last executing test programs: 41.464206209s ago: executing program 3 (id=594): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x1d, r4}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)={0x4, 0x406, 0x6, {}, {r5, r6/1000+60000}, {}, 0x1, @canfd={{0x4, 0x0, 0x1}, 0x22, 0x1, 0x0, 0x0, "114f0e0abc3752aa5c730a8d57cecc65db8d3ab3c18840418b81253d4380f125ba8f52d313a3691c93e259f0854da7af77dc91b80e6f97f8622cf730e1e05af3"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f0000000840), &(0x7f0000004880)=@udp=r3}, 0x20) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r9, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) read(r0, &(0x7f0000001480)=""/4096, 0x38) 40.524596838s ago: executing program 3 (id=610): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x24, 0x301, 0x70bd25, 0x25dfdbff, {0xa}, [@typed={0x4, 0x14e, 0x0, 0x0, @binary}]}, 0x18}}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x4004004) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x800, 0x1, 0x0, 0xd, 0x80, 0x80}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x34, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x200}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0xfffffffffffffe86}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x60000}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02"], 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000003c0)={0x29c00000, {{0xa, 0x4e23, 0x0, @private1, 0x15dd}}}, 0x88) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000040), 0x4) 40.410713073s ago: executing program 3 (id=611): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYRES32=r0], 0x3c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) 40.179069591s ago: executing program 3 (id=616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) syz_init_net_socket$ax25(0x3, 0x2, 0xc9) (async) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc9) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/32, 0x20}], 0x1) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x28) 27.766437057s ago: executing program 0 (id=747): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="bb6d98cc162b"}]}, 0x28}}, 0x50) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000180)={r5, 0x2}, &(0x7f00000001c0)=0xc) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000004200020006"], 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x8001) sendto$netrom(r8, 0x0, 0x0, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001800010000000000000000000a370000adfb9a05efae6a7c0772cac90ea795afcb037c860f19ced3d5f1bf0f4f4710e2bbcf884af65a2fba6c61", @ANYRES32=0x0, @ANYBLOB="0000000014000500fe8000000000000000000000000000bb04000100fe8000000000000000000000000000bb"], 0x44}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000440)={r10, @in6={{0xa, 0x4e22, 0x8, @private1, 0x7}}, 0x80000001, 0xff, 0x1, 0x0, 0x3}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000000)={r10, 0xd58}, 0x8) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r10, 0xfffffffa}, &(0x7f00000000c0)=0x8) r12 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x138, r3, 0x209, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x63, 0x73}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bffb42eca335adc20fc6a0bafb453376da4dd3cf4ec37dc6"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5ee3f086392604a498861912e34983a8f7cc52cb552b59c1"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "58b33d2ed0fe4c5bfe0e3ead08e583476be8c7c8cc2480b6"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "02aa33a23ab69a64256e7dff5d3b894af454e60a97ed69b3"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'xfrm0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x138}}, 0x40000) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x400, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 27.312085646s ago: executing program 0 (id=753): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x42f02, 0x1400}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_VFINFO_LIST={0x2c, 0x16, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6, 0xe5a, 0x3, 0x8100}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x101, 0x8}}]}]}]}, 0x29}, 0x1, 0x0, 0x0, 0x10}, 0x24040800) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r2, 0x2}, 0x8) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000005c0), 0x10) read(r3, &(0x7f00000027c0)=""/4073, 0xfe9) write(r0, &(0x7f0000000100)="cf61820e9e4d69bfca38bcfcb24ba1c3e37023f5d080002166ed01c4166cc3d394b596c9d6fff0f47ca537928815b3b0ac120b9d8a", 0x35) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', r5, 0x2f, 0x3, 0x7, 0x29, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x20, 0x0, 0xd}}) 26.959526614s ago: executing program 0 (id=759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$kcm(0x2, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="a75e4b5204e257fbeb43a05b9b9f5bdedc05d46f0e9f062ab56c27f02cb3be853e6068cd8249711a14c6ea7c32f8ef98e42c6dea02f24c085bddbff5e07d240f3cd36f94ba8cc8b1", @ANYRES64=0x0], 0x10) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080fcdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="44002380060012000002"], 0x70}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) socket$kcm(0x2, 0x2, 0x73) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="a75e4b5204e257fbeb43a05b9b9f5bdedc05d46f0e9f062ab56c27f02cb3be853e6068cd8249711a14c6ea7c32f8ef98e42c6dea02f24c085bddbff5e07d240f3cd36f94ba8cc8b1", @ANYRES64=0x0], 0x10) (async) socket$l2tp(0x2, 0x2, 0x73) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000080fcdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="44002380060012000002"], 0x70}}, 0x0) (async) 26.941047305s ago: executing program 3 (id=616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) syz_init_net_socket$ax25(0x3, 0x2, 0xc9) (async) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc9) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/32, 0x20}], 0x1) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x28) 26.581673108s ago: executing program 0 (id=760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) 26.257192361s ago: executing program 0 (id=767): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) bind$llc(r0, &(0x7f0000000180)={0x1a, 0x304, 0x9, 0x5, 0x4, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000de33c5432ebadca37490a1799bbd25f1a09e8a6a61c27326b5dcfaf60fd462c122d674a15ea6e8e6bb68559438eb3a0f91dc60354f94", @ANYRES16=r2, @ANYBLOB="01000000000000000000100000001800018014000200776c616e31000000000000000000000008000c0002000000"], 0x34}}, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x577801, 0x100408) (async) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000600)=""/4085, &(0x7f00000000c0)=0xff5) 10.903473825s ago: executing program 3 (id=616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x64, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) syz_init_net_socket$ax25(0x3, 0x2, 0xc9) (async) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc9) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) readv(r3, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/32, 0x20}], 0x1) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x28) 9.743221083s ago: executing program 0 (id=767): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) bind$llc(r0, &(0x7f0000000180)={0x1a, 0x304, 0x9, 0x5, 0x4, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000de33c5432ebadca37490a1799bbd25f1a09e8a6a61c27326b5dcfaf60fd462c122d674a15ea6e8e6bb68559438eb3a0f91dc60354f94", @ANYRES16=r2, @ANYBLOB="01000000000000000000100000001800018014000200776c616e31000000000000000000000008000c0002000000"], 0x34}}, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x577801, 0x100408) (async) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000600)=""/4085, &(0x7f00000000c0)=0xff5) 4.230803842s ago: executing program 2 (id=935): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff060000000100000045000000250000001900040004", 0x25}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000b"], 0x28}}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r9, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x20}}, 0x0) r11 = socket$key(0xf, 0x3, 0x2) recvmmsg(r11, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000002, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r9, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x4b}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r13}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x50, r9, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xc00000, 0x28}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xe}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0xc008090}, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) 3.604741704s ago: executing program 2 (id=939): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) socket(0x28, 0x5, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000004c0)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0xff, @fixed, 0x0, 0x1}, 0xe) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d0001000000000000ec000007000000", @ANYRES32=r5, @ANYBLOB="000096000a000200aaaaaaaaaa0c0000"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl(r3, 0x8b2c, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1300000056000100000000000000000007"], 0x18}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x38, 0x3c, 0x107, 0x0, 0xffffffff, {0x4, 0x7c}, [@nested={0x8, 0xfc, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r7}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 2.686161381s ago: executing program 2 (id=942): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x2b, 0x1, {0x1, 0x6, 0x37, 0x6, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x0, 0x8bc, 0x6}}]}}]}, 0x170}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000d30000000000000000000000000042a08e5ff9006f8e2a6e2ec9"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) 2.564714611s ago: executing program 4 (id=944): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044836}, 0x20004004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='ext4_mark_inode_dirty\x00'}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000002c00)={0x0, 0x100000, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB="080001"], 0x48}}, 0x0) 2.551119323s ago: executing program 2 (id=946): getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r0, 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r2 = socket(0x2d, 0x2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a00", @ANYRES32], 0x58}}, 0x0) accept(r0, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56741, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000080)=0x8, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x100}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 2.46108605s ago: executing program 4 (id=947): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x5f]}}, 0x0, 0x2b}, 0x20) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x5c, r2, 0x5, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x2, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2={0xff, 0x7, '\x00', 0xa}}]}, 0x5c}, 0x1, 0xffffffff00000003}, 0x0) (async, rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @private}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newchain={0x44, 0x64, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x3, 0xfff3}, {0x0, 0x1}, {0xb, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) r5 = socket$inet(0x2, 0xa, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x14c, 0x24, 0xf0b, 0x1e, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x6, 0xe9, 0x4, 0x0, 0x0, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) read(r4, 0x0, 0x0) (async, rerun: 32) ioctl$SIOCAX25ADDFWD(r4, 0x89ea, &(0x7f00000001c0)={@default, @null}) (rerun: 32) 2.280350965s ago: executing program 4 (id=948): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x1ff, @loopback, 0xfffffffd}, 0x1c) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1411, 0x828949ab3fe143d7, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getsa={0x54, 0x12, 0x0, 0x70bd26, 0x25dfdbfd, {@in=@loopback, 0x4d2, 0x2, 0x33}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @tfcpad={0x8, 0x16, 0x7fffffff}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}, @tfcpad={0x8, 0x16, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 2.136902991s ago: executing program 4 (id=951): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r2, 0x1000000}, 0x10) 1.057814785s ago: executing program 4 (id=953): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'virt_wifi0\x00', @link_local}) sendmsg$netlink(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000006480)={0x1c, 0x27, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @pid}]}]}, 0x1c}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x7d, &(0x7f0000000700)={r4, 0xfffff801, 0x11e2000, 0x62c, 0x100, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0xfffffffb, 0x3, 0x1010, 0x1}}, &(0x7f00000007c0)=0xb0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r4, 0x2, 0xfffffff6}, 0xc) 1.009141006s ago: executing program 2 (id=954): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000b06010200000000000000000a000009090002010007000000507a405c996715f22e0f2d2319e730a586ba1c02e1cd7b776103909c2052a944a72238fd111d3daec2aa6821c5ad7b952c801b1a7bbd3cd0e844c8869ad28113c86cb15edcad3306d4d0fbfa384b992baa9a9b22546634819ad3d1e4ae86bf43867a175c06d680094ecd81c2723b"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'dummy0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x10, 0xa, 0x101, 0x0, 0x0, {}, [@generic="c9"]}, 0x18}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x84, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x7df9bd2ca29e3677}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0x4, 0x0, 0x1bb, 0x4}}]}}}]}, 0x84}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000000000)=0x1, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x5e}, [@NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r3], 0x20}}, 0x0) 689.964968ms ago: executing program 2 (id=957): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) r2 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10) sendto$inet6(r2, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x27, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000040400000000001000000060001005b0000000800020005000000"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x338}}, 0x20050800) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x58000008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24040001}, 0x8000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr, 0xffffffff}, 0x1c) r8 = accept$inet6(r5, &(0x7f0000000340), &(0x7f00000003c0)=0x1c) sendto$inet6(r8, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e26, 0xfffffffc, @local, 0x3}, 0x1c) sendto$inet6(r7, &(0x7f0000000500)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce11480949455bc37f5f30c92774dcb201629979039d7c8943b21be5bdf9ab8eed9ace110469c51f4f211dd9fad8", 0x44, 0x6d91fb6126dcc988, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) recvfrom(r7, &(0x7f0000001a80)=""/4096, 0x1000, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "a840"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8d"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r10, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c", 0x17, 0x24004055, &(0x7f0000000140)={0x11, 0x11, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet6_mreq(r5, 0x29, 0x35, &(0x7f0000000040)={@private0}, &(0x7f0000000080)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) 479.850179ms ago: executing program 1 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x880) (async, rerun: 64) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x2}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1e}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x15, 0x19}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc0}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20040000}, 0x2400c0d0) (async) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000380)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, 0x2, 0x6, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async, rerun: 64) close(r2) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48004) socketpair(0x22, 0x1, 0x6, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r6, &(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r7, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x8004) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x5, 0x1c05, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x20, 0x2, 0x9ee}}) bind$packet(r5, &(0x7f00000007c0)={0x11, 0x16, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000800)={'syztnl2\x00', r8, 0x4, 0xfb, 0xb, 0x2, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}, @remote, 0x20, 0x80, 0xfd6, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl0\x00', r9, 0x4, 0x6, 0x9, 0x8, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, @rand_addr=' \x01\x00', 0x9d3d290003d2b9f, 0x1, 0x800, 0x8}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r10, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xd4, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x74}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x6}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x391}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x32b}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24000040}, 0x810) (async) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000b40)=""/96, &(0x7f0000000bc0)=0x60) (async) syz_emit_ethernet(0x5a, &(0x7f0000000c00)={@remote, @remote, @val={@void, {0x8100, 0x5, 0x1}}, {@canfd={0xd, {{0x0, 0x0, 0x0, 0x1}, 0xd, 0x0, 0x0, 0x0, "b5ed8deca04734810256bd6703eaa8e99eb8d0afc2c07d3e87f6c31862d1ddf22d141a40cbb858ff614ac5081453eefc4a0ee89f3c86ce623a40daecc7f6a7f6"}}}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000c80)) recvmmsg(r6, &(0x7f0000001680)=[{{&(0x7f0000000cc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000d40)=""/101, 0x65}, {&(0x7f0000000dc0)=""/82, 0x52}, {&(0x7f0000000e40)=""/130, 0x82}, {&(0x7f0000000f00)=""/29, 0x1d}], 0x4, &(0x7f0000000f80)=""/8, 0x8}, 0x2}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000fc0)=""/188, 0xbc}, {&(0x7f0000001080)=""/251, 0xfb}, {&(0x7f0000001180)=""/64, 0x40}, {&(0x7f00000011c0)=""/219, 0xdb}, {&(0x7f00000012c0)=""/29, 0x1d}], 0x5, &(0x7f0000001380)=""/201, 0xc9}, 0x10001}, {{&(0x7f0000001480)=@qipcrtr, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001500)=""/176, 0xb0}], 0x1, &(0x7f0000001600)=""/79, 0x4f}, 0x4}], 0x3, 0x40000042, &(0x7f0000001740)) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000001780)={0x1, 0x4}, 0x4) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000017c0)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x2, 'syz1\x00', @bcast, 0x37bb, 0x8, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000001840)={0xff, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x85}, @enc_lim={0x4, 0x1, 0x8}]}, 0x10) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000018c0)={0x190, r7, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x38, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfb}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x70, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff54}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x928}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0xb0, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xe94e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd84}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa4e}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xbade}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8c64}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x190}, 0x1, 0x0, 0x0, 0x20044000}, 0x44005) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_MASTER={0x60, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3404}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8000}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x40) 388.568993ms ago: executing program 1 (id=961): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000680)=@ethtool_regs={0x12}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000001a000100000000000000000080"], 0x1c}}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x4, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 216.787406ms ago: executing program 1 (id=962): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYBLOB, @ANYRES64=r0, @ANYRESDEC=r1], 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), 0x8) setsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000000040)=0x80000004, 0x4) socket$igmp6(0xa, 0x3, 0x2) 178.276051ms ago: executing program 1 (id=963): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES32=r0], 0xd4}, 0x1, 0x0, 0x0, 0x8800}, 0x880) 110.882646ms ago: executing program 1 (id=964): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e000b7300fc040000000000000000000000000000ff020000000000000000000000000001"], 0x0) 731.974µs ago: executing program 4 (id=965): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x38, 0x3c, 0x107, 0x0, 0xffffffff, {0x4, 0x7c}, [@nested={0x8, 0xfc, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 0s ago: executing program 1 (id=966): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000611488000000ffff060000000000009500000000000000dea2743966856c714a037f601251e288ce15c14f6eb081a1427e6ddabc354fa79a6a7cc592fdef4816640359c3d4f42a705615c1d307c4138161367dee411cfbe89cbed07bd29084cf535509a5ba4eb0006537a78e9d2f93f65a5b3cffa2"], &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. [ 81.779253][ T5833] cgroup: Unknown subsys name 'net' [ 81.976371][ T5833] cgroup: Unknown subsys name 'cpuset' [ 81.985967][ T5833] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.631053][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.304124][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.317317][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.325058][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.332838][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.341530][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.349511][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.357107][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.364736][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.373812][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.381567][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.389041][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.396750][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.405647][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.414326][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.422512][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.432925][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.490670][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.498534][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.507464][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.532853][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.540621][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.559464][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.570474][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.580018][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.587887][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.170068][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 88.357997][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 88.387557][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 88.520250][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.600311][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.608306][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.615867][ T5851] bridge_slave_0: entered allmulticast mode [ 88.623731][ T5851] bridge_slave_0: entered promiscuous mode [ 88.675862][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.683449][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.690642][ T5851] bridge_slave_1: entered allmulticast mode [ 88.698663][ T5851] bridge_slave_1: entered promiscuous mode [ 88.711669][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 88.796626][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.804404][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.811648][ T5844] bridge_slave_0: entered allmulticast mode [ 88.819402][ T5844] bridge_slave_0: entered promiscuous mode [ 88.827604][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.834909][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.843036][ T5844] bridge_slave_1: entered allmulticast mode [ 88.850326][ T5844] bridge_slave_1: entered promiscuous mode [ 88.868403][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.944947][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.970307][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.980791][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.988202][ T5852] bridge_slave_0: entered allmulticast mode [ 88.996301][ T5852] bridge_slave_0: entered promiscuous mode [ 89.004815][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.012104][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.019284][ T5852] bridge_slave_1: entered allmulticast mode [ 89.026694][ T5852] bridge_slave_1: entered promiscuous mode [ 89.094767][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.107959][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.120020][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.127368][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.135569][ T5843] bridge_slave_0: entered allmulticast mode [ 89.143408][ T5843] bridge_slave_0: entered promiscuous mode [ 89.174095][ T5851] team0: Port device team_slave_0 added [ 89.207946][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.215769][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.223016][ T5843] bridge_slave_1: entered allmulticast mode [ 89.230263][ T5843] bridge_slave_1: entered promiscuous mode [ 89.256261][ T5851] team0: Port device team_slave_1 added [ 89.264990][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.277879][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.356341][ T5844] team0: Port device team_slave_0 added [ 89.366035][ T5844] team0: Port device team_slave_1 added [ 89.388675][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.454195][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.461831][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.469878][ T5859] bridge_slave_0: entered allmulticast mode [ 89.477736][ T5859] bridge_slave_0: entered promiscuous mode [ 89.488169][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.500924][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.507988][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.534832][ T5863] Bluetooth: hci3: command tx timeout [ 89.540632][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.556341][ T5852] team0: Port device team_slave_0 added [ 89.566914][ T5852] team0: Port device team_slave_1 added [ 89.587544][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.594993][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.603095][ T5859] bridge_slave_1: entered allmulticast mode [ 89.610410][ T5859] bridge_slave_1: entered promiscuous mode [ 89.616442][ T5167] Bluetooth: hci1: command tx timeout [ 89.622475][ T5850] Bluetooth: hci0: command tx timeout [ 89.628289][ T5863] Bluetooth: hci4: command tx timeout [ 89.650375][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.660256][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.687483][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.702340][ T5863] Bluetooth: hci2: command tx timeout [ 89.727606][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.734892][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.760883][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.809747][ T5843] team0: Port device team_slave_0 added [ 89.817544][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.824879][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.850959][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.864637][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.871624][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.897660][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.909467][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.916626][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.942967][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.956567][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.970851][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.982665][ T5843] team0: Port device team_slave_1 added [ 90.029271][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.036510][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.062818][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.126656][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.133883][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.160671][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.210788][ T5859] team0: Port device team_slave_0 added [ 90.251112][ T5852] hsr_slave_0: entered promiscuous mode [ 90.258010][ T5852] hsr_slave_1: entered promiscuous mode [ 90.280555][ T5851] hsr_slave_0: entered promiscuous mode [ 90.288998][ T5851] hsr_slave_1: entered promiscuous mode [ 90.296903][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.306438][ T5851] Cannot create hsr debugfs directory [ 90.316141][ T5859] team0: Port device team_slave_1 added [ 90.356373][ T5844] hsr_slave_0: entered promiscuous mode [ 90.362894][ T5844] hsr_slave_1: entered promiscuous mode [ 90.369081][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.376758][ T5844] Cannot create hsr debugfs directory [ 90.490580][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.498337][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.524719][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.562757][ T5843] hsr_slave_0: entered promiscuous mode [ 90.569590][ T5843] hsr_slave_1: entered promiscuous mode [ 90.578643][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.589461][ T5843] Cannot create hsr debugfs directory [ 90.609811][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.617254][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.644008][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.891776][ T5859] hsr_slave_0: entered promiscuous mode [ 90.898519][ T5859] hsr_slave_1: entered promiscuous mode [ 90.905051][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.913027][ T5859] Cannot create hsr debugfs directory [ 91.281202][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.315083][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.339595][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.360782][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.406892][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.423542][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.448148][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.459960][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.520266][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.548119][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.560213][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.590786][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.619073][ T5863] Bluetooth: hci3: command tx timeout [ 91.682275][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.693314][ T5863] Bluetooth: hci4: command tx timeout [ 91.698787][ T5863] Bluetooth: hci1: command tx timeout [ 91.704397][ T5167] Bluetooth: hci0: command tx timeout [ 91.721587][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.747324][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.772715][ T5863] Bluetooth: hci2: command tx timeout [ 91.795713][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.860996][ T978] cfg80211: failed to load regulatory.db [ 91.884191][ T5859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.918390][ T5859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.950291][ T5859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.962972][ T5859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.008127][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.068675][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.105386][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.119356][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.126633][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.167765][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.204101][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.211235][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.226249][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.249112][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.271752][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.278924][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.311140][ T968] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.318348][ T968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.329609][ T968] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.336772][ T968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.348076][ T968] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.355234][ T968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.468385][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.524232][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.546382][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.580784][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.598652][ T968] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.605893][ T968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.645684][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.652943][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.723280][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.730548][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.749008][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.756322][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.234865][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.288067][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.385626][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.485290][ T5852] veth0_vlan: entered promiscuous mode [ 93.529819][ T5852] veth1_vlan: entered promiscuous mode [ 93.548409][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.584042][ T5844] veth0_vlan: entered promiscuous mode [ 93.592553][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.615245][ T5851] veth0_vlan: entered promiscuous mode [ 93.668859][ T5851] veth1_vlan: entered promiscuous mode [ 93.692608][ T5863] Bluetooth: hci3: command tx timeout [ 93.701341][ T5852] veth0_macvtap: entered promiscuous mode [ 93.720491][ T5844] veth1_vlan: entered promiscuous mode [ 93.745717][ T5852] veth1_macvtap: entered promiscuous mode [ 93.776223][ T5863] Bluetooth: hci1: command tx timeout [ 93.781976][ T5850] Bluetooth: hci0: command tx timeout [ 93.787429][ T5850] Bluetooth: hci4: command tx timeout [ 93.831878][ T5843] veth0_vlan: entered promiscuous mode [ 93.855592][ T5850] Bluetooth: hci2: command tx timeout [ 93.876571][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.924133][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.944605][ T5843] veth1_vlan: entered promiscuous mode [ 93.958293][ T5844] veth0_macvtap: entered promiscuous mode [ 93.970993][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.981091][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.990494][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.999703][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.027751][ T5844] veth1_macvtap: entered promiscuous mode [ 94.070087][ T5851] veth0_macvtap: entered promiscuous mode [ 94.128365][ T5851] veth1_macvtap: entered promiscuous mode [ 94.140918][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.169715][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.190579][ T5843] veth0_macvtap: entered promiscuous mode [ 94.250377][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.260099][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.269100][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.278217][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.289744][ T5843] veth1_macvtap: entered promiscuous mode [ 94.320948][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.357670][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.367452][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.374836][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.385529][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.396728][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.406386][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.416274][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.488664][ T5859] veth0_vlan: entered promiscuous mode [ 94.497844][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.538460][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.568120][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.575682][ T5859] veth1_vlan: entered promiscuous mode [ 94.581502][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.591546][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.600813][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.615066][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.623968][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.649781][ T968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.660429][ T968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.749251][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.761631][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.786396][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.913566][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.921675][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.938939][ T5969] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.976900][ T5859] veth0_macvtap: entered promiscuous mode [ 94.983904][ T5217] udevd[5217]: worker [5902] terminated by signal 33 (Unknown signal 33) [ 95.012868][ T5217] udevd[5217]: worker [5902] failed while handling '/devices/virtual/mac80211_hwsim/hwsim8' [ 95.077342][ T968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.088275][ T5859] veth1_macvtap: entered promiscuous mode [ 95.095675][ T968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.158331][ T4790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.160169][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.202279][ T4790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.286419][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.309989][ T5859] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.319097][ T5859] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.329341][ T5859] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.342007][ T5859] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.382255][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.409466][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.478940][ T5978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.507652][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 95.585980][ T5981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.771499][ T5988] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8'. [ 95.774155][ T5850] Bluetooth: hci3: command tx timeout [ 95.804860][ T968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.853175][ T5850] Bluetooth: hci1: command tx timeout [ 95.853196][ T5863] Bluetooth: hci0: command tx timeout [ 95.859236][ T5850] Bluetooth: hci4: command tx timeout [ 95.874928][ T968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.927735][ T5994] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.933782][ T5850] Bluetooth: hci2: command tx timeout [ 96.036747][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.083844][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.286643][ T6004] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13'. [ 96.334803][ T6004] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13'. [ 96.462628][ T6014] Cannot find add_set index 0 as target [ 96.526561][ T6014] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 96.541650][ T6014] bridge0: port 3(team0) entered blocking state [ 96.548923][ T6014] bridge0: port 3(team0) entered disabled state [ 96.561813][ T6014] team0: entered allmulticast mode [ 96.571732][ T6014] team_slave_0: entered allmulticast mode [ 96.606448][ T6014] team_slave_1: entered allmulticast mode [ 96.640520][ T6014] team0: entered promiscuous mode [ 96.650135][ T6014] team_slave_0: entered promiscuous mode [ 96.667158][ T6019] netlink: 'syz.3.15': attribute type 83 has an invalid length. [ 96.667976][ T6014] team_slave_1: entered promiscuous mode [ 96.698379][ T6014] bridge0: port 3(team0) entered blocking state [ 96.705014][ T6014] bridge0: port 3(team0) entered forwarding state [ 96.724012][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 96.894399][ T6020] Zero length message leads to an empty skb [ 96.908260][ T6031] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 97.571396][ T6047] netlink: 17 bytes leftover after parsing attributes in process `syz.3.23'. [ 97.677876][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 97.767363][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29'. [ 97.790786][ T6062] Cannot find set identified by id 0 to match [ 97.826859][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.849675][ T5917] IPVS: starting estimator thread 0... [ 97.888950][ T6057] bridge_slave_1 (unregistering): left allmulticast mode [ 97.901159][ T6057] bridge_slave_1 (unregistering): left promiscuous mode [ 97.910856][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.942129][ T6067] IPVS: using max 30 ests per chain, 72000 per kthread [ 98.410155][ T6084] netlink: 'syz.3.34': attribute type 1 has an invalid length. [ 98.422434][ T6086] veth1_to_team: mtu less than device minimum [ 98.430800][ T6086] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 98.657938][ T6091] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.679878][ T6092] netlink: 'syz.2.38': attribute type 3 has an invalid length. [ 98.750188][ T6100] openvswitch: netlink: Multiple metadata blocks provided [ 98.771842][ T6092] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 98.789964][ T6095] openvswitch: netlink: Multiple metadata blocks provided [ 98.998239][ T6106] netlink: 'syz.4.41': attribute type 1 has an invalid length. [ 99.026377][ T6106] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 99.052279][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 99.289315][ T6124] team0: left allmulticast mode [ 99.305452][ T6124] team_slave_0: left allmulticast mode [ 99.311198][ T6124] team_slave_1: left allmulticast mode [ 99.321149][ T6124] team0: left promiscuous mode [ 99.333893][ T6124] team_slave_0: left promiscuous mode [ 99.357997][ T6124] team_slave_1: left promiscuous mode [ 99.381833][ T6124] bridge0: port 3(team0) entered disabled state [ 99.404343][ T6124] bridge_slave_1: left allmulticast mode [ 99.416895][ T6124] bridge_slave_1: left promiscuous mode [ 99.445161][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.480053][ T6124] bridge_slave_0: left allmulticast mode [ 99.489171][ T6124] bridge_slave_0: left promiscuous mode [ 99.499588][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.616951][ T6127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.671477][ T6139] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 99.682782][ T6139] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 99.997434][ T6150] __nla_validate_parse: 11 callbacks suppressed [ 99.997453][ T6150] netlink: 236 bytes leftover after parsing attributes in process `syz.0.53'. [ 100.056014][ T6152] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 100.270983][ T6157] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 100.590720][ T6164] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 101.553341][ T6191] syz.4.67 uses obsolete (PF_INET,SOCK_PACKET) [ 101.616383][ T6196] netlink: 'syz.4.67': attribute type 2 has an invalid length. [ 101.624106][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 101.754170][ T6205] netlink: 256 bytes leftover after parsing attributes in process `syz.3.70'. [ 102.141400][ T6222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.75'. [ 102.157705][ T6223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.75'. [ 102.180756][ T6222] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20001 [ 102.454121][ T6239] netlink: 48 bytes leftover after parsing attributes in process `syz.0.79'. [ 102.763920][ T6250] netlink: 'syz.2.82': attribute type 13 has an invalid length. [ 102.786806][ T6250] lo: entered promiscuous mode [ 102.794088][ T6250] lo: entered allmulticast mode [ 102.828774][ T6250] tunl0: entered promiscuous mode [ 102.862728][ T6250] tunl0: entered allmulticast mode [ 102.874532][ T6250] gre0: entered promiscuous mode [ 102.917944][ T6250] gre0: entered allmulticast mode [ 102.953957][ T6250] gretap0: entered promiscuous mode [ 102.959373][ T6250] gretap0: entered allmulticast mode [ 102.980084][ T6250] gretap0: refused to change device tx_queue_len [ 102.996756][ T6250] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 103.274760][ T6267] netlink: 'syz.3.86': attribute type 3 has an invalid length. [ 103.303026][ T6268] openvswitch: netlink: Message has -1 unknown bytes. [ 103.310255][ T6267] netlink: 'syz.3.86': attribute type 3 has an invalid length. [ 103.345915][ T6267] netlink: 'syz.3.86': attribute type 3 has an invalid length. [ 103.474851][ T6267] xt_ecn: cannot match TCP bits for non-tcp packets [ 103.509495][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 103.850461][ T6292] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 103.853706][ T6301] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.930619][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 103.939585][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.168807][ T6298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.319480][ T6324] veth1_macvtap: left promiscuous mode [ 104.539430][ T6333] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.104'. [ 104.902486][ T6350] ip6t_srh: unknown srh match flags 4001 [ 104.925830][ T6350] netlink: 'syz.4.111': attribute type 2 has an invalid length. [ 104.940934][ T6350] netlink: 188 bytes leftover after parsing attributes in process `syz.4.111'. [ 105.043917][ T6352] warning: `syz.4.111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.116994][ T6360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.114'. [ 105.168069][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.213940][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.215413][ T5966] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.331689][ T6368] netlink: 'syz.1.115': attribute type 6 has an invalid length. [ 105.379297][ T6370] netlink: 300 bytes leftover after parsing attributes in process `syz.0.117'. [ 105.442546][ T5932] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.577462][ T6342] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 105.821008][ T6386] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 105.981594][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 106.017530][ T5967] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.058981][ T6397] netlink: 40 bytes leftover after parsing attributes in process `syz.2.126'. [ 106.094795][ T6399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.129'. [ 106.373873][ T6419] xt_hashlimit: max too large, truncated to 1048576 [ 107.287000][ T6461] netlink: set zone limit has 8 unknown bytes [ 107.422378][ T6465] netlink: 'syz.2.146': attribute type 33 has an invalid length. [ 107.434156][ T6466] netlink: 'syz.3.147': attribute type 2 has an invalid length. [ 107.497304][ T6470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.855962][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 107.940982][ T6489] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 107.967838][ T6489] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 108.251278][ T6510] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 1, id = 0 [ 108.311724][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 108.360259][ T6514] netlink: 'syz.0.161': attribute type 10 has an invalid length. [ 108.491321][ T6514] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 108.732730][ T6528] netlink: 2 bytes leftover after parsing attributes in process `syz.3.166'. [ 108.782202][ T6528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.876482][ T6535] netlink: 'syz.4.169': attribute type 12 has an invalid length. [ 109.039474][ T6548] netlink: 'syz.3.171': attribute type 10 has an invalid length. [ 109.066356][ T6548] team0: Device ipvlan1 failed to register rx_handler [ 109.212208][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.434889][ T6563] Cannot find add_set index 1 as target [ 109.465435][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'. [ 109.629483][ T6566] : entered promiscuous mode [ 109.651475][ T6568] ªªªªªª†³?ÂHº: renamed from lo [ 109.739037][ T6573] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 109.822558][ T6576] vlan1: entered allmulticast mode [ 109.852428][ T6576] veth0_vlan: entered allmulticast mode [ 110.037089][ T6584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 110.538741][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 111.098179][ T6630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.196'. [ 111.600460][ T6648] netlink: 'syz.1.201': attribute type 4 has an invalid length. [ 111.898759][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.202'. [ 111.916207][ T6656] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 112.432474][ T6679] syzkaller0: entered promiscuous mode [ 112.442261][ T6679] syzkaller0: entered allmulticast mode [ 112.782345][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 113.789140][ T6698] lo speed is unknown, defaulting to 1000 [ 113.835110][ T6698] lo speed is unknown, defaulting to 1000 [ 113.869389][ T6698] lo speed is unknown, defaulting to 1000 [ 114.233928][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 114.536403][ T6698] infiniband syz0: set active [ 114.542852][ T5967] lo speed is unknown, defaulting to 1000 [ 114.547397][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 114.559478][ T6698] infiniband syz0: added lo [ 114.586102][ T6698] syz0: rxe_create_cq: returned err = -12 [ 114.616981][ T6698] infiniband syz0: Couldn't create ib_mad CQ [ 114.637425][ T6698] infiniband syz0: Couldn't open port 1 [ 114.725654][ T6698] RDS/IB: syz0: added [ 114.730480][ T6698] smc: adding ib device syz0 with port count 1 [ 114.760589][ T6698] smc: ib device syz0 port 1 has pnetid [ 114.774541][ T5917] lo speed is unknown, defaulting to 1000 [ 114.793999][ T6698] lo speed is unknown, defaulting to 1000 [ 114.877281][ T6760] netlink: 'syz.2.231': attribute type 178 has an invalid length. [ 114.929318][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 115.306397][ T6698] lo speed is unknown, defaulting to 1000 [ 115.789348][ T6799] x_tables: duplicate entry at hook 2 [ 115.979918][ T6811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.244'. [ 116.079858][ T6698] lo speed is unknown, defaulting to 1000 [ 116.126919][ T6816] netlink: 52 bytes leftover after parsing attributes in process `syz.3.246'. [ 116.163834][ T6821] netlink: 44 bytes leftover after parsing attributes in process `syz.1.245'. [ 116.197565][ T6821] netlink: 64 bytes leftover after parsing attributes in process `syz.1.245'. [ 116.328969][ T6825] netlink: 'syz.3.249': attribute type 10 has an invalid length. [ 116.387229][ T6825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.425377][ T6825] team0: Port device bond0 added [ 116.590461][ T6833] netlink: 40 bytes leftover after parsing attributes in process `syz.3.252'. [ 116.708711][ T6698] lo speed is unknown, defaulting to 1000 [ 117.037208][ T6698] lo speed is unknown, defaulting to 1000 [ 117.452190][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.488460][ T6870] netlink: 40 bytes leftover after parsing attributes in process `syz.3.265'. [ 117.746974][ T6893] netlink: 80 bytes leftover after parsing attributes in process `syz.1.271'. [ 117.771311][ T6893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.271'. [ 117.872341][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'. [ 117.891732][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'. [ 117.913277][ T6898] sctp: [Deprecated]: syz.0.275 (pid 6898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.913277][ T6898] Use struct sctp_sack_info instead [ 118.105898][ T6907] netlink: 'syz.3.277': attribute type 10 has an invalid length. [ 118.311730][ T6907] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 118.595420][ T6933] netlink: 'syz.4.285': attribute type 1 has an invalid length. [ 119.679809][ T6941] xt_hashlimit: invalid rate [ 119.696295][ T5850] Bluetooth: hci4: command tx timeout [ 119.800356][ T6954] x_tables: unsorted entry at hook 3 [ 120.028947][ T6966] veth3: entered allmulticast mode [ 120.044627][ T6964] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 120.046890][ T5966] IPVS: starting estimator thread 0... [ 120.102791][ T6975] dvmrp0: entered allmulticast mode [ 120.117151][ T6974] wg2: entered promiscuous mode [ 120.129046][ T6974] wg2: entered allmulticast mode [ 120.162101][ T6970] IPVS: using max 28 ests per chain, 67200 per kthread [ 120.686163][ T7008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.732602][ T7009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.169489][ T7027] syzkaller1: entered promiscuous mode [ 121.175733][ T7027] syzkaller1: entered allmulticast mode [ 121.189734][ T7027] __nla_validate_parse: 6 callbacks suppressed [ 121.189753][ T7027] netlink: 20 bytes leftover after parsing attributes in process `syz.4.312'. [ 121.205740][ T7027] netlink: 120 bytes leftover after parsing attributes in process `syz.4.312'. [ 121.290529][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 121.312276][ T7034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.312'. [ 121.325980][ T7034] netlink: 28 bytes leftover after parsing attributes in process `syz.4.312'. [ 121.412631][ T7034] bridge0: entered promiscuous mode [ 121.429728][ T7034] ip6gretap0: entered promiscuous mode [ 121.484859][ T7039] geneve2: entered promiscuous mode [ 121.501379][ T7041] netlink: 68 bytes leftover after parsing attributes in process `syz.1.317'. [ 122.109775][ T7070] delete_channel: no stack [ 122.238773][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 122.619059][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 122.981784][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.336'. [ 123.279112][ T7122] netlink: 'syz.4.339': attribute type 11 has an invalid length. [ 123.342096][ T7122] netlink: 224 bytes leftover after parsing attributes in process `syz.4.339'. [ 123.613983][ T7135] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 123.851558][ T7140] xt_policy: neither incoming nor outgoing policy selected [ 123.855108][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 123.899508][ T7143] netlink: 'syz.0.342': attribute type 6 has an invalid length. [ 123.949483][ T7146] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.958022][ T7146] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.095128][ T7155] netlink: 'syz.3.347': attribute type 3 has an invalid length. [ 124.095148][ T7152] syz.0.346: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 124.137388][ T7152] CPU: 0 UID: 0 PID: 7152 Comm: syz.0.346 Not tainted 6.16.0-rc4-syzkaller-00114-g1e3b66e32601 #0 PREEMPT(full) [ 124.137437][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.137467][ T7152] Call Trace: [ 124.137475][ T7152] [ 124.137485][ T7152] dump_stack_lvl+0x189/0x250 [ 124.137531][ T7152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.137557][ T7152] ? __pfx__printk+0x10/0x10 [ 124.137587][ T7152] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 124.137618][ T7152] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 124.137649][ T7152] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 124.137691][ T7152] warn_alloc+0x214/0x310 [ 124.137720][ T7152] ? stack_depot_save_flags+0x429/0x900 [ 124.137756][ T7152] ? __pfx_warn_alloc+0x10/0x10 [ 124.137786][ T7152] ? kasan_save_track+0x4f/0x80 [ 124.137809][ T7152] ? xskq_create+0x56/0x170 [ 124.137838][ T7152] ? xsk_init_queue+0xb0/0x110 [ 124.137864][ T7152] ? xsk_setsockopt+0x43f/0x710 [ 124.137891][ T7152] ? do_sock_setsockopt+0x25a/0x3e0 [ 124.137915][ T7152] ? __x64_sys_setsockopt+0x18b/0x220 [ 124.137938][ T7152] ? do_syscall_64+0xfa/0x3b0 [ 124.137956][ T7152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.137985][ T7152] __vmalloc_node_range_noprof+0x125/0x12f0 [ 124.138046][ T7152] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 124.138081][ T7152] ? __kasan_kmalloc+0x93/0xb0 [ 124.138110][ T7152] vmalloc_user_noprof+0xad/0xf0 [ 124.138137][ T7152] ? xskq_create+0xbf/0x170 [ 124.138168][ T7152] xskq_create+0xbf/0x170 [ 124.138202][ T7152] xsk_init_queue+0xb0/0x110 [ 124.138235][ T7152] xsk_setsockopt+0x43f/0x710 [ 124.138285][ T7152] ? __pfx_xsk_setsockopt+0x10/0x10 [ 124.138312][ T7152] ? __lock_acquire+0xab9/0xd20 [ 124.138352][ T7152] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 124.138371][ T7152] ? __pfx_xsk_setsockopt+0x10/0x10 [ 124.138403][ T7152] do_sock_setsockopt+0x25a/0x3e0 [ 124.138433][ T7152] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 124.138466][ T7152] ? __fget_files+0x2a/0x420 [ 124.138505][ T7152] __x64_sys_setsockopt+0x18b/0x220 [ 124.138538][ T7152] do_syscall_64+0xfa/0x3b0 [ 124.138557][ T7152] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.138589][ T7152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.138609][ T7152] ? clear_bhb_loop+0x60/0xb0 [ 124.138635][ T7152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.138655][ T7152] RIP: 0033:0x7f50f318e929 [ 124.138679][ T7152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.138697][ T7152] RSP: 002b:00007f50f4058038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 124.138719][ T7152] RAX: ffffffffffffffda RBX: 00007f50f33b5fa0 RCX: 00007f50f318e929 [ 124.138734][ T7152] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 124.138746][ T7152] RBP: 00007f50f3210b39 R08: 0000000000000004 R09: 0000000000000000 [ 124.138758][ T7152] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.138783][ T7152] R13: 0000000000000000 R14: 00007f50f33b5fa0 R15: 00007ffd135de3c8 [ 124.138815][ T7152] [ 124.138827][ T7152] Mem-Info: [ 124.463370][ T7152] active_anon:4444 inactive_anon:0 isolated_anon:0 [ 124.463370][ T7152] active_file:1134 inactive_file:39836 isolated_file:0 [ 124.463370][ T7152] unevictable:768 dirty:43 writeback:0 [ 124.463370][ T7152] slab_reclaimable:10318 slab_unreclaimable:99627 [ 124.463370][ T7152] mapped:28800 shmem:1362 pagetables:1117 [ 124.463370][ T7152] sec_pagetables:0 bounce:0 [ 124.463370][ T7152] kernel_misc_reclaimable:0 [ 124.463370][ T7152] free:1327641 free_pcp:14865 free_cma:0 [ 124.538952][ T7152] Node 0 active_anon:17776kB inactive_anon:0kB active_file:4536kB inactive_file:159140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115200kB dirty:168kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11728kB pagetables:4096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 124.644704][ T7152] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 124.668983][ T7167] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 124.700113][ T7152] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 124.730333][ T7152] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 124.738995][ T7152] Node 0 DMA32 free:1396076kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17728kB inactive_anon:0kB active_file:4536kB inactive_file:157572kB unevictable:1536kB writepending:168kB present:3129332kB managed:2558404kB mlocked:0kB bounce:0kB free_pcp:41564kB local_pcp:21500kB free_cma:0kB [ 124.821419][ T7152] lowmem_reserve[]: 0 0 1 1 1 [ 124.852076][ T7152] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 124.908206][ T7152] lowmem_reserve[]: 0 0 0 0 0 [ 124.917545][ T7152] Node 1 Normal free:3898616kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19552kB local_pcp:9376kB free_cma:0kB [ 125.019049][ T7152] lowmem_reserve[]: 0 0 0 0 0 [ 125.065802][ T7152] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 125.102094][ T7152] Node 0 DMA32: 251*4kB (UM) 653*8kB (UME) 295*16kB (UM) 430*32kB (UME) 152*64kB (UM) 57*128kB (UM) 41*256kB (UME) 23*512kB (UME) 9*1024kB (UM) 7*2048kB (ME) 321*4096kB (UM) = 1402372kB [ 125.159888][ T7184] ipvlan0: entered promiscuous mode [ 125.165378][ T7184] ipvlan0: entered allmulticast mode [ 125.170720][ T7184] veth0_vlan: entered allmulticast mode [ 125.177965][ T7152] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 125.221371][ T7152] Node 1 Normal: 194*4kB (UME) 56*8kB (UME) 49*16kB (UME) 75*32kB (UME) 23*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB (M) = 3898616kB [ 125.257031][ T7152] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.267696][ T7152] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.277827][ T7152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 125.288082][ T7188] netlink: 'syz.3.359': attribute type 2 has an invalid length. [ 125.298683][ T7152] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 125.311104][ T7152] 42328 total pagecache pages [ 125.335707][ T7152] 0 pages in swap cache [ 125.340378][ T7152] Free swap = 124996kB [ 125.345391][ T7152] Total swap = 124996kB [ 125.349661][ T7152] 2097051 pages RAM [ 125.353966][ T7152] 0 pages HighMem/MovableOnly [ 125.358794][ T7152] 425408 pages reserved [ 125.363478][ T7152] 0 pages cma reserved [ 126.497445][ T7209] veth1_macvtap: left promiscuous mode [ 126.948919][ T7224] __nla_validate_parse: 5 callbacks suppressed [ 126.948938][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 127.032148][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 127.084273][ T7241] netlink: 'syz.0.373': attribute type 12 has an invalid length. [ 127.122374][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'. [ 127.635213][ T7263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.378'. [ 127.677110][ T7263] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 127.689561][ T7263] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 127.819441][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 127.838893][ T7270] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 127.862057][ T7270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.876862][ T7268] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 127.884744][ T7268] netlink: 224 bytes leftover after parsing attributes in process `syz.1.380'. [ 127.894227][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 127.894659][ T7272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.019390][ T6988] Set syz1 is full, maxelem 65536 reached [ 128.052953][ T7280] tc_dump_action: action bad kind [ 128.791865][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 128.860347][ T7296] netlink: 80 bytes leftover after parsing attributes in process `syz.4.388'. [ 129.350128][ T7291] netlink: 56 bytes leftover after parsing attributes in process `syz.3.387'. [ 129.373241][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.475701][ T7298] netlink: 'syz.0.389': attribute type 5 has an invalid length. [ 129.532378][ T7300] nbd: must specify an index to disconnect [ 129.909859][ T7324] netlink: 'syz.1.396': attribute type 2 has an invalid length. [ 130.033264][ T7326] netlink: 'syz.1.397': attribute type 1 has an invalid length. [ 130.681645][ T7303] netlink: 'syz.4.391': attribute type 29 has an invalid length. [ 131.075054][ T7346] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 131.991125][ T7392] __nla_validate_parse: 10 callbacks suppressed [ 131.991145][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 132.220026][ T7401] netlink: 'syz.2.420': attribute type 3 has an invalid length. [ 132.337186][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 132.466101][ T7410] bridge1: entered promiscuous mode [ 132.495125][ T7410] bridge1: entered allmulticast mode [ 132.513451][ T7418] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.424'. [ 132.675414][ T7420] syz.1.426 (7420) used greatest stack depth: 17144 bytes left [ 132.724147][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.428'. [ 132.754246][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.428'. [ 132.819249][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.825932][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.866362][ T7425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.906420][ T7427] macvlan2: entered promiscuous mode [ 132.921841][ T7427] macvlan2: entered allmulticast mode [ 132.939746][ T7427] bond2: entered promiscuous mode [ 132.959881][ T7427] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 132.991013][ T7427] bond2: left promiscuous mode [ 133.196197][ T7445] netlink: 172 bytes leftover after parsing attributes in process `syz.1.432'. [ 133.267051][ T7446] netlink: 16 bytes leftover after parsing attributes in process `syz.4.433'. [ 133.518426][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.438'. [ 133.889928][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.092230][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.308971][ T7474] netlink: 208 bytes leftover after parsing attributes in process `syz.0.441'. [ 134.585102][ T7450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.021257][ T7450] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.040303][ T7450] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.050635][ T7450] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.060507][ T7450] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.402740][ T7498] sctp: [Deprecated]: syz.4.448 (pid 7498) Use of int in maxseg socket option. [ 135.402740][ T7498] Use struct sctp_assoc_value instead [ 135.467438][ T7498] sctp: [Deprecated]: syz.4.448 (pid 7498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.467438][ T7498] Use struct sctp_sack_info instead [ 135.676784][ T7513] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 135.847540][ T7518] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.878700][ T7520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.457'. [ 136.097928][ T7533] lo speed is unknown, defaulting to 1000 [ 136.336872][ T7549] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 136.635468][ T7566] team0: Device vti0 is of different type [ 136.723390][ T7575] net veth1_virt_wifi .: renamed from virt_wifi0 [ 137.149704][ T7593] netlink: 'syz.0.478': attribute type 2 has an invalid length. [ 137.356101][ T7602] __nla_validate_parse: 3 callbacks suppressed [ 137.356121][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 137.396374][ T7602] netlink: 'syz.1.481': attribute type 1 has an invalid length. [ 137.409268][ T7602] netlink: 'syz.1.481': attribute type 2 has an invalid length. [ 137.470845][ T7607] Bluetooth: MGMT ver 1.23 [ 137.475616][ T7604] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 137.475636][ T7604] netlink: 244 bytes leftover after parsing attributes in process `syz.0.483'. [ 138.234759][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 138.339874][ T7646] veth0: entered promiscuous mode [ 138.352943][ T7645] veth0: left promiscuous mode [ 138.545552][ T7656] netlink: 'syz.4.495': attribute type 1 has an invalid length. [ 138.582155][ T7656] netlink: 224 bytes leftover after parsing attributes in process `syz.4.495'. [ 138.597389][ T7658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.495'. [ 138.606188][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.495'. [ 138.661890][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 138.775857][ T7664] netlink: 'syz.3.496': attribute type 1 has an invalid length. [ 138.818669][ T7664] netlink: 'syz.3.496': attribute type 1 has an invalid length. [ 139.643571][ T7712] netlink: 'syz.3.508': attribute type 12 has an invalid length. [ 139.658775][ T7714] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.509'. [ 139.678088][ T7712] netlink: 'syz.3.508': attribute type 29 has an invalid length. [ 139.691139][ T7712] netlink: 148 bytes leftover after parsing attributes in process `syz.3.508'. [ 139.711402][ T7716] Driver unsupported XDP return value 0 on prog (id 176) dev N/A, expect packet loss! [ 139.736221][ T7712] netlink: 'syz.3.508': attribute type 2 has an invalid length. [ 139.750658][ T7712] netlink: 43 bytes leftover after parsing attributes in process `syz.3.508'. [ 140.114452][ T7729] bond1: entered promiscuous mode [ 140.146238][ T7729] bond1: entered allmulticast mode [ 140.170458][ T7729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.330909][ T7747] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 140.342724][ T7747] bond0: (slave wlan1): Releasing backup interface [ 140.411882][ T7750] tipc: Started in network mode [ 140.443666][ T7750] tipc: Node identity 00000000000000000000000000004001, cluster identity 4711 [ 140.467424][ T7750] tipc: Enabling of bearer rejected, failed to enable media [ 140.700198][ T7768] x_tables: unsorted entry at hook 3 [ 140.727360][ T7773] team0: Device gtp0 is of different type [ 140.829236][ T7768] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 140.842999][ T7781] Bluetooth: MGMT ver 1.23 [ 140.867690][ T7768] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 140.907420][ T7781] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 (while UP) [ 141.453238][ T7810] dummy0: entered promiscuous mode [ 141.460212][ T7810] bridge0: port 3(dummy0) entered blocking state [ 141.467174][ T7810] bridge0: port 3(dummy0) entered disabled state [ 141.487230][ T7810] dummy0: entered allmulticast mode [ 141.513769][ T7810] bridge0: port 3(dummy0) entered blocking state [ 141.520463][ T7810] bridge0: port 3(dummy0) entered forwarding state [ 142.217532][ T7864] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 142.416384][ T7876] __nla_validate_parse: 10 callbacks suppressed [ 142.416405][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'. [ 142.453428][ T7872] tipc: Started in network mode [ 142.458375][ T7872] tipc: Node identity 6a6710b2d0a7, cluster identity 4711 [ 142.489173][ T7872] tipc: Enabled bearer , priority 0 [ 142.515470][ T7873] syzkaller0: entered promiscuous mode [ 142.521018][ T7873] syzkaller0: entered allmulticast mode [ 142.561376][ T7867] tipc: Resetting bearer [ 142.569687][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 142.698673][ T7867] tipc: Disabling bearer [ 142.845267][ T7886] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 142.978757][ T7887] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 143.112776][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805529e400: rx timeout, send abort [ 143.122658][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880334b9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 143.253293][ T7897] x_tables: duplicate underflow at hook 3 [ 143.419552][ T7906] trusted_key: syz.1.553 sent an empty control message without MSG_MORE. [ 143.496701][ T7914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.553'. [ 143.588135][ T7920] xt_ipcomp: unknown flags B [ 143.604730][ T7920] dummy0: entered promiscuous mode [ 143.610989][ T7920] batadv0: entered promiscuous mode [ 143.621483][ T7920] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 143.629186][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805529e400: abort rx timeout. Force session deactivation [ 143.649587][ T7920] Cannot create hsr debugfs directory [ 143.655401][ T7920] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 143.670240][ T7920] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 143.995311][ T30] audit: type=1800 audit(1751972762.734:2): pid=7944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.565" name="memory.events" dev="tmpfs" ino=542 res=0 errno=0 [ 144.003007][ T7945] validate_nla: 3 callbacks suppressed [ 144.003029][ T7945] netlink: 'syz.4.566': attribute type 29 has an invalid length. [ 144.036718][ T30] audit: type=1804 audit(1751972762.744:3): pid=7944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.565" name="/newroot/103/memory.events" dev="tmpfs" ino=542 res=1 errno=0 [ 144.077278][ T7948] netlink: 'syz.4.566': attribute type 29 has an invalid length. [ 144.085547][ T7947] netlink: 'syz.3.567': attribute type 3 has an invalid length. [ 144.592846][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.576'. [ 144.617301][ T7976] netlink: 'syz.4.576': attribute type 1 has an invalid length. [ 144.625675][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 144.727798][ T7986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.579'. [ 144.948521][ T8004] IPv6: Can't replace route, no match found [ 145.029320][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.584'. [ 145.301055][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 145.332276][ T8028] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 145.364658][ T8026] bridge_slave_0: invalid flags given to default FDB implementation [ 145.708658][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.597'. [ 145.775551][ T8055] x_tables: unsorted underflow at hook 4 [ 145.799522][ T8057] netlink: 'syz.0.601': attribute type 18 has an invalid length. [ 145.823524][ T8057] netlink: 'syz.0.601': attribute type 18 has an invalid length. [ 145.874934][ T8062] netlink: 96 bytes leftover after parsing attributes in process `syz.4.600'. [ 145.932164][ T5863] Bluetooth: hci4: command 0x0405 tx timeout [ 145.944127][ T8066] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.390150][ T8083] tipc: Started in network mode [ 146.418278][ T8083] tipc: Node identity 080211000001, cluster identity 4711 [ 146.478077][ T8083] tipc: Enabled bearer , priority 0 [ 147.332419][ T13] bridge_slave_1: left promiscuous mode [ 147.339520][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.357307][ T13] bridge_slave_0: left allmulticast mode [ 147.371164][ T13] bridge_slave_0: left promiscuous mode [ 147.377606][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.556018][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.571389][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.585236][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.597389][ T5918] tipc: Node number set to 134418688 [ 147.605576][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.619036][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.788504][ T13] team0: Port device bond0 removed [ 147.796612][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.807077][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.818707][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 147.828754][ T13] bond0 (unregistering): Released all slaves [ 147.971857][ T8144] lo speed is unknown, defaulting to 1000 [ 147.992381][ T13] tipc: Left network mode [ 148.072515][ T13] IPVS: stopping master sync thread 6510 ... [ 149.003456][ T8192] __nla_validate_parse: 7 callbacks suppressed [ 149.003477][ T8192] netlink: 48 bytes leftover after parsing attributes in process `syz.1.642'. [ 149.359325][ T8206] xt_recent: Unsupported userspace flags (00000061) [ 149.409080][ T8207] syz_tun: entered allmulticast mode [ 149.493055][ T8208] gre2: entered promiscuous mode [ 149.511440][ T8208] gre2: entered allmulticast mode [ 149.569642][ T13] dummy0: left promiscuous mode [ 149.581799][ T13] batadv0: left promiscuous mode [ 149.641575][ T13] hsr_slave_0: left promiscuous mode [ 149.659291][ T13] hsr_slave_1: left promiscuous mode [ 149.669003][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.693149][ T5850] Bluetooth: hci0: command tx timeout [ 150.015969][ T13] team0 (unregistering): Port device team_slave_1 removed [ 150.051806][ T13] team0 (unregistering): Port device team_slave_0 removed [ 150.397932][ T8207] syz_tun: left allmulticast mode [ 150.417706][ T8144] chnl_net:caif_netlink_parms(): no params data found [ 150.681174][ T8239] netlink: 'syz.0.658': attribute type 10 has an invalid length. [ 150.710615][ T8239] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 150.726015][ T8239] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 150.740553][ T8243] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 150.899221][ T8144] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.906773][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.918068][ T8144] bridge_slave_0: entered allmulticast mode [ 150.929158][ T8144] bridge_slave_0: entered promiscuous mode [ 150.957139][ T8144] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.971319][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.988266][ T8144] bridge_slave_1: entered allmulticast mode [ 151.000962][ T8144] bridge_slave_1: entered promiscuous mode [ 151.081618][ T13] IPVS: stop unused estimator thread 0... [ 151.096543][ T8144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.145297][ T8144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.254200][ T8263] netlink: 'syz.2.664': attribute type 2 has an invalid length. [ 151.286636][ T8144] team0: Port device team_slave_0 added [ 151.308884][ T8144] team0: Port device team_slave_1 added [ 151.340474][ T8268] netlink: 128 bytes leftover after parsing attributes in process `syz.0.666'. [ 151.350804][ T8268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.666'. [ 151.368782][ T8144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.378270][ T8144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.409271][ T8144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.424306][ T8144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.431611][ T8144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.536273][ T8144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.578780][ T8280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.668'. [ 151.591313][ T8271] syzkaller1: entered promiscuous mode [ 151.633784][ T8271] syzkaller1: entered allmulticast mode [ 151.721241][ T8282] netlink: 24 bytes leftover after parsing attributes in process `syz.1.670'. [ 151.774321][ T5863] Bluetooth: hci0: command tx timeout [ 151.844950][ T8144] hsr_slave_0: entered promiscuous mode [ 151.851729][ T8144] hsr_slave_1: entered promiscuous mode [ 151.887918][ T8292] netlink: 'syz.1.674': attribute type 10 has an invalid length. [ 151.888494][ T8144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.931993][ T8144] Cannot create hsr debugfs directory [ 151.964935][ T8292] team0: Device veth1_macvtap failed to register rx_handler [ 152.012540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.057196][ T8294] xt_CT: No such helper "snmp" [ 152.087633][ T8294] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 152.220433][ T8309] netlink: 'syz.0.678': attribute type 32 has an invalid length. [ 152.262687][ T8310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.303137][ T8294] team0 (unregistering): Port device team_slave_0 removed [ 152.316836][ T8294] team0 (unregistering): Port device team_slave_1 removed [ 152.362269][ T8302] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 152.567497][ T8318] IPVS: Error joining to the multicast group [ 152.908664][ T8336] Bluetooth: MGMT ver 1.23 [ 152.950445][ T8336] netlink: 56 bytes leftover after parsing attributes in process `syz.0.687'. [ 152.974713][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'. [ 153.041601][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 153.178278][ T8343] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.358344][ T8351] syzkaller1: entered promiscuous mode [ 153.378353][ T8351] syzkaller1: entered allmulticast mode [ 153.772817][ T8365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.695'. [ 153.852150][ T5850] Bluetooth: hci0: command tx timeout [ 153.857898][ T8370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.697'. [ 154.126660][ T8144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.158168][ T8144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.197665][ T8144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.214955][ T8144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.219137][ T8384] __nla_validate_parse: 4 callbacks suppressed [ 154.219159][ T8384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.701'. [ 154.268223][ T8388] gtp0: entered promiscuous mode [ 154.282122][ T8388] gtp0: entered allmulticast mode [ 154.404171][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.701'. [ 154.524870][ T8144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.554022][ T8403] netlink: 56 bytes leftover after parsing attributes in process `syz.0.704'. [ 154.579753][ T8144] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.597114][ T8406] netlink: 'syz.2.706': attribute type 10 has an invalid length. [ 154.639305][ T8406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.654315][ T8406] team0: Port device bond0 added [ 154.674429][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.682470][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.700501][ T8409] netlink: 'syz.4.707': attribute type 1 has an invalid length. [ 154.719012][ T968] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.726243][ T968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.226325][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.715'. [ 155.568256][ T8454] netlink: 56 bytes leftover after parsing attributes in process `syz.0.720'. [ 155.932223][ T5850] Bluetooth: hci0: command tx timeout [ 156.583846][ T8454] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave [ 156.606791][ T8454] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0) [ 156.705150][ T8144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.751001][ T8461] netlink: 236 bytes leftover after parsing attributes in process `syz.0.723'. [ 156.880176][ T8144] veth0_vlan: entered promiscuous mode [ 156.916808][ T8144] veth1_vlan: entered promiscuous mode [ 157.066182][ T8144] veth0_macvtap: entered promiscuous mode [ 157.083520][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'. [ 157.140883][ T8144] veth1_macvtap: entered promiscuous mode [ 157.180094][ T8144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.229936][ T8144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.316776][ T8144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.330495][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.730'. [ 157.340875][ T8144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.360278][ T8144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.369879][ T8144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.382372][ T8485] netlink: 16 bytes leftover after parsing attributes in process `syz.0.730'. [ 157.550606][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 157.573475][ T8504] netlink: 'syz.0.736': attribute type 21 has an invalid length. [ 157.697873][ T8511] Bluetooth: MGMT ver 1.23 [ 158.921180][ T8504] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 159.208284][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.241284][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.266888][ T8543] __nla_validate_parse: 6 callbacks suppressed [ 159.266906][ T8543] netlink: 40 bytes leftover after parsing attributes in process `syz.0.747'. [ 159.297427][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.312558][ T8542] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 159.316914][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.420393][ T8551] netlink: 'syz.4.751': attribute type 10 has an invalid length. [ 159.435804][ T8551] netlink: 40 bytes leftover after parsing attributes in process `syz.4.751'. [ 159.473052][ T8552] netlink: 48 bytes leftover after parsing attributes in process `syz.4.751'. [ 159.531001][ T8551] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 159.651052][ T8560] netlink: 'syz.2.754': attribute type 10 has an invalid length. [ 159.711118][ T8563] netlink: 32 bytes leftover after parsing attributes in process `syz.4.755'. [ 159.772943][ T5863] Bluetooth: hci2: command 0x0401 tx timeout [ 159.779090][ T5850] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 159.811135][ T8569] netlink: 'syz.1.756': attribute type 21 has an invalid length. [ 159.859168][ T8571] ip6gre1: entered allmulticast mode [ 159.868402][ T8569] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 159.870249][ T8571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.758'. [ 159.943724][ T8575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.759'. [ 160.000325][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.076380][ T8575] netlink: 56 bytes leftover after parsing attributes in process `syz.0.759'. [ 160.209316][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.290102][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'. [ 160.313527][ T8586] netlink: 'syz.1.761': attribute type 7 has an invalid length. [ 160.365597][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.539671][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 160.601873][ T8595] netlink: 'syz.4.764': attribute type 6 has an invalid length. [ 160.789891][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.984469][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.993364][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.001520][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.009724][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.017656][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.180677][ T8611] lo speed is unknown, defaulting to 1000 [ 161.324800][ T8617] : entered promiscuous mode [ 161.425734][ T13] bridge_slave_1: left allmulticast mode [ 161.431706][ T13] bridge_slave_1: left promiscuous mode [ 161.453606][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.519840][ T13] bridge_slave_0: left allmulticast mode [ 161.547458][ T13] bridge_slave_0: left promiscuous mode [ 161.556377][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.569281][ T8632] x_tables: duplicate underflow at hook 2 [ 161.798891][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 161.808108][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 161.820094][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 161.829266][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 161.837313][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 162.116152][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.127771][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.138163][ T13] bond0 (unregistering): Released all slaves [ 162.354652][ T8642] lo speed is unknown, defaulting to 1000 [ 162.358144][ T8650] netlink: 'syz.1.778': attribute type 2 has an invalid length. [ 162.401828][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 162.422517][ T8653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.752941][ T8669] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 162.761028][ T8669] SET target dimension over the limit! [ 162.970398][ T8674] xt_CT: No such helper "syz1" [ 163.052130][ T5863] Bluetooth: hci0: command tx timeout [ 163.302889][ T8689] xt_CT: No such helper "snmp" [ 163.406410][ T8611] chnl_net:caif_netlink_parms(): no params data found [ 163.444071][ T13] hsr_slave_0: left promiscuous mode [ 163.450522][ T13] hsr_slave_1: left promiscuous mode [ 163.459407][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.468076][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.477879][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.485705][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.508739][ T13] veth1_macvtap: left promiscuous mode [ 163.514804][ T13] veth0_macvtap: left promiscuous mode [ 163.520553][ T13] veth1_vlan: left promiscuous mode [ 163.526350][ T13] veth0_vlan: left promiscuous mode [ 163.933156][ T5863] Bluetooth: hci2: command tx timeout [ 164.008536][ T13] team0 (unregistering): Port device team_slave_1 removed [ 164.049139][ T13] team0 (unregistering): Port device team_slave_0 removed [ 165.142321][ T5863] Bluetooth: hci0: command tx timeout [ 165.250853][ T8700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.310673][ T8700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.634813][ T8700] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.645716][ T8700] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.655733][ T8700] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.665425][ T8700] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.684514][ T8700] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 165.983795][ T8721] __nla_validate_parse: 1 callbacks suppressed [ 165.983834][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.798'. [ 166.003584][ T8721] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 166.015207][ T8721] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 166.023028][ T5863] Bluetooth: hci2: command tx timeout [ 166.029297][ T8721] netlink: 'syz.4.798': attribute type 2 has an invalid length. [ 166.038032][ T8721] netlink: 68 bytes leftover after parsing attributes in process `syz.4.798'. [ 166.068097][ T8726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.083940][ T8611] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.091714][ T8611] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.107926][ T8611] bridge_slave_0: entered allmulticast mode [ 166.117075][ T8611] bridge_slave_0: entered promiscuous mode [ 166.147640][ T8728] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.797'. [ 166.226582][ T8732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.799'. [ 166.251496][ T8611] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.264615][ T8611] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.272000][ T8611] bridge_slave_1: entered allmulticast mode [ 166.282036][ T8611] bridge_slave_1: entered promiscuous mode [ 166.329050][ T8732] netlink: 56 bytes leftover after parsing attributes in process `syz.4.799'. [ 166.423740][ T8611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.442845][ T8642] chnl_net:caif_netlink_parms(): no params data found [ 166.475286][ T8611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.589723][ T8611] team0: Port device team_slave_0 added [ 166.636388][ T8611] team0: Port device team_slave_1 added [ 166.699753][ T8716] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 166.732132][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 166.750821][ T8611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.767525][ T8611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.798129][ T8611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.861170][ T8611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.875441][ T8611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.932180][ T8611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.004944][ T8642] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.017224][ T8642] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.025609][ T8642] bridge_slave_0: entered allmulticast mode [ 167.040987][ T8642] bridge_slave_0: entered promiscuous mode [ 167.115825][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.213432][ T8642] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.220695][ T8642] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.232446][ T8642] bridge_slave_1: entered allmulticast mode [ 167.240282][ T8642] bridge_slave_1: entered promiscuous mode [ 167.444922][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.596770][ T8611] hsr_slave_0: entered promiscuous mode [ 167.616410][ T8611] hsr_slave_1: entered promiscuous mode [ 167.626919][ T8611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.635158][ T8611] Cannot create hsr debugfs directory [ 167.645119][ T8642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.679240][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.749048][ T8775] xt_CT: No such helper "syz1" [ 167.761805][ T8642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.816190][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.927966][ T8783] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 168.003939][ T8642] team0: Port device team_slave_0 added [ 168.092430][ T5863] Bluetooth: hci2: command tx timeout [ 168.120940][ T8642] team0: Port device team_slave_1 added [ 168.122290][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.815'. [ 168.184163][ T8642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.191171][ T8642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.219959][ T8642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.247953][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.815'. [ 168.266112][ T8642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.279577][ T8642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.307222][ T8642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.320859][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 168.331510][ T8794] netlink: 'syz.1.816': attribute type 4 has an invalid length. [ 168.378660][ T8793] netlink: 'syz.1.816': attribute type 4 has an invalid length. [ 168.390393][ T8796] netlink: 'syz.4.817': attribute type 33 has an invalid length. [ 168.398654][ T8796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.817'. [ 168.467853][ T8799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.818'. [ 168.518723][ T8642] hsr_slave_0: entered promiscuous mode [ 168.527414][ T8642] hsr_slave_1: entered promiscuous mode [ 168.534314][ T8642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.543345][ T8642] Cannot create hsr debugfs directory [ 168.709461][ T13] bridge_slave_0: left allmulticast mode [ 168.715243][ T13] bridge_slave_0: left promiscuous mode [ 168.721119][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.018257][ T13] dvmrp0 (unregistering): left allmulticast mode [ 169.231018][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.242738][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.254174][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 169.267912][ T13] bond0 (unregistering): Released all slaves [ 169.283742][ T13] bond1 (unregistering): Released all slaves [ 169.539026][ T8822] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 169.737983][ T8827] netlink: 'syz.2.826': attribute type 10 has an invalid length. [ 169.966495][ T8831] xt_CT: No such helper "syz1" [ 170.172231][ T5863] Bluetooth: hci2: command tx timeout [ 170.195105][ T8611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 170.221830][ T8611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 170.256398][ T13] hsr_slave_0: left promiscuous mode [ 170.274364][ T13] hsr_slave_1: left promiscuous mode [ 170.284861][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.296385][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.305918][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.317278][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.348641][ T13] veth1_macvtap: left promiscuous mode [ 170.356247][ T13] veth0_macvtap: left promiscuous mode [ 170.367300][ T13] veth1_vlan: left promiscuous mode [ 170.375185][ T13] veth0_vlan: left promiscuous mode [ 170.510576][ T8855] xt_hashlimit: max too large, truncated to 1048576 [ 170.946190][ T13] team0 (unregistering): Port device team_slave_1 removed [ 170.986932][ T13] team0 (unregistering): Port device team_slave_0 removed [ 171.309185][ T12] smc: removing ib device syz0 [ 171.341791][ T8611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 171.505677][ T8712] lo speed is unknown, defaulting to 1000 [ 171.519388][ T8864] openvswitch: netlink: IP tunnel dst address not specified [ 171.527149][ T8712] syz0: Port: 1 Link DOWN [ 171.784446][ T8861] gretap1: entered promiscuous mode [ 171.789741][ T8861] gretap1: entered allmulticast mode [ 171.855928][ T8611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.039853][ T8873] __nla_validate_parse: 6 callbacks suppressed [ 172.039873][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 172.591143][ T8893] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 172.970249][ T8642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.041064][ T8642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.091179][ T8611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.150038][ T8642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.187607][ T8642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.278007][ T8611] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.312824][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'. [ 173.357031][ T8926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.855'. [ 173.407719][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.414999][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.430206][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.437544][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.589931][ T8942] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 173.711387][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.859'. [ 173.797663][ T8642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.863919][ T8642] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.924692][ T968] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.931978][ T968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.963709][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.970928][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.066098][ T8964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.863'. [ 174.219899][ T8966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.864'. [ 174.236107][ T8611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.429932][ T8611] veth0_vlan: entered promiscuous mode [ 174.475413][ T8611] veth1_vlan: entered promiscuous mode [ 174.516388][ T59] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 174.538657][ T59] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 174.550615][ T978] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 174.650986][ T8989] netlink: 'syz.4.869': attribute type 2 has an invalid length. [ 174.653343][ T8611] veth0_macvtap: entered promiscuous mode [ 174.698629][ T8611] veth1_macvtap: entered promiscuous mode [ 174.757422][ T8611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.780433][ T8611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.805802][ T8611] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.818131][ T8611] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.829460][ T8611] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.842871][ T8611] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.889887][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.871'. [ 174.911492][ T8642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.048490][ T8998] netlink: 'syz.4.873': attribute type 10 has an invalid length. [ 175.069103][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.098837][ T9001] IPVS: set_ctl: invalid protocol: 103 172.20.20.49:65534 [ 175.103707][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.133096][ T7461] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 175.148926][ T8642] veth0_vlan: entered promiscuous mode [ 175.202561][ T8642] veth1_vlan: entered promiscuous mode [ 175.203259][ T978] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 175.246830][ T968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.273230][ T968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.281028][ T9009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 175.468102][ T9017] netlink: 211416 bytes leftover after parsing attributes in process `syz.4.877'. [ 175.549584][ T8642] veth0_macvtap: entered promiscuous mode [ 175.550926][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.877'. [ 175.564057][ T8642] veth1_macvtap: entered promiscuous mode [ 175.765737][ T8642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.791211][ T8642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.818242][ T8642] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.834346][ T8642] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.843438][ T8642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.852590][ T8642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.995467][ T1016] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.156627][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.175087][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.225779][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.235444][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.340818][ T1016] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.485535][ T9039] netlink: 'syz.4.883': attribute type 3 has an invalid length. [ 176.522193][ T9039] netlink: 'syz.4.883': attribute type 1 has an invalid length. [ 176.711675][ T9048] openvswitch: netlink: Duplicate or invalid key (type 0). [ 176.716356][ T1016] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.723566][ T9048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.916462][ T1016] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.011601][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.025526][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.040801][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.059395][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.074608][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.287057][ T1016] bridge_slave_1: left allmulticast mode [ 177.298320][ T1016] bridge_slave_1: left promiscuous mode [ 177.304766][ T1016] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.320743][ T1016] bridge_slave_0: left allmulticast mode [ 177.326600][ T1016] bridge_slave_0: left promiscuous mode [ 177.332497][ T1016] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.818414][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.827830][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.837221][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.858136][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.882882][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.956471][ T1016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.970698][ T1016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.981506][ T1016] bond0 (unregistering): Released all slaves [ 178.425769][ T9094] syz.2.899: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 178.449209][ T9094] CPU: 1 UID: 0 PID: 9094 Comm: syz.2.899 Not tainted 6.16.0-rc4-syzkaller-00114-g1e3b66e32601 #0 PREEMPT(full) [ 178.449236][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.449248][ T9094] Call Trace: [ 178.449256][ T9094] [ 178.449265][ T9094] dump_stack_lvl+0x189/0x250 [ 178.449300][ T9094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.449325][ T9094] ? __pfx__printk+0x10/0x10 [ 178.449353][ T9094] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 178.449381][ T9094] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 178.449411][ T9094] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 178.449442][ T9094] warn_alloc+0x214/0x310 [ 178.449476][ T9094] ? __pfx_warn_alloc+0x10/0x10 [ 178.449516][ T9094] ? __get_vm_area_node+0x28f/0x300 [ 178.449543][ T9094] ? packet_set_ring+0x6f4/0x2380 [ 178.449576][ T9094] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 178.449638][ T9094] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 178.449667][ T9094] ? alloc_pages_mpol+0x3cd/0x4a0 [ 178.449697][ T9094] ? packet_set_ring+0x6f4/0x2380 [ 178.449743][ T9094] vzalloc_noprof+0xb2/0xf0 [ 178.449768][ T9094] ? packet_set_ring+0x6f4/0x2380 [ 178.449797][ T9094] packet_set_ring+0x6f4/0x2380 [ 178.449848][ T9094] ? __pfx_packet_set_ring+0x10/0x10 [ 178.449896][ T9094] ? _copy_from_user+0x94/0xb0 [ 178.449925][ T9094] packet_setsockopt+0xc5a/0x12c0 [ 178.449955][ T9094] ? __pfx_packet_setsockopt+0x10/0x10 [ 178.449978][ T9094] ? __handle_mm_fault+0x3ce3/0x5620 [ 178.449999][ T9094] ? __lock_acquire+0xab9/0xd20 [ 178.450022][ T9094] ? css_rstat_updated+0x1a5/0xca0 [ 178.450053][ T9094] ? aa_sk_perm+0x81e/0x950 [ 178.450086][ T9094] ? __pfx_aa_sk_perm+0x10/0x10 [ 178.450110][ T9094] ? __lock_acquire+0xab9/0xd20 [ 178.450135][ T9094] ? aa_sock_opt_perm+0x74/0x110 [ 178.450166][ T9094] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 178.450184][ T9094] ? __pfx_packet_setsockopt+0x10/0x10 [ 178.450212][ T9094] do_sock_setsockopt+0x25a/0x3e0 [ 178.450240][ T9094] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 178.450269][ T9094] ? __fget_files+0x2a/0x420 [ 178.450305][ T9094] __x64_sys_setsockopt+0x18b/0x220 [ 178.450337][ T9094] do_syscall_64+0xfa/0x3b0 [ 178.450356][ T9094] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.450385][ T9094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.450404][ T9094] ? clear_bhb_loop+0x60/0xb0 [ 178.450428][ T9094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.450446][ T9094] RIP: 0033:0x7f154358e929 [ 178.450464][ T9094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.450479][ T9094] RSP: 002b:00007f15413d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 178.450500][ T9094] RAX: ffffffffffffffda RBX: 00007f15437b6080 RCX: 00007f154358e929 [ 178.450514][ T9094] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000003 [ 178.450525][ T9094] RBP: 00007f1543610b39 R08: 000000000000001c R09: 0000000000000000 [ 178.450537][ T9094] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 178.450549][ T9094] R13: 0000000000000001 R14: 00007f15437b6080 R15: 00007ffd536b7df8 [ 178.450580][ T9094] [ 178.450587][ T9094] Mem-Info: [ 178.492713][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 178.496810][ T9094] active_anon:4407 inactive_anon:0 isolated_anon:0 [ 178.496810][ T9094] active_file:1396 inactive_file:39869 isolated_file:0 [ 178.496810][ T9094] unevictable:768 dirty:58 writeback:0 [ 178.496810][ T9094] slab_reclaimable:10956 slab_unreclaimable:98061 [ 178.496810][ T9094] mapped:28991 shmem:1363 pagetables:1062 [ 178.496810][ T9094] sec_pagetables:0 bounce:0 [ 178.496810][ T9094] kernel_misc_reclaimable:0 [ 178.496810][ T9094] free:1328891 free_pcp:13011 free_cma:0 [ 178.576799][ T9060] chnl_net:caif_netlink_parms(): no params data found [ 178.620286][ T9094] Node 0 active_anon:17628kB inactive_anon:0kB active_file:5584kB inactive_file:159272kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115964kB dirty:228kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11876kB pagetables:4076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 178.644463][ T9100] __nla_validate_parse: 2 callbacks suppressed [ 178.644484][ T9100] netlink: 168 bytes leftover after parsing attributes in process `syz.4.900'. [ 178.650109][ T9094] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 178.910805][ T9094] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 178.939826][ T9094] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 178.945747][ T9094] Node 0 DMA32 free:1401488kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17524kB inactive_anon:0kB active_file:5584kB inactive_file:157704kB unevictable:1536kB writepending:76kB present:3129332kB managed:2558404kB mlocked:0kB bounce:0kB free_pcp:32256kB local_pcp:16012kB free_cma:0kB [ 178.981724][ T9094] lowmem_reserve[]: 0 0 1 1 1 [ 178.987387][ T9094] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 179.021029][ T9094] lowmem_reserve[]: 0 0 0 0 0 [ 179.027456][ T1016] hsr_slave_0: left promiscuous mode [ 179.027511][ T9094] Node 1 Normal free:3899132kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19096kB local_pcp:9176kB free_cma:0kB [ 179.067774][ T1016] hsr_slave_1: left promiscuous mode [ 179.068430][ T9094] lowmem_reserve[]: [ 179.074884][ T1016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.077637][ T9094] 0 [ 179.078872][ T1016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.089469][ T9094] 0 0 0 0 [ 179.103999][ T9094] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 179.121032][ T9094] Node 0 DMA32: 450*4kB (ME) 351*8kB (UME) 199*16kB (UME) 93*32kB (ME) 100*64kB (UME) 95*128kB (UME) 42*256kB (UM) 33*512kB (UM) 19*1024kB (UM) 7*2048kB (UM) 320*4096kB (M) = 1401488kB [ 179.122111][ T1016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.152394][ T5850] Bluetooth: hci0: command tx timeout [ 179.160038][ T9104] tipc: Can't bind to reserved service type 2 [ 179.163008][ T9094] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 179.182367][ T9094] Node 1 Normal: 131*4kB (UME) 56*8kB (UME) 49*16kB (UME) 89*32kB (UME) 28*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 2*2048kB (UE) 948*4096kB (M) = 3899132kB [ 179.191083][ T1016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.201711][ T9094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.218176][ T9094] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.227606][ T9094] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 179.237483][ T9094] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 179.246910][ T9094] 42624 total pagecache pages [ 179.251854][ T9094] 0 pages in swap cache [ 179.256208][ T9094] Free swap = 124996kB [ 179.260391][ T9094] Total swap = 124996kB [ 179.264629][ T1016] veth1_macvtap: left promiscuous mode [ 179.270340][ T9094] 2097051 pages RAM [ 179.270359][ T1016] veth0_macvtap: left promiscuous mode [ 179.274255][ T9094] 0 pages HighMem/MovableOnly [ 179.284644][ T9094] 425408 pages reserved [ 179.288830][ T9094] 0 pages cma reserved [ 179.293942][ T1016] veth1_vlan: left promiscuous mode [ 179.299360][ T1016] veth0_vlan: left promiscuous mode [ 179.750224][ T1016] team0 (unregistering): Port device team_slave_1 removed [ 179.795576][ T1016] team0 (unregistering): Port device team_slave_0 removed [ 179.932329][ T5850] Bluetooth: hci2: command tx timeout [ 180.267532][ T9105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.901'. [ 180.352352][ T9081] chnl_net:caif_netlink_parms(): no params data found [ 180.770539][ T9146] Bluetooth: MGMT ver 1.23 [ 180.779195][ T9146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.819523][ T9150] netlink: 16 bytes leftover after parsing attributes in process `syz.2.911'. [ 180.855749][ T9060] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.889974][ T9060] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.928682][ T9060] bridge_slave_0: entered allmulticast mode [ 180.939178][ T9060] bridge_slave_0: entered promiscuous mode [ 180.995596][ T9159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.915'. [ 181.075315][ T9060] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.102102][ T9060] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.109414][ T9060] bridge_slave_1: entered allmulticast mode [ 181.127433][ T9060] bridge_slave_1: entered promiscuous mode [ 181.137322][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 181.164820][ T9081] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.175300][ T9081] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.183321][ T9081] bridge_slave_0: entered allmulticast mode [ 181.190680][ T9081] bridge_slave_0: entered promiscuous mode [ 181.199254][ T9081] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.208909][ T9081] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.216526][ T5850] Bluetooth: hci0: command tx timeout [ 181.217446][ T9081] bridge_slave_1: entered allmulticast mode [ 181.229626][ T9081] bridge_slave_1: entered promiscuous mode [ 181.264340][ T9060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.285909][ T9060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.539240][ T1016] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.694189][ T9179] netlink: 'syz.1.920': attribute type 12 has an invalid length. [ 181.705981][ T9179] netlink: 132 bytes leftover after parsing attributes in process `syz.1.920'. [ 181.729696][ T9191] netlink: 'syz.2.924': attribute type 1 has an invalid length. [ 181.735883][ T9081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.749116][ T9191] netlink: 224 bytes leftover after parsing attributes in process `syz.2.924'. [ 181.761244][ T9191] nbd: couldn't find device at index 1048576 [ 181.792872][ T9081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.860184][ T1016] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.862991][ T9196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.877890][ T9196] IPv6: NLM_F_CREATE should be set when creating new route [ 181.913786][ T9060] team0: Port device team_slave_0 added [ 181.926551][ T9060] team0: Port device team_slave_1 added [ 182.029007][ T5850] Bluetooth: hci2: command tx timeout [ 182.160699][ T1016] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.187907][ T9060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.200303][ T9060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.278950][ T9060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.308141][ T9081] team0: Port device team_slave_0 added [ 182.348015][ T1016] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.372434][ T9060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.381379][ T9060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.408140][ T9060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.453599][ T9081] team0: Port device team_slave_1 added [ 182.650770][ T9081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.659414][ T9081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.687570][ T9081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.719669][ T9060] hsr_slave_0: entered promiscuous mode [ 182.730813][ T9060] hsr_slave_1: entered promiscuous mode [ 182.748967][ T9060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.767013][ T9060] Cannot create hsr debugfs directory [ 182.780753][ T9081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.798697][ T9081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.858963][ T9081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.899752][ T9224] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 183.088730][ T9245] netlink: 11 bytes leftover after parsing attributes in process `syz.4.936'. [ 183.191407][ T9249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.196584][ T9081] hsr_slave_0: entered promiscuous mode [ 183.218729][ T9081] hsr_slave_1: entered promiscuous mode [ 183.232395][ T9081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.240757][ T9081] Cannot create hsr debugfs directory [ 183.295264][ T5850] Bluetooth: hci0: command tx timeout [ 183.367994][ T9258] netlink: 'syz.4.938': attribute type 10 has an invalid length. [ 183.385702][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.939'. [ 183.396231][ T9257] bridge_slave_1: default FDB implementation only supports local addresses [ 183.416825][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.434195][ T9258] bridge_slave_1: left allmulticast mode [ 183.444490][ T9258] bridge_slave_1: left promiscuous mode [ 183.445513][ T9252] nbd: socks must be embedded in a SOCK_ITEM attr [ 183.450491][ T9258] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.477228][ T9258] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 183.541323][ T1016] bridge_slave_1: left allmulticast mode [ 183.553612][ T1016] bridge_slave_1: left promiscuous mode [ 183.561168][ T1016] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.576810][ T1016] bridge_slave_0: left allmulticast mode [ 183.584667][ T1016] bridge_slave_0: left promiscuous mode [ 183.590485][ T1016] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.913591][ T1016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.927864][ T1016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.938643][ T1016] bond0 (unregistering): Released all slaves [ 184.102091][ T5850] Bluetooth: hci2: command tx timeout [ 184.313730][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 184.429890][ T9280] geneve2: entered promiscuous mode [ 184.436280][ T9280] geneve2: entered allmulticast mode [ 184.499732][ T9278] netlink: 'syz.1.945': attribute type 12 has an invalid length. [ 184.556265][ T1016] hsr_slave_0: left promiscuous mode [ 184.572483][ T1016] hsr_slave_1: left promiscuous mode [ 184.585536][ T1016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.607642][ T1016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.624903][ T1016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.633689][ T9292] netlink: 260 bytes leftover after parsing attributes in process `syz.1.949'. [ 184.642169][ T1016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.687614][ T1016] veth1_macvtap: left promiscuous mode [ 184.704500][ T1016] veth0_macvtap: left promiscuous mode [ 184.710224][ T1016] veth1_vlan: left promiscuous mode [ 184.721631][ T1016] veth0_vlan: left promiscuous mode [ 184.733311][ T9296] netlink: 256 bytes leftover after parsing attributes in process `syz.1.950'. [ 185.280630][ T1016] team0 (unregistering): Port device team_slave_1 removed [ 185.322271][ T1016] team0 (unregistering): Port device team_slave_0 removed [ 185.388540][ T5850] Bluetooth: hci0: command tx timeout [ 185.707628][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'. [ 185.883514][ T9315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 185.918607][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.955'. [ 185.956299][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.954'. [ 186.177730][ T5850] Bluetooth: hci2: command tx timeout [ 186.232777][ T9327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.957'. [ 186.241723][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'. [ 186.248673][ T9329] netlink: 140 bytes leftover after parsing attributes in process `syz.1.958'. [ 186.438008][ T9060] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 186.460678][ T9060] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 186.477855][ T9060] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 186.494910][ T9060] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 186.582043][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 186.590359][ T9081] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 186.610096][ T9081] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 186.634549][ T9081] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.669178][ T9081] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.820387][ T9060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.871430][ T9362] ------------[ cut here ]------------ [ 186.877342][ T9362] WARNING: CPU: 0 PID: 9362 at kernel/jump_label.c:282 static_key_dec_not_one+0x198/0x1d0 [ 186.878975][ T9060] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.887324][ T9362] Modules linked in: [ 186.887398][ T9362] CPU: 0 UID: 0 PID: 9362 Comm: syz.4.965 Not tainted 6.16.0-rc4-syzkaller-00114-g1e3b66e32601 #0 PREEMPT(full) [ 186.887424][ T9362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.887437][ T9362] RIP: 0010:static_key_dec_not_one+0x198/0x1d0 [ 186.887470][ T9362] Code: aa 10 48 3b 4c 24 60 75 45 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c6 f7 7b 09 cc e8 c0 53 ca ff eb b7 e8 b9 53 ca ff 90 <0f> 0b 90 b0 01 eb ad 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e0 fe ff [ 186.887486][ T9362] RSP: 0018:ffffc90002f072a0 EFLAGS: 00010283 [ 186.887505][ T9362] RAX: ffffffff81f60ae7 RBX: ffffffff99fd3080 RCX: 0000000000080000 [ 186.887520][ T9362] RDX: ffffc9000cddc000 RSI: 0000000000000218 RDI: 0000000000000219 [ 186.887534][ T9362] RBP: ffffc90002f07358 R08: ffffffff99fd3083 R09: 1ffffffff33fa610 [ 186.887549][ T9362] R10: dffffc0000000000 R11: fffffbfff33fa611 R12: ffffc90002f072e0 [ 186.887564][ T9362] R13: 1ffff920005e0e58 R14: dffffc0000000000 R15: 0000000000000000 [ 186.887579][ T9362] FS: 00007f6f9bc4b6c0(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000 [ 186.887596][ T9362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 186.887609][ T9362] CR2: 0000200000000000 CR3: 000000007e15e000 CR4: 00000000003526f0 [ 186.887628][ T9362] Call Trace: [ 187.021677][ T9362] [ 187.024826][ T9362] ? __pfx_static_key_dec_not_one+0x10/0x10 [ 187.030808][ T9362] __static_key_slow_dec_cpuslocked+0x19/0x110 [ 187.037101][ T9362] static_key_slow_dec+0x45/0x90 [ 187.039490][ T9081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.042155][ T9362] ovs_dp_change+0x3c1/0x570 [ 187.042191][ T9362] ovs_dp_cmd_set+0x1ec/0x3b0 [ 187.058296][ T9362] genl_family_rcv_msg_doit+0x212/0x300 [ 187.063970][ T9362] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.070126][ T9362] ? bpf_lsm_capable+0x9/0x20 [ 187.075079][ T9362] ? security_capable+0x7e/0x2e0 [ 187.080092][ T9362] genl_rcv_msg+0x60e/0x790 [ 187.084724][ T9362] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.089803][ T9362] ? ref_tracker_free+0x63a/0x7d0 [ 187.094918][ T9362] ? __pfx_ovs_dp_cmd_set+0x10/0x10 [ 187.100254][ T9362] ? __pfx_ref_tracker_free+0x10/0x10 [ 187.105750][ T9362] netlink_rcv_skb+0x205/0x470 [ 187.110564][ T9362] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.115717][ T9362] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.121087][ T9362] ? down_read+0x1ad/0x2e0 [ 187.125631][ T9362] genl_rcv+0x28/0x40 [ 187.129691][ T9362] netlink_unicast+0x759/0x8e0 [ 187.134577][ T9362] netlink_sendmsg+0x805/0xb30 [ 187.139412][ T9362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.144901][ T9362] ? aa_sock_msg_perm+0x94/0x160 [ 187.149912][ T9362] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.155289][ T9362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.160619][ T9362] __sock_sendmsg+0x219/0x270 [ 187.165394][ T9362] ____sys_sendmsg+0x505/0x830 [ 187.170205][ T9362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.175607][ T9362] ? import_iovec+0x74/0xa0 [ 187.180168][ T9362] ___sys_sendmsg+0x21f/0x2a0 [ 187.184945][ T9362] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.186999][ T968] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.190233][ T9362] ? __fget_files+0x2a/0x420 [ 187.197386][ T968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.201983][ T9362] ? __fget_files+0x3a0/0x420 [ 187.214016][ T9362] __x64_sys_sendmsg+0x19b/0x260 [ 187.219015][ T9362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.224635][ T9362] ? rcu_is_watching+0x15/0xb0 [ 187.229456][ T9362] ? do_syscall_64+0xbe/0x3b0 [ 187.234205][ T9362] do_syscall_64+0xfa/0x3b0 [ 187.238757][ T9362] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.244072][ T9362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.250177][ T9362] ? clear_bhb_loop+0x60/0xb0 [ 187.254940][ T9362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.260879][ T9362] RIP: 0033:0x7f6f9ad8e929 [ 187.265387][ T9362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.285206][ T9362] RSP: 002b:00007f6f9bc4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.293760][ T9362] RAX: ffffffffffffffda RBX: 00007f6f9afb5fa0 RCX: 00007f6f9ad8e929 [ 187.301810][ T9362] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 187.305102][ T968] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.309851][ T9362] RBP: 00007f6f9ae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 187.316975][ T968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.324964][ T9362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.340177][ T9362] R13: 0000000000000000 R14: 00007f6f9afb5fa0 R15: 00007fff5b0ce488 [ 187.348258][ T9362] [ 187.351319][ T9362] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 187.358632][ T9362] CPU: 0 UID: 0 PID: 9362 Comm: syz.4.965 Not tainted 6.16.0-rc4-syzkaller-00114-g1e3b66e32601 #0 PREEMPT(full) [ 187.370535][ T9362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.380606][ T9362] Call Trace: [ 187.383906][ T9362] [ 187.386863][ T9362] dump_stack_lvl+0x99/0x250 [ 187.391494][ T9362] ? __asan_memcpy+0x40/0x70 [ 187.396127][ T9362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.401366][ T9362] ? __pfx__printk+0x10/0x10 [ 187.406010][ T9362] panic+0x2db/0x790 [ 187.409940][ T9362] ? __pfx_panic+0x10/0x10 [ 187.414376][ T9362] ? show_trace_log_lvl+0x4fb/0x550 [ 187.419615][ T9362] __warn+0x31b/0x4b0 [ 187.423622][ T9362] ? static_key_dec_not_one+0x198/0x1d0 [ 187.429207][ T9362] ? static_key_dec_not_one+0x198/0x1d0 [ 187.434767][ T9362] report_bug+0x2be/0x4f0 [ 187.439121][ T9362] ? static_key_dec_not_one+0x198/0x1d0 [ 187.444687][ T9362] ? static_key_dec_not_one+0x198/0x1d0 [ 187.450249][ T9362] ? static_key_dec_not_one+0x19a/0x1d0 [ 187.455801][ T9362] handle_bug+0x84/0x160 [ 187.460053][ T9362] exc_invalid_op+0x1a/0x50 [ 187.464566][ T9362] asm_exc_invalid_op+0x1a/0x20 [ 187.469429][ T9362] RIP: 0010:static_key_dec_not_one+0x198/0x1d0 [ 187.475600][ T9362] Code: aa 10 48 3b 4c 24 60 75 45 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c6 f7 7b 09 cc e8 c0 53 ca ff eb b7 e8 b9 53 ca ff 90 <0f> 0b 90 b0 01 eb ad 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c e0 fe ff [ 187.495228][ T9362] RSP: 0018:ffffc90002f072a0 EFLAGS: 00010283 [ 187.501343][ T9362] RAX: ffffffff81f60ae7 RBX: ffffffff99fd3080 RCX: 0000000000080000 [ 187.509324][ T9362] RDX: ffffc9000cddc000 RSI: 0000000000000218 RDI: 0000000000000219 [ 187.517315][ T9362] RBP: ffffc90002f07358 R08: ffffffff99fd3083 R09: 1ffffffff33fa610 [ 187.525298][ T9362] R10: dffffc0000000000 R11: fffffbfff33fa611 R12: ffffc90002f072e0 [ 187.533276][ T9362] R13: 1ffff920005e0e58 R14: dffffc0000000000 R15: 0000000000000000 [ 187.541268][ T9362] ? static_key_dec_not_one+0x197/0x1d0 [ 187.546864][ T9362] ? __pfx_static_key_dec_not_one+0x10/0x10 [ 187.552795][ T9362] __static_key_slow_dec_cpuslocked+0x19/0x110 [ 187.558991][ T9362] static_key_slow_dec+0x45/0x90 [ 187.563958][ T9362] ovs_dp_change+0x3c1/0x570 [ 187.568678][ T9362] ovs_dp_cmd_set+0x1ec/0x3b0 [ 187.573403][ T9362] genl_family_rcv_msg_doit+0x212/0x300 [ 187.579084][ T9362] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 187.585199][ T9362] ? bpf_lsm_capable+0x9/0x20 [ 187.589896][ T9362] ? security_capable+0x7e/0x2e0 [ 187.594869][ T9362] genl_rcv_msg+0x60e/0x790 [ 187.599413][ T9362] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.604460][ T9362] ? ref_tracker_free+0x63a/0x7d0 [ 187.609498][ T9362] ? __pfx_ovs_dp_cmd_set+0x10/0x10 [ 187.614706][ T9362] ? __pfx_ref_tracker_free+0x10/0x10 [ 187.620122][ T9362] netlink_rcv_skb+0x205/0x470 [ 187.624908][ T9362] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.629956][ T9362] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.635268][ T9362] ? down_read+0x1ad/0x2e0 [ 187.639703][ T9362] genl_rcv+0x28/0x40 [ 187.643742][ T9362] netlink_unicast+0x759/0x8e0 [ 187.648533][ T9362] netlink_sendmsg+0x805/0xb30 [ 187.653375][ T9362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.658680][ T9362] ? aa_sock_msg_perm+0x94/0x160 [ 187.663643][ T9362] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.668939][ T9362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.674255][ T9362] __sock_sendmsg+0x219/0x270 [ 187.678952][ T9362] ____sys_sendmsg+0x505/0x830 [ 187.683762][ T9362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.689102][ T9362] ? import_iovec+0x74/0xa0 [ 187.693637][ T9362] ___sys_sendmsg+0x21f/0x2a0 [ 187.698340][ T9362] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.703590][ T9362] ? __fget_files+0x2a/0x420 [ 187.708199][ T9362] ? __fget_files+0x3a0/0x420 [ 187.712905][ T9362] __x64_sys_sendmsg+0x19b/0x260 [ 187.717870][ T9362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 187.723391][ T9362] ? rcu_is_watching+0x15/0xb0 [ 187.728175][ T9362] ? do_syscall_64+0xbe/0x3b0 [ 187.732866][ T9362] do_syscall_64+0xfa/0x3b0 [ 187.737383][ T9362] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.742602][ T9362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.748681][ T9362] ? clear_bhb_loop+0x60/0xb0 [ 187.753377][ T9362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.759292][ T9362] RIP: 0033:0x7f6f9ad8e929 [ 187.763727][ T9362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.783356][ T9362] RSP: 002b:00007f6f9bc4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.791791][ T9362] RAX: ffffffffffffffda RBX: 00007f6f9afb5fa0 RCX: 00007f6f9ad8e929 [ 187.799775][ T9362] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 187.807772][ T9362] RBP: 00007f6f9ae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 187.815774][ T9362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.823861][ T9362] R13: 0000000000000000 R14: 00007f6f9afb5fa0 R15: 00007fff5b0ce488 [ 187.831875][ T9362] [ 187.835299][ T9362] Kernel Offset: disabled [ 187.839697][ T9362] Rebooting in 86400 seconds..