffffffff}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x100}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xff, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xd73e1135d3f8cc97], 'pim6reg0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x2e, 0xb, 0x1, 0x12}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x2], 0x5, 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 2.844400484s ago: executing program 3 (id=782): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x104, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc8, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0xac, 0x1, [@m_xt={0xa8, 0xa, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0x32, 0x6, "b02aff89fcb734ba3a7e4bbe7dbf80c9a578cea6f50e70b62c55c42e0420d8c5c688a7cd0b82ff660cc3f662c705"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x104}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) getsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xe07c1000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000600)='netdevsim0\x00', 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) 2.553067404s ago: executing program 3 (id=786): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x700, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x80, 0x0, 0xfd, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x700, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x80, 0x0, 0xfd, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b002c551fc4b4f0489eb700ebff00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x24, 0x0, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000001c0)={0x0, 'ip6_vti0\x00', {0x1}, 0x9}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000001c0)={0x0, 'ip6_vti0\x00', {0x1}, 0x9}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000017c0)=ANY=[@ANYBLOB="2cec0300", @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\f\x00d\x00\x00\x00\b\x00\r\x00ey\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x95}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000017c0)=ANY=[@ANYBLOB="2cec0300", @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\f\x00d\x00\x00\x00\b\x00\r\x00ey\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x95}, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000080)="ce456a04307cf96233a6374067527c9ecf20b5d36cfeaedecbe5ef252d840bfaff96172f71b4a4bc0e74d392abfcf4825f517b3cede841422b50fa64829715e24e68", 0x42}, {&(0x7f00000004c0)="9d0494d27e8ffeb8d677aab52b6724ba371169b04217c489ea5960cd7907875b4ee63832581cb4bd0b3eb8901928198d0baa40277aba5ab6ec89f8eef8e109f6ffffffc83965936211fff27d7b0620a9e43137f00800000000000000000000000000000000614d16665b87e60386b415103419746a252956c3cd6cb8dbd89dedffd01ad588971390b3e5c3be8366f083ec2dba812023790c3ce5ac1bb852790e8e8282a08c35643ce40c709c6242bc368285045fa4b3f6d56d38", 0xba}, {&(0x7f0000000680)="050000008008d171a8823ee57c93cd74ab37e00b1021c313f8ee30c3aaf1577185697d08a0de2f11e69a1c4e0c4558e222c7a6265f9afa06f4a4f0c2cd21d4e28eea12d3dd641419c2434b88ca072cb177459b2402f76806e0f9cc6c3b36e88b8ec0e255b102491aa149ffd20291396dcd924ce6d61f54c083c1ef17c7bedf585600b95326595ceda265b0daf9aa64bdb9d6fc08ff8eb5a59919b237891d60380178f8fe901b40a0d366f7e8a09a17899fcf7a50cabaabbf95b765c2adf37aa44e9ddcb3f74293cbe8eab84885", 0xcd}, {&(0x7f0000000280)="4d4c5e5aa874b09bfbe002be8b25bec2507c57e87b10d2d624105b7939f00b326627a4eb1dbe8efc93a82ae13d965094d295eee0472eab4ef737958783f2623c30d79ae0004a3c499fdcdc4f400c1b2086a21209addd9dc1835dc3a2d571799f", 0x60}, {&(0x7f0000000780)="737c68946ed17e360b20d4fa5852ebf9846f8ac964cfdaaa6c94addd5ddd14120d7e118326c75d1fa5481497b51c1ad566b8e834b58743ab3bba60f87e23d46e1eb046499a37871bd7b44dec0c3fb3434fade64e4a32478ce6dc20ce6877ac8a25bfa6fbf6119a0324146fed5630dbc274b1d202fd67dfc9532bfda47a8d295b1acd0610f8564506d0656d41ebc7c2ec80f1e50aa60b7fbe60e496bc3e765c54a08a0476ebb7166f89c7ceb9af9d257fc232a9eaeec4dcfca94dc428afb41ba38fffb9f1c07ab2685b7623868322766986d526f283a1adf9172dc2b1b1a434ed402300b85f65d333e40df93f0c2569be8132192b95598e8c55da57a2697347fb31406336ba1ac154601c16bcaf5b540a0a4b49b3245a9604fb47ed52ce3a", 0xfffffffffffffd24}, {&(0x7f0000000380)="b571cbde3d93abe63409ddccd6d1b5a49d20e82101133e5491db177e1217a6c3ede82773b7486a6721fe858ec5f4eeb91c74eb6a70275e903015d439d1df49bb0fe95bd6c79eaca31ffba9af5589e02f3006507be55796af7bf47111fa3607baf04f44df8700919759bee1467f899010d3d51212c71f4a2b72d58e4a306f23dea1328a8f20352eee8cb4581976a51519227c138e1ae917b19a8bd9a49f9b5e9e4ee77e7d410810dfcdee9fac5a7c11af8e7c88fb0356e6af671453eb3a8a3a24e7e2945229", 0xc5}], 0x6) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) (async) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) 2.408251093s ago: executing program 3 (id=788): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="ff7c870f2da7c572f3b751d50c001d81b8c3b76326f5e634d5e250f006cacc679a0c0a02e59256ed0d9654a5b6e187a06f1c6f5be4175a678d7ae1b30d0d055b5e78617818afe5de4d11d78c54b3ed316eb5f6092c195025909e8ab73d709a203730c3a9452a5900f365137f356aa3ab2a73309aa86f"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000140)={0x3, @default, r4}) unshare(0x28000600) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000980)={"8c3ef01be86258108b331b07f91efab2", 0x0, 0x0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x2]}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000004000000ff0f0000070000"], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="50c40077a714f5224043dfe4155594f3cbe169970a2d76f9a0663eb819b0116c43464fbb3d7c2b2ddb03e2991fb1f807d21ad61ef4f48b721a4ad4b4b754236e467aebd722cec72230bb41203d7192f70edee1003d819f014b6e00000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000c0000002400018008000300000000000800030001000000080003000000000008000100", @ANYRES32=r9, @ANYBLOB="1800018014000200766574683000"/24], 0x50}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x8001000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a0, 0x2a8, 0x2a8, 0x1a0, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @private=0x1a010100, 0xffffff00, 0xffffffff, 'hsr0\x00', 'macvtap0\x00', {0xff}, {}, 0x56, 0x1, 0x40}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x5, 0x3, 0x20], 0x4, 0x5}, {0xffffffffffffffff, [0x56, 0x7], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x4, 0x5, 0x4, 0x5, 0x1], 0x0, 0x2}, {0x1, [0x2, 0x7, 0x4, 0x1, 0x1, 0x6], 0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480), 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x5}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.647557068s ago: executing program 3 (id=795): r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', r1, 0x10, 0x7, 0xc, 0x7ff, {{0x1b, 0x4, 0x1, 0x4, 0x6c, 0x67, 0x0, 0x2, 0xddf8f88eedc877af, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x24, 0x58, 0x3, 0xf, [{@loopback, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x9}, {@private=0xa010102, 0xe926}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x10000000}]}, @noop, @noop, @cipso={0x86, 0x2c, 0xffffffffffffffff, [{0x0, 0xf, "083f9dc5ccf1318b7319b78af7"}, {0x1, 0x5, "a9e3ae"}, {0x6, 0x12, "64f74d715f25b24d357c805ba7be2c16"}]}, @ra={0x94, 0x4}]}}}}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000140)={@local, @rand_addr=0x64010101, 0x0, 0x8, [@dev={0xac, 0x14, 0x14, 0x22}, @empty, @loopback, @multicast1, @local, @broadcast, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xe}]}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup(r4, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x45, 0x45, 0xb, [@var={0x9, 0x0, 0x0, 0xe, 0x5, 0x2}, @datasec={0x7, 0x2, 0x0, 0xf, 0x1, [{0x4, 0x3, 0x8}, {0x1, 0x8, 0xc75a}], 'j'}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x50, 0x0, 0x5d, 0x2}]}, {0x0, [0x3e, 0x2e, 0x61, 0x30, 0x30, 0xd1d18d5d9b4f4205, 0x61, 0x0, 0x61]}}, &(0x7f00000003c0)=""/196, 0x6b, 0xc4, 0x1, 0x54, 0x0, @void, @value}, 0x28) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', r1, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x10, r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff1c, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000240)='GPL\x00', 0xb7, 0x93, &(0x7f0000000280)=""/147, 0x41100, 0x10, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000500)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[0xffffffffffffffff, r7, r8, r9, 0xffffffffffffffff, r10, 0x1, r11, 0x1, r12], &(0x7f0000000840)=[{0x2, 0x4, 0x5}, {0x2, 0x1, 0xf, 0x6}], 0x10, 0x1, @void, @value}, 0x94) r13 = openat$cgroup_ro(r5, &(0x7f0000000940)='cgroup.controllers\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r13, 0x84, 0x1c, &(0x7f0000000980), &(0x7f00000009c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000a00)) r14 = accept4$x25(0xffffffffffffffff, &(0x7f0000000a40)={0x9, @remote}, &(0x7f0000000a80)=0x12, 0x0) sendmsg$inet(r14, &(0x7f0000000f00)={&(0x7f0000000ac0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000b00)="4c49ab6528441404c4a50c890cbba1524520fa7f95ddccedb72e9b6dccf12637af722aad01fecec6828f19be9f7429b010f538020483f374be395acd17db107c4a53e4775ac3bb46b8ee855058cb2924347ac8cbb59e1d38f3d256e5a7d1037dfffe60ff0c6d68c13d141c96186fe71a1dfd58bdc008ea2b245cc7005c39247f9106547447bae46d146d43af6b052fad8c3df53c06e49a5b64df6699567611bc0b28ee01003a14722a5db7b7ecc26140fe46bc23b131a237cdd67c7c87383626f707dcbefbef05e2d63318efc221c0", 0xcf}, {&(0x7f0000000c00)="6521f2d5c2e200a101a253d4676bac1785a377009fc55198077443e3b46b76621a34e0e8f08f82a3eae1174da247022c6ee0f62c86e9408da051d75a5dc9f0979596fdb599386c449ac6523ad511f5cc5beb4b5880f91484f84c1830a46b1454e85634d20b9a27a112a0d384994f766860ff0fea865123baf144f16c5ee7a793a0c3f2f2fd78e4ffb96beee17eaaacc6c01f2cf5ca052d76e12ea8d0ec9ebcaceb7091d088732be2555746730217acf12362310777b0fa8a6190dae5065ae6b92aa134889997b9e2f3ffe326cce654a01546", 0xd2}, {&(0x7f0000000d00)="8ea8c0ea2475bcac3b49409b07589462359870c1785dd09e5ed39b3dd931cfebfea9b90cb9679fc735c34d98aea979bab8eba91a53958a9166bc313ef33a1658ad680a61e60a8887e3dde9e229fa449eba6ca75461606f68abca5765998c29a333672a639b583eb5e6430836064b88b9ca7aa1c13b7be9066c84a75584285b8773530b5b0923add0d33f78f33ecb11118abdff14e7375c5a591c5ee3c2051b63dd146d72067d52f8de067319800e64c3", 0xb0}, {&(0x7f0000000dc0)="93ceae6e3bab3052f9c90706f6c21df089c6268f34c3caa74655fdf8e28234c9e4ae1fce089c11e659ed6e60960a0345a1f5cc6f23130de4f328e5257b35ea5558786cea6151aecb308564", 0x4b}], 0x4, &(0x7f0000000e80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1f2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x60}, 0x20000001) getsockopt$inet_sctp_SCTP_CONTEXT(r13, 0x84, 0x11, &(0x7f0000000f40)={0x0, 0x4}, &(0x7f0000000f80)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r13, 0x84, 0x72, &(0x7f0000000fc0)={r15, 0x3, 0x20}, 0xc) recvmmsg(r0, &(0x7f0000005640)=[{{&(0x7f0000001000)=@phonet, 0x80, &(0x7f0000001240)=[{&(0x7f0000001080)=""/62, 0x3e}, {&(0x7f00000010c0)=""/84, 0x54}, {&(0x7f0000001140)}, {&(0x7f0000001180)=""/125, 0x7d}, {&(0x7f0000001200)=""/27, 0x1b}], 0x5}, 0x2}, {{&(0x7f00000012c0)=@generic, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/147, 0x93}], 0x1, &(0x7f0000001440)=""/171, 0xab}, 0x5}, {{&(0x7f0000001500)=@ax25={{0x3, @null}, [@null, @netrom, @null, @remote, @netrom, @null, @bcast, @netrom]}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001580)=""/41, 0x29}, {&(0x7f00000015c0)=""/44, 0x2c}, {&(0x7f0000001600)=""/232, 0xe8}], 0x3, &(0x7f0000001740)=""/63, 0x3f}, 0x3}, {{&(0x7f0000001780)=@nl=@proc, 0x80, &(0x7f0000001940)=[{&(0x7f0000001800)}, {&(0x7f0000001840)=""/242, 0xf2}], 0x2, &(0x7f0000001980)=""/21, 0x15}, 0xb}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/250, 0xfa}, {&(0x7f0000001ac0)=""/22, 0x16}, {&(0x7f0000001b00)=""/121, 0x79}, {&(0x7f0000001b80)=""/153, 0x99}, {&(0x7f0000001c40)=""/228, 0xe4}], 0x5, &(0x7f0000001dc0)=""/119, 0x77}, 0xfffffff1}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000001e40)=""/34, 0x22}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/64, 0x40}], 0x3, &(0x7f0000002f00)=""/74, 0x4a}, 0x9}, {{&(0x7f0000002f80)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003000)=""/77, 0x4d}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/38, 0x26}], 0x3, &(0x7f0000004100)=""/252, 0xfc}, 0x3}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000004200)=""/151, 0x97}], 0x1, &(0x7f0000004300)=""/138, 0x8a}, 0x7a05}, {{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000053c0)=""/104, 0x68}, {&(0x7f0000005440)=""/160, 0xa0}, {&(0x7f0000005500)=""/46, 0x2e}], 0x4, &(0x7f0000005580)=""/171, 0xab}, 0xfffffff9}], 0x9, 0x40000040, &(0x7f0000005880)) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000058c0)={r0, 0x100000001, 0x1c, 0x81}) connect$unix(r16, &(0x7f0000005900)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$inet(r2, &(0x7f0000005980)={0x2, 0x4e24, @broadcast}, 0x10) connect$pppl2tp(r16, &(0x7f00000059c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @empty}, 0x1, 0x1, 0x3, 0x4}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000005b80)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000005c40)={0x7, 0x28, &(0x7f0000005a00)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @alu={0x7, 0x0, 0x5, 0x1ff9c73185e1986c, 0xb, 0x100, 0x3}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r16}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb38}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffbff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, @generic={0x1, 0x4, 0xe, 0x40, 0x5}], &(0x7f0000005b40)='GPL\x00', 0x80, 0x0, 0x0, 0x40f00, 0x63, '\x00', r17, @fallback=0x24, r13, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000005bc0)=[r8], &(0x7f0000005c00)=[{0x2, 0x3, 0xd, 0x1}], 0x10, 0x9, @void, @value}, 0x94) 1.645422285s ago: executing program 1 (id=796): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'caif0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000340)=[{0x0, 0x14}], 0x1}, 0x0) connect$netlink(r3, &(0x7f0000000040), 0xc) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@dellink={0x20, 0x11, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x100, 0x24010}}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x880) 1.532266514s ago: executing program 0 (id=797): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x5}}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x400) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957608d766cfff5c3a665bd121a2d89", 0x0, 0x0, {0x4, 0x40000a}, {0x7, 0x8}, 0x5, [0x3, 0x3, 0x5, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x522586f, 0xfffffffffffffffb, 0x400000000000001]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4800}, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x91, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x48}, 0x1, 0x0, 0x0, 0x8050}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf4240}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0xfffd}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.414664613s ago: executing program 1 (id=798): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_opts(r2, 0x0, 0xb, &(0x7f0000000000)="89", 0x1) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @random="4489a2bc242d", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xff, 0x1, 0x0, @private=0xa010104, @local}, @time_exceeded={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}, {@dev}, {@dev={0xac, 0x14, 0x14, 0x1}}, {@rand_addr=0x64010101}, {@remote, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}}}}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=[@rthdrdstopts={{0x18, 0x29, 0x32, {0xaab90fdea6b9fca9}}}], 0x18}, 0x400c4) 1.282286522s ago: executing program 2 (id=799): r0 = socket(0xb, 0x4, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x19, 0x4, 0x4, 0xfe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x4, 0xfe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x18) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8e, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x10, &(0x7f0000000240), &(0x7f0000000600), 0x5, 0x10, 0x8, 0xfffffffffffffe00, 0x0}}, 0xfffffffffffffd45) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40209c0}}, {{&(0x7f0000000080)=@file={0x1, './cgroup/../file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x2, 0x20000000) 1.164379738s ago: executing program 0 (id=800): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$802154_dgram(r2, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000010000d04040000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000019500008240012800c0001006d6163766c616e0014000280080003000100007d080001"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000700)="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", 0x1000, 0x20000810, &(0x7f0000000200)={0xa, 0x4e23, 0x100, @ipv4={'\x00', '\xff\xff', @remote}, 0xffff}, 0x1c) sendmsg(r1, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x4000801) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.148236976s ago: executing program 1 (id=801): unshare(0x66000080) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b12020000000000280012800b00010067656e6576650000180002"], 0x58}}, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1}, &(0x7f0000000000), &(0x7f0000000340)}, 0x20) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) (async) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_vmscan_write_folio\x00', r3, 0x0, 0x1ff}, 0x18) (async) close(r8) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001a1401"], 0x20}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r6) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r6, r5, 0x4, r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb100c117080008004803", 0x10000, 0xffffffffffffc117, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) 1.143991992s ago: executing program 3 (id=802): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000008f00)={&(0x7f0000008b40)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000008d80)=[@ip_tos_u8={{0x11}}], 0x18}, 0x8004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9, 0xfc}) (async) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9, 0xfc}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, '\x00', {0x8000}, 0x8000}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x7bb, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x7bb, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) 1.066323697s ago: executing program 2 (id=803): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r3, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1}]}, 0x38}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c}, {0x4}, {0x1b}, {0xc}}}]}]}, 0x60}}, 0x44004) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={r4}, &(0x7f0000000200)=0x8) 983.015751ms ago: executing program 0 (id=804): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@rand_addr, @empty, 0x0}, &(0x7f00000000c0)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x9, 0x2, 0x2, 0x10000, r0, 0xf56a, '\x00', r1, 0xffffffffffffffff, 0x4, 0x5, 0x4, 0x6, @void, @value, @value}, 0x50) r3 = accept(0xffffffffffffffff, &(0x7f0000000180)=@in={0x2, 0x0, @empty}, &(0x7f0000000200)=0x80) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r0, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%ps \x00'}, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000880)=0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f00000009c0)=0xe8) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0xc) sendmsg$unix(r3, &(0x7f0000000b00)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000002c0)="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", 0xfc}, {&(0x7f00000003c0)="5c9c8a9d09ceea5ec1525f1f5651a84c849568c18cf1ba5f23e3c13c1b17b6f57008c75b0be944b7217a23fe59fc69100dd62d10fb3ba11e71db149c3fc026f25dbacc8267292968f43722437812acb1a75fdd03c7f209162171f4ec74754a72fe154bad7fe54aaee20632ea857fe699e64e04a269de948c6a10c3e2c7c7faf2757f7c9c326f4692db01dd7d81858d92ffa425c9ae1e7cef6fe64e3079bbe572f4d8c435c4", 0xa5}, {&(0x7f0000000480)="f5aaaf6b93de8236989a1b8ea3d087344a6d8cba079a4328cbdebe5bd81a88f1f141afc1d90a91f29c3ca133d7171d2accf040aa97a39ccf9f6a14c4a6acf2508aa5a4f3059fe0a59656bb072258631a87c0a5044d021e5003b89d77b637a7f25af33220d932b8793007aae5f24694695afd7a60345cf1a81c86aa622ff97f40550057436db1b76cb2c27e28a1e0ccadf2bcf039253226c065a6b14eb4783b43e5137aa53a37afb918ae3e54c0120f675cbeb2eb64b505a8", 0xb8}, {&(0x7f0000000540)="c85b8d52515968e82bbe1a5d66b0c933058c96392a524aab111ca37645ff0dd6a8a5f6603037945c7c23318d2682ac6650b567d40b5c329bf0d3cda959e4e2fdb1ead867eca2755005a5f88d1077457e344f01ee30a955a2a9f7193f8a75ac9aa28f45080be520d6dcb7c0880bf1087467dd47c9be77465c5c965634d923785918a46adcf520c8b5f846b0c8ee4b736c643657149d05", 0x96}, {&(0x7f0000000600)="087511c34ee3fb", 0x7}, {&(0x7f0000000640)="e7e232e56fefd23dfbf7ab7e8b7bb714125b2c89a908f4fcdff11b191a3aa2d40d79c957305b857434c24322fc9e37fb9744ef94f52e7f70a29ff2b9ed947a8109d07bfe5062a437cfb223458cb98f46102b4818c4268c9add0c55a24c4822ab70d0babbde083c0d028a3e30d422ba16ed75341ba40442750fce6f78253eeed14d5ba57548050e85b3831c2d1ed2e44715d10c4c319c3d4a23eae04e2fce7adfcfc8437f7614027f7f50b8c2e5c4a4f4ef895d9662c47aef6a8c26c2f3fd199ab0d137dc4027", 0xc6}], 0x6, &(0x7f0000000a80)=[@rights={{0x20, 0x1, 0x1, [r2, r4, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x58, 0x8000}, 0x40) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000b40)={0x0, 0x7a, "399e5845140d1400883e8fb715cace341c12642eb51e10e892031c395742768c5e12b5fae1c290eda0c61eba7e3f1795af6e3734451929ce7cd34a1f8afae487f26bd3ed033b991fa3efe089462c87f66adbca082846634e8b4152f74649f146c121dfd8561a5559c77f9452c4021be3ee5ccba024b233af22f4"}, &(0x7f0000000c00)=0x82) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000c40)={0x3, 0x0, 0x1, 0x9da, r8}, &(0x7f0000000c80)=0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r10, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000e40)=0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000e80)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000ec0)={"3351f73c7457039265f4c8822e9a3736", r12, r13, {0x0, 0x186}, {0x63c0, 0x2}, 0x1, [0x7, 0x9, 0x8000000000000001, 0x8, 0xfe, 0xe, 0x3, 0x2, 0x400, 0x4, 0x0, 0x4, 0x5b1480000000000, 0x7f]}) socket$nl_route(0x10, 0x3, 0x0) (async) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r14, 0x10e, 0x5, &(0x7f0000000fc0)=0x40, 0x4) listen(r14, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$MRT_ASSERT(r3, 0x0, 0xcf, &(0x7f0000001000), 0x4) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000001040)={r9, 0x40}, &(0x7f0000001080)=0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001100)={'veth0_virt_wifi\x00', &(0x7f00000010c0)=@ethtool_ringparam={0x11, 0x8001, 0x9, 0x1, 0xe3, 0x4, 0x0, 0xb0, 0x1}}) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000001140)={0x4, [0xff4c, 0x8, 0x7ff, 0x228]}, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet(r3, &(0x7f0000001180)="841c3d9196671919b25545d0c7e3ad22bc2575d7b058e5b1a584fbdd28a2d37f9ebe99f66c7bc0e4e9ae7c9271e121ba9e87cf00540abbdc1919a484a68390", 0x3f, 0x40000, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f00000011c0)={'batadv_slave_0\x00'}) 920.752893ms ago: executing program 0 (id=805): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004c885}, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000080)={0xa0000000}) ioctl$IMGETDEVINFO(r8, 0x80044944, &(0x7f00000000c0)={0xca97}) bind$inet(r8, &(0x7f0000000400)={0x2, 0x0, @loopback}, 0x10) sendto$inet6(r8, 0x0, 0x0, 0x40, &(0x7f0000000340)={0xa, 0x4e24, 0x4, @private1, 0x4}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x5, &(0x7f0000000000)=0x3140, 0x4) r10 = socket$inet6(0x10, 0x2, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r11, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendto$inet6(r10, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 818.149475ms ago: executing program 2 (id=806): unshare(0x4000400) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000022c0)=""/261, 0x105}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a00000006000100"], 0x1c}}, 0x0) sendmsg$rds(r1, &(0x7f00000020c0)={&(0x7f0000000640)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x4}, 0x0, 0x0, 0x7, 0x4, 0x3ff, 0xffffffffffffffff, 0xc, 0x7}}, @cswp={0x58, 0x114, 0x7, {{0xa, 0x6}, 0x0, 0x0, 0xf, 0x3, 0xd2c2, 0x1, 0x9, 0xffffffffffffffe0}}], 0xb0, 0x20008011}, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="143af1000a0a3686c3682f2de5c500000000000089ac509aa40e600dff40aaa82b04e3b984354439dce49c844113e7ec21b5e9ec06b1ac8675c0699b837ac815894920882f3b2e59a2ace8892a"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0) recvmmsg(r4, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x16, 0x0, 0x0) 512.372439ms ago: executing program 2 (id=807): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001800010000000000000000000200800000010009000000000600150001000000100016800c0001000308010c08002e00"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@getlink={0x48, 0x12, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x1, 0x44000}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x5a76}, @IFLA_LINK_NETNSID={0x8}, @IFLA_PHYS_SWITCH_ID={0x8, 0x24, "8bc6207e"}, @IFLA_NET_NS_FD={0x8, 0x1c, r7}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c) shutdown(r8, 0x1) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x0) 456.380673ms ago: executing program 0 (id=808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x401c5820, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'dvmrp0\x00', 0x1000}) r2 = socket$kcm(0x2, 0xa, 0x2) socket(0x23, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x4, 0x480000, {0x1c, 0x0, 0x80, 0x5}}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000100)=@ethtool_cmd={0x27, 0x800, 0x1ff, 0x6, 0xfa, 0x3, 0x8, 0x0, 0x4, 0x10, 0xd, 0x3, 0x200, 0x3, 0x6, 0x7fffffff, [0x80000000, 0x3]}}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004f3ffff07000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="034888a8090032000300"], 0xfdef) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095", @ANYRES64=r2, @ANYBLOB="4da8d4e9211d98d755a0bdf181007bf9bb82ccae1884b9f3e66e9f7ea4b6aaba29"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095", @ANYRES64=r2, @ANYBLOB="4da8d4e9211d98d755a0bdf181007bf9bb82ccae1884b9f3e66e9f7ea4b6aaba29"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, 0x0, 0x4040010) ioctl$sock_netdev_private(r6, 0x89ff, &(0x7f0000000900)="000000000000000009fd0b36dd348bfb9db503f725f5f6cf10ea97eae4b30f6dd199bdaaa14c60c8b8ec04b03b0ec914b5564831cc3c73fa930d0fc1f39c52872e989bfaabe006d25921") setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, 0x0, 0x32600) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x98) 426.472397ms ago: executing program 1 (id=809): socket$inet6(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x1396, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400080008"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 232.31248ms ago: executing program 2 (id=810): socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0x5d}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={r1, &(0x7f00000005c0)="1862d8fd0d211da541de51fc1713f69b5d8fdc60789a3265762840842338db777845b0c74f0244b9e04411ab12b149fa8963d24f123569b431906434c70827df5f6b14f12fa7eb54b70ac2b98e059aba12438da2abae7a3dd52d37833a08ae2221d28b5f5518a20776c3bdf90e716846d1f446d76f0278b68587f3546cb6b10da9e390706091c5cda874f3e7047df9d27ba64056768aeb8c691dea212607e7fa3a26d37e54d2d9f6233f08618c73c219a554913b5d922c1b38b2bc18be2c", &(0x7f0000000680)=""/65}, 0x20) 203.920812ms ago: executing program 0 (id=811): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x62040200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x1, 0xfffffffe, 0x2c, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x80, 0x20}}) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300", @ANYBLOB="080002"], 0x34}}, 0x400c840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000005600010600000000000000000700000000"], 0x18}], 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x4, 0x2, 0x0, 0x0, {[@window={0x3, 0x3, 0x8f}, @window={0x3, 0x3, 0xac}, @timestamp={0x8, 0xa, 0x200, 0x9}, @sack={0x5, 0x2}, @fastopen={0x22, 0xd, "54df942f7e09586180bbb0"}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x1a, [0x5, 0x5, 0x1, 0x0, 0xc2, 0xfffffff7]}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0x12, "4d561d7ef6737b6a2efa8f86467f69a2"}]}}}}}}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x48, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000040) 171.684613ms ago: executing program 3 (id=812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x64}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x64}, 0x1c) r3 = socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000100010081120d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000100010081120d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 116.315722ms ago: executing program 1 (id=813): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x2000000}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (async) syz_emit_ethernet(0x8e, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6742fbd70058000000000000000000006ea697b1ac1414aa00000000000000000000ffffe00000013c0a04050918fcfffe80"], 0x0) 7.506198ms ago: executing program 2 (id=814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) (async) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x200000000000001) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x8000) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002ce9507e4e11e1b302536d860004802800018008f780006669620036fec6800800034000000600080001400000000008000240000000000900010073797a300000909e7068edc8668b8a2af03d94c11700000900020073797a3200000000140000001100010000000000000000000000000a"], 0x80}}, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x111, 0x4b4, 0x148, 0xd4feffff, 0x210, 0x20a, 0x278, 0x210, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0x0, 0xffffff80], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xe73}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x7, 0x800}}}, {{@ipv6={@remote, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x1c}}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000380)=@gcm_128={{0x304}, "9eff0acbe4fd306e", "95b0e806f0e958207aa0dcb532d253ae", "74d5cd62", "379b41675ac87fbd"}, 0x28) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x6, 0xf1, 0x4, 0x4}, {0x800, 0x4, 0x8, 0x8b4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xffff}}]}}]}, 0x54}}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 1 (id=815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14, r1, 0x1, 0x1}, 0x14}}, 0x24014040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x8884) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x3, @random}}, 0x1e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. [ 73.292767][ T5823] cgroup: Unknown subsys name 'net' [ 73.442859][ T5823] cgroup: Unknown subsys name 'cpuset' [ 73.451888][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.012660][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.559240][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.577408][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.586465][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.595636][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.614394][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.658644][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.665893][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.669372][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.674508][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.688854][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.693526][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.697744][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.705936][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.710900][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.719348][ T5853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.724859][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.732091][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.741147][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.747361][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.753013][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.763135][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.775067][ T5145] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.775572][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.784127][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.790295][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.797713][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.812578][ T5145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.831461][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.839736][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.847191][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.215733][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 79.250593][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 79.492102][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 79.522377][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.530582][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.537970][ T5834] bridge_slave_0: entered allmulticast mode [ 79.545216][ T5834] bridge_slave_0: entered promiscuous mode [ 79.554362][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.561771][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.568947][ T5845] bridge_slave_0: entered allmulticast mode [ 79.576182][ T5845] bridge_slave_0: entered promiscuous mode [ 79.605000][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 79.615691][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.623001][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.630761][ T5834] bridge_slave_1: entered allmulticast mode [ 79.637493][ T5834] bridge_slave_1: entered promiscuous mode [ 79.645430][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.654241][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.661890][ T5845] bridge_slave_1: entered allmulticast mode [ 79.668749][ T5845] bridge_slave_1: entered promiscuous mode [ 79.675976][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 79.771698][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.783125][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.795598][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.836675][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.866831][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.874388][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.882021][ T5843] bridge_slave_0: entered allmulticast mode [ 79.888866][ T5843] bridge_slave_0: entered promiscuous mode [ 79.946506][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.954073][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.961452][ T5843] bridge_slave_1: entered allmulticast mode [ 79.968213][ T5843] bridge_slave_1: entered promiscuous mode [ 79.977981][ T5834] team0: Port device team_slave_0 added [ 79.987388][ T5834] team0: Port device team_slave_1 added [ 79.997067][ T5845] team0: Port device team_slave_0 added [ 80.005752][ T5845] team0: Port device team_slave_1 added [ 80.099829][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.118031][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.128972][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.155410][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.168122][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.175542][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.201639][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.214390][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.221630][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.247695][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.266437][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.273860][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.281351][ T5833] bridge_slave_0: entered allmulticast mode [ 80.288260][ T5833] bridge_slave_0: entered promiscuous mode [ 80.297187][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.304600][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.312075][ T5833] bridge_slave_1: entered allmulticast mode [ 80.318894][ T5833] bridge_slave_1: entered promiscuous mode [ 80.328262][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.337974][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.345393][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.371562][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.395613][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.403008][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.411122][ T5839] bridge_slave_0: entered allmulticast mode [ 80.417923][ T5839] bridge_slave_0: entered promiscuous mode [ 80.461145][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.468706][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.476629][ T5839] bridge_slave_1: entered allmulticast mode [ 80.483898][ T5839] bridge_slave_1: entered promiscuous mode [ 80.502906][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.515597][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.572537][ T5843] team0: Port device team_slave_0 added [ 80.592116][ T5845] hsr_slave_0: entered promiscuous mode [ 80.598392][ T5845] hsr_slave_1: entered promiscuous mode [ 80.608226][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.623294][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.645092][ T5833] team0: Port device team_slave_0 added [ 80.652981][ T5843] team0: Port device team_slave_1 added [ 80.671782][ T5834] hsr_slave_0: entered promiscuous mode [ 80.678077][ T5834] hsr_slave_1: entered promiscuous mode [ 80.684706][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.692992][ T5834] Cannot create hsr debugfs directory [ 80.716759][ T5833] team0: Port device team_slave_1 added [ 80.755132][ T5839] team0: Port device team_slave_0 added [ 80.769494][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.776492][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.802465][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.829900][ T5839] team0: Port device team_slave_1 added [ 80.843950][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.851332][ T5842] Bluetooth: hci2: command tx timeout [ 80.857233][ T5842] Bluetooth: hci1: command tx timeout [ 80.862583][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.862777][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.899508][ T5837] Bluetooth: hci0: command tx timeout [ 80.929374][ T5837] Bluetooth: hci3: command tx timeout [ 80.935377][ T5842] Bluetooth: hci4: command tx timeout [ 80.940363][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.947841][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.974269][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.990087][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.997110][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.023581][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.052483][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.059621][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.085823][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.118742][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.126291][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.152601][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.202914][ T5843] hsr_slave_0: entered promiscuous mode [ 81.209567][ T5843] hsr_slave_1: entered promiscuous mode [ 81.215663][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.223389][ T5843] Cannot create hsr debugfs directory [ 81.267632][ T5833] hsr_slave_0: entered promiscuous mode [ 81.274024][ T5833] hsr_slave_1: entered promiscuous mode [ 81.280643][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.288255][ T5833] Cannot create hsr debugfs directory [ 81.319683][ T5839] hsr_slave_0: entered promiscuous mode [ 81.325986][ T5839] hsr_slave_1: entered promiscuous mode [ 81.332777][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.340533][ T5839] Cannot create hsr debugfs directory [ 81.634078][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.646526][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.676224][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.705774][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.765072][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.778620][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.793984][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.804053][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.865365][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.888577][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.903802][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.917708][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.983146][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.997030][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.008748][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.018298][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.133711][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.158472][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.174656][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.184623][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.196605][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.271065][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.304891][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.324552][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.331969][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.350765][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.374178][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.381423][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.406478][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.419916][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.427063][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.445573][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.477777][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.484934][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.547869][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.560050][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.583097][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.590266][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.629473][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.636589][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.647937][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.655147][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.678880][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.686122][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.753271][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.861834][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.907461][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.914682][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.933991][ T5842] Bluetooth: hci2: command tx timeout [ 82.941507][ T5837] Bluetooth: hci1: command tx timeout [ 82.941518][ T55] Bluetooth: hci0: command tx timeout [ 82.985072][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.020358][ T55] Bluetooth: hci4: command tx timeout [ 83.020939][ T5842] Bluetooth: hci3: command tx timeout [ 83.046454][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.053659][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.096200][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.203851][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.297322][ T5845] veth0_vlan: entered promiscuous mode [ 83.320646][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.356620][ T5845] veth1_vlan: entered promiscuous mode [ 83.402795][ T5834] veth0_vlan: entered promiscuous mode [ 83.461036][ T5834] veth1_vlan: entered promiscuous mode [ 83.471972][ T5845] veth0_macvtap: entered promiscuous mode [ 83.490774][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.505872][ T5845] veth1_macvtap: entered promiscuous mode [ 83.548412][ T5843] veth0_vlan: entered promiscuous mode [ 83.598707][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.616326][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.628265][ T5843] veth1_vlan: entered promiscuous mode [ 83.658463][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.672060][ T5834] veth0_macvtap: entered promiscuous mode [ 83.696776][ T5833] veth0_vlan: entered promiscuous mode [ 83.712793][ T5834] veth1_macvtap: entered promiscuous mode [ 83.725456][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.735757][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.745005][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.754607][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.828030][ T5833] veth1_vlan: entered promiscuous mode [ 83.857789][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.876045][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.899006][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.950282][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.961927][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.975835][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.986957][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.996444][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.005582][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.015240][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.027128][ T5843] veth0_macvtap: entered promiscuous mode [ 84.040338][ T5843] veth1_macvtap: entered promiscuous mode [ 84.110858][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.118908][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.134396][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.148679][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.160228][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.171205][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.182209][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.204768][ T5833] veth0_macvtap: entered promiscuous mode [ 84.235447][ T5839] veth0_vlan: entered promiscuous mode [ 84.242961][ T5833] veth1_macvtap: entered promiscuous mode [ 84.266806][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.285230][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.296548][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.307218][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.318291][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.336183][ T5839] veth1_vlan: entered promiscuous mode [ 84.356527][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.367283][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.377332][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.386671][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.403558][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.411891][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.434552][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.443515][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.453852][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.465261][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.475375][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.485910][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.495849][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.506468][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.517699][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.554104][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.569005][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.579499][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.590052][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.599938][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.611348][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.623320][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.657799][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.674659][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.687955][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.710749][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.727243][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.736450][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.766476][ T5839] veth0_macvtap: entered promiscuous mode [ 84.788270][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.824500][ T5839] veth1_macvtap: entered promiscuous mode [ 84.844123][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.863916][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.981564][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.010404][ T5842] Bluetooth: hci0: command tx timeout [ 85.010457][ T55] Bluetooth: hci2: command tx timeout [ 85.015855][ T5842] Bluetooth: hci1: command tx timeout [ 85.049139][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.063588][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.081194][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.092300][ T5842] Bluetooth: hci4: command tx timeout [ 85.097803][ T5842] Bluetooth: hci3: command tx timeout [ 85.103947][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.119650][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.129665][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.140709][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.151859][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.162450][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.180996][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.217240][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.241161][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.258248][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.278259][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.294804][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.306629][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.320863][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.332328][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.343449][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.354431][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.375317][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.466677][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.499619][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.515892][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.528572][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.634275][ T5924] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 85.717521][ T5841] hid-generic 0005:07C0:06E6.0001: item fetching failed at offset 0/1 [ 85.732282][ T5841] hid-generic 0005:07C0:06E6.0001: probe with driver hid-generic failed with error -22 [ 85.757007][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.777707][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.783824][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.897167][ T5924] syzkaller1: entered promiscuous mode [ 85.908575][ T5924] syzkaller1: entered allmulticast mode [ 86.031431][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.046770][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.258909][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.280177][ T5940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 86.309143][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.707165][ T5952] bond0: entered promiscuous mode [ 86.737206][ T5952] bond_slave_0: entered promiscuous mode [ 86.747946][ T5952] bond_slave_1: entered promiscuous mode [ 86.765000][ T5952] batadv0: entered promiscuous mode [ 86.776732][ T5952] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 86.792733][ T5952] bond0: left promiscuous mode [ 86.808831][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'. [ 86.819160][ T5952] bond_slave_0: left promiscuous mode [ 86.820016][ T26] IPVS: starting estimator thread 0... [ 86.824833][ T5952] bond_slave_1: left promiscuous mode [ 86.848030][ T5952] batadv0: left promiscuous mode [ 86.932374][ T5960] IPVS: using max 19 ests per chain, 45600 per kthread [ 87.089520][ T5842] Bluetooth: hci1: command tx timeout [ 87.095835][ T5837] Bluetooth: hci2: command tx timeout [ 87.169482][ T5842] Bluetooth: hci3: command tx timeout [ 87.175055][ T5837] Bluetooth: hci4: command tx timeout [ 87.607974][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 87.642700][ T5957] syzkaller1: entered promiscuous mode [ 87.661264][ T5957] syzkaller1: entered allmulticast mode [ 88.116935][ T5980] Bluetooth: MGMT ver 1.23 [ 88.325053][ T5994] netlink: 'syz.0.13': attribute type 10 has an invalid length. [ 88.400320][ T5979] syzkaller1: entered promiscuous mode [ 88.424722][ T5979] syzkaller1: entered allmulticast mode [ 88.953071][ T6003] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15'. [ 88.991042][ T6003] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.113898][ T6009] Zero length message leads to an empty skb [ 89.524496][ T6019] Cannot find add_set index 2 as target [ 89.744349][ T6021] macvlan2: entered promiscuous mode [ 89.779253][ T6021] macvlan2: entered allmulticast mode [ 89.800622][ T6021] bond_slave_0: entered promiscuous mode [ 89.806673][ T6021] bond_slave_1: entered promiscuous mode [ 89.848058][ T6021] bond0: entered allmulticast mode [ 89.872192][ T6021] bond_slave_0: entered allmulticast mode [ 89.892841][ T6021] bond_slave_1: entered allmulticast mode [ 89.910103][ T6021] bond0: entered promiscuous mode [ 89.949009][ T6021] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 89.973343][ T6021] team0: Port device macvlan2 added [ 90.509903][ T5854] udevd[5854]: failed to send result of seq 10938 to main daemon: Connection refused [ 90.553559][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 90.591691][ T6060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 90.869546][ T6070] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34'. [ 90.874249][ T6075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.921692][ T6075] team0: Port device bond0 added [ 90.957250][ T6078] bridge0: port 3(team0) entered blocking state [ 90.985917][ T6078] bridge0: port 3(team0) entered disabled state [ 91.008775][ T6078] team0: entered allmulticast mode [ 91.015157][ T6078] team_slave_0: entered allmulticast mode [ 91.022497][ T6078] team_slave_1: entered allmulticast mode [ 91.029193][ T6078] bond0: entered allmulticast mode [ 91.039227][ T6078] bond_slave_0: entered allmulticast mode [ 91.050770][ T6078] bond_slave_1: entered allmulticast mode [ 91.064858][ T6078] team0: entered promiscuous mode [ 91.070369][ T6078] team_slave_0: entered promiscuous mode [ 91.076508][ T6078] team_slave_1: entered promiscuous mode [ 91.082526][ T6078] bond0: entered promiscuous mode [ 91.088152][ T6078] bond_slave_0: entered promiscuous mode [ 91.097115][ T6078] bond_slave_1: entered promiscuous mode [ 91.106169][ T6078] bridge0: port 3(team0) entered blocking state [ 91.112918][ T6078] bridge0: port 3(team0) entered forwarding state [ 91.189292][ T6087] netlink: 132 bytes leftover after parsing attributes in process `syz.0.38'. [ 91.477148][ T6098] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.766604][ T6106] ÿÿÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 92.018226][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 92.033390][ T6116] IPv6: Can't replace route, no match found [ 92.310256][ T52] cfg80211: failed to load regulatory.db [ 92.495391][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.50'. [ 92.572188][ T30] audit: type=1800 audit(1742285757.445:2): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.48" name="memory.events" dev="tmpfs" ino=65 res=0 errno=0 [ 93.390742][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 93.439786][ T6150] netlink: 'syz.3.57': attribute type 3 has an invalid length. [ 94.119641][ T6165] netlink: 'syz.3.62': attribute type 1 has an invalid length. [ 94.142914][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 94.199390][ T6168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.63'. [ 94.205409][ T6172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.65'. [ 94.228049][ T6168] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 94.407440][ T6179] trusted_key: syz.4.66 sent an empty control message without MSG_MORE. [ 94.571661][ T6182] netlink: 64 bytes leftover after parsing attributes in process `syz.3.68'. [ 94.608815][ T6182] netlink: 'syz.3.68': attribute type 29 has an invalid length. [ 94.619402][ T6182] netlink: 'syz.3.68': attribute type 29 has an invalid length. [ 94.648381][ T6186] netlink: 'syz.4.71': attribute type 10 has an invalid length. [ 94.734916][ T6186] veth0_vlan: left promiscuous mode [ 94.762997][ T6186] veth0_vlan: entered promiscuous mode [ 94.788658][ T6186] team0: Device veth0_vlan failed to register rx_handler [ 94.888990][ T6193] vlan0: entered promiscuous mode [ 94.894868][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 94.906617][ T6193] bond0: entered promiscuous mode [ 94.922343][ T6193] bond_slave_0: entered promiscuous mode [ 94.938557][ T6193] bond_slave_1: entered promiscuous mode [ 94.954916][ T6193] bond0: left promiscuous mode [ 94.964748][ T6193] bond_slave_0: left promiscuous mode [ 94.975064][ T6193] bond_slave_1: left promiscuous mode [ 95.602571][ T6219] GUP no longer grows the stack in syz.4.82 (6219): 400000006000-40000000a000 (400000005000) [ 95.626066][ T6223] : entered promiscuous mode [ 95.635181][ T6219] CPU: 0 UID: 0 PID: 6219 Comm: syz.4.82 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 95.635212][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.635230][ T6219] Call Trace: [ 95.635238][ T6219] [ 95.635247][ T6219] dump_stack_lvl+0x241/0x360 [ 95.635288][ T6219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.635313][ T6219] ? __pfx__printk+0x10/0x10 [ 95.635332][ T6219] ? find_vma+0xf9/0x170 [ 95.635366][ T6219] __get_user_pages+0x3b07/0x4140 [ 95.635400][ T6219] ? mark_lock+0x9a/0x360 [ 95.635448][ T6219] ? __pfx___get_user_pages+0x10/0x10 [ 95.635468][ T6219] ? __gup_longterm_locked+0xd2f/0x17f0 [ 95.635493][ T6219] ? __pfx_down_read_killable+0x10/0x10 [ 95.635528][ T6219] ? __pfx_lock_acquire+0x10/0x10 [ 95.635561][ T6219] ? try_get_folio+0xf1/0x6f0 [ 95.635585][ T6219] ? __pfx_lock_release+0x10/0x10 [ 95.635626][ T6219] __gup_longterm_locked+0xe64/0x17f0 [ 95.635663][ T6219] ? mark_lock+0x9a/0x360 [ 95.635688][ T6219] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 95.635720][ T6219] ? __pfx___gup_longterm_locked+0x10/0x10 [ 95.635744][ T6219] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 95.635782][ T6219] ? gup_fast_fallback+0x207e/0x29c0 [ 95.635808][ T6219] gup_fast_fallback+0x2266/0x29c0 [ 95.635866][ T6219] ? __pfx_gup_fast_fallback+0x10/0x10 [ 95.635924][ T6219] ? __mutex_trylock_common+0x183/0x2e0 [ 95.635949][ T6219] ? __pfx___might_resched+0x10/0x10 [ 95.635975][ T6219] ? is_valid_gup_args+0x124/0x200 [ 95.636002][ T6219] get_user_pages_fast+0xcc/0x160 [ 95.636034][ T6219] ? __pfx_get_user_pages_fast+0x10/0x10 [ 95.636055][ T6219] ? rcu_is_watching+0x15/0xb0 [ 95.636080][ T6219] ? trace_contention_end+0x3c/0x120 [ 95.636106][ T6219] ? __mutex_lock+0x397/0x1010 [ 95.636138][ T6219] __iov_iter_get_pages_alloc+0x3b4/0x8e0 [ 95.636175][ T6219] ? __se_sys_vmsplice+0x4b7/0x14a0 [ 95.636210][ T6219] iov_iter_get_pages2+0xcf/0x130 [ 95.636243][ T6219] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 95.636284][ T6219] __se_sys_vmsplice+0x739/0x14a0 [ 95.636311][ T6219] ? plist_del+0x3f1/0x410 [ 95.636358][ T6219] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 95.636391][ T6219] ? __pfx_futex_wake+0x10/0x10 [ 95.636472][ T6219] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 95.636512][ T6219] ? do_syscall_64+0x100/0x230 [ 95.636544][ T6219] ? do_syscall_64+0xb6/0x230 [ 95.636574][ T6219] do_syscall_64+0xf3/0x230 [ 95.636601][ T6219] ? clear_bhb_loop+0x35/0x90 [ 95.636635][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.636671][ T6219] RIP: 0033:0x7fb40c78d169 [ 95.636694][ T6219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.636712][ T6219] RSP: 002b:00007fb40d5ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 95.636757][ T6219] RAX: ffffffffffffffda RBX: 00007fb40c9a5fa0 RCX: 00007fb40c78d169 [ 95.636772][ T6219] RDX: 0000000000000001 RSI: 00004000000000c0 RDI: 000000000000000c [ 95.636787][ T6219] RBP: 00007fb40c80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 95.636800][ T6219] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 95.636813][ T6219] R13: 0000000000000000 R14: 00007fb40c9a5fa0 R15: 00007ffed6d1c4e8 [ 95.636845][ T6219] [ 96.148519][ T6232] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 96.158646][ T6232] dccp_v4_rcv: dropped packet with invalid checksum [ 97.468778][ T6291] __nla_validate_parse: 1 callbacks suppressed [ 97.468803][ T6291] netlink: 5 bytes leftover after parsing attributes in process `syz.0.104'. [ 97.576778][ T6291] netlink: 'syz.0.104': attribute type 10 has an invalid length. [ 97.643043][ T6291] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.674256][ T6291] bond0: (slave team0): Enslaving as an active interface with an up link [ 97.723055][ T6306] nbd: must specify a size in bytes for the device [ 97.966486][ T6312] ªªªªªª: renamed from vlan0 [ 98.172820][ T6320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.333360][ T6284] Cannot find map_set index 0 as target [ 99.063252][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 99.348999][ T6372] openvswitch: netlink: ufid size 28 bytes exceeds the range (1, 16) [ 99.564365][ T6382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.121'. [ 100.235591][ T5888] hid-generic 0005:07C0:06E6.0002: item fetching failed at offset 0/1 [ 100.262949][ T5888] hid-generic 0005:07C0:06E6.0002: probe with driver hid-generic failed with error -22 [ 100.898334][ T6414] syzkaller0: entered promiscuous mode [ 100.904148][ T6414] syzkaller0: entered allmulticast mode [ 102.521434][ T6424] netlink: 260 bytes leftover after parsing attributes in process `syz.3.128'. [ 102.532159][ T6424] netlink: 260 bytes leftover after parsing attributes in process `syz.3.128'. [ 102.547047][ T6428] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 102.741212][ T6444] netlink: 'syz.2.135': attribute type 39 has an invalid length. [ 102.828056][ T6452] netlink: 'syz.1.137': attribute type 1 has an invalid length. [ 102.854992][ T6449] batadv1: entered promiscuous mode [ 102.870116][ T6454] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 103.168828][ T6466] netlink: 'syz.1.145': attribute type 4 has an invalid length. [ 103.171984][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 103.195926][ T6469] netlink: 'syz.3.142': attribute type 21 has an invalid length. [ 103.277544][ T6476] veth0_to_batadv: entered promiscuous mode [ 103.314665][ T6476] macvlan3: entered promiscuous mode [ 103.328814][ T6476] macvlan3: entered allmulticast mode [ 103.338820][ T6476] veth0_to_batadv: entered allmulticast mode [ 103.357185][ T6476] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 103.478536][ T6483] netlink: 40 bytes leftover after parsing attributes in process `syz.0.149'. [ 103.680951][ T6495] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 103.715431][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'. [ 103.769137][ T6499] IPv4: Oversized IP packet from 127.202.26.0 [ 103.867162][ T6511] netlink: 88 bytes leftover after parsing attributes in process `syz.2.157'. [ 104.039280][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 104.066059][ T6517] netlink: 'syz.4.159': attribute type 30 has an invalid length. [ 104.114859][ T6517] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.124989][ T6517] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.134557][ T6517] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.143396][ T6517] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.230649][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 104.275196][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.297110][ T6523] netlink: 'syz.4.159': attribute type 30 has an invalid length. [ 104.435075][ T6537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.165'. [ 104.529004][ T6539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.958921][ T6565] netlink: 'syz.2.174': attribute type 2 has an invalid length. [ 105.000060][ T6565] netlink: 132 bytes leftover after parsing attributes in process `syz.2.174'. [ 105.049269][ T6575] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 105.475311][ T6591] warning: `syz.1.180' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.510625][ T6597] netlink: 'syz.4.183': attribute type 2 has an invalid length. [ 105.675232][ T6597] vlan0: entered promiscuous mode [ 105.683967][ T6597] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 105.905989][ T6605] syzkaller1: entered promiscuous mode [ 105.913631][ T6605] syzkaller1: entered allmulticast mode [ 105.977473][ T6620] vlan2: entered promiscuous mode [ 105.990170][ T6620] macvtap0: entered promiscuous mode [ 106.670016][ T6644] xt_hashlimit: size too large, truncated to 1048576 [ 107.225018][ T6666] syzkaller1: entered promiscuous mode [ 107.238293][ T6666] syzkaller1: entered allmulticast mode [ 107.328619][ T6676] ipt_ECN: cannot use operation on non-tcp rule [ 107.523089][ T6680] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.549392][ T6680] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.607983][ T6680] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.610995][ T6685] __nla_validate_parse: 9 callbacks suppressed [ 107.611018][ T6685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.209'. [ 107.646379][ T6680] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.672214][ T6687] No such timeout policy "syz0" [ 107.679468][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 107.704483][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 107.727254][ T6680] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 107.800389][ T6680] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.818845][ T6680] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.849265][ T6680] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.870447][ T6680] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.888271][ T6680] virt_wifi0 speed is unknown, defaulting to 1000 [ 107.949399][ T6709] netlink: 'syz.3.212': attribute type 1 has an invalid length. [ 107.965737][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'. [ 108.099722][ T6726] netlink: 76 bytes leftover after parsing attributes in process `syz.3.212'. [ 108.256438][ T6716] bond1: (slave gretap1): making interface the new active one [ 108.270708][ T6716] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 108.322427][ T6732] bond1: entered promiscuous mode [ 108.336244][ T6732] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.425794][ T6736] syzkaller1: entered promiscuous mode [ 108.439284][ T6736] syzkaller1: entered allmulticast mode [ 108.521208][ T6746] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 108.980988][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 109.046296][ T6758] 8021q: adding VLAN 0 to HW filter on device team1 [ 109.161505][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.169018][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.205229][ T6770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.232731][ T6770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.328499][ T6773] IPVS: Error connecting to the multicast addr [ 109.728492][ T6783] syzkaller1: entered promiscuous mode [ 109.741668][ T6783] syzkaller1: entered allmulticast mode [ 109.966185][ T6799] netlink: 40 bytes leftover after parsing attributes in process `syz.3.242'. [ 110.188737][ T6804] syzkaller0: entered promiscuous mode [ 110.194618][ T6804] syzkaller0: entered allmulticast mode [ 112.031825][ T6810] virt_wifi0 speed is unknown, defaulting to 1000 [ 112.471673][ T6853] netlink: 'syz.2.255': attribute type 10 has an invalid length. [ 112.474723][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.257'. [ 112.489874][ T6848] syzkaller1: entered promiscuous mode [ 112.506104][ T6848] syzkaller1: entered allmulticast mode [ 112.543038][ T6853] bridge0: port 3(team0) entered disabled state [ 112.558935][ T6858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.258'. [ 112.790117][ T6867] netlink: 'syz.0.262': attribute type 1 has an invalid length. [ 112.801157][ T6869] netlink: 'syz.0.262': attribute type 1 has an invalid length. [ 112.861110][ T6853] team0 (unregistering): left allmulticast mode [ 112.875620][ T6853] team_slave_0: left allmulticast mode [ 112.885306][ T6853] team_slave_1: left allmulticast mode [ 112.893012][ T6853] bond0: left allmulticast mode [ 112.898068][ T6853] bond_slave_0: left allmulticast mode [ 112.907350][ T6853] bond_slave_1: left allmulticast mode [ 112.914573][ T6853] team0 (unregistering): left promiscuous mode [ 112.924933][ T6853] team_slave_0: left promiscuous mode [ 112.939531][ T6853] team_slave_1: left promiscuous mode [ 112.945449][ T6853] bond0: left promiscuous mode [ 112.967792][ T6853] bond_slave_0: left promiscuous mode [ 112.978799][ T6853] bond_slave_1: left promiscuous mode [ 112.986079][ T6853] bridge0: port 3(team0) entered disabled state [ 113.066321][ T6853] team0 (unregistering): Port device team_slave_0 removed [ 113.088040][ T6853] team0 (unregistering): Port device team_slave_1 removed [ 113.106605][ T6853] team0 (unregistering): Port device bond0 removed [ 113.315758][ T6884] Bluetooth: MGMT ver 1.23 [ 113.335537][ T6884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.267'. [ 113.366677][ T6888] netlink: 48 bytes leftover after parsing attributes in process `syz.4.266'. [ 113.384673][ T6891] nbd: must specify at least one socket [ 113.851570][ T6912] netlink: 'syz.4.277': attribute type 39 has an invalid length. [ 114.279525][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 114.503324][ T6942] Illegal XDP return value 2145977816 on prog (id 139) dev N/A, expect packet loss! [ 114.546088][ T6934] syzkaller1: entered promiscuous mode [ 114.559397][ T6934] syzkaller1: entered allmulticast mode [ 114.621721][ T6948] netlink: 'syz.1.285': attribute type 1 has an invalid length. [ 115.408047][ T6979] netlink: 'syz.2.291': attribute type 4 has an invalid length. [ 115.528687][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 115.544196][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 115.555388][ T6987] netlink: 'syz.0.293': attribute type 1 has an invalid length. [ 115.567993][ T6987] netlink: 10 bytes leftover after parsing attributes in process `syz.0.293'. [ 115.858757][ T6987] nbd: socks must be embedded in a SOCK_ITEM attr [ 115.873331][ T6987] block nbd0: shutting down sockets [ 116.036210][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 116.039251][ T6997] virt_wifi0 speed is unknown, defaulting to 1000 [ 116.112902][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 116.155004][ T7005] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 116.321498][ T7016] netlink: 72 bytes leftover after parsing attributes in process `syz.4.299'. [ 116.753675][ T7042] netlink: 19 bytes leftover after parsing attributes in process `syz.4.306'. [ 116.825438][ T7042] caif0: entered allmulticast mode [ 116.883045][ T7044] syzkaller1: entered promiscuous mode [ 116.889637][ T7044] syzkaller1: entered allmulticast mode [ 117.015045][ T7050] bridge0: port 3(dummy0) entered blocking state [ 117.032122][ T7050] bridge0: port 3(dummy0) entered disabled state [ 117.052528][ T7050] dummy0: entered allmulticast mode [ 117.075654][ T7050] dummy0: entered promiscuous mode [ 117.096267][ T7050] bridge0: port 3(dummy0) entered blocking state [ 117.103919][ T7050] bridge0: port 3(dummy0) entered forwarding state [ 117.165993][ T7049] bridge1: entered promiscuous mode [ 117.179458][ T7049] bridge1: entered allmulticast mode [ 117.208747][ T7049] team0: Port device bridge1 added [ 117.852302][ T7084] virt_wifi0 speed is unknown, defaulting to 1000 [ 118.164916][ T7099] ip6gretap1: entered promiscuous mode [ 118.190024][ T7099] ip6gretap1: entered allmulticast mode [ 118.211418][ T7098] syzkaller1: entered promiscuous mode [ 118.217071][ T7098] syzkaller1: entered allmulticast mode [ 118.328878][ T7104] vlan1: entered allmulticast mode [ 118.343135][ T7104] team0: entered allmulticast mode [ 118.357294][ T7104] team_slave_0: entered allmulticast mode [ 118.369214][ T7104] team_slave_1: entered allmulticast mode [ 118.385072][ T7104] team0: left allmulticast mode [ 118.405796][ T5885] IPVS: starting estimator thread 0... [ 118.406950][ T7104] team_slave_0: left allmulticast mode [ 118.415296][ T7109] xt_l2tp: missing protocol rule (udp|l2tpip) [ 118.437435][ T7104] team_slave_1: left allmulticast mode [ 118.499322][ T7113] IPVS: using max 20 ests per chain, 48000 per kthread [ 118.656753][ T7119] __nla_validate_parse: 9 callbacks suppressed [ 118.656777][ T7119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.327'. [ 118.791958][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 119.050227][ T7137] netlink: 'syz.0.333': attribute type 39 has an invalid length. [ 119.055778][ T7133] netlink: 'syz.1.332': attribute type 1 has an invalid length. [ 119.075800][ T7133] netlink: 'syz.1.332': attribute type 3 has an invalid length. [ 119.086021][ T7133] netlink: 224 bytes leftover after parsing attributes in process `syz.1.332'. [ 119.107898][ T7133] NCSI netlink: No device for ifindex 246 [ 120.046615][ T7135] syzkaller0: entered promiscuous mode [ 120.061933][ T7135] syzkaller0: entered allmulticast mode [ 121.970170][ T7183] syzkaller1: entered promiscuous mode [ 121.975931][ T7183] syzkaller1: entered allmulticast mode [ 122.198847][ T7197] netlink: 'syz.1.342': attribute type 10 has an invalid length. [ 122.236380][ T7197] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 122.291184][ T7203] netlink: 56 bytes leftover after parsing attributes in process `syz.4.344'. [ 122.310323][ T7203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.344'. [ 122.371834][ T7203] netlink: 'syz.4.344': attribute type 1 has an invalid length. [ 122.381131][ T7203] netlink: 104 bytes leftover after parsing attributes in process `syz.4.344'. [ 122.396453][ T7213] netlink: 'syz.0.345': attribute type 3 has an invalid length. [ 122.408193][ T7204] bond0: (slave team0): Releasing backup interface [ 122.431965][ T7204] dummy0: left allmulticast mode [ 122.437042][ T7204] dummy0: left promiscuous mode [ 122.467434][ T7215] netlink: 40 bytes leftover after parsing attributes in process `syz.3.346'. [ 122.469848][ T7204] bridge0: port 3(dummy0) entered disabled state [ 122.533800][ T7204] ÿÿÿÿÿÿ: left allmulticast mode [ 122.546176][ T7204] ÿÿÿÿÿÿ: left promiscuous mode [ 122.552633][ T7204] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 122.572285][ T7204] bridge_slave_1: left allmulticast mode [ 122.583700][ T7204] bridge_slave_1: left promiscuous mode [ 122.589800][ T7204] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.608240][ T7204] bond0: (slave bond_slave_0): Releasing backup interface [ 122.654008][ T7204] bond0: (slave bond_slave_1): Releasing backup interface [ 122.747560][ T7204] team0: Port device team_slave_0 removed [ 122.779827][ T7204] team0: Port device team_slave_1 removed [ 122.782650][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'. [ 122.789923][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.806244][ T7204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.816181][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.827473][ T7204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.895943][ T7216] vlan2: entered allmulticast mode [ 122.902077][ T7216] bond0: entered allmulticast mode [ 122.908301][ T7216] bridge0: port 1(vlan2) entered blocking state [ 122.917006][ T7233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.350'. [ 122.945580][ T7216] bridge0: port 1(vlan2) entered disabled state [ 122.974964][ T7216] vlan2: entered promiscuous mode [ 122.996761][ T7216] bond0: entered promiscuous mode [ 123.136737][ T7231] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 123.166322][ T7231] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 123.449788][ T7263] ip_vti0: entered promiscuous mode [ 123.684053][ T7268] virt_wifi0 speed is unknown, defaulting to 1000 [ 123.712871][ T7277] netlink: 'syz.4.360': attribute type 29 has an invalid length. [ 123.894950][ T7283] x_tables: ip6_tables: HL target: only valid in mangle table, not [ 123.910580][ T7283] x_tables: ip6_tables: HL target: only valid in mangle table, not [ 123.939462][ T7283] x_tables: ip6_tables: HL target: only valid in mangle table, not [ 123.979389][ T7283] x_tables: ip6_tables: HL target: only valid in mangle table, not [ 124.009420][ T7283] x_tables: ip6_tables: HL target: only valid in mangle table, not [ 124.043693][ T7283] x_tables: ip6_tables: HL target: only valid in mangle table, not [ 124.088575][ T7283] x_tables: ip6_tables: HL target: only valid in mangle table, not [ 124.110699][ T7292] netlink: 'syz.4.360': attribute type 29 has an invalid length. [ 124.137338][ T7283] x_tables: ip6_tables: HL target: only valid in mangle table, not [ 124.207876][ T7283] x_tables: ip6_tables: HL target: only valid in mangle table, not [ 124.216370][ T7283] x_tables: ip6_tables: HL target: only valid in mangle table, not [ 124.307116][ T7290] syzkaller1: entered promiscuous mode [ 124.338725][ T7290] syzkaller1: entered allmulticast mode [ 124.369379][ T5842] Bluetooth: hci3: command tx timeout [ 124.391376][ T7277] IPv6: sit1: Disabled Multicast RS [ 124.437702][ T7277] sit1: entered allmulticast mode [ 124.782714][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.357'. [ 124.912850][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 124.964739][ T7322] batadv1: entered allmulticast mode [ 125.018088][ T7325] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 125.332986][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'. [ 125.359401][ T7338] netlink: 96 bytes leftover after parsing attributes in process `syz.1.373'. [ 125.403967][ T7339] vlan2: left promiscuous mode [ 125.415334][ T7339] bond0: left promiscuous mode [ 125.422380][ T7339] bridge0: port 1(vlan2) entered disabled state [ 125.810631][ T7360] netlink: 'syz.0.379': attribute type 1 has an invalid length. [ 125.818464][ T7360] netlink: 'syz.0.379': attribute type 11 has an invalid length. [ 125.826470][ T7360] netlink: 220 bytes leftover after parsing attributes in process `syz.0.379'. [ 125.975620][ T7362] syzkaller1: entered promiscuous mode [ 125.981355][ T7362] syzkaller1: entered allmulticast mode [ 126.476526][ T7389] lo: entered promiscuous mode [ 126.492514][ T7389] tunl0: entered promiscuous mode [ 126.510091][ T7389] gre0: entered promiscuous mode [ 126.580057][ T7389] gretap0: entered promiscuous mode [ 126.621315][ T7389] erspan0: entered promiscuous mode [ 126.647547][ T7389] ip_vti0: entered promiscuous mode [ 126.677071][ T7389] ip6_vti0: entered promiscuous mode [ 126.698077][ T7389] sit0: entered promiscuous mode [ 126.722891][ T7389] ip6tnl0: entered promiscuous mode [ 126.742320][ T7389] ip6gre0: entered promiscuous mode [ 126.754325][ T7389] ip6gretap0: entered promiscuous mode [ 126.775155][ T7389] vcan0: entered promiscuous mode [ 126.781489][ T7404] netlink: 576 bytes leftover after parsing attributes in process `syz.4.390'. [ 126.801036][ T7389] bond0: entered promiscuous mode [ 126.818270][ T7389] bond0: left allmulticast mode [ 126.824187][ T7389] team0: entered promiscuous mode [ 126.830401][ T7389] dummy0: entered promiscuous mode [ 126.836152][ T7389] nlmon0: entered promiscuous mode [ 126.842233][ T7389] caif0: entered promiscuous mode [ 126.848307][ T7389] batadv0: entered promiscuous mode [ 126.880096][ T7389] vxcan0: entered promiscuous mode [ 126.886497][ T7389] vxcan1: entered promiscuous mode [ 126.899916][ T7389] veth0: entered promiscuous mode [ 126.924819][ T7389] veth1: entered promiscuous mode [ 126.943560][ T7389] wg0: entered promiscuous mode [ 126.982492][ T7389] wg1: entered promiscuous mode [ 126.990991][ T7389] wg2: entered promiscuous mode [ 127.000062][ T7389] veth0_to_bridge: entered promiscuous mode [ 127.012136][ T7389] ÿÿÿÿÿÿ: entered promiscuous mode [ 127.022067][ T7389] veth1_to_bridge: entered promiscuous mode [ 127.035036][ T7389] bridge_slave_1: entered promiscuous mode [ 127.045661][ T7389] veth0_to_bond: entered promiscuous mode [ 127.054341][ T7389] bond_slave_0: entered promiscuous mode [ 127.065428][ T7389] veth1_to_bond: entered promiscuous mode [ 127.074561][ T7389] bond_slave_1: entered promiscuous mode [ 127.080922][ T7389] veth0_to_team: entered promiscuous mode [ 127.090320][ T7389] team_slave_0: entered promiscuous mode [ 127.096525][ T7389] veth1_to_team: entered promiscuous mode [ 127.107665][ T7389] team_slave_1: entered promiscuous mode [ 127.114935][ T7389] veth0_to_batadv: entered promiscuous mode [ 127.124998][ T7389] batadv_slave_0: entered promiscuous mode [ 127.135018][ T7389] veth1_to_batadv: entered promiscuous mode [ 127.144359][ T7389] batadv_slave_1: entered promiscuous mode [ 127.170942][ T7389] xfrm0: entered promiscuous mode [ 127.196966][ T7389] veth0_to_hsr: entered promiscuous mode [ 127.219292][ T7389] veth1_to_hsr: entered promiscuous mode [ 127.235208][ T7389] hsr0: entered promiscuous mode [ 127.247589][ T7389] veth1_virt_wifi: entered promiscuous mode [ 127.268183][ T7389] veth0_virt_wifi: entered promiscuous mode [ 127.284566][ T7389] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 127.317630][ T7389] vlan0: entered promiscuous mode [ 127.324731][ T7389] vlan1: entered promiscuous mode [ 127.330874][ T7389] macvlan0: entered promiscuous mode [ 127.348040][ T7389] macvlan1: entered promiscuous mode [ 127.358787][ T7389] ipvlan0: entered promiscuous mode [ 127.364416][ T7389] ipvlan1: entered promiscuous mode [ 127.377866][ T7389] macvtap0: entered promiscuous mode [ 127.386939][ T7389] macsec0: entered promiscuous mode [ 127.412907][ T7389] geneve0: entered promiscuous mode [ 127.433837][ T7389] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.459118][ T7389] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.468108][ T7389] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.486388][ T7389] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.495850][ T7389] geneve1: entered promiscuous mode [ 127.504970][ T7389] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 127.518104][ T7389] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 127.535322][ T7389] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 127.552538][ T7389] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 127.575382][ T7389] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 127.606355][ T7389] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 127.616504][ T7389] mac80211_hwsim hwsim9 wlan2: entered promiscuous mode [ 127.624819][ T7389] mac80211_hwsim hwsim14 wlan3: entered promiscuous mode [ 127.633212][ T7389] veth1_to_team.3: entered promiscuous mode [ 127.639514][ T7389] mac80211_hwsim hwsim19 wlan4: entered promiscuous mode [ 127.651664][ T7389] team1: entered promiscuous mode [ 127.657475][ T7389] ip6tnl1: entered promiscuous mode [ 127.662958][ T7389] ip6gretap1: left allmulticast mode [ 127.668445][ T7389] bridge1: entered promiscuous mode [ 127.675362][ T7389] vlan2: entered promiscuous mode [ 127.680563][ T7389] vlan2: left allmulticast mode [ 127.873005][ T7430] netlink: 40 bytes leftover after parsing attributes in process `syz.3.393'. [ 127.899791][ T7431] IPVS: Unknown mcast interface: bridge_slave_0 [ 128.062326][ T7436] syzkaller1: entered promiscuous mode [ 128.067876][ T7436] syzkaller1: entered allmulticast mode [ 128.096734][ T7442] sctp: [Deprecated]: syz.3.399 (pid 7442) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.096734][ T7442] Use struct sctp_sack_info instead [ 128.184374][ T7442] bridge2: entered promiscuous mode [ 128.199371][ T7442] bridge2: entered allmulticast mode [ 128.209872][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.400'. [ 128.280037][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'. [ 128.312338][ T7452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.402'. [ 128.700402][ T7471] batadv0: entered promiscuous mode [ 128.706293][ T7471] macsec1: entered allmulticast mode [ 128.713677][ T7471] batadv0: entered allmulticast mode [ 128.983101][ T7471] batadv0: left allmulticast mode [ 128.999000][ T7471] batadv0: left promiscuous mode [ 129.167756][ T7476] netlink: 'syz.2.407': attribute type 14 has an invalid length. [ 129.370826][ T7488] netlink: 'syz.2.411': attribute type 12 has an invalid length. [ 129.473799][ T7491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.534799][ T7488] netlink: zone id is out of range [ 129.565757][ T7494] openvswitch: netlink: Message has 8 unknown bytes. [ 129.657569][ T7488] netlink: set zone limit has 4 unknown bytes [ 129.711291][ T7494] netlink: 'syz.0.412': attribute type 16 has an invalid length. [ 129.748134][ T7508] bridge_slave_0: left allmulticast mode [ 129.783710][ T7494] netlink: 'syz.0.412': attribute type 3 has an invalid length. [ 129.824757][ T7508] bridge_slave_0: left promiscuous mode [ 129.868471][ T7505] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 129.875083][ T7494] __nla_validate_parse: 66 callbacks suppressed [ 129.875108][ T7494] netlink: 132 bytes leftover after parsing attributes in process `syz.0.412'. [ 129.893660][ T7508] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.942088][ T7506] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 129.958352][ T7504] netlink: 'syz.0.412': attribute type 12 has an invalid length. [ 130.001452][ T7508] bridge_slave_1: left allmulticast mode [ 130.007176][ T7508] bridge_slave_1: left promiscuous mode [ 130.086669][ T7508] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.214822][ T7508] bond0: (slave veth0_to_bond): Releasing backup interface [ 130.261544][ T7508] bond0: (slave bond_slave_0): Releasing backup interface [ 130.333654][ T7508] bond0: (slave bond_slave_1): Releasing backup interface [ 130.418687][ T7508] team0: Port device team_slave_0 removed [ 130.444317][ T7508] team0: Port device team_slave_1 removed [ 130.456713][ T7508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.464743][ T7508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.473238][ T7508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.481266][ T7508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.511662][ T7508] team0: Port device bridge1 removed [ 130.808309][ T7538] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.422'. [ 130.821415][ T7538] openvswitch: netlink: Message has 8 unknown bytes. [ 130.845395][ T7539] xt_TCPMSS: Only works on TCP SYN packets [ 130.893951][ T7541] sctp: [Deprecated]: syz.3.419 (pid 7541) Use of int in maxseg socket option. [ 130.893951][ T7541] Use struct sctp_assoc_value instead [ 130.975891][ T7545] tipc: Started in network mode [ 131.001210][ T7545] tipc: Node identity ac14142f, cluster identity 4711 [ 131.021575][ T7545] tipc: New replicast peer: 0.0.0.0 [ 131.034687][ T7545] tipc: Enabled bearer , priority 10 [ 131.047779][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.425'. [ 131.057824][ T7550] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 131.066330][ T7548] netlink: 'syz.3.425': attribute type 1 has an invalid length. [ 131.084361][ T7548] netlink: 'syz.3.425': attribute type 2 has an invalid length. [ 131.106581][ T7548] netlink: 80 bytes leftover after parsing attributes in process `syz.3.425'. [ 131.120637][ T7554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.426'. [ 131.385372][ T7565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.430'. [ 131.713753][ T7578] team0: entered allmulticast mode [ 131.757223][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 131.778671][ T7582] netlink: 'syz.3.435': attribute type 30 has an invalid length. [ 131.841782][ T7582] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.850691][ T7582] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.859500][ T7582] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.868230][ T7582] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.031146][ T26] tipc: Node number set to 2886997039 [ 132.091755][ T7595] team0: Device bond0 is already a lower device of the team interface [ 132.137215][ T7602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.440'. [ 132.159626][ T7599] bridge0: port 3(team0) entered blocking state [ 132.168926][ T7599] bridge0: port 3(team0) entered disabled state [ 132.190761][ T7599] team0: entered allmulticast mode [ 132.209535][ T7599] team_slave_0: entered allmulticast mode [ 132.215341][ T7599] team_slave_1: entered allmulticast mode [ 132.254275][ T7599] team0: entered promiscuous mode [ 132.269194][ T7599] team_slave_0: entered promiscuous mode [ 132.275339][ T7599] team_slave_1: entered promiscuous mode [ 132.289795][ T7608] netlink: 9 bytes leftover after parsing attributes in process `syz.2.441'. [ 132.323427][ T7599] bridge0: port 3(team0) entered blocking state [ 132.329862][ T7599] bridge0: port 3(team0) entered forwarding state [ 132.386519][ T7608] 0·: renamed from hsr_slave_1 (while UP) [ 132.414142][ T7608] 0·: entered allmulticast mode [ 132.426138][ T7608] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 132.602969][ T7617] batman_adv: batadv0: Adding interface: vxlan0 [ 132.618380][ T7617] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.651950][ T7617] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 132.778130][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.444'. [ 132.894837][ T7634] netlink: 'syz.0.446': attribute type 21 has an invalid length. [ 133.086926][ T7641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.119477][ T7643] x_tables: duplicate underflow at hook 3 [ 133.249348][ T5837] Bluetooth: hci3: command 0x0405 tx timeout [ 133.257108][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.426312][ T7658] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 133.452000][ T7657] syzkaller1: entered promiscuous mode [ 133.457748][ T7657] syzkaller1: entered allmulticast mode [ 133.815973][ T7670] IPv6: sit1: Disabled Multicast RS [ 133.883069][ T7666] virt_wifi0 speed is unknown, defaulting to 1000 [ 133.900981][ T7672] virt_wifi0 speed is unknown, defaulting to 1000 [ 133.973628][ T7671] virt_wifi0 speed is unknown, defaulting to 1000 [ 134.761459][ T7691] x_tables: duplicate underflow at hook 1 [ 135.155807][ T7700] netlink: 'syz.2.465': attribute type 46 has an invalid length. [ 135.831095][ T7707] !€ÿ: renamed from bond_slave_0 (while UP) [ 136.007692][ T7709] __nla_validate_parse: 7 callbacks suppressed [ 136.007715][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.468'. [ 136.085695][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.128886][ T7714] netlink: 'syz.3.469': attribute type 1 has an invalid length. [ 136.175383][ T7714] netlink: 'syz.3.469': attribute type 2 has an invalid length. [ 136.223231][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.467'. [ 136.263488][ T7709] bridge_slave_1 (unregistering): left allmulticast mode [ 136.285684][ T7709] bridge_slave_1 (unregistering): left promiscuous mode [ 136.325932][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.964529][ T7744] virt_wifi0 speed is unknown, defaulting to 1000 [ 137.174742][ T7755] netlink: zone id is out of range [ 137.194533][ T7755] netlink: zone id is out of range [ 137.207203][ T7752] syzkaller0: entered promiscuous mode [ 137.214029][ T7755] netlink: zone id is out of range [ 137.236032][ T7755] netlink: del zone limit has 4 unknown bytes [ 137.246439][ T7752] syzkaller0: entered allmulticast mode [ 139.537518][ T7749] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 139.885339][ T7769] team0 (unregistering): Port device team_slave_0 removed [ 139.910968][ T7769] team0 (unregistering): Port device team_slave_1 removed [ 140.085420][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 140.406287][ T7805] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.418641][ T7806] netlink: 332 bytes leftover after parsing attributes in process `syz.0.491'. [ 140.466765][ T7810] netlink: 168 bytes leftover after parsing attributes in process `syz.1.494'. [ 140.477126][ T7812] netlink: 168 bytes leftover after parsing attributes in process `syz.1.494'. [ 140.521366][ T7809] netlink: 32 bytes leftover after parsing attributes in process `syz.3.493'. [ 140.655003][ T7825] x_tables: duplicate underflow at hook 3 [ 140.670429][ T7826] x_tables: duplicate underflow at hook 3 [ 141.121995][ T7848] netlink: 56 bytes leftover after parsing attributes in process `syz.0.500'. [ 141.380328][ T7859] netlink: 84 bytes leftover after parsing attributes in process `syz.0.500'. [ 142.282311][ T7869] netlink: 'syz.3.505': attribute type 7 has an invalid length. [ 142.549478][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 142.565513][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 142.921815][ T7889] netlink: 'syz.0.509': attribute type 1 has an invalid length. [ 142.948557][ T7891] netlink: 'syz.3.510': attribute type 4 has an invalid length. [ 142.987426][ T7889] bond1: entered promiscuous mode [ 143.028056][ T7889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.217795][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 143.251004][ T7893] bond1: (slave veth3): making interface the new active one [ 143.269247][ T7893] veth3: entered promiscuous mode [ 143.275861][ T7893] bond1: (slave veth3): Enslaving as an active interface with an up link [ 143.286042][ T7897] netlink: 40 bytes leftover after parsing attributes in process `syz.3.511'. [ 143.301853][ T7889] batman_adv: batadv0: Removing interface: vxlan0 [ 143.327712][ T7889] bond1: (slave veth3): Releasing backup interface [ 143.337161][ T7889] veth3: left promiscuous mode [ 144.054584][ T7919] xt_CT: No such helper "pptp" [ 144.150368][ T7924] vlan3: entered promiscuous mode [ 144.155791][ T7924] team0: Device vlan3 is already an upper device of the team interface [ 144.464147][ T7930] netlink: 'syz.4.520': attribute type 1 has an invalid length. [ 144.616621][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 144.654763][ T7937] netlink: 52 bytes leftover after parsing attributes in process `syz.0.522'. [ 144.930745][ T7950] netlink: 766 bytes leftover after parsing attributes in process `syz.1.525'. [ 145.187587][ T7958] bridge0: port 2(vlan1) entered blocking state [ 145.245183][ T7958] bridge0: port 2(vlan1) entered disabled state [ 145.328096][ T7958] vlan1: entered allmulticast mode [ 145.460789][ T7958] vlan1: entered promiscuous mode [ 145.608218][ T7958] bridge0: port 2(vlan1) entered blocking state [ 145.615182][ T7958] bridge0: port 2(vlan1) entered forwarding state [ 145.734371][ T7961] netlink: 830 bytes leftover after parsing attributes in process `syz.1.527'. [ 145.779230][ T7974] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 146.149450][ T7992] netlink: 'syz.1.537': attribute type 1 has an invalid length. [ 146.177961][ T7992] netlink: 600 bytes leftover after parsing attributes in process `syz.1.537'. [ 146.235884][ T7998] netlink: 40 bytes leftover after parsing attributes in process `syz.3.538'. [ 146.499151][ T8005] netlink: 'syz.3.541': attribute type 1 has an invalid length. [ 146.520104][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.539'. [ 146.569667][ T8006] 8021q: VLANs not supported on vxcan0 [ 146.914904][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 147.015700][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 147.411127][ T8035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.482723][ T8038] virt_wifi0 speed is unknown, defaulting to 1000 [ 147.572702][ T8035] virt_wifi0 speed is unknown, defaulting to 1000 [ 147.749285][ T8051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.558'. [ 147.766238][ T8038] virt_wifi0 speed is unknown, defaulting to 1000 [ 147.872869][ T8038] pimreg0: tun_chr_ioctl cmd 1074025677 [ 147.878630][ T8038] pimreg0: linktype set to 65534 [ 148.883384][ T8089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.567'. [ 148.947614][ T8090] tc_dump_action: action bad kind [ 149.861537][ T8105] bridge0: port 2(vlan1) entered disabled state [ 149.938734][ T8105] vlan1 (unregistering): left allmulticast mode [ 149.956885][ T8105] vlan1 (unregistering): left promiscuous mode [ 149.978217][ T8105] bridge0: port 2(vlan1) entered disabled state [ 150.016732][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'. [ 150.025983][ T8109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.572'. [ 150.069421][ T8111] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 150.112260][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'. [ 150.240355][ T8117] netlink: 'syz.1.575': attribute type 3 has an invalid length. [ 150.489494][ T8127] dccp_invalid_packet: invalid packet type [ 150.489500][ T8126] netlink: 'syz.4.577': attribute type 4 has an invalid length. [ 150.518837][ T8126] netlink: 'syz.4.577': attribute type 4 has an invalid length. [ 150.683234][ T8134] tun0: tun_chr_ioctl cmd 2147767520 [ 151.126456][ T8143] team0: left allmulticast mode [ 151.306764][ T8172] __nla_validate_parse: 11 callbacks suppressed [ 151.306786][ T8172] netlink: 116 bytes leftover after parsing attributes in process `syz.2.590'. [ 151.777782][ T8143] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.796117][ T8143] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.806992][ T8143] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.825624][ T8143] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.898419][ T8143] bond1: left promiscuous mode [ 151.908390][ T8143] bridge1: left promiscuous mode [ 151.916081][ T8143] bridge1: left allmulticast mode [ 152.166903][ T8185] SET target dimension over the limit! [ 152.247803][ T8185] netlink: 64 bytes leftover after parsing attributes in process `syz.2.592'. [ 152.314718][ T8194] bridge0: port 1(macsec1) entered blocking state [ 152.343765][ T8194] bridge0: port 1(macsec1) entered disabled state [ 152.370255][ T8194] macsec1: entered allmulticast mode [ 152.375786][ T30] audit: type=1107 audit(1742285817.255:3): pid=8196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='æÉ’' [ 152.419610][ T8194] bridge0: entered allmulticast mode [ 152.428135][ T8194] macsec1: left allmulticast mode [ 152.435635][ T8194] bridge0: left allmulticast mode [ 152.557606][ T8204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.672553][ T8213] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 152.963105][ T8222] 8021q: VLANs not supported on ip6_vti0 [ 153.026240][ T8223] netlink: 48 bytes leftover after parsing attributes in process `syz.4.602'. [ 154.386108][ T8240] macvlan2: entered promiscuous mode [ 154.420525][ T8240] macvlan2: entered allmulticast mode [ 154.426768][ T8240] bond0: entered allmulticast mode [ 154.461146][ T8240] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 154.547107][ T8240] team0: Port device macvlan2 added [ 154.584940][ T8243] virt_wifi0 speed is unknown, defaulting to 1000 [ 154.853634][ T8258] netlink: 'syz.3.615': attribute type 32 has an invalid length. [ 154.963899][ T8263] pim6reg: entered allmulticast mode [ 155.361918][ T8279] vlan2: entered promiscuous mode [ 155.372008][ T8279] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 155.400748][ T8279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.621'. [ 155.623281][ T8289] bridge0: entered promiscuous mode [ 155.631153][ T8289] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 155.645181][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.654802][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.677599][ T8289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.623'. [ 155.901334][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.625'. [ 155.925294][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.628'. [ 155.934441][ T8305] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 155.949262][ T8293] netlink: 28 bytes leftover after parsing attributes in process `syz.3.625'. [ 156.202843][ T8312] netlink: 'syz.4.631': attribute type 32 has an invalid length. [ 156.287409][ T8312] pim6reg: entered allmulticast mode [ 156.408740][ T8317] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 156.462160][ T8330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.635'. [ 156.464387][ T8317] netlink: 48 bytes leftover after parsing attributes in process `syz.1.632'. [ 156.490928][ T8330] sch_tbf: burst 511 is lower than device veth7 mtu (1514) ! [ 156.540417][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.635'. [ 156.654811][ T8341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.640'. [ 156.722209][ T8349] netlink: 32 bytes leftover after parsing attributes in process `syz.2.639'. [ 156.757614][ T8342] bridge0: left promiscuous mode [ 156.806771][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.641'. [ 156.877629][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.901976][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.928810][ T8342] 0·: left allmulticast mode [ 157.056685][ T8342] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.077114][ T8342] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.094633][ T8342] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.105654][ T8342] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.176613][ T8342] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 157.204441][ T8342] vlan2: left promiscuous mode [ 157.216133][ T8354] netlink: 44 bytes leftover after parsing attributes in process `syz.3.641'. [ 157.395602][ T8363] vlan2: entered allmulticast mode [ 157.421389][ T8363] batadv0: entered allmulticast mode [ 157.435635][ T8363] batadv0: left allmulticast mode [ 157.489873][ T30] audit: type=1107 audit(1742285822.355:4): pid=8369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Àïï' [ 157.755191][ T8380] netlink: 84 bytes leftover after parsing attributes in process `syz.0.649'. [ 157.795410][ T8380] netlink: 84 bytes leftover after parsing attributes in process `syz.0.649'. [ 157.894463][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.651'. [ 158.248720][ T8413] FAULT_INJECTION: forcing a failure. [ 158.248720][ T8413] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 158.289306][ T8413] CPU: 1 UID: 0 PID: 8413 Comm: syz.3.655 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 158.289348][ T8413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.289360][ T8413] Call Trace: [ 158.289368][ T8413] [ 158.289376][ T8413] dump_stack_lvl+0x241/0x360 [ 158.289415][ T8413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.289438][ T8413] ? __pfx__printk+0x10/0x10 [ 158.289461][ T8413] ? __pfx_lock_release+0x10/0x10 [ 158.289501][ T8413] should_fail_ex+0x40a/0x550 [ 158.289539][ T8413] _copy_from_user+0x2d/0xb0 [ 158.289569][ T8413] do_arpt_set_ctl+0x759/0x1650 [ 158.289611][ T8413] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 158.289647][ T8413] ? nf_setsockopt+0x240/0x2c0 [ 158.289679][ T8413] ? do_ip_setsockopt+0x2824/0x3ae0 [ 158.289704][ T8413] ? __pfx_lock_release+0x10/0x10 [ 158.289736][ T8413] ? rcu_is_watching+0x15/0xb0 [ 158.289772][ T8413] ? __mutex_unlock_slowpath+0x227/0x800 [ 158.289810][ T8413] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 158.289833][ T8413] ? aa_sk_perm+0x96d/0xab0 [ 158.289875][ T8413] ? __pfx_aa_sk_perm+0x10/0x10 [ 158.289906][ T8413] nf_setsockopt+0x295/0x2c0 [ 158.289944][ T8413] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 158.289976][ T8413] do_sock_setsockopt+0x3af/0x720 [ 158.290004][ T8413] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 158.290031][ T8413] ? __fget_files+0x395/0x410 [ 158.290060][ T8413] ? __fget_files+0x2a/0x410 [ 158.290098][ T8413] __x64_sys_setsockopt+0x1ee/0x280 [ 158.290128][ T8413] do_syscall_64+0xf3/0x230 [ 158.290155][ T8413] ? clear_bhb_loop+0x35/0x90 [ 158.290186][ T8413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.290214][ T8413] RIP: 0033:0x7f33ce58d169 [ 158.290232][ T8413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.290248][ T8413] RSP: 002b:00007f33cf346038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 158.290270][ T8413] RAX: ffffffffffffffda RBX: 00007f33ce7a5fa0 RCX: 00007f33ce58d169 [ 158.290286][ T8413] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 158.290298][ T8413] RBP: 00007f33cf346090 R08: 0000000000000418 R09: 0000000000000000 [ 158.290311][ T8413] R10: 0000400000000380 R11: 0000000000000246 R12: 0000000000000001 [ 158.290331][ T8413] R13: 0000000000000000 R14: 00007f33ce7a5fa0 R15: 00007ffd914c5cc8 [ 158.290361][ T8413] [ 158.819793][ T8422] netlink: 'syz.0.658': attribute type 1 has an invalid length. [ 159.404111][ T8442] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.416377][ T8442] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.439290][ T8441] netlink: 'syz.3.664': attribute type 5 has an invalid length. [ 159.534213][ T8442] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.548472][ T8442] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.664954][ T8442] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.675742][ T8442] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.780059][ T8442] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.792021][ T8442] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.966865][ T8457] virt_wifi0 speed is unknown, defaulting to 1000 [ 160.011168][ T8442] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.029186][ T8442] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.073757][ T8442] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.087331][ T8442] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.100332][ T8462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.132201][ T8442] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.141560][ T8442] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.162254][ T8442] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.180402][ T8442] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.540918][ T8472] FAULT_INJECTION: forcing a failure. [ 160.540918][ T8472] name failslab, interval 1, probability 0, space 0, times 1 [ 160.610091][ T8472] CPU: 0 UID: 0 PID: 8472 Comm: syz.1.671 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 160.610122][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.610134][ T8472] Call Trace: [ 160.610142][ T8472] [ 160.610150][ T8472] dump_stack_lvl+0x241/0x360 [ 160.610182][ T8472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.610205][ T8472] ? __pfx__printk+0x10/0x10 [ 160.610228][ T8472] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 160.610259][ T8472] ? __pfx___might_resched+0x10/0x10 [ 160.610292][ T8472] should_fail_ex+0x40a/0x550 [ 160.610328][ T8472] should_failslab+0xac/0x100 [ 160.610356][ T8472] __kmalloc_node_noprof+0xe1/0x4d0 [ 160.610381][ T8472] ? apparmor_capable+0x13b/0x1b0 [ 160.610403][ T8472] ? __kvmalloc_node_noprof+0x72/0x190 [ 160.610441][ T8472] __kvmalloc_node_noprof+0x72/0x190 [ 160.610475][ T8472] xt_alloc_table_info+0x3d/0xa0 [ 160.610497][ T8472] do_arpt_set_ctl+0xb84/0x1650 [ 160.610539][ T8472] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 160.610576][ T8472] ? nf_setsockopt+0x240/0x2c0 [ 160.610606][ T8472] ? do_ip_setsockopt+0x2824/0x3ae0 [ 160.610632][ T8472] ? __pfx_lock_release+0x10/0x10 [ 160.610666][ T8472] ? rcu_is_watching+0x15/0xb0 [ 160.610702][ T8472] ? __mutex_unlock_slowpath+0x227/0x800 [ 160.610738][ T8472] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 160.610764][ T8472] ? aa_sk_perm+0x96d/0xab0 [ 160.610827][ T8472] ? __pfx_aa_sk_perm+0x10/0x10 [ 160.610861][ T8472] nf_setsockopt+0x295/0x2c0 [ 160.610898][ T8472] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 160.610930][ T8472] do_sock_setsockopt+0x3af/0x720 [ 160.610960][ T8472] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 160.610988][ T8472] ? __fget_files+0x395/0x410 [ 160.611017][ T8472] ? __fget_files+0x2a/0x410 [ 160.611056][ T8472] __x64_sys_setsockopt+0x1ee/0x280 [ 160.611091][ T8472] do_syscall_64+0xf3/0x230 [ 160.611118][ T8472] ? clear_bhb_loop+0x35/0x90 [ 160.611151][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.611179][ T8472] RIP: 0033:0x7fb9e298d169 [ 160.611197][ T8472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.611213][ T8472] RSP: 002b:00007fb9e3721038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 160.611236][ T8472] RAX: ffffffffffffffda RBX: 00007fb9e2ba5fa0 RCX: 00007fb9e298d169 [ 160.611251][ T8472] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 160.611263][ T8472] RBP: 00007fb9e3721090 R08: 0000000000000418 R09: 0000000000000000 [ 160.611276][ T8472] R10: 0000400000000380 R11: 0000000000000246 R12: 0000000000000001 [ 160.611289][ T8472] R13: 0000000000000000 R14: 00007fb9e2ba5fa0 R15: 00007ffc293d77b8 [ 160.611318][ T8472] [ 160.931937][ T8483] xt_recent: Unsupported userspace flags (00000042) [ 161.353699][ T8497] vlan1: entered allmulticast mode [ 161.358925][ T8497] macsec0: entered allmulticast mode [ 161.364964][ T8497] veth1_macvtap: entered allmulticast mode [ 161.382081][ T8497] bridge0: port 2(vlan1) entered blocking state [ 161.388620][ T8497] bridge0: port 2(vlan1) entered disabled state [ 161.410655][ T8497] vlan1: entered promiscuous mode [ 161.420557][ T8497] macsec0: entered promiscuous mode [ 161.426920][ T8497] bridge0: port 2(vlan1) entered blocking state [ 161.433432][ T8497] bridge0: port 2(vlan1) entered forwarding state [ 161.686043][ T8515] team0: left promiscuous mode [ 161.700034][ T8515] team_slave_0: left promiscuous mode [ 161.706215][ T8515] team_slave_1: left promiscuous mode [ 161.741134][ T8515] bridge0: port 3(team0) entered disabled state [ 161.760522][ T8517] __nla_validate_parse: 5 callbacks suppressed [ 161.760545][ T8517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.685'. [ 161.760768][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 161.846101][ T8515] bridge_slave_0: left allmulticast mode [ 161.860142][ T8515] bridge_slave_0: left promiscuous mode [ 161.864381][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.687'. [ 161.884939][ T8515] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.917042][ T8515] bond0: (slave 1!€ÿ): Releasing backup interface [ 161.919382][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 161.936788][ T8515] !€ÿ: left promiscuous mode [ 161.942757][ T8515] !€ÿ: left allmulticast mode [ 161.976150][ T8515] bond0: (slave bond_slave_1): Releasing backup interface [ 161.986088][ T8515] bond_slave_1: left promiscuous mode [ 161.999538][ T8515] bond_slave_1: left allmulticast mode [ 162.007363][ T8515] team_slave_0: left allmulticast mode [ 162.053592][ T8515] team0: Port device team_slave_0 removed [ 162.080767][ T8515] team_slave_1: left allmulticast mode [ 162.121810][ T8515] team0: Port device team_slave_1 removed [ 162.128549][ T8515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.169321][ T8515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.180520][ T8515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.188542][ T8515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.248253][ T8515] bond0: left allmulticast mode [ 162.273570][ T8515] macvlan3: left allmulticast mode [ 162.278783][ T8515] veth0_to_batadv: left allmulticast mode [ 162.299834][ T8515] bond0: left promiscuous mode [ 162.304695][ T8515] macvlan3: left promiscuous mode [ 162.358400][ T8515] team0: Port device macvlan2 removed [ 162.379775][ T8515] bond0: (slave macvlan3): Releasing backup interface [ 162.401009][ T8515] veth0_to_batadv: left promiscuous mode [ 162.434037][ T8515] vlan1: left promiscuous mode [ 162.438890][ T8515] macsec0: left promiscuous mode [ 162.444678][ T8515] bridge0: port 2(vlan1) entered disabled state [ 162.482731][ T8517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.685'. [ 162.533722][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 162.548380][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.690'. [ 162.608919][ T8532] netlink: 'syz.2.690': attribute type 12 has an invalid length. [ 162.620330][ T8532] netlink: 'syz.2.690': attribute type 11 has an invalid length. [ 162.635541][ T8536] sctp: [Deprecated]: syz.1.691 (pid 8536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.635541][ T8536] Use struct sctp_sack_info instead [ 162.648310][ T8538] netlink: 'syz.4.692': attribute type 4 has an invalid length. [ 162.672455][ T8538] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.692'. [ 162.682173][ T8538] openvswitch: netlink: Message has 44053 unknown bytes. [ 162.790368][ T52] IPVS: starting estimator thread 0... [ 162.890879][ T8542] IPVS: using max 22 ests per chain, 52800 per kthread [ 162.917501][ T8546] virt_wifi0 speed is unknown, defaulting to 1000 [ 163.241474][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.700'. [ 163.290951][ T8571] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 163.319623][ T8558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.699'. [ 163.411597][ T8575] ieee802154 phy1 wpan1: encryption failed: -22 [ 163.514976][ T8587] FAULT_INJECTION: forcing a failure. [ 163.514976][ T8587] name failslab, interval 1, probability 0, space 0, times 0 [ 163.550133][ T8587] CPU: 1 UID: 0 PID: 8587 Comm: syz.3.704 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 163.550164][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.550177][ T8587] Call Trace: [ 163.550183][ T8587] [ 163.550192][ T8587] dump_stack_lvl+0x241/0x360 [ 163.550223][ T8587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.550245][ T8587] ? __pfx__printk+0x10/0x10 [ 163.550266][ T8587] ? __kmalloc_noprof+0xb5/0x4c0 [ 163.550297][ T8587] ? __pfx___might_resched+0x10/0x10 [ 163.550324][ T8587] ? aa_get_newest_label+0xff/0x6f0 [ 163.550362][ T8587] should_fail_ex+0x40a/0x550 [ 163.550400][ T8587] should_failslab+0xac/0x100 [ 163.550430][ T8587] __kmalloc_noprof+0xdd/0x4c0 [ 163.550459][ T8587] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 163.550484][ T8587] ? apparmor_capable+0x13b/0x1b0 [ 163.550512][ T8587] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 163.550569][ T8587] genl_rcv_msg+0x80b/0xec0 [ 163.550601][ T8587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 163.550656][ T8587] ? __pfx_lock_acquire+0x10/0x10 [ 163.550686][ T8587] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 163.550716][ T8587] ? __pfx_nl80211_tdls_mgmt+0x10/0x10 [ 163.550735][ T8587] ? __pfx_nl80211_post_doit+0x10/0x10 [ 163.550767][ T8587] ? __pfx___might_resched+0x10/0x10 [ 163.550805][ T8587] netlink_rcv_skb+0x206/0x480 [ 163.550844][ T8587] ? __pfx_genl_rcv_msg+0x10/0x10 [ 163.550870][ T8587] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 163.550914][ T8587] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 163.550961][ T8587] genl_rcv+0x28/0x40 [ 163.550982][ T8587] netlink_unicast+0x7f6/0x990 [ 163.551019][ T8587] ? __pfx_netlink_unicast+0x10/0x10 [ 163.551044][ T8587] ? __virt_addr_valid+0x45f/0x530 [ 163.551066][ T8587] ? __phys_addr_symbol+0x2f/0x70 [ 163.551084][ T8587] ? __check_object_size+0x47a/0x730 [ 163.551118][ T8587] netlink_sendmsg+0x8de/0xcb0 [ 163.551162][ T8587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.551198][ T8587] ? aa_sock_msg_perm+0x91/0x160 [ 163.551236][ T8587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.551265][ T8587] __sock_sendmsg+0x221/0x270 [ 163.551300][ T8587] ____sys_sendmsg+0x53a/0x860 [ 163.551333][ T8587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.551356][ T8587] ? __fget_files+0x2a/0x410 [ 163.551391][ T8587] ? __fget_files+0x2a/0x410 [ 163.551431][ T8587] __sys_sendmsg+0x269/0x350 [ 163.551461][ T8587] ? __pfx___sys_sendmsg+0x10/0x10 [ 163.551499][ T8587] ? do_sys_openat2+0x17a/0x1d0 [ 163.551558][ T8587] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 163.551592][ T8587] ? do_syscall_64+0x100/0x230 [ 163.551622][ T8587] ? do_syscall_64+0xb6/0x230 [ 163.551652][ T8587] do_syscall_64+0xf3/0x230 [ 163.551679][ T8587] ? clear_bhb_loop+0x35/0x90 [ 163.551712][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.551740][ T8587] RIP: 0033:0x7f33ce58d169 [ 163.551758][ T8587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.551775][ T8587] RSP: 002b:00007f33cf346038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.551797][ T8587] RAX: ffffffffffffffda RBX: 00007f33ce7a5fa0 RCX: 00007f33ce58d169 [ 163.551812][ T8587] RDX: 0000000000000000 RSI: 0000400000000480 RDI: 0000000000000003 [ 163.551831][ T8587] RBP: 00007f33cf346090 R08: 0000000000000000 R09: 0000000000000000 [ 163.551844][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.551855][ T8587] R13: 0000000000000000 R14: 00007f33ce7a5fa0 R15: 00007ffd914c5cc8 [ 163.551886][ T8587] [ 164.561705][ T998] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.609430][ T998] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.734766][ T998] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.755319][ T998] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.881002][ T998] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.907137][ T998] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.087573][ T998] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.109368][ T998] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.392637][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.438667][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.447495][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.457114][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.466724][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 165.474289][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.485748][ T8649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.496109][ T8649] bond0: (slave bond1): Enslaving as an active interface with an up link [ 165.548930][ T8661] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 166.218605][ T998] bond0 (unregistering): Released all slaves [ 166.329447][ T8664] virt_wifi0 speed is unknown, defaulting to 1000 [ 166.365102][ T8652] virt_wifi0 speed is unknown, defaulting to 1000 [ 166.442534][ T8683] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 166.898300][ T8705] vlan0: entered promiscuous mode [ 166.913943][ T8704] virt_wifi0 speed is unknown, defaulting to 1000 [ 166.958460][ T8705] __nla_validate_parse: 4 callbacks suppressed [ 166.958484][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'. [ 166.997023][ T998] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 167.068321][ T8652] chnl_net:caif_netlink_parms(): no params data found [ 167.094870][ T8705] vlan0 (unregistering): left promiscuous mode [ 167.110396][ T8711] FAULT_INJECTION: forcing a failure. [ 167.110396][ T8711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.133227][ T8711] CPU: 1 UID: 0 PID: 8711 Comm: syz.1.743 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 167.133259][ T8711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.133272][ T8711] Call Trace: [ 167.133279][ T8711] [ 167.133289][ T8711] dump_stack_lvl+0x241/0x360 [ 167.133322][ T8711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.133345][ T8711] ? __pfx__printk+0x10/0x10 [ 167.133373][ T8711] ? snprintf+0xda/0x120 [ 167.133397][ T8711] should_fail_ex+0x40a/0x550 [ 167.133435][ T8711] _copy_to_user+0x31/0xb0 [ 167.133466][ T8711] simple_read_from_buffer+0xca/0x150 [ 167.133498][ T8711] proc_fail_nth_read+0x1e9/0x250 [ 167.133532][ T8711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.133566][ T8711] ? rw_verify_area+0x243/0x630 [ 167.133588][ T8711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.133620][ T8711] vfs_read+0x1f8/0xb40 [ 167.133644][ T8711] ? fdget_pos+0x254/0x320 [ 167.133677][ T8711] ? __pfx___mutex_lock+0x10/0x10 [ 167.133705][ T8711] ? __pfx_vfs_read+0x10/0x10 [ 167.133724][ T8711] ? do_sys_openat2+0x17a/0x1d0 [ 167.133759][ T8711] ? __fget_files+0x2a/0x410 [ 167.133791][ T8711] ? __fget_files+0x395/0x410 [ 167.133821][ T8711] ? __fget_files+0x2a/0x410 [ 167.133861][ T8711] ksys_read+0x18f/0x2b0 [ 167.133887][ T8711] ? __pfx_ksys_read+0x10/0x10 [ 167.133911][ T8711] ? do_syscall_64+0x100/0x230 [ 167.133941][ T8711] ? do_syscall_64+0xb6/0x230 [ 167.133972][ T8711] do_syscall_64+0xf3/0x230 [ 167.133998][ T8711] ? clear_bhb_loop+0x35/0x90 [ 167.134032][ T8711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.134060][ T8711] RIP: 0033:0x7fb9e298bb7c [ 167.134078][ T8711] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 167.134095][ T8711] RSP: 002b:00007fb9e3721030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.134117][ T8711] RAX: ffffffffffffffda RBX: 00007fb9e2ba5fa0 RCX: 00007fb9e298bb7c [ 167.134132][ T8711] RDX: 000000000000000f RSI: 00007fb9e37210a0 RDI: 0000000000000004 [ 167.134145][ T8711] RBP: 00007fb9e3721090 R08: 0000000000000000 R09: 0000000000000000 [ 167.134157][ T8711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.134169][ T8711] R13: 0000000000000000 R14: 00007fb9e2ba5fa0 R15: 00007ffc293d77b8 [ 167.134209][ T8711] [ 167.569704][ T55] Bluetooth: hci2: command tx timeout [ 167.602587][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.618711][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.626181][ T8652] bridge_slave_0: entered allmulticast mode [ 167.636126][ T8652] bridge_slave_0: entered promiscuous mode [ 167.639566][ T8728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.746'. [ 167.707862][ T998] hsr_slave_0: left promiscuous mode [ 167.719091][ T998] hsr_slave_1: left promiscuous mode [ 167.758504][ T998] macsec0: left allmulticast mode [ 167.773283][ T998] veth1_macvtap: left allmulticast mode [ 167.780772][ T998] macvtap0: left promiscuous mode [ 167.786287][ T998] veth1_macvtap: left promiscuous mode [ 167.792809][ T998] veth0_macvtap: left promiscuous mode [ 167.798585][ T998] veth1_vlan: left promiscuous mode [ 167.964992][ T998] pim6reg (unregistering): left allmulticast mode [ 168.859704][ T998] team0 (unregistering): left allmulticast mode [ 168.898661][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.907340][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.915241][ T8652] bridge_slave_1: entered allmulticast mode [ 168.926090][ T8652] bridge_slave_1: entered promiscuous mode [ 168.961307][ T8747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.750'. [ 169.055368][ T8652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.082398][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 169.103923][ T8652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.143910][ T8753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.751'. [ 169.202717][ T8751] netlink: 'syz.1.751': attribute type 10 has an invalid length. [ 169.219687][ T8751] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 169.262548][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'. [ 169.322341][ T8759] netlink: 36 bytes leftover after parsing attributes in process `syz.3.753'. [ 169.346109][ T8652] team0: Port device team_slave_0 added [ 169.360078][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.753'. [ 169.389242][ T8759] netlink: 36 bytes leftover after parsing attributes in process `syz.3.753'. [ 169.400178][ T8652] team0: Port device team_slave_1 added [ 169.416001][ T8759] netlink: 36 bytes leftover after parsing attributes in process `syz.3.753'. [ 169.548508][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.559584][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.588857][ T8652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.649167][ T55] Bluetooth: hci2: command tx timeout [ 169.663585][ T8652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.682799][ T8652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.723716][ T8652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.790815][ T8771] netlink: 'syz.1.758': attribute type 3 has an invalid length. [ 169.988891][ T8652] hsr_slave_0: entered promiscuous mode [ 170.010268][ T8652] hsr_slave_1: entered promiscuous mode [ 170.016991][ T8652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.049208][ T8652] Cannot create hsr debugfs directory [ 171.061949][ T8827] tipc: Failed to remove unknown binding: 66,1,1/2886997039:2212655804/2212655806 [ 171.082917][ T8827] openvswitch: netlink: Actions may not be safe on all matching packets [ 171.195319][ T8652] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.211775][ T8831] openvswitch: netlink: Missing valid actions attribute. [ 171.218951][ T8831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.240873][ T8652] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.262033][ T8652] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.299205][ T8652] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.554508][ T8652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.619581][ T8652] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.637590][ T8852] netlink: del zone limit has 4 unknown bytes [ 171.680540][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.688818][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.729206][ T55] Bluetooth: hci2: command tx timeout [ 171.757806][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.765044][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.086082][ T8878] SET target dimension over the limit! [ 172.293829][ T8885] __nla_validate_parse: 2 callbacks suppressed [ 172.293848][ T8885] netlink: 132 bytes leftover after parsing attributes in process `syz.1.790'. [ 172.343337][ T8652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.414014][ T8891] netlink: 48 bytes leftover after parsing attributes in process `syz.1.790'. [ 172.481759][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.790'. [ 172.824122][ T8652] veth0_vlan: entered promiscuous mode [ 172.883110][ T8652] veth1_vlan: entered promiscuous mode [ 172.966915][ T8652] veth0_macvtap: entered promiscuous mode [ 173.013687][ T8652] veth1_macvtap: entered promiscuous mode [ 173.080788][ T8652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.115931][ T8652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.139315][ T8652] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.148313][ T8652] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.189402][ T8652] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.198173][ T8652] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.231412][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.800'. [ 173.257415][ T8934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.801'. [ 173.317869][ T8934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.801'. [ 173.353914][ T8941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.803'. [ 173.393581][ T8941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.803'. [ 173.407736][ T8941] netlink: 'syz.2.803': attribute type 6 has an invalid length. [ 173.425479][ T8934] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.432025][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.805'. [ 173.434387][ T8934] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.469133][ T8934] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.477373][ T8934] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.487582][ T8934] geneve2: entered allmulticast mode [ 173.540890][ T8948] bond2: entered promiscuous mode [ 173.547343][ T8948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.704605][ T8953] netlink: 'syz.0.805': attribute type 6 has an invalid length. [ 173.727292][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.757098][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.807598][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.815911][ T55] Bluetooth: hci2: command tx timeout [ 173.859889][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.038125][ T8969] netlink: 71 bytes leftover after parsing attributes in process `syz.1.809'. [ 174.157542][ T8972] xt_bpf: check failed: parse error [ 174.331050][ T8982] vlan0: entered allmulticast mode [ 174.336876][ T8982] veth0_to_batadv: entered allmulticast mode [ 174.354291][ T8982] veth0_to_batadv: left allmulticast mode [ 174.429483][ T8983] vlan0: entered allmulticast mode [ 174.449208][ T8983] veth0_to_batadv: entered allmulticast mode [ 174.468146][ T8983] veth0_to_batadv: left allmulticast mode [ 174.543311][ T8990] netlink: 'syz.1.815': attribute type 1 has an invalid length. [ 174.545433][ T8987] tun0: tun_chr_ioctl cmd 1074025675 [ 174.558187][ T8987] tun0: persist enabled [ 174.571014][ T8982] vlan0: entered allmulticast mode [ 174.578161][ T8982] veth0_to_batadv: entered allmulticast mode [ 174.593131][ T8982] veth0_to_batadv: left allmulticast mode [ 174.643785][ T8991] [ 174.646159][ T8991] ====================================================== [ 174.653187][ T8991] WARNING: possible circular locking dependency detected [ 174.660209][ T8991] 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 Not tainted [ 174.667316][ T8991] ------------------------------------------------------ [ 174.674335][ T8991] syz.1.815/8991 is trying to acquire lock: [ 174.680231][ T8991] ffff88801b178768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_change_mac+0xc6/0x1160 [ 174.690099][ T8991] [ 174.690099][ T8991] but task is already holding lock: [ 174.697482][ T8991] ffff8880310e8d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 174.706654][ T8991] [ 174.706654][ T8991] which lock already depends on the new lock. [ 174.706654][ T8991] [ 174.717074][ T8991] [ 174.717074][ T8991] the existing dependency chain (in reverse order) is: [ 174.726097][ T8991] [ 174.726097][ T8991] -> #1 (&dev->lock){+.+.}-{4:4}: [ 174.733327][ T8991] lock_acquire+0x1ed/0x550 [ 174.738378][ T8991] __mutex_lock+0x19c/0x1010 [ 174.743521][ T8991] register_netdevice+0x12d8/0x1b70 [ 174.749259][ T8991] cfg80211_register_netdevice+0x149/0x2f0 [ 174.755619][ T8991] ieee80211_if_add+0x119d/0x1780 [ 174.761195][ T8991] ieee80211_register_hw+0x3708/0x42e0 [ 174.767187][ T8991] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 174.773449][ T8991] init_mac80211_hwsim+0x87a/0xb00 [ 174.779178][ T8991] do_one_initcall+0x248/0x930 [ 174.784494][ T8991] do_initcall_level+0x157/0x210 [ 174.789962][ T8991] do_initcalls+0x71/0xd0 [ 174.794818][ T8991] kernel_init_freeable+0x435/0x5d0 [ 174.800560][ T8991] kernel_init+0x1d/0x2b0 [ 174.805615][ T8991] ret_from_fork+0x4b/0x80 [ 174.810581][ T8991] ret_from_fork_asm+0x1a/0x30 [ 174.815889][ T8991] [ 174.815889][ T8991] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 174.823633][ T8991] validate_chain+0x18ef/0x5920 [ 174.829034][ T8991] __lock_acquire+0x1397/0x2100 [ 174.834455][ T8991] lock_acquire+0x1ed/0x550 [ 174.839502][ T8991] __mutex_lock+0x19c/0x1010 [ 174.845065][ T8991] ieee80211_change_mac+0xc6/0x1160 [ 174.850803][ T8991] netif_set_mac_address+0x327/0x510 [ 174.856632][ T8991] dev_set_mac_address+0x38/0x50 [ 174.862161][ T8991] bond_set_mac_address+0x28e/0x830 [ 174.867919][ T8991] netif_set_mac_address+0x327/0x510 [ 174.873733][ T8991] do_setlink+0xaa6/0x40f0 [ 174.878677][ T8991] rtnl_newlink+0x15a6/0x1d90 [ 174.883898][ T8991] rtnetlink_rcv_msg+0x791/0xcf0 [ 174.889388][ T8991] netlink_rcv_skb+0x206/0x480 [ 174.894687][ T8991] netlink_unicast+0x7f6/0x990 [ 174.899985][ T8991] netlink_sendmsg+0x8de/0xcb0 [ 174.905282][ T8991] __sock_sendmsg+0x221/0x270 [ 174.910537][ T8991] ____sys_sendmsg+0x53a/0x860 [ 174.915849][ T8991] __sys_sendmsg+0x269/0x350 [ 174.920980][ T8991] do_syscall_64+0xf3/0x230 [ 174.926051][ T8991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.932693][ T8991] [ 174.932693][ T8991] other info that might help us debug this: [ 174.932693][ T8991] [ 174.942926][ T8991] Possible unsafe locking scenario: [ 174.942926][ T8991] [ 174.950377][ T8991] CPU0 CPU1 [ 174.955744][ T8991] ---- ---- [ 174.961118][ T8991] lock(&dev->lock); [ 174.965110][ T8991] lock(&rdev->wiphy.mtx); [ 174.972144][ T8991] lock(&dev->lock); [ 174.978743][ T8991] lock(&rdev->wiphy.mtx); [ 174.983262][ T8991] [ 174.983262][ T8991] *** DEADLOCK *** [ 174.983262][ T8991] [ 174.991408][ T8991] 3 locks held by syz.1.815/8991: [ 174.996438][ T8991] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 175.005550][ T8991] #1: ffff8880611e0d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 175.015711][ T8991] #2: ffff8880310e8d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 175.025146][ T8991] [ 175.025146][ T8991] stack backtrace: [ 175.031055][ T8991] CPU: 1 UID: 0 PID: 8991 Comm: syz.1.815 Not tainted 6.14.0-rc6-syzkaller-01241-g702e3fa16cd4 #0 [ 175.031082][ T8991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.031095][ T8991] Call Trace: [ 175.031106][ T8991] [ 175.031116][ T8991] dump_stack_lvl+0x241/0x360 [ 175.031149][ T8991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.031166][ T8991] ? __pfx__printk+0x10/0x10 [ 175.031184][ T8991] print_circular_bug+0x13a/0x1b0 [ 175.031204][ T8991] check_noncircular+0x36a/0x4a0 [ 175.031221][ T8991] ? check_path+0x21/0x40 [ 175.031239][ T8991] ? __pfx_check_noncircular+0x10/0x10 [ 175.031256][ T8991] ? lockdep_lock+0x123/0x2b0 [ 175.031278][ T8991] ? lockdep_unlock+0x16a/0x300 [ 175.031299][ T8991] ? __pfx_lockdep_unlock+0x10/0x10 [ 175.031320][ T8991] ? check_path+0x21/0x40 [ 175.031335][ T8991] ? check_noncircular+0x259/0x4a0 [ 175.031353][ T8991] validate_chain+0x18ef/0x5920 [ 175.031378][ T8991] ? __pfx_validate_chain+0x10/0x10 [ 175.031398][ T8991] ? __pfx_validate_chain+0x10/0x10 [ 175.031416][ T8991] ? __pfx_validate_chain+0x10/0x10 [ 175.031432][ T8991] ? __pfx_validate_chain+0x10/0x10 [ 175.031448][ T8991] ? __pfx_validate_chain+0x10/0x10 [ 175.031468][ T8991] ? __pfx_validate_chain+0x10/0x10 [ 175.031485][ T8991] ? mark_lock+0x9a/0x360 [ 175.031500][ T8991] __lock_acquire+0x1397/0x2100 [ 175.031530][ T8991] lock_acquire+0x1ed/0x550 [ 175.031553][ T8991] ? ieee80211_change_mac+0xc6/0x1160 [ 175.031577][ T8991] ? __pfx_lock_acquire+0x10/0x10 [ 175.031600][ T8991] ? __pfx___might_resched+0x10/0x10 [ 175.031626][ T8991] __mutex_lock+0x19c/0x1010 [ 175.031646][ T8991] ? ieee80211_change_mac+0xc6/0x1160 [ 175.031666][ T8991] ? __pfx_lock_release+0x10/0x10 [ 175.031691][ T8991] ? ieee80211_change_mac+0xc6/0x1160 [ 175.031710][ T8991] ? __pfx___mutex_lock+0x10/0x10 [ 175.031732][ T8991] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 175.031748][ T8991] ? ib_device_get_by_netdev+0x85/0x5e0 [ 175.031772][ T8991] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 175.031800][ T8991] ? hsr_netdev_notify+0x295/0xb50 [ 175.031823][ T8991] ieee80211_change_mac+0xc6/0x1160 [ 175.031844][ T8991] ? ip6_route_dev_notify+0x99/0x600 [ 175.031862][ T8991] ? notifier_call_chain+0x15a/0x3f0 [ 175.031885][ T8991] ? notifier_call_chain+0x3cc/0x3f0 [ 175.031908][ T8991] netif_set_mac_address+0x327/0x510 [ 175.031928][ T8991] ? __pfx_netif_set_mac_address+0x10/0x10 [ 175.031948][ T8991] ? net_generic+0x1f/0x240 [ 175.031966][ T8991] ? net_generic+0x1f0/0x240 [ 175.031985][ T8991] dev_set_mac_address+0x38/0x50 [ 175.032001][ T8991] bond_set_mac_address+0x28e/0x830 [ 175.032025][ T8991] ? __pfx_bond_set_mac_address+0x10/0x10 [ 175.032044][ T8991] ? hsr_netdev_notify+0x295/0xb50 [ 175.032068][ T8991] ? notifier_call_chain+0x15a/0x3f0 [ 175.032100][ T8991] ? notifier_call_chain+0x3cc/0x3f0 [ 175.032135][ T8991] netif_set_mac_address+0x327/0x510 [ 175.032163][ T8991] ? __pfx_netif_set_mac_address+0x10/0x10 [ 175.032192][ T8991] ? rcu_is_watching+0x15/0xb0 [ 175.032217][ T8991] ? trace_kmalloc+0x1f/0xd0 [ 175.032248][ T8991] ? do_setlink+0x7a7/0x40f0 [ 175.032265][ T8991] do_setlink+0xaa6/0x40f0 [ 175.032286][ T8991] ? mark_lock+0x9a/0x360 [ 175.032301][ T8991] ? __pfx_do_setlink+0x10/0x10 [ 175.032315][ T8991] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 175.032340][ T8991] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.032365][ T8991] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 175.032382][ T8991] ? lockdep_hardirqs_on+0x99/0x150 [ 175.032400][ T8991] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 175.032417][ T8991] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 175.032435][ T8991] ? rcu_is_watching+0x15/0xb0 [ 175.032453][ T8991] ? __mutex_lock+0xba3/0x1010 [ 175.032472][ T8991] ? __mutex_lock+0x602/0x1010 [ 175.032493][ T8991] ? rtnl_newlink+0xc4c/0x1d90 [ 175.032517][ T8991] ? __pfx___mutex_lock+0x10/0x10 [ 175.032540][ T8991] ? ns_capable+0x8a/0xf0 [ 175.032559][ T8991] ? rtnl_link_get_net_capable+0x168/0x340 [ 175.032576][ T8991] rtnl_newlink+0x15a6/0x1d90 [ 175.032599][ T8991] ? is_bpf_text_address+0x285/0x2a0 [ 175.032613][ T8991] ? is_bpf_text_address+0x26/0x2a0 [ 175.032632][ T8991] ? __pfx_rtnl_newlink+0x10/0x10 [ 175.032655][ T8991] ? __pfx_validate_chain+0x10/0x10 [ 175.032679][ T8991] ? validate_chain+0x11e/0x5920 [ 175.032695][ T8991] ? __pfx_lock_acquire+0x10/0x10 [ 175.032719][ T8991] ? __pfx_lock_release+0x10/0x10 [ 175.032743][ T8991] ? __pfx_validate_chain+0x10/0x10 [ 175.032759][ T8991] ? mark_lock+0x9a/0x360 [ 175.032775][ T8991] ? __lock_acquire+0x1397/0x2100 [ 175.032817][ T8991] ? __pfx_lock_release+0x10/0x10 [ 175.032845][ T8991] ? __pfx_rtnl_newlink+0x10/0x10 [ 175.032868][ T8991] rtnetlink_rcv_msg+0x791/0xcf0 [ 175.032891][ T8991] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 175.032915][ T8991] ? __lock_acquire+0x1397/0x2100 [ 175.032938][ T8991] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 175.032972][ T8991] netlink_rcv_skb+0x206/0x480 [ 175.033005][ T8991] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 175.033038][ T8991] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.033075][ T8991] ? netlink_deliver_tap+0x2e/0x1b0 [ 175.033099][ T8991] netlink_unicast+0x7f6/0x990 [ 175.033123][ T8991] ? __pfx_netlink_unicast+0x10/0x10 [ 175.033147][ T8991] ? __virt_addr_valid+0x45f/0x530 [ 175.033162][ T8991] ? __phys_addr_symbol+0x2f/0x70 [ 175.033176][ T8991] ? __check_object_size+0x47a/0x730 [ 175.033208][ T8991] netlink_sendmsg+0x8de/0xcb0 [ 175.033249][ T8991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.033286][ T8991] ? aa_sock_msg_perm+0x91/0x160 [ 175.033324][ T8991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.033351][ T8991] __sock_sendmsg+0x221/0x270 [ 175.033375][ T8991] ____sys_sendmsg+0x53a/0x860 [ 175.033397][ T8991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.033414][ T8991] ? __fget_files+0x2a/0x410 [ 175.033438][ T8991] ? __fget_files+0x2a/0x410 [ 175.033469][ T8991] __sys_sendmsg+0x269/0x350 [ 175.033493][ T8991] ? __pfx_futex_wake+0x10/0x10 [ 175.033527][ T8991] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.033573][ T8991] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.033608][ T8991] ? do_syscall_64+0x100/0x230 [ 175.033629][ T8991] ? do_syscall_64+0xb6/0x230 [ 175.033650][ T8991] do_syscall_64+0xf3/0x230 [ 175.033670][ T8991] ? clear_bhb_loop+0x35/0x90 [ 175.033693][ T8991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.033716][ T8991] RIP: 0033:0x7fb9e298d169 [ 175.033729][ T8991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.033743][ T8991] RSP: 002b:00007fb9e3700038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.033760][ T8991] RAX: ffffffffffffffda RBX: 00007fb9e2ba6080 RCX: 00007fb9e298d169 [ 175.033772][ T8991] RDX: 0000000000008884 RSI: 0000400000000000 RDI: 0000000000000008 [ 175.033782][ T8991] RBP: 00007fb9e2a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 175.033792][ T8991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.033808][ T8991] R13: 0000000000000000 R14: 00007fb9e2ba6080 R15: 00007ffc293d77b8 [ 175.033825][ T8991] [ 175.744555][ T8983] vlan0: entered allmulticast mode [ 175.749918][ T8983] veth0_to_batadv: entered allmulticast mode [ 175.757678][ T8983] veth0_to_batadv: left allmulticast mode [ 175.795518][ T3001] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.415153][ T3001] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.463229][ T3001] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.534374][ T3001] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.596836][ T3001] bridge_slave_1: left allmulticast mode [ 176.602657][ T3001] bridge_slave_1: left promiscuous mode [ 176.608410][ T3001] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.618071][ T3001] bridge_slave_0: left allmulticast mode [ 176.626177][ T3001] bridge_slave_0: left promiscuous mode [ 176.632075][ T3001] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.728338][ T3001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.738917][ T3001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.748973][ T3001] bond0 (unregistering): Released all slaves [ 176.945706][ T3001] hsr_slave_0: left promiscuous mode [ 176.951639][ T3001] hsr_slave_1: left promiscuous mode [ 176.957361][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.964965][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.972893][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.980460][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.991275][ T3001] veth1_macvtap: left promiscuous mode [ 176.996792][ T3001] veth0_macvtap: left promiscuous mode [ 177.002485][ T3001] veth1_vlan: left promiscuous mode [ 177.007758][ T3001] veth0_vlan: left promiscuous mode [ 177.135948][ T3001] team0 (unregistering): Port device team_slave_1 removed [ 177.167318][ T3001] team0 (unregistering): Port device team_slave_0 removed