last executing test programs: 2.286051214s ago: executing program 0 (id=571): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r2, 0x8b32, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000980)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000380)={{0x2, 0x4e22, @empty}, {0x1, @link_local}, 0xc, {0x2, 0x4e22, @local}, 'veth1_to_hsr\x00'}) socket(0x10, 0x80002, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1a0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private0, [0xff, 0xff000000], [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 'dummy0\x00', 'dvmrp0\x00', {}, {0xff}, 0x1, 0x0, 0x0, 0x21}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @ipv4={'\x00', '\xff\xff', @local}, [0xffffff00, 0xff, 0x0, 0xff000000], [0xff, 0xffffff00, 0xffffff00, 0xff000000], 'dvmrp1\x00', 'dummy0\x00', {}, {0xff}, 0x89, 0xc, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [0xff000000, 0xff, 0xff, 0xff], [0x0, 0xffffff00, 0x0, 0xff], 'syzkaller1\x00', 'gretap0\x00', {0xff}, {}, 0xff, 0x9, 0x5, 0xb}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) write$cgroup_devices(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="6120bde812bf2a006628d80ee6ab00"], 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000), 0x10) bind$can_raw(r5, &(0x7f0000000480)={0x1d, r10}, 0x10) unshare(0x2000500) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r11, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000000)=0x1000000, 0x4) 2.163669429s ago: executing program 2 (id=574): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000000)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x27, 0x80000, 0x7f7fffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000280)={0x8, 0x2, 0x200, 0x2, 0x4, 0x6, 0xbbf0, 0x5, r6}, 0x20) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000280)={0x8, 0x2, 0x200, 0x2, 0x4, 0x6, 0xbbf0, 0x5, r6}, 0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000bc0)={r6, 0x5, 0x2bb3, 0x5, 0x94b, 0x7fff}, &(0x7f00000000c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x79}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x79}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r7, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0xffff7a79, 0x4) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000140)={r6, 0x3}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000140)={r6, 0x3}, 0x8) 2.019830265s ago: executing program 2 (id=577): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000080", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x1}}}, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc8, r3, 0x10, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffeaae}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2e8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4004000}, 0xd407919860f19c9e) 1.991439623s ago: executing program 2 (id=578): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8, 0x0, {0x1e01000000000000}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 1.845402503s ago: executing program 3 (id=580): socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x700, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.755988481s ago: executing program 3 (id=581): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366742fe0280140006002001000000000000000000000000000208000a00", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x0) writev(r1, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000480)="672a65b775e19823d096145eb641c6bd22f498c8036aa132b4f24a6f7687f4026ed56f5113b91f226a6efc213d3ac896b488b9b640b32b10e6c7e378e7c44872b7c205719ca650349fe26b1891552822be62375a544be37c89c4db45371f9fe9028adb3d4c045d9a96f461b49b1772286397703f75fd5d2109f97d8d4d88592ef15a854b49d6", 0x86}, {&(0x7f0000000540)="fc618b0f9e49bd548b24922c3ef045b81fc94b1ac3fa804cf20ac6d4d2abdd0944b5a9100e186faad53f9c2da88f0a283860b5933ecde86205bab662fdb559715dda118083a15120cf931385179eed6007faedb1bd7d44366f7a7525cf2af7357ea741263907990dc7e0232ae28b2092da303e95a5c75cae1c7551fab995dba4d2873204805d50d490fab75b35b5c6cd8888b720b36f70380fbb2817e9766dff6ab21886e7a283a6eeb2c52f1916", 0xae}, {&(0x7f0000000240)}, {&(0x7f0000000640)="fc8af0cab351cc55952e7b63add7d74860b07389e7d9431fa9919cc324419cd927128dd62ab33cf53c8f62680bfeddc64e9081df62b29d", 0x37}, {&(0x7f0000000680)="705fe406108636b20d", 0x9}, {0x0, 0x3f}, {0x0}, {&(0x7f00000007c0)="fb651be2faf412f01c533ce4774c4ca2883842388083b451a5661d99f5f2b2ca7ed0", 0x22}, {&(0x7f0000000840)="e63dacfa0f9bda4fdf8c3bfccd56cb2574d569ebb380a5fa996390cd7e883d449ec34e47911418edac921fcb3ef56d4841add8a26478a5aa19dd4bfa09ba5ca2b4ab29288b93fd1bf79d1ad80263b3c98814c59e71696e4c8fe7e1123d56c0b61d23cfd63221431c8726d2a16ff7146410261a9df6eb815ac54479d5444fca7d33406ca5ac45bc30f0352db070137402f67becc4fdbc3dcb24775e98e2a266b639a6c6ae116dd964792625916ef9ee67299c22cd396cdea68ff527f1c77292d5946692146f8759d80608527f3fd9d8e8e807c5fde91e6cb7134aeffb3c24ae913cf62bccf6a33b1deab6986f72bbb46a91a01f2588", 0xf5}], 0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='cpu.idle\x00', 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c00028018000200080000000a0001"], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2100ecfffcffffff030004000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x8001, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x80}, &(0x7f00000001c0)=0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000004000000080000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000130000000000000000000000000000000000000000004000"], 0x50) r6 = socket(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) write(r9, &(0x7f00000006c0)="f6e2dc321d59a7d65e83affddeda4f64213b661819e9c8ac3b1fbdf8ad6cc8977d1463dde8bb783369e5943038a24bb17ff7f43c797f45520643e2d3814670ec0e412fd2872c1de1a1b30dd96362873fb8f8d519752d7eb877da977d47c883aad332de3382c8e7ea6e30a7c11efb6bcb5a6a79993c9ce61616c582d149bd06abf333dbd8f023b93c786cb1529bad709e7e9c12679154163bb3414e9ae585a2517e531254c4048241b5af5896abddd6cdf8c33b199d9efc6ca3b1dc04968613de9f5b0e29", 0xc4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000200)={0x0, @loopback, @loopback}, &(0x7f0000000400)=0xc) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b80000005400000026bd7007ffdbdf2507000000", @ANYRES32=r11, @ANYBLOB="20000100", @ANYRES32=r11, @ANYBLOB="00000100ff0200000000000000000000000000018edd000020000100", @ANYRES32=r10, @ANYBLOB="00000400fe8800000000000000000000000001010800000020000100", @ANYRES32=r10, @ANYBLOB="01010100ac14143a00000000000000000000000086dd000020000100", @ANYRES32=r11, @ANYBLOB="00000200ffffffff0000000000000000000000008edd000020000100", @ANYRES32=r12, @ANYBLOB="000101007f00000100000000000000000000000008000000"], 0xb8}}, 0x40008882) accept4(r7, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x80, 0x80800) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r13, 0x0, 0x483, 0x0, &(0x7f0000000080)) 1.505117323s ago: executing program 3 (id=584): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), 0x0}, 0x20) epoll_create(0xfffffff7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="500000000102030000000000000000000a0000003c0001800c00028044c40000000000002c0001801400030000000000000000000000ffffe000000214000400fc00"/80], 0x50}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x28, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e23, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "87ea1ff1728cd022cbcb2637d59cfb2d"}]}}}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffc}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb800007a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000440)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x40000) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r3) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000), 0xc) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, [0x84, 0x5, 0x538, 0x100000000, 0x101, 0xfffffffffffffff9, 0x7, 0x8, 0x7a226590, 0x9c5, 0x2, 0x4, 0x3, 0x3, 0x127b]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r9}, &(0x7f0000000240)=0x8) setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 1.346567537s ago: executing program 4 (id=585): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000000000007311be00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.207709287s ago: executing program 4 (id=586): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xb, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) socketpair(0x2, 0xa, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), &(0x7f00000000c0)=r4}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.059079393s ago: executing program 2 (id=588): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x200000000a) r1 = accept4$rose(r0, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r1}, 0x18) 1.001401218s ago: executing program 0 (id=589): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000480), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {}], 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 982.304203ms ago: executing program 4 (id=590): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="4000a2000e0002"], 0x30}}, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = getpid() sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) (async) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(r9, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) (async) sendmsg$nl_generic(r3, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)={0x130, 0x1c, 0x8, 0x70bd25, 0x25dfdbfb, {0x1}, [@typed={0x8, 0x70, 0x0, 0x0, @uid=r5}, @typed={0xc, 0x14d, 0x0, 0x0, @u64=0x3ff}, @typed={0x8, 0x112, 0x0, 0x0, @fd=r3}, @nested={0x30, 0x1, 0x0, 0x1, [@nested={0x4, 0xba}, @nested={0x4, 0x8a}, @nested={0x4, 0xa5}, @typed={0x8, 0x88, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x104, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x8a}, @typed={0x4, 0x4c, 0x0, 0x0, @binary}, @typed={0x8, 0xc3, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}}]}, @nested={0x50, 0x13f, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @pid=r7}, @typed={0x8, 0x36, 0x0, 0x0, @uid=r8}, @typed={0xc, 0x5a, 0x0, 0x0, @u64=0xff}, @nested={0x4, 0x136}, @typed={0x14, 0x91, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0x148, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x72}]}, @generic="434382ccfda0e5c7ffbc5aa49f3d9c829cf79f647cce8a84be1d18efa8ab6aa60fca19e2871e49bf04e685ef63189de046301b6c5952669834f2cb4f7c443268bf606f553ae5f4dbdbab9b8faf455d62d33b9e651979834eda38a70ba33ba58be621aa9bcb277ef1c4616f3996afbd82494545d2527f6ff0083024ab5833"]}, 0x130}, 0x1, 0x0, 0x0, 0x80}, 0x24000800) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xfffc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xe}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) 857.29593ms ago: executing program 0 (id=592): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x4020940d, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "db9050833c2d2ad4feea6acb75df3511e81791a7"}}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4808}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}]}, 0x48}}, 0x20000000) 856.499459ms ago: executing program 4 (id=593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x58}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x1e, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000004323010008000000185a000006000000000000000000000095a330007675938618270000", @ANYRES32, @ANYBLOB="0000000004000008852000000500000018280000", @ANYRES32=r2, @ANYBLOB="00000000ffff0000184b0000ffffffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000001240)=""/4096, 0x41000, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x6, 0x7ff, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r3, r4, 0x1], &(0x7f0000000cc0)=[{0x0, 0x2, 0x10, 0x2}, {0x3, 0x2, 0xa, 0x6}, {0x2, 0x5, 0xe, 0xa}, {0x4, 0x4, 0x4, 0x3}, {0x5, 0x1, 0x2, 0x6}, {0x3, 0x4, 0x6, 0xc}], 0x10, 0xf, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="ce6fefa2eef3e1e10e8c051c93beaf75c517", @ANYRES64, @ANYRES16, @ANYBLOB="0bc5909355"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00090000000000000000000201"], 0x2c}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$inet6_int(r7, 0x29, 0x38, &(0x7f0000000000)=0x7ffd, 0x4) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000070000000000000900020000000000000004000800410073697700140033"], 0x38}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r11 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt(r11, 0x7fff, 0x7f, &(0x7f0000000200)=""/17, &(0x7f0000000240)=0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000fcffffff811240000000000095000007000000005875a9ece9cbce6aa72531688e10e280c617540076677282237ee043ec0b5b4876511f7c0f2f084e9bdaa9668052b351e9de3364f68b095f20a7f20cec554f617e2408eec5a3ba567819ba76eb2b97f331e1fa24c337079e40a21d7eea5e65ce0154346810975310569da387beadd25ed0e2701ddc023d2a8821eb0d80a9a3fa8ee83a6ee2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000700000020000180060001000a00000014000400fc020000000000000000000000000005"], 0x34}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000210001000000000000000000ac1ee100000000002000000000000000403403f438bd9e2800000000000000000000000000000000020000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x0) socket$inet6(0xa, 0x2, 0x40) 784.370233ms ago: executing program 1 (id=594): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000e00)=ANY=[@ANYBLOB="ffffffffddffbbbbe952dc6f4e9bc761bbbbbbbb08004500002400000000002f907800000000e00000013a0088be001090780100000076b9f6f0", @ANYRES8=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYBLOB="e3e775c77557062ebe85e217e10947d3735c64eaa75f5aa6b1a47f8e37f96843795f2f0d35f0597298f193c6c1acc5ff544f3077e2185be5faa3f8dd48318d5606f45121f858df1af847fed186f210606d19800b7ac954f587d405d39c360082ab8e20ab68213e8c56f0818bdd56355e3ee1705f36dafccc5a3b374efd4ba637d12f8502dbcc164140a92aae4c34eb354035431269d39a14d936b9613b62c7b8ba26a09cb25c3afac976dba6c07530015f54e4e5bec142bc821a5d261901873a69e6ff01c19de4a8c2c329ac18f2806550451f000c46b4883a94007900b15d6861993189b4b420967088247f6cb324e0", @ANYRESOCT=r1, @ANYRES64, @ANYRESHEX=r1], 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008005140000000000500150000000000050005000a000000050001000700000005000400000000000900020073797a310000000010000300686173683a69702c6d6163005d210857be013e6bb09a984f1560ae35cc0cebc97a39696ae7a3858e4fd1aa8c2b56e6ea0ce9765cfc013ceccbb4140176cf018dc34fca75ec91b9da126ce99058f9655b02ac9d3fe68f9eb77eb9ae22c815f233f6f93d9edb432849a60e46275681a86f78861ce28c235135f601de51e4b6d05067d7d5fe80dda060bf12893e"], 0x5c}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000104010100000000001567ec00e2822777ab18c2e4d9227ab7000000"], 0x20}}, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=ANY=[@ANYRES8=r3], 0x114}], 0x1}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000000)={r10, 0xfffffffa}, 0x8) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x1) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 779.695106ms ago: executing program 2 (id=595): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES16=r0], 0x1c}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', r3, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}}}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) splice(r5, 0x0, r7, 0x0, 0x1100000000f336, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r8, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r9}, 0x38) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd2b, 0x0, {0xa, 0x10, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) (async) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000000000)=0x20, 0x4) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000202010800000000000000000a0000004400028006000340000000000c0002d905000100000000002c00018014000300fe88000000000000000000001a000001090004"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x3c, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) connect$bt_l2cap(r10, &(0x7f0000000240)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 673.241967ms ago: executing program 0 (id=596): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000009030000000000000000000001050000000200000002000000000000000000"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x0, 0xc, 0x9, 0x6, 0x1}], &(0x7f0000000200)='syzkaller\x00', 0x3edc, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[r1, r1, r1], &(0x7f0000000280)=[{0x0, 0x1, 0x4}, {0x3, 0x3, 0xb, 0xb}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@enum={0x0, 0x200001c4}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @func={0x2, 0x0, 0x0, 0xc, 0x4}, @func_proto]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='objagg_create\x00', r2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f00000004c0)=@alg, &(0x7f0000000540)=0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x5, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r4, &(0x7f0000000180), 0x100000000000003c) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x14, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 658.38919ms ago: executing program 1 (id=597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x5) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)={0x40, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x0) 623.694471ms ago: executing program 2 (id=598): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0x5, 0xfffffe97) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x11e}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 586.62881ms ago: executing program 3 (id=599): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/102, 0x66}, {&(0x7f0000002740)=""/4097, 0x1001}, {&(0x7f00000002c0)=""/177, 0xb1}, {&(0x7f0000000440)=""/242, 0xf2}], 0x4}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x10001}, {{&(0x7f0000000d40)=@nfc_llcp, 0x80, &(0x7f0000001040), 0x0, &(0x7f0000000c80)=""/138, 0x8a}, 0x80}], 0x4, 0x10000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='signal_deliver\x00', r5, 0x0, 0x2}, 0x66) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006301530000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x7, "bf32568d2fd41b329a5f8a92fc91d2ff"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000800}, 0x4000010) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000140)=0xfffffffffffffffe, 0x12) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x54}}, 0x4800) r10 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000300)=0x0) write$cgroup_pid(r10, &(0x7f00000003c0)=r11, 0x12) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x6c, '\x00', r7, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 517.323757ms ago: executing program 0 (id=600): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x9}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600800a00000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000040), 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x72a, 0x0, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r8, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x2400c040) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) 514.715241ms ago: executing program 1 (id=601): unshare(0x4000400) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bind$rds(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x18, 0x18, {0xfb98, @bearer=@l2={'ib', 0x3a, 'ip6gretap0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) 509.295153ms ago: executing program 4 (id=602): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xd1383000) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getaddr={0x14, 0x16, 0x2, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x850) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) 403.81258ms ago: executing program 4 (id=603): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$inet(0x2, 0x4, 0x2980) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (rerun: 64) syz_emit_ethernet(0x2b, &(0x7f00000003c0)={@local, @dev, @void, {@arp={0x806, @generic={0x6, 0x6004, 0x6, 0x4, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'EzVL', @multicast, "5c917b8e44"}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@dev}, {@multicast2}, {@local}]}]}}, @timestamp}}}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}}, 0x18}}, 0x0) (async, rerun: 64) connect$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x20) (rerun: 64) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x1) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) 340.908669ms ago: executing program 1 (id=604): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x80, 0x81}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2400c844) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xc6, 0x39, &(0x7f00000001c0)="c18bc90cc2b510977ba9adc48e5c1362be8e8bec64bfd637ac970265a3ad6ad2554f19c1fdd043492585ab02ca60df20b0ed87853b190cc079f855347850e6506da2d83ab17228b23389fa2beb03c120cd2598746caabefade44a4fb58997647d66bf0eba36ff5539b6ac2c8e118733782801301a63fe231f8a02be0922b7e974abdfdaf4f444c99943c12a21f3c9ce75c539c4d66a92c9a9a0e6deb7816d9e988e245834ca1510b9d3bd9de715c1522c6d62ddddbd878012eb20243fffb1a19d26c2e0e8efd", &(0x7f00000002c0)=""/57, 0xd, 0x0, 0x87, 0xe5, &(0x7f0000000300)="c9331d805e8fa6d9d4e0bb9c2bb7524eecf0a7047e4ab06f26c6db0a977cea6a28ee6b928c3ca2ccb85f49a0acf3523ba076c3a5b2633941c1f208113af67da58cce305cb2305f887f87a7262353ca720c1cbbbb865b4946ea986347bbaa29f08b6eacf4103336176ab87ac16d1d1162ba4eab9228e171e50d786a31f31f88c86e319b2e0db02c", &(0x7f00000003c0)="0040df3d56bf544bd06be103deed5b6f503c77d5305050407a5d45416f64dad8592f0e96de55c9ee3f60d6050f29738eba1ec9f11dd74355402227d4014e0b016b0a8ce4169ecdefd194efd5b20a69d37ad765d48f9d320ba79978a3036e7addfb81fcb87a6442e2f2828e9f3ba959020c58c0914ccdce0c58a181fe8834e1147d049d07978e04b1792bc09185eaf95008b8b4f4cb1b2e1a41fefadd309a98e4678bfdf50e5085eed7aea8d323764de446e1c22e471f4cb9db434e29e7b078b5f0a94065ca564c4d486cff38dd4fa90338651b1ea5885f9d319b96fa35f9c4b231fc13fd58", 0x1, 0x0, 0x1}, 0x50) getsockname$packet(r0, &(0x7f0000000580)={0x11, 0x0, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x110, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x8, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x30000008) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r2, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xd8, 0x5b}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008091}, 0x4) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000840)=0xd, &(0x7f0000000880)=0x4) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000900), r4) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x60, r7, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3c6c}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7ff}]}, 0x60}, 0x1, 0x0, 0x0, 0x24048101}, 0x8002040) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a40)={'wlan0\x00'}) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000a80), &(0x7f0000000ac0)=0x6) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x4c, r8, 0x301, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x8840) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000cc0), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f0000000e80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10c, r10, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0xfb7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x7fffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7f}, {0xc}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20004005}, 0x90) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000ec0)="8de1a56ad8c2a8370e6f4b3b81b388f7489110612e8a968a35dcb6c6c6bbba76466e9b525c21f3b3b7acd84abff47d1e3ce4c8b1359eb51dfc7fe408d6bea5a6712d152ba3aa3d3f1680", 0x4a) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r11, &(0x7f0000001040)={&(0x7f0000000f40), 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x28, r12, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x72}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={&(0x7f00000010c0)={0x160, r12, 0x306, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x28}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4a507af1832928d4a4330c053e008791319522c01c75ee71"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ab799b6adcb1ec29001ee526658852ebda38d3b7f56bcf1a"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "32644628ed8168d49ebc489656a472d94079b724ab82aa87"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3b57988eb111f8c0253733c2eb9762578e38ded910c59af"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f5db269c6ce986b15e5779f8c3dd5094b1987ee2b8835f5d"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6c620db824da0ce335a10afd2cc5e9c5dd9994227d430645"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000012c0)) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000001300)={0xfffffff7, 0x8}) 271.34819ms ago: executing program 3 (id=605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x3c}}, 0x22000000) 249.279489ms ago: executing program 0 (id=606): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x140}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000e80)="0d0ad7", 0x3, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r3, &(0x7f0000002a80)=""/4054, 0xfd6, 0x40010143, 0x0, 0x0) (async) recvfrom(r3, &(0x7f0000002a80)=""/4054, 0xfd6, 0x40010143, 0x0, 0x0) r4 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f00000000c0)=0x80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000800) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r6, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}]}, 0x34}}, 0x4000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r2, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r9, 0xf504, 0x0) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r9, 0xf504, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, r10, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x18, r10, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) 145.278764ms ago: executing program 1 (id=607): socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0xa00, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 102.513091ms ago: executing program 3 (id=608): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0xffffffffffffff6f, 0x22, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002780)=[{{&(0x7f0000000fc0)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x863c}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000001000)="c0fc56c561296a", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000014c0)="591a", 0x2}], 0x1}}], 0x2, 0x20040060) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@empty, @random="9e0ff4582ad2", @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@canfd={0xd, {{0x1, 0x0, 0x1}, 0x26, 0x3, 0x0, 0x0, "021241cbd6cdaffa98d3605d0650a4eba1b6edfc889ce4e0a76078762cce4659cb261fe8f218f944b9260098826f60a236ff52c929a8501039a49e22e97286c3"}}}}, &(0x7f0000000080)={0x1, 0x4, [0x61b, 0xfee, 0x74f, 0xfd5]}) 0s ago: executing program 1 (id=609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) accept4(r1, 0x0, 0x0, 0x80000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170900000000000000000100000005000720ef96eb000800090000000000060002000100000008000a41c0ffffff08001800e000000108001900e0000002"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf250900000008000300", @ANYRES32=r6, @ANYBLOB="0f00080006"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="fbde1f33d2965bd5416a8b58a7542a10b63e830000c03478ba7fe800e900000000", @ANYRES16=r5, @ANYBLOB="00022cbd7000ffdbdf250a00000008000300", @ANYRES32=r7, @ANYBLOB="0a000600ffffffffffff000004002800"], 0x2c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000000) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x22, 0x0, &(0x7f0000000340)=0x9e) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 75.051151][ T5818] cgroup: Unknown subsys name 'net' [ 75.177039][ T5818] cgroup: Unknown subsys name 'cpuset' [ 75.186581][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.789317][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.667511][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.676214][ T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.683850][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.691739][ T56] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.700871][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.709480][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.717549][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.725624][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.747341][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.763405][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.958691][ T5140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.967139][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.975621][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.983840][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.991688][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.000813][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.008852][ T56] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.010746][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.024230][ T56] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.029036][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.031674][ T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.040721][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.054032][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.061771][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.062131][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.239521][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 81.465936][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 81.522973][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.530617][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.538648][ T5828] bridge_slave_0: entered allmulticast mode [ 81.546189][ T5828] bridge_slave_0: entered promiscuous mode [ 81.556209][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.563382][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.570580][ T5828] bridge_slave_1: entered allmulticast mode [ 81.578090][ T5828] bridge_slave_1: entered promiscuous mode [ 81.751294][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.777822][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.785503][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.793295][ T5832] bridge_slave_0: entered allmulticast mode [ 81.800396][ T5832] bridge_slave_0: entered promiscuous mode [ 81.834511][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.868280][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.876021][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.885781][ T5832] bridge_slave_1: entered allmulticast mode [ 81.893342][ T5832] bridge_slave_1: entered promiscuous mode [ 81.951505][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 82.040138][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.052574][ T5828] team0: Port device team_slave_0 added [ 82.065538][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 82.087830][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.099158][ T5828] team0: Port device team_slave_1 added [ 82.105901][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 82.214530][ T5832] team0: Port device team_slave_0 added [ 82.266864][ T5832] team0: Port device team_slave_1 added [ 82.285074][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.292098][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.319020][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.359794][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.366878][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.393058][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.452416][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.459721][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.486552][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.499933][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.507499][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.533948][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.634670][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.641899][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.649340][ T5839] bridge_slave_0: entered allmulticast mode [ 82.656881][ T5839] bridge_slave_0: entered promiscuous mode [ 82.665284][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.672414][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.680246][ T5839] bridge_slave_1: entered allmulticast mode [ 82.688055][ T5839] bridge_slave_1: entered promiscuous mode [ 82.700457][ T5828] hsr_slave_0: entered promiscuous mode [ 82.707173][ T5828] hsr_slave_1: entered promiscuous mode [ 82.728842][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.736121][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.743854][ T5838] bridge_slave_0: entered allmulticast mode [ 82.751099][ T5838] bridge_slave_0: entered promiscuous mode [ 82.761009][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.768292][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.776175][ T5838] bridge_slave_1: entered allmulticast mode [ 82.783670][ T5140] Bluetooth: hci0: command tx timeout [ 82.783720][ T5838] bridge_slave_1: entered promiscuous mode [ 82.789331][ T5140] Bluetooth: hci1: command tx timeout [ 82.822098][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.829487][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.836881][ T5837] bridge_slave_0: entered allmulticast mode [ 82.844707][ T5837] bridge_slave_0: entered promiscuous mode [ 82.905785][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.916555][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.924098][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.931442][ T5837] bridge_slave_1: entered allmulticast mode [ 82.939446][ T5837] bridge_slave_1: entered promiscuous mode [ 82.963143][ T5832] hsr_slave_0: entered promiscuous mode [ 82.969491][ T5832] hsr_slave_1: entered promiscuous mode [ 82.978313][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.986061][ T5832] Cannot create hsr debugfs directory [ 83.006197][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.018746][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.030115][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.055436][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.100214][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.113105][ T5833] Bluetooth: hci2: command tx timeout [ 83.119023][ T5140] Bluetooth: hci3: command tx timeout [ 83.186849][ T5838] team0: Port device team_slave_0 added [ 83.193078][ T5140] Bluetooth: hci4: command tx timeout [ 83.197078][ T5839] team0: Port device team_slave_0 added [ 83.234091][ T5838] team0: Port device team_slave_1 added [ 83.242198][ T5839] team0: Port device team_slave_1 added [ 83.264936][ T5837] team0: Port device team_slave_0 added [ 83.323640][ T5837] team0: Port device team_slave_1 added [ 83.396117][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.403149][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.429804][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.441480][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.449345][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.475348][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.506674][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.513688][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.539659][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.558205][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.565623][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.592376][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.611880][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.618953][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.645175][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.661900][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.669249][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.695197][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.885845][ T5837] hsr_slave_0: entered promiscuous mode [ 83.892261][ T5837] hsr_slave_1: entered promiscuous mode [ 83.899165][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.907417][ T5837] Cannot create hsr debugfs directory [ 83.918355][ T5838] hsr_slave_0: entered promiscuous mode [ 83.925314][ T5838] hsr_slave_1: entered promiscuous mode [ 83.931550][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.939194][ T5838] Cannot create hsr debugfs directory [ 83.964303][ T5839] hsr_slave_0: entered promiscuous mode [ 83.970614][ T5839] hsr_slave_1: entered promiscuous mode [ 83.977077][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.984859][ T5839] Cannot create hsr debugfs directory [ 84.165334][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.216235][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.226689][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.261155][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.428191][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.479651][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.491892][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.507216][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.560696][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.584063][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.615359][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.628806][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.718688][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.752148][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.778474][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.823115][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.863434][ T5833] Bluetooth: hci0: command tx timeout [ 84.872644][ T5140] Bluetooth: hci1: command tx timeout [ 84.878212][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.895773][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.926403][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.941203][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.961987][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.026372][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.054683][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.086234][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.093539][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.105520][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.112815][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.191887][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.192941][ T5833] Bluetooth: hci2: command tx timeout [ 85.204588][ T5140] Bluetooth: hci3: command tx timeout [ 85.245666][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.263349][ T5833] Bluetooth: hci4: command tx timeout [ 85.289945][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.297191][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.310658][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.330410][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.361774][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.368994][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.384862][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.392386][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.446644][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.457083][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.464260][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.506865][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.530406][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.537619][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.583886][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.592233][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.599393][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.622133][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.629313][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.659809][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.694159][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.709779][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.716946][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.965229][ T5828] veth0_vlan: entered promiscuous mode [ 86.047312][ T5828] veth1_vlan: entered promiscuous mode [ 86.149431][ T5828] veth0_macvtap: entered promiscuous mode [ 86.187919][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.231134][ T5828] veth1_macvtap: entered promiscuous mode [ 86.314194][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.331966][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.391312][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.401762][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.428695][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.438693][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.447888][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.457112][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.508215][ T5832] veth0_vlan: entered promiscuous mode [ 86.532128][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.579452][ T5832] veth1_vlan: entered promiscuous mode [ 86.637327][ T5839] veth0_vlan: entered promiscuous mode [ 86.685959][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.701620][ T5839] veth1_vlan: entered promiscuous mode [ 86.723658][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.762880][ T5832] veth0_macvtap: entered promiscuous mode [ 86.800629][ T5832] veth1_macvtap: entered promiscuous mode [ 86.881804][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.884317][ T5837] veth0_vlan: entered promiscuous mode [ 86.901765][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.929048][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.945692][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.952816][ T5833] Bluetooth: hci1: command tx timeout [ 86.960948][ T5833] Bluetooth: hci0: command tx timeout [ 86.967216][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.009871][ T5837] veth1_vlan: entered promiscuous mode [ 87.033671][ T5839] veth0_macvtap: entered promiscuous mode [ 87.084021][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.105942][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.124833][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.176446][ T5839] veth1_macvtap: entered promiscuous mode [ 87.202530][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.249240][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.264442][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.273685][ T5833] Bluetooth: hci2: command tx timeout [ 87.274095][ T5140] Bluetooth: hci3: command tx timeout [ 87.287245][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.311773][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.343443][ T5140] Bluetooth: hci4: command tx timeout [ 87.350626][ T5837] veth0_macvtap: entered promiscuous mode [ 87.376839][ T5837] veth1_macvtap: entered promiscuous mode [ 87.430639][ T5838] veth0_vlan: entered promiscuous mode [ 87.460829][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.481548][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.504218][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.531352][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.547266][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.599897][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.614321][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.626877][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.637471][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.647322][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.657946][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.669868][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.681930][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.695035][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.704990][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.716072][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.727307][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.740372][ T5838] veth1_vlan: entered promiscuous mode [ 87.759809][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.770561][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.780857][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.791532][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.801384][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.811852][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.823955][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.836263][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.846003][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.854982][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.863911][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.889173][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.900061][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.911448][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.924708][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.030665][ T5891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.040572][ T5891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.536116][ T5838] veth0_macvtap: entered promiscuous mode [ 88.667516][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.677819][ T5838] veth1_macvtap: entered promiscuous mode [ 88.688801][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.708930][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.721695][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.804747][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.826270][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.838741][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.851187][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.861144][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.874191][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.884144][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.894614][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.906725][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.956510][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.967644][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.989254][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.024081][ T5140] Bluetooth: hci0: command tx timeout [ 89.024217][ T5833] Bluetooth: hci1: command tx timeout [ 89.035187][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.067795][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.083040][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.093903][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.105518][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.115755][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.126390][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.137978][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.156712][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.165688][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.174936][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.183963][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.209788][ T5891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.225064][ T5891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.305740][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.339690][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.349104][ T5833] Bluetooth: hci3: command tx timeout [ 89.349118][ T5140] Bluetooth: hci2: command tx timeout [ 89.423040][ T5833] Bluetooth: hci4: command tx timeout [ 89.649855][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.680437][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.701682][ T5949] netlink: 'syz.0.11': attribute type 39 has an invalid length. [ 89.883388][ T5964] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 89.909363][ T5961] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.015679][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.055373][ T5967] netlink: 'syz.2.15': attribute type 11 has an invalid length. [ 90.055982][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.084242][ T5967] netlink: 'syz.2.15': attribute type 4 has an invalid length. [ 90.092046][ T5967] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15'. [ 90.114549][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 90.517841][ T5983] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.164518][ T6008] netlink: 'syz.3.28': attribute type 1 has an invalid length. [ 91.191548][ T6008] netlink: 'syz.3.28': attribute type 1 has an invalid length. [ 91.206986][ T6004] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26'. [ 91.212168][ T6008] netlink: 'syz.3.28': attribute type 1 has an invalid length. [ 91.254579][ T6008] netlink: 'syz.3.28': attribute type 2 has an invalid length. [ 91.262200][ T6008] netlink: 76 bytes leftover after parsing attributes in process `syz.3.28'. [ 91.380013][ T6012] netlink: 'syz.2.30': attribute type 1 has an invalid length. [ 91.453000][ T6016] syz.4.32 uses obsolete (PF_INET,SOCK_PACKET) [ 91.466532][ T6010] vlan2: entered allmulticast mode [ 91.471704][ T6010] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 91.739677][ T6033] trusted_key: syz.0.36 sent an empty control message without MSG_MORE. [ 91.839472][ T9] cfg80211: failed to load regulatory.db [ 91.937981][ T6039] netlink: 60 bytes leftover after parsing attributes in process `syz.4.39'. [ 91.957319][ T6039] unsupported nlmsg_type 40 [ 91.957971][ T6042] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.084517][ T6046] Cannot find del_set index 0 as target [ 92.099852][ T6037] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 92.122073][ T6037] macsec1: entered allmulticast mode [ 92.128823][ T6037] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 92.152452][ T6037] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 92.169919][ T6037] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 92.504969][ T6070] Zero length message leads to an empty skb [ 92.561270][ T6073] Bluetooth: MGMT ver 1.23 [ 92.577845][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.48'. [ 92.613172][ T6071] netlink: 'syz.2.48': attribute type 4 has an invalid length. [ 92.805237][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 92.820123][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 93.339960][ T6107] netlink: 'syz.3.59': attribute type 2 has an invalid length. [ 93.366319][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 93.442324][ T6107] netlink: 'syz.3.59': attribute type 1 has an invalid length. [ 93.451160][ T6107] netlink: 80 bytes leftover after parsing attributes in process `syz.3.59'. [ 93.462269][ T6110] bridge_slave_1: mtu less than device minimum [ 94.635368][ T6156] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 94.800694][ T6165] netlink: 'syz.3.82': attribute type 7 has an invalid length. [ 95.324162][ T6176] x_tables: duplicate underflow at hook 2 [ 95.331077][ T6176] __nla_validate_parse: 4 callbacks suppressed [ 95.331094][ T6176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.87'. [ 95.377866][ T6179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.89'. [ 95.411533][ T6179] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 95.716732][ T6193] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 95.919297][ T6204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.204735][ T6212] sctp: [Deprecated]: syz.4.98 (pid 6212) Use of int in maxseg socket option. [ 96.204735][ T6212] Use struct sctp_assoc_value instead [ 96.222414][ T6211] bridge_slave_1: mtu less than device minimum [ 96.633597][ T6235] netlink: 'syz.1.104': attribute type 2 has an invalid length. [ 96.647887][ T6235] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 96.686350][ T6238] netlink: 'syz.1.104': attribute type 2 has an invalid length. [ 96.699696][ T6238] netlink: 'syz.1.104': attribute type 1 has an invalid length. [ 97.162330][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 97.282830][ T6261] hsr_slave_1 (unregistering): left promiscuous mode [ 97.709473][ T6279] openvswitch: netlink: Flow key attr not present in new flow. [ 97.838267][ T6283] netlink: 165 bytes leftover after parsing attributes in process `syz.0.121'. [ 97.887813][ T6283] netlink: 236 bytes leftover after parsing attributes in process `syz.0.121'. [ 98.356732][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 98.542545][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.133'. [ 98.572823][ T6316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.133'. [ 98.686110][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 98.836556][ T6328] lo speed is unknown, defaulting to 1000 [ 98.844652][ T6328] lo speed is unknown, defaulting to 1000 [ 98.871494][ T6328] lo speed is unknown, defaulting to 1000 [ 98.909569][ T6328] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.938135][ T6328] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 98.964307][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 98.975175][ T6337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.034323][ T6334] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.043356][ T6334] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.052088][ T6334] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.062207][ T6334] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.100777][ T6328] lo speed is unknown, defaulting to 1000 [ 99.151811][ T6328] lo speed is unknown, defaulting to 1000 [ 99.152400][ T6343] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.203120][ T6328] lo speed is unknown, defaulting to 1000 [ 99.210782][ T6328] lo speed is unknown, defaulting to 1000 [ 99.253049][ T6328] lo speed is unknown, defaulting to 1000 [ 99.812436][ T6374] FAULT_INJECTION: forcing a failure. [ 99.812436][ T6374] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.918457][ T6374] CPU: 0 UID: 0 PID: 6374 Comm: syz.0.150 Not tainted 6.15.0-rc3-syzkaller-00110-gf04dd30f1bef #0 PREEMPT(full) [ 99.918487][ T6374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 99.918503][ T6374] Call Trace: [ 99.918521][ T6374] [ 99.918530][ T6374] dump_stack_lvl+0x189/0x250 [ 99.918569][ T6374] ? __lock_acquire+0xaac/0xd20 [ 99.918600][ T6374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.918640][ T6374] ? __pfx__printk+0x10/0x10 [ 99.918659][ T6374] ? __might_fault+0xb0/0x130 [ 99.918695][ T6374] should_fail_ex+0x414/0x560 [ 99.918731][ T6374] _copy_from_user+0x2d/0xb0 [ 99.918756][ T6374] do_arpt_set_ctl+0x6c3/0xf10 [ 99.918781][ T6374] ? __mutex_trylock_common+0x153/0x260 [ 99.918804][ T6374] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 99.918828][ T6374] ? rcu_is_watching+0x15/0xb0 [ 99.918874][ T6374] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 99.918897][ T6374] ? __pfx___mutex_lock+0x10/0x10 [ 99.918916][ T6374] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 99.918933][ T6374] ? smc_setsockopt+0x181/0xab0 [ 99.918965][ T6374] ? __pfx___mutex_lock+0x10/0x10 [ 99.918985][ T6374] ? rcu_read_lock_any_held+0xb3/0x120 [ 99.919011][ T6374] nf_setsockopt+0x26c/0x290 [ 99.919031][ T6374] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 99.919062][ T6374] smc_setsockopt+0x22f/0xab0 [ 99.919109][ T6374] ? __pfx_smc_setsockopt+0x10/0x10 [ 99.919141][ T6374] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 99.919160][ T6374] ? __pfx_smc_setsockopt+0x10/0x10 [ 99.919188][ T6374] do_sock_setsockopt+0x257/0x3e0 [ 99.919210][ T6374] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 99.919225][ T6374] ? __fget_files+0x2a/0x420 [ 99.919252][ T6374] ? __fget_files+0x3a0/0x420 [ 99.919273][ T6374] ? __fget_files+0x2a/0x420 [ 99.919303][ T6374] __x64_sys_setsockopt+0x18b/0x220 [ 99.919327][ T6374] do_syscall_64+0xf6/0x210 [ 99.919346][ T6374] ? clear_bhb_loop+0x45/0xa0 [ 99.919368][ T6374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.919384][ T6374] RIP: 0033:0x7ff6cb78e969 [ 99.919406][ T6374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.919421][ T6374] RSP: 002b:00007ff6cc51f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 99.919440][ T6374] RAX: ffffffffffffffda RBX: 00007ff6cb9b6080 RCX: 00007ff6cb78e969 [ 99.919453][ T6374] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000005 [ 99.919463][ T6374] RBP: 00007ff6cc51f090 R08: 00000000000003f8 R09: 0000000000000000 [ 99.919473][ T6374] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 99.919483][ T6374] R13: 0000000000000000 R14: 00007ff6cb9b6080 R15: 00007ffdf5f60028 [ 99.919518][ T6374] [ 100.276429][ T6383] bridge0: port 3(gretap0) entered blocking state [ 100.323668][ T6383] bridge0: port 3(gretap0) entered disabled state [ 100.361037][ T6383] gretap0: entered allmulticast mode [ 100.377945][ T6383] gretap0: entered promiscuous mode [ 100.384704][ T6383] bridge0: port 3(gretap0) entered blocking state [ 100.391438][ T6383] bridge0: port 3(gretap0) entered forwarding state [ 100.683683][ T6394] __nla_validate_parse: 4 callbacks suppressed [ 100.683700][ T6394] netlink: 48 bytes leftover after parsing attributes in process `syz.2.157'. [ 101.069798][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 101.127646][ T6412] netlink: 'syz.1.163': attribute type 4 has an invalid length. [ 101.262416][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 101.304561][ T6419] bridge_slave_1: left allmulticast mode [ 101.312279][ T6419] bridge_slave_1: left promiscuous mode [ 101.346447][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.383894][ T6419] bridge_slave_0: left allmulticast mode [ 101.399527][ T6419] bridge_slave_0: left promiscuous mode [ 101.416099][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.466489][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 101.644687][ T6442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.172'. [ 101.734571][ T6428] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.935732][ T6451] bridge_slave_1: mtu less than device minimum [ 102.210452][ T6465] xt_TCPMSS: Only works on TCP SYN packets [ 102.382135][ T6474] netlink: 88 bytes leftover after parsing attributes in process `syz.3.184'. [ 102.467067][ T6481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.187'. [ 102.507896][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 102.528347][ T6486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.188'. [ 102.680192][ T6485] team0 (unregistering): Port device team_slave_0 removed [ 102.731413][ T6485] team0 (unregistering): Port device team_slave_1 removed [ 102.781173][ T6496] bridge_slave_1: mtu less than device minimum [ 102.980154][ T6507] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 103.308627][ T6525] netlink: 44 bytes leftover after parsing attributes in process `syz.0.199'. [ 103.468817][ T6536] warning: `syz.2.203' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.581815][ T6538] bridge_slave_1: mtu less than device minimum [ 103.772081][ T6551] netlink: 'syz.0.207': attribute type 1 has an invalid length. [ 103.794483][ T6551] netlink: 'syz.0.207': attribute type 1 has an invalid length. [ 103.898517][ T6557] netlink: 'syz.2.210': attribute type 1 has an invalid length. [ 103.947799][ T6557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.994603][ T6557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.022389][ T6557] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 104.036443][ T6557] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 104.048429][ T6565] FAULT_INJECTION: forcing a failure. [ 104.048429][ T6565] name failslab, interval 1, probability 0, space 0, times 1 [ 104.100333][ T6565] CPU: 1 UID: 0 PID: 6565 Comm: syz.1.211 Not tainted 6.15.0-rc3-syzkaller-00110-gf04dd30f1bef #0 PREEMPT(full) [ 104.100361][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 104.100373][ T6565] Call Trace: [ 104.100380][ T6565] [ 104.100388][ T6565] dump_stack_lvl+0x189/0x250 [ 104.100425][ T6565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.100452][ T6565] ? __pfx__printk+0x10/0x10 [ 104.100477][ T6565] ? __pfx___might_resched+0x10/0x10 [ 104.100505][ T6565] ? fs_reclaim_acquire+0x7d/0x100 [ 104.100536][ T6565] should_fail_ex+0x414/0x560 [ 104.100571][ T6565] should_failslab+0xa8/0x100 [ 104.100596][ T6565] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 104.100622][ T6565] ? __get_vm_area_node+0x131/0x2d0 [ 104.100650][ T6565] __get_vm_area_node+0x131/0x2d0 [ 104.100679][ T6565] __vmalloc_node_range_noprof+0x2f1/0x12c0 [ 104.100706][ T6565] ? __do_replace+0xb4/0xaa0 [ 104.100725][ T6565] ? stack_depot_save_flags+0x40/0x910 [ 104.100762][ T6565] ? translate_table+0x17f0/0x1f90 [ 104.100782][ T6565] ? translate_table+0x17f0/0x1f90 [ 104.100801][ T6565] ? xt_check_table_hooks+0x12c/0x7d0 [ 104.100834][ T6565] ? translate_table+0x1b4d/0x1f90 [ 104.100855][ T6565] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.100892][ T6565] ? __do_replace+0xb4/0xaa0 [ 104.100910][ T6565] vzalloc_noprof+0x79/0x90 [ 104.100937][ T6565] ? __do_replace+0xb4/0xaa0 [ 104.100955][ T6565] __do_replace+0xb4/0xaa0 [ 104.100977][ T6565] ? __pfx_translate_table+0x10/0x10 [ 104.101002][ T6565] ? __pfx___do_replace+0x10/0x10 [ 104.101030][ T6565] ? _copy_from_user+0x94/0xb0 [ 104.101060][ T6565] do_arpt_set_ctl+0xa2a/0xf10 [ 104.101083][ T6565] ? __mutex_trylock_common+0x153/0x260 [ 104.101106][ T6565] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 104.101129][ T6565] ? rcu_is_watching+0x15/0xb0 [ 104.101204][ T6565] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 104.101232][ T6565] ? __pfx___mutex_lock+0x10/0x10 [ 104.101269][ T6565] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.101288][ T6565] ? smc_setsockopt+0x181/0xab0 [ 104.101321][ T6565] ? __pfx___mutex_lock+0x10/0x10 [ 104.101342][ T6565] ? rcu_read_lock_any_held+0xb3/0x120 [ 104.101369][ T6565] nf_setsockopt+0x26c/0x290 [ 104.101399][ T6565] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 104.101431][ T6565] smc_setsockopt+0x22f/0xab0 [ 104.101468][ T6565] ? __pfx_smc_setsockopt+0x10/0x10 [ 104.101503][ T6565] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 104.101524][ T6565] ? __pfx_smc_setsockopt+0x10/0x10 [ 104.101556][ T6565] do_sock_setsockopt+0x257/0x3e0 [ 104.101580][ T6565] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 104.101598][ T6565] ? __fget_files+0x2a/0x420 [ 104.101628][ T6565] ? __fget_files+0x3a0/0x420 [ 104.101651][ T6565] ? __fget_files+0x2a/0x420 [ 104.101685][ T6565] __x64_sys_setsockopt+0x18b/0x220 [ 104.101713][ T6565] do_syscall_64+0xf6/0x210 [ 104.101734][ T6565] ? clear_bhb_loop+0x45/0xa0 [ 104.101759][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.101779][ T6565] RIP: 0033:0x7f416138e969 [ 104.101796][ T6565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.101812][ T6565] RSP: 002b:00007f41622b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 104.101833][ T6565] RAX: ffffffffffffffda RBX: 00007f41615b6080 RCX: 00007f416138e969 [ 104.101848][ T6565] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000005 [ 104.101859][ T6565] RBP: 00007f41622b2090 R08: 00000000000003f8 R09: 0000000000000000 [ 104.101871][ T6565] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 104.101883][ T6565] R13: 0000000000000000 R14: 00007f41615b6080 R15: 00007ffdc579ecc8 [ 104.101915][ T6565] [ 104.213203][ T6565] syz.1.211: vmalloc error: size 2224, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 104.679119][ T6574] geneve2: entered promiscuous mode [ 104.713089][ T6565] ,cpuset=/,mems_allowed=0-1 [ 104.738175][ T6574] geneve2: entered allmulticast mode [ 104.749999][ T6565] CPU: 1 UID: 0 PID: 6565 Comm: syz.1.211 Not tainted 6.15.0-rc3-syzkaller-00110-gf04dd30f1bef #0 PREEMPT(full) [ 104.750040][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 104.750057][ T6565] Call Trace: [ 104.750070][ T6565] [ 104.750083][ T6565] dump_stack_lvl+0x189/0x250 [ 104.750137][ T6565] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.750176][ T6565] ? __pfx__printk+0x10/0x10 [ 104.750196][ T6565] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 104.750228][ T6565] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 104.750260][ T6565] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 104.750295][ T6565] warn_alloc+0x214/0x310 [ 104.750328][ T6565] ? __pfx_warn_alloc+0x10/0x10 [ 104.750376][ T6565] ? __get_vm_area_node+0x27f/0x2d0 [ 104.750406][ T6565] __vmalloc_node_range_noprof+0x316/0x12c0 [ 104.750431][ T6565] ? stack_depot_save_flags+0x40/0x910 [ 104.750467][ T6565] ? translate_table+0x17f0/0x1f90 [ 104.750487][ T6565] ? translate_table+0x17f0/0x1f90 [ 104.750504][ T6565] ? xt_check_table_hooks+0x12c/0x7d0 [ 104.750536][ T6565] ? translate_table+0x1b4d/0x1f90 [ 104.750556][ T6565] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.750591][ T6565] ? __do_replace+0xb4/0xaa0 [ 104.750608][ T6565] vzalloc_noprof+0x79/0x90 [ 104.750632][ T6565] ? __do_replace+0xb4/0xaa0 [ 104.750649][ T6565] __do_replace+0xb4/0xaa0 [ 104.750669][ T6565] ? __pfx_translate_table+0x10/0x10 [ 104.750693][ T6565] ? __pfx___do_replace+0x10/0x10 [ 104.750720][ T6565] ? _copy_from_user+0x94/0xb0 [ 104.750747][ T6565] do_arpt_set_ctl+0xa2a/0xf10 [ 104.750770][ T6565] ? __mutex_trylock_common+0x153/0x260 [ 104.750791][ T6565] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 104.750813][ T6565] ? rcu_is_watching+0x15/0xb0 [ 104.750856][ T6565] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 104.750878][ T6565] ? __pfx___mutex_lock+0x10/0x10 [ 104.750896][ T6565] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.750912][ T6565] ? smc_setsockopt+0x181/0xab0 [ 104.750941][ T6565] ? __pfx___mutex_lock+0x10/0x10 [ 104.750960][ T6565] ? rcu_read_lock_any_held+0xb3/0x120 [ 104.750985][ T6565] nf_setsockopt+0x26c/0x290 [ 104.751004][ T6565] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 104.751032][ T6565] smc_setsockopt+0x22f/0xab0 [ 104.751065][ T6565] ? __pfx_smc_setsockopt+0x10/0x10 [ 104.751097][ T6565] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 104.751117][ T6565] ? __pfx_smc_setsockopt+0x10/0x10 [ 104.751145][ T6565] do_sock_setsockopt+0x257/0x3e0 [ 104.751173][ T6565] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 104.751189][ T6565] ? __fget_files+0x2a/0x420 [ 104.751216][ T6565] ? __fget_files+0x3a0/0x420 [ 104.751237][ T6565] ? __fget_files+0x2a/0x420 [ 104.751267][ T6565] __x64_sys_setsockopt+0x18b/0x220 [ 104.751292][ T6565] do_syscall_64+0xf6/0x210 [ 104.751311][ T6565] ? clear_bhb_loop+0x45/0xa0 [ 104.751333][ T6565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.751351][ T6565] RIP: 0033:0x7f416138e969 [ 104.751367][ T6565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.751382][ T6565] RSP: 002b:00007f41622b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 104.751401][ T6565] RAX: ffffffffffffffda RBX: 00007f41615b6080 RCX: 00007f416138e969 [ 104.751414][ T6565] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000005 [ 104.751424][ T6565] RBP: 00007f41622b2090 R08: 00000000000003f8 R09: 0000000000000000 [ 104.751434][ T6565] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 104.751446][ T6565] R13: 0000000000000000 R14: 00007f41615b6080 R15: 00007ffdc579ecc8 [ 104.751474][ T6565] [ 104.751492][ T6565] Mem-Info: [ 105.119969][ T6565] active_anon:10718 inactive_anon:0 isolated_anon:0 [ 105.119969][ T6565] active_file:1195 inactive_file:38313 isolated_file:0 [ 105.119969][ T6565] unevictable:768 dirty:474 writeback:0 [ 105.119969][ T6565] slab_reclaimable:9637 slab_unreclaimable:97917 [ 105.119969][ T6565] mapped:28464 shmem:7256 pagetables:874 [ 105.119969][ T6565] sec_pagetables:0 bounce:0 [ 105.119969][ T6565] kernel_misc_reclaimable:0 [ 105.119969][ T6565] free:1349128 free_pcp:450 free_cma:0 [ 105.264078][ T6565] Node 0 active_anon:47672kB inactive_anon:0kB active_file:4780kB inactive_file:153176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114056kB dirty:1896kB writeback:0kB shmem:32488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10812kB pagetables:3496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 105.340728][ T6565] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 105.377020][ T6565] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.419135][ T6565] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 105.429141][ T6565] Node 0 DMA32 free:1465072kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:50364kB inactive_anon:0kB active_file:4780kB inactive_file:153076kB unevictable:1536kB writepending:1896kB present:3129332kB managed:2564200kB mlocked:0kB bounce:0kB free_pcp:1592kB local_pcp:1132kB free_cma:0kB [ 105.528681][ T6565] lowmem_reserve[]: 0 0 0 0 0 [ 105.548692][ T6565] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.642653][ T6565] lowmem_reserve[]: 0 0 0 0 0 [ 105.647508][ T6565] Node 1 Normal free:3908664kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 105.710142][ T6604] IPVS: set_ctl: invalid protocol: 92 172.20.20.22:20001 [ 105.772122][ T6565] lowmem_reserve[]: 0 0 0 0 0 [ 105.834203][ T6565] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 105.882695][ T6565] Node 0 DMA32: 64*4kB (UME) 480*8kB (UME) 409*16kB (UME) 65*32kB (UME) 32*64kB (UME) 21*128kB (UME) 10*256kB (UME) 3*512kB (M) 5*1024kB (UM) 4*2048kB (M) 353*4096kB (M) = 1480752kB [ 105.928197][ T6565] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 105.984966][ T6611] __nla_validate_parse: 3 callbacks suppressed [ 105.984985][ T6611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.227'. [ 106.012444][ T6613] netlink: 'syz.4.226': attribute type 5 has an invalid length. [ 106.021468][ T6565] Node 1 Normal: 242*4kB (UME) 74*8kB (UME) 44*16kB (UME) 209*32kB (UME) 117*64kB (UME) 32*128kB (UME) 16*256kB (UM) 6*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 946*4096kB (UME) = 3908664kB [ 106.071014][ T6606] xt_CT: No such helper "netbios-ns" [ 106.089702][ T6565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.102971][ T6565] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.152766][ T6565] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.201185][ T6565] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.212088][ T6565] 44585 total pagecache pages [ 106.232703][ T6565] 0 pages in swap cache [ 106.236899][ T6565] Free swap = 124996kB [ 106.261439][ T6565] Total swap = 124996kB [ 106.271784][ T6565] 2097051 pages RAM [ 106.305545][ T6565] 0 pages HighMem/MovableOnly [ 106.310264][ T6565] 424343 pages reserved [ 106.342713][ T6565] 0 pages cma reserved [ 106.848734][ T6652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 107.302629][ T6678] netlink: 14 bytes leftover after parsing attributes in process `syz.3.232'. [ 107.707715][ T6690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.239'. [ 107.776514][ T6692] netlink: 16 bytes leftover after parsing attributes in process `syz.2.238'. [ 108.014550][ T6703] gtp0: entered promiscuous mode [ 108.117525][ T6708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 108.161481][ T6713] delete_channel: no stack [ 108.198161][ T6710] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 108.219589][ C1] Illegal XDP return value 16128 on prog (id 52) dev veth1, expect packet loss! [ 108.234711][ T6711] netlink: 108 bytes leftover after parsing attributes in process `syz.0.247'. [ 108.246869][ T6711] netlink: 108 bytes leftover after parsing attributes in process `syz.0.247'. [ 108.258855][ T6711] netlink: 84 bytes leftover after parsing attributes in process `syz.0.247'. [ 108.273599][ T6710] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.284467][ T6710] netlink: 'syz.3.246': attribute type 4 has an invalid length. [ 108.319158][ T6714] netlink: 'syz.2.248': attribute type 12 has an invalid length. [ 108.332704][ T6714] netlink: 132 bytes leftover after parsing attributes in process `syz.2.248'. [ 108.589262][ T6730] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 109.889004][ T6763] netlink: 'syz.4.263': attribute type 1 has an invalid length. [ 109.960345][ T6767] ip6t_REJECT: ECHOREPLY is not supported [ 110.102975][ T6773] ip6t_REJECT: ECHOREPLY is not supported [ 111.097681][ T6816] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20001 [ 111.614358][ T6836] netlink: 'syz.1.285': attribute type 18 has an invalid length. [ 111.630875][ T6838] sctp: [Deprecated]: syz.3.286 (pid 6838) Use of int in max_burst socket option deprecated. [ 111.630875][ T6838] Use struct sctp_assoc_value instead [ 111.805859][ T6845] bridge_slave_1: mtu less than device minimum [ 112.250991][ T6868] __nla_validate_parse: 4 callbacks suppressed [ 112.251010][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.295'. [ 112.362955][ T6868] Dead loop on virtual device ip6_vti0, fix it urgently! [ 112.372275][ T6868] Dead loop on virtual device ip6_vti0, fix it urgently! [ 112.394649][ T6868] Dead loop on virtual device ip6_vti0, fix it urgently! [ 112.402347][ T6868] Dead loop on virtual device ip6_vti0, fix it urgently! [ 112.418150][ T6868] Dead loop on virtual device ip6_vti0, fix it urgently! [ 112.426671][ T6868] Dead loop on virtual device ip6_vti0, fix it urgently! [ 112.470005][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 112.502522][ T6875] netlink: 'syz.4.297': attribute type 5 has an invalid length. [ 112.552877][ T6875] netlink: 20 bytes leftover after parsing attributes in process `syz.4.297'. [ 112.589068][ T6875] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 112.646678][ T6875] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 112.696659][ T6875] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 112.722815][ T6875] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 112.762830][ T6875] geneve2: entered promiscuous mode [ 112.781636][ T6875] geneve2: entered allmulticast mode [ 112.822148][ T6878] netlink: 72 bytes leftover after parsing attributes in process `syz.0.298'. [ 112.884790][ T6880] IPVS: Error connecting to the multicast addr [ 113.200935][ T6897] bridge_slave_1: mtu less than device minimum [ 113.421012][ T6908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.305'. [ 113.439717][ T6908] netlink: 152 bytes leftover after parsing attributes in process `syz.4.305'. [ 113.469260][ T6908] netlink: 152 bytes leftover after parsing attributes in process `syz.4.305'. [ 113.491698][ T6908] openvswitch: netlink: Flow key attr not present in new flow. [ 113.526731][ T6912] netlink: 144 bytes leftover after parsing attributes in process `syz.3.308'. [ 113.870622][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 113.911266][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.314'. [ 114.111503][ T6939] xt_CT: No such helper "pptp" [ 114.271361][ T6950] netlink: 'syz.1.319': attribute type 10 has an invalid length. [ 114.290175][ T6950] team0: Cannot enslave team device to itself [ 114.304897][ T6950] netlink: 'syz.1.319': attribute type 2 has an invalid length. [ 114.489901][ T54] IPVS: starting estimator thread 0... [ 114.672909][ T6960] IPVS: using max 32 ests per chain, 76800 per kthread [ 114.761138][ T6969] Cannot find set identified by id 0 to match [ 115.611300][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.698747][ T7033] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 115.773377][ T7037] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 115.786771][ T54] IPVS: starting estimator thread 0... [ 115.883186][ T7039] IPVS: using max 27 ests per chain, 64800 per kthread [ 116.082106][ T7061] nft_compat: unsupported protocol 1 [ 116.123312][ T7065] syz.0.349 uses old SIOCAX25GETINFO [ 116.466629][ T7070] raw_sendmsg: syz.2.352 forgot to set AF_INET. Fix it! [ 116.502185][ T7070] netlink: 'syz.2.352': attribute type 1 has an invalid length. [ 117.069468][ T7101] netlink: 'syz.1.361': attribute type 1 has an invalid length. [ 117.124332][ T7102] netlink: zone id is out of range [ 117.197403][ T7101] bond1 (unregistering): Released all slaves [ 117.712242][ T7132] __nla_validate_parse: 4 callbacks suppressed [ 117.712262][ T7132] netlink: 20 bytes leftover after parsing attributes in process `syz.2.369'. [ 117.813688][ T7134] xt_TCPMSS: Only works on TCP SYN packets [ 117.819692][ T7134] xt_TCPMSS: Only works on TCP SYN packets [ 117.844532][ T7134] xt_TCPMSS: Only works on TCP SYN packets [ 118.121657][ T7143] netlink: 'syz.2.373': attribute type 10 has an invalid length. [ 118.134522][ T7143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.165642][ T7143] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 118.668655][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 118.698922][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 118.754229][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'. [ 118.808260][ T7173] bridge2: entered promiscuous mode [ 118.824997][ T7173] bridge2: entered allmulticast mode [ 119.034735][ T7171] batadv0: entered promiscuous mode [ 119.058629][ T7171] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 119.067605][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'. [ 119.085158][ T7191] netlink: 88 bytes leftover after parsing attributes in process `syz.0.384'. [ 119.086178][ T7171] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 119.106272][ T7187] C: renamed from lo (while UP) [ 119.120474][ T7187] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 119.390467][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 119.414499][ T7203] ÿ: renamed from dummy0 (while UP) [ 119.439325][ T7207] netlink: 88 bytes leftover after parsing attributes in process `syz.2.388'. [ 119.721446][ T7219] netlink: 112 bytes leftover after parsing attributes in process `syz.1.393'. [ 119.790460][ T7221] netlink: 56 bytes leftover after parsing attributes in process `syz.2.394'. [ 120.399433][ T7256] xt_policy: neither incoming nor outgoing policy selected [ 121.362535][ T7307] netlink: 'syz.1.422': attribute type 32 has an invalid length. [ 121.462430][ T7313] openvswitch: netlink: Missing valid actions attribute. [ 121.469715][ T7313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.703498][ T7322] tipc: Enabling of bearer rejected, failed to enable media [ 132.786434][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.796229][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.132250][ T7343] __nla_validate_parse: 64 callbacks suppressed [ 165.132268][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.434'. [ 165.147982][ T7348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.279001][ T7356] netlink: 516 bytes leftover after parsing attributes in process `syz.4.436'. [ 165.476941][ T7361] netlink: 'syz.1.437': attribute type 7 has an invalid length. [ 165.488387][ T7361] netlink: 'syz.1.437': attribute type 7 has an invalid length. [ 165.595611][ T7372] netlink: 'syz.4.442': attribute type 1 has an invalid length. [ 165.606908][ T7372] netlink: 224 bytes leftover after parsing attributes in process `syz.4.442'. [ 165.630129][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.442'. [ 165.658771][ T7373] openvswitch: netlink: Missing key (keys=40, expected=80) [ 165.681331][ T7373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.438'. [ 166.259268][ T7400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.448'. [ 166.281037][ T7400] netlink: 36 bytes leftover after parsing attributes in process `syz.2.448'. [ 166.494200][ T7406] bond2: entered promiscuous mode [ 166.499294][ T7406] bond2: entered allmulticast mode [ 166.563256][ T7415] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20004 [ 166.572228][ T7406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.804325][ T7428] xt_l2tp: unknown flags: 18 [ 166.828171][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 166.936845][ T7433] x_tables: ip_tables: osf match: only valid for protocol 6 [ 167.005858][ T7440] ksmbd: Unknown IPC event: 3, ignore. [ 167.049244][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.461'. [ 167.299726][ T7460] netlink: 6 bytes leftover after parsing attributes in process `syz.0.468'. [ 167.326732][ T7460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.348594][ T7463] veth0_to_batadv: entered promiscuous mode [ 167.358499][ T7463] veth0_to_batadv: entered allmulticast mode [ 167.373086][ T7465] netlink: 'syz.2.469': attribute type 11 has an invalid length. [ 167.596945][ T7471] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 167.616106][ T7484] tc_dump_action: action bad kind [ 168.750812][ T7541] syzkaller1: entered promiscuous mode [ 168.760917][ T7541] syzkaller1: entered allmulticast mode [ 168.782466][ T7545] netlink: 'syz.4.492': attribute type 4 has an invalid length. [ 168.815299][ T7541] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 169.224500][ T7564] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 169.249322][ T7562] bridge_slave_1: mtu less than device minimum [ 169.283577][ T7566] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 169.373977][ T7566] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 169.948265][ T7602] netlink: 'syz.0.508': attribute type 1 has an invalid length. [ 170.138563][ T7607] bridge_slave_1: mtu less than device minimum [ 170.214505][ T7618] __nla_validate_parse: 17 callbacks suppressed [ 170.214522][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 170.237825][ T7618] netlink: 21 bytes leftover after parsing attributes in process `syz.2.516'. [ 170.287231][ T7623] sctp: [Deprecated]: syz.0.517 (pid 7623) Use of int in max_burst socket option. [ 170.287231][ T7623] Use struct sctp_assoc_value instead [ 170.308013][ T7625] netlink: 44 bytes leftover after parsing attributes in process `syz.4.518'. [ 170.329775][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.518'. [ 170.344205][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz.4.518'. [ 170.363753][ T7625] nbd: must specify at least one socket [ 170.380319][ T7625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.518'. [ 170.794239][ T7616] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 171.041571][ T7648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.527'. [ 171.611545][ T7689] netlink: 16 bytes leftover after parsing attributes in process `syz.0.539'. [ 171.650582][ T7689] netlink: 256 bytes leftover after parsing attributes in process `syz.0.539'. [ 171.683675][ T7689] netlink: 'syz.0.539': attribute type 9 has an invalid length. [ 171.694477][ T7686] xt_CT: No such helper "pptp" [ 171.817139][ T7702] openvswitch: netlink: Multiple metadata blocks provided [ 171.976698][ T7708] x_tables: duplicate underflow at hook 2 [ 172.337555][ T7719] netlink: 248 bytes leftover after parsing attributes in process `syz.0.549'. [ 172.516054][ T7732] sctp: [Deprecated]: syz.3.551 (pid 7732) Use of int in max_burst socket option. [ 172.516054][ T7732] Use struct sctp_assoc_value instead [ 174.033469][ T7776] syz_tun: entered allmulticast mode [ 174.101560][ T7773] syz_tun: left allmulticast mode [ 174.210135][ T7785] netlink: 'syz.2.564': attribute type 10 has an invalid length. [ 174.234920][ T7785] vlan0: entered allmulticast mode [ 174.240099][ T7785] veth0_vlan: entered allmulticast mode [ 174.310693][ T7785] team0: Port device vlan0 added [ 174.352765][ T7788] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.361247][ T7788] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.399932][ T7796] Bluetooth: MGMT ver 1.23 [ 174.415961][ T7794] bridge_slave_1: mtu less than device minimum [ 174.612976][ T7802] x_tables: duplicate underflow at hook 2 [ 175.211106][ T7802] syz_tun: entered allmulticast mode [ 175.314474][ T7842] bridge_slave_1: mtu less than device minimum [ 175.337970][ T7844] __nla_validate_parse: 13 callbacks suppressed [ 175.337988][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 175.401205][ T7845] sctp: [Deprecated]: syz.3.584 (pid 7845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.401205][ T7845] Use struct sctp_sack_info instead [ 175.415018][ T7801] syz_tun: left allmulticast mode [ 175.584299][ T7815] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 175.899566][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 176.055761][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.594'. [ 176.308895][ T7890] openvswitch: netlink: Message has 4 unknown bytes. [ 176.782824][ T6662] wlan1: Trigger new scan to find an IBSS to join [ 176.807353][ T6662] ------------[ cut here ]------------ [ 176.812993][ T6662] WARNING: CPU: 1 PID: 6662 at net/mac80211/scan.c:1213 ieee80211_request_ibss_scan+0x82e/0x8b0 [ 176.823620][ T6662] Modules linked in: [ 176.827777][ T6662] CPU: 1 UID: 0 PID: 6662 Comm: kworker/u8:9 Not tainted 6.15.0-rc3-syzkaller-00110-gf04dd30f1bef #0 PREEMPT(full) [ 176.840399][ T6662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 176.851086][ T6662] Workqueue: events_unbound cfg80211_wiphy_work [ 176.859358][ T6662] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0 [ 176.866773][ T6662] Code: e8 87 c5 f7 f6 eb 05 e8 80 c5 f7 f6 b8 ea ff ff ff e9 fb f8 ff ff e8 71 c5 f7 f6 90 0f 0b 90 e9 bb f8 ff ff e8 63 c5 f7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 ed 7e 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 176.887569][ T6662] RSP: 0018:ffffc9001a8178a0 EFLAGS: 00010293 [ 176.894330][ T6662] RAX: ffffffff8ac7f81d RBX: 0000000000000000 RCX: ffff88803351da00 [ 176.902323][ T6662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.910416][ T6662] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000004 [ 176.918565][ T6662] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff8880284ab268 [ 176.926646][ T6662] R13: ffff8880284a8e80 R14: dffffc0000000000 R15: 0000000000000c80 [ 176.934670][ T6662] FS: 0000000000000000(0000) GS:ffff8881261cf000(0000) knlGS:0000000000000000 [ 176.944059][ T6662] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.950685][ T6662] CR2: 00007f2798971f98 CR3: 000000005f858000 CR4: 00000000003526f0 [ 176.958794][ T6662] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.966881][ T6662] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.974933][ T6662] Call Trace: [ 176.978241][ T6662] [ 176.981266][ T6662] ieee80211_ibss_work+0xde7/0x1060 [ 176.987133][ T6662] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 176.992958][ T6662] ? ieee80211_iface_work+0xf39/0xfe0 [ 176.998377][ T6662] ? rcu_is_watching+0x15/0xb0 [ 177.003288][ T6662] cfg80211_wiphy_work+0x2dc/0x460 [ 177.008447][ T6662] ? process_scheduled_works+0x9ec/0x17a0 [ 177.014260][ T6662] process_scheduled_works+0xadb/0x17a0 [ 177.019867][ T6662] ? __pfx_process_scheduled_works+0x10/0x10 [ 177.025985][ T6662] worker_thread+0x8a0/0xda0 [ 177.030629][ T6662] kthread+0x70e/0x8a0 [ 177.031300][ T7925] netlink: 'syz.1.609': attribute type 8 has an invalid length. [ 177.034737][ T6662] ? __pfx_worker_thread+0x10/0x10 [ 177.034759][ T6662] ? __pfx_kthread+0x10/0x10 [ 177.034782][ T6662] ? __pfx_kthread+0x10/0x10 [ 177.034801][ T6662] ? _raw_spin_unlock_irq+0x23/0x50 [ 177.034827][ T6662] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.034855][ T6662] ? __pfx_kthread+0x10/0x10 [ 177.071986][ T6662] ret_from_fork+0x4b/0x80 [ 177.076482][ T6662] ? __pfx_kthread+0x10/0x10 [ 177.081107][ T6662] ret_from_fork_asm+0x1a/0x30 [ 177.086448][ T6662] [ 177.089511][ T6662] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 177.096811][ T6662] CPU: 1 UID: 0 PID: 6662 Comm: kworker/u8:9 Not tainted 6.15.0-rc3-syzkaller-00110-gf04dd30f1bef #0 PREEMPT(full) [ 177.108979][ T6662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 177.119053][ T6662] Workqueue: events_unbound cfg80211_wiphy_work [ 177.125354][ T6662] Call Trace: [ 177.128640][ T6662] [ 177.131582][ T6662] dump_stack_lvl+0x99/0x250 [ 177.136198][ T6662] ? __asan_memcpy+0x40/0x70 [ 177.140822][ T6662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.146035][ T6662] ? __pfx__printk+0x10/0x10 [ 177.150630][ T6662] panic+0x2db/0x790 [ 177.154537][ T6662] ? __pfx_panic+0x10/0x10 [ 177.158958][ T6662] ? show_trace_log_lvl+0x4fb/0x550 [ 177.164164][ T6662] ? ret_from_fork_asm+0x1a/0x30 [ 177.169112][ T6662] __warn+0x31b/0x4b0 [ 177.173117][ T6662] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 177.179102][ T6662] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 177.185096][ T6662] report_bug+0x2be/0x4f0 [ 177.189437][ T6662] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 177.195425][ T6662] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 177.201407][ T6662] ? ieee80211_request_ibss_scan+0x830/0x8b0 [ 177.207405][ T6662] handle_bug+0x84/0x160 [ 177.211654][ T6662] exc_invalid_op+0x1a/0x50 [ 177.216178][ T6662] asm_exc_invalid_op+0x1a/0x20 [ 177.221032][ T6662] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0 [ 177.227631][ T6662] Code: e8 87 c5 f7 f6 eb 05 e8 80 c5 f7 f6 b8 ea ff ff ff e9 fb f8 ff ff e8 71 c5 f7 f6 90 0f 0b 90 e9 bb f8 ff ff e8 63 c5 f7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 ed 7e 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 177.247237][ T6662] RSP: 0018:ffffc9001a8178a0 EFLAGS: 00010293 [ 177.253310][ T6662] RAX: ffffffff8ac7f81d RBX: 0000000000000000 RCX: ffff88803351da00 [ 177.261286][ T6662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 177.269248][ T6662] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000004 [ 177.277215][ T6662] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: ffff8880284ab268 [ 177.285185][ T6662] R13: ffff8880284a8e80 R14: dffffc0000000000 R15: 0000000000000c80 [ 177.293163][ T6662] ? ieee80211_request_ibss_scan+0x82d/0x8b0 [ 177.299170][ T6662] ieee80211_ibss_work+0xde7/0x1060 [ 177.304379][ T6662] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 177.310034][ T6662] ? ieee80211_iface_work+0xf39/0xfe0 [ 177.315405][ T6662] ? rcu_is_watching+0x15/0xb0 [ 177.320176][ T6662] cfg80211_wiphy_work+0x2dc/0x460 [ 177.325320][ T6662] ? process_scheduled_works+0x9ec/0x17a0 [ 177.331038][ T6662] process_scheduled_works+0xadb/0x17a0 [ 177.336614][ T6662] ? __pfx_process_scheduled_works+0x10/0x10 [ 177.342614][ T6662] worker_thread+0x8a0/0xda0 [ 177.347217][ T6662] kthread+0x70e/0x8a0 [ 177.351283][ T6662] ? __pfx_worker_thread+0x10/0x10 [ 177.356392][ T6662] ? __pfx_kthread+0x10/0x10 [ 177.360987][ T6662] ? __pfx_kthread+0x10/0x10 [ 177.365573][ T6662] ? _raw_spin_unlock_irq+0x23/0x50 [ 177.370776][ T6662] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.375993][ T6662] ? __pfx_kthread+0x10/0x10 [ 177.380583][ T6662] ret_from_fork+0x4b/0x80 [ 177.385000][ T6662] ? __pfx_kthread+0x10/0x10 [ 177.389606][ T6662] ret_from_fork_asm+0x1a/0x30 [ 177.394378][ T6662] [ 177.397707][ T6662] Kernel Offset: disabled [ 177.402033][ T6662] Rebooting in 86400 seconds..