last executing test programs: 2.264088609s ago: executing program 1 (id=1356): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0xffffdffc) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) accept(r1, &(0x7f0000000080)=@sco={0x1f, @none}, &(0x7f0000000100)=0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b7000000000095f1ff0000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.204610587s ago: executing program 1 (id=1358): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) accept$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100000000000000000000a38000000080a"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket(0x25, 0x800, 0x3) getsockopt$packet_int(r3, 0x107, 0x10, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0xfffffffa, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x218, 0x238, 0x238, 0x218, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @dev, [], [], 'team_slave_0\x00', 'veth1\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@eui64={{0x28}}, @common=@frag={{0x30}, {[], 0x0, 0x0, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @private1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xe8, r4, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x2, 0x4, 0x80000001, 0x0, 0x1]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xde, 0x40, 0x7, 0x4, 0x10001]}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000001}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xef}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x66f}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x21}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4bd}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2b}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) 2.061893178s ago: executing program 1 (id=1361): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @fd=r0}, @generic="9462172c"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x34}}, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='veth1_to_bridge\x00') 1.939150601s ago: executing program 2 (id=1362): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0xaa6bcb446f309d09}, 0x4000080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a1180015000600140000000012080004", 0x2b}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="14010000330001000000000000000000030100800c"], 0x114}], 0x1, 0x0, 0x0, 0x4084}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000500)={'sit0\x00', r1, 0x7, 0x8140, 0x70c1, 0x40, {{0x1d, 0x4, 0x1, 0x4, 0x74, 0x64, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x64010102, {[@lsrr={0x83, 0xb, 0x1f, [@multicast1, @loopback]}, @end, @cipso={0x86, 0x2e, 0x2, [{0x4, 0x6, "9e730bb0"}, {0x7, 0x3, "c9"}, {0x6, 0xe, "609f157d4aad96cb548c442a"}, {0x7, 0x11, "19890fcac98c6777dc224effaddb43"}]}, @lsrr={0x83, 0x17, 0x11, [@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @noop, @rr={0x7, 0xb, 0x9d, [@rand_addr=0x64010100, @broadcast]}]}}}}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x6}]}, @var={0xc, 0x0, 0x0, 0xe, 0x1}, @const={0x3, 0x0, 0x0, 0xa, 0x5}, @float={0xf, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000640)=""/135, 0x58, 0x87, 0x1, 0x10, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x19, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @func, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x4c, 0x0, 0x0, 0x41000, 0x10, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000480)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xd, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff041980"], 0x528}}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4080000000000006110800000000000a60000000000000095000000000000002708bf5d6df57e4036e97f802a67fdc2ee21b92ca9f507707dd754479a8dcf28b7ce595ab47e7a5396f780ee222b42395b5664f0c435febc86e01cd2cf1190b290320885b36f24493454294552dfaa3a17a7462612e5f8980fd439b09ee96e4c0ca8581e36cc8acfdfdd08b7856e8cf498d2d7ff6abd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.832668527s ago: executing program 1 (id=1363): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r1}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) socket(0x1e, 0x4, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a01040000000000000000020000000700020073797a32000000000900010073797a300000000028000480240001800b0001006f626a72656600001400029f08000540000000030800034000000009140000001100010000000000000000000000000a71f898b43f208536a1957aee29c9fde74579000e4ebf9d"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x30, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0x4, 0x0, 0x1, [{0x3}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) 1.747885206s ago: executing program 1 (id=1365): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/204, 0xcc}, {&(0x7f00000008c0)=""/252, 0xfc}, {&(0x7f00000006c0)=""/137, 0x89}], 0x4, &(0x7f00000002c0)=""/90, 0x5a}, 0x2001) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x58, r2, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x58}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, 0x0, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000040)={0x10, {{0xa, 0x4e22, 0x5, @mcast2, 0x101}}}, 0x88) syz_emit_ethernet(0x3e, &(0x7f00000024c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e10100", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) sendmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="26656ca92d3f", 0x6}], 0x1, 0x0, 0x0, 0x800}, 0x20004819) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000440)=@ringbuf={{}, {}, {}, [@jmp, @cb_func, @ringbuf_output]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(r0, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001040)='p', 0x1}], 0x1}, 0x40081) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x801) 1.722316815s ago: executing program 2 (id=1367): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) (async) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x300, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x80000000}}}}}, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) (async) setsockopt$RXRPC_SECURITY_KEYRING(r7, 0x110, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r9, 0x0, 0x1, &(0x7f00000001c0), 0x4) (async) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r8, @ANYBLOB="014000000000000034001680300001802c000c801400010087000000940700e9770000be030000000000004dfc00005978775a44535572ef5b964832832fb5522eba9a8dc19d34807f14c4b151f67076bf3e3d9f602e5a3d2ab91e13165a7e202615361a6e2d27457c0c9f5d6587ac63241ab67e41f34ac4a0bc397febd313847f4000d41d40c207a976b3979a3111ffc30391068ff1"], 0x54}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000003b0007010000000000000000037c0000040000000c0001800652c397"], 0x24}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x890) 1.584879434s ago: executing program 2 (id=1368): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000600)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000002c0)={0xb0000000}) 1.381036325s ago: executing program 4 (id=1372): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kvm_set_spte_hva\x00', r2, 0x0, 0x5}, 0x18) close(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) 1.05102518s ago: executing program 0 (id=1377): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x29, 0x400, 0x70bd28, 0x25dfdbfd, {0x16}, [@typed={0x8, 0x142, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2c801}, 0x4040) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) syz_emit_ethernet(0x86, &(0x7f0000000480)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x4, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0xff, 0x0, '\x00', [@ra={0x5, 0x2f}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) connect$unix(r1, &(0x7f0000000300)=@abs={0x2c0d16bba0de80c, 0x0, 0x4e20}, 0x6e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendto(r0, &(0x7f0000000100)="557ec4e51184afd743b4e77f27ffe86109f5df42438d64a6cadfea2eaab3e92bb4508031d964af3c0a31062e224f84082fdc9487294eb2e09252066209e2cf7cc4fe7d32be0fb3331e9b045f8deeffa46b257385e3ee7fd33fd0815c8ccf0f32015e", 0x62, 0x10, &(0x7f0000000180)=@generic={0x22, "d05a326a368046c979e529acbe64dd3b56ec1c625f80a3d5b8763056f30061a971099713af892adad956af1fc4602686818607209832181432c8bdade65849e34e79ade6c7d6dbe9a22501803626db9cd1bbdb34a27dff8de4a90246b871bfe32296143050f47421bd8d05a835a7c551f9eec867c01240229c564602b28c"}, 0x80) 876.881023ms ago: executing program 0 (id=1378): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffdbdf250a0000000000000800000000080018004e214e24"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x80002, 0x0) (async, rerun: 64) r3 = socket$inet(0x2, 0x3, 0x4) (rerun: 64) r4 = socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4, 0x10}}]}, 0x30}}, 0x0) (async, rerun: 64) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x4000840) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff020070000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10], 0x3c}}, 0x0) (async) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000240)=0x1, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 856.10295ms ago: executing program 0 (id=1379): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_vlan\x00'}, 0x0, 0xe0, 0x100, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@statistic={{0x38}, {0x3}}]}, @unspec=@TRACE={0x20, 'TRACE\x00', 0xe}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000040)=""/167, 0xa7, 0x0, &(0x7f0000000140)=""/2, 0x2}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000500)='hsr0\x00', 0x10) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) 802.222328ms ago: executing program 1 (id=1380): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) clock_gettime(0x0, &(0x7f0000000100)) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f00000001c0)={0x77359400}, 0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @remote, 0x3}, 0x1c) sendto$inet6(r3, &(0x7f0000000280)="14", 0x1, 0x44810, 0x0, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xfff8}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FIOCLEX(r0, 0x5451) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x2}) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000bc0)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x110, 0x220, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @broadcast}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @remote}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @remote, @remote}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) 744.84316ms ago: executing program 0 (id=1381): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000006f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x18) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000600)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x0, 0xc1}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x87030000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffd28, 0x2, [@TCA_PIE_LIMIT={0x8}, @TCA_PIE_ALPHA={0x8}, @TCA_PIE_LIMIT={0x0, 0x2, 0x3}]}}]}, 0x40}}, 0x0) 685.922532ms ago: executing program 2 (id=1382): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095", @ANYRES16=r1, @ANYBLOB="de81d501790eca6f40285b23ce295909aa0e5900f6d56a58c181dbf5a1993fe300225dfac0e0e97f627461bd536b6a09e958dbefc46a473be1a783bb37a380565d4520107d9e2dc3b818204a86aadda2c66b7413066ffa94ade83970b09b2d69289947a12c06bc895e2d1a2f16dfe83eff71f4e254529acca1eecad8399300eb4a6b908397a1235c7d5f9021b1b54108b760cb20ed300955cfa1e3", @ANYRES32=r1], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 606.795458ms ago: executing program 0 (id=1383): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) (async) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)={@random="31e02b0eaf4e", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @empty, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x0, 0x6}}}}}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xa4}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008, 0x10, r1, 0x454c2000) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb6}]}) write$ppp(r0, &(0x7f00000002c0)="15861a", 0x3) r2 = socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, &(0x7f0000000380), 0x4) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r3 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045"], 0x0) (async, rerun: 32) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (rerun: 32) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r3) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x44, r4, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x14) (async) syz_emit_ethernet(0xfdef, &(0x7f0000001b80)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaa880088879f"], 0x0) (async, rerun: 64) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000001c80)=0x2, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000020601080000000900000000000000001400078008001140000000000500150002000000050005000a800000050001000700000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) (async) connect$802154_dgram(r5, &(0x7f0000000200)={0x2, @long}, 0x8) 484.73942ms ago: executing program 3 (id=1384): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x1}}}, 0x24}}, 0x0) unshare(0x20000400) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, 0x0, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="ff41be51d58c65084a7b3ef617c0c9053d7e7d624eded95d0614315c6fc9b1d490e6b57dabe3165bbd617e5b7d32fca1797dc258ba3aee46f556d0398fd98bc0101a6ac40d0f4a3c815e4f965b564c9f41d79d5bcb6a63596e494afb40af5c4943d9af409ac75c4a448210a8909ede46c17873b029245aaca6ebea4e26f3637ab3dc4dcea3af9ff47e2d5f2c589341573ceff6de8f9394e316bfdf9f9ba9a8785fc954fc066624f1b8545e899ec53251495200faebd65786ad618e41b3ed41a370772c52f37220eb1a9e9ff73386056a4ad62a81b68581db7ade1a16", @ANYRES16=r5, @ANYBLOB="00032dbd7000fddbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b00050000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00ff7f0000"], 0x60}, 0x1, 0x0, 0x0, 0x94}, 0x8000) 482.352392ms ago: executing program 4 (id=1385): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000fc0)={0xa, 0x4e24, 0x5, @local, 0xb}, 0x1c) recvmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x38, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x110}}], 0x18, 0x4c00}, 0x12) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'ip6gre0\x00', r5, 0x4, 0xb, 0x26, 0x7, 0x36, @dev={0xfe, 0x80, '\x00', 0x2f}, @mcast1, 0x79, 0x8000, 0x6a4, 0x4}}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r8, @ANYBLOB="408052"], 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@RTM_NEWMDB={0x118, 0x54, 0x800, 0x70bd29, 0x25dfdbff, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x3, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x3, 0x0, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x1, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x0, {@in6_addr=@private2}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x2, 0x3, {@ip4=@remote}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0x0, {@in6_addr=@private0={0xfc, 0x0, '\x00', 0x1}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x3, {@ip4=@rand_addr=0x64010101, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x3, {@ip4=@private=0xa010102, 0x1800}}}]}, 0x118}}, 0x404e0b5) 481.767509ms ago: executing program 2 (id=1386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) (async) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x116c, 0x71, 0x10, 0xbf}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x301, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x57}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x10000000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301020000c6684b1ebae3185804100800010001000000"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301020000c6684b1ebae3185804100800010001000000"], 0x1c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001"], 0xe8}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x38, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffff1a, 0x71}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}]}, 0x38}, 0x1, 0x0, 0x0, 0x48010}, 0x14) r7 = socket(0x2b, 0x1, 0x6) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000071119e00000000008510000002000000850000007d00000095000000000000009500a5050000000082380a6c16cb23efcad64db91e674db95df8d0896824cb2691d06528024707d13584c797578afdc601c7f4a6f818b7f25410420f86e4b78db803197e79375fd430e64a4ed0ec3494217ffe488acb70e2fc2a3ed88e4e93d3"], &(0x7f0000000280)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r8, 0x65, 0x5, 0x0, 0x0) (async) setsockopt(r8, 0x65, 0x5, 0x0, 0x0) close(r7) 404.696888ms ago: executing program 4 (id=1387): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}}}}) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="18fd8389d7281e4c1ba8f1afb9b4f409d74dacd2712a105c1fdd756a1adc8ee63653774ea248d65f05ab38e9c933152ce74662df88d183f871b2fad9f0e3308461fbc5d47f84e3855da186317b70e79d03876d800ccc416b930eea4b1fde0ecf6d461bc9f512206b197d5c310d0524792ff2c8e3e98b9666cf3de816bf939b378fbbc121a9495c2e0e8961995c2fd20841d70c30e8b5f169f552c6b0313179cc93342a8f060ef39ffc904fe8852fc764310b7762fdd91a96c1e9a955d1024a2fec568b470005513a7b90b7603375c2494d5fba014ca3eb6fc5954614ada1261f85279fd904268c96e478", 0xea}, {&(0x7f0000000080)="dbc128e2954fe987ac6d5646fe417898d89fa63a99ce0236989bf0b46126d5a1bbb52c6768f9451dd4e4c1606554e1b20e1ef0204fe95d04d85c6906fb53ce84a6d182dfd9bf782d2343015dea00ae5a0bb369f04d0abf4d511a40f26e06ff2d6e6da5fd1fb513", 0x67}, {&(0x7f0000000680)="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", 0x380}], 0x3, 0x0, 0x0, 0x4008010}, 0x40080c4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) close(r3) sendmmsg$inet6(r1, &(0x7f0000001940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x81a3, @loopback, 0x97e}, 0x1c, &(0x7f0000000640)=[{&(0x7f00000002c0)="d2dd7019c75cb7b57f1d181ae86fec476021fdfe10cf63c0946c0314958e28dd7c514e3076e1eff197ccd065d34058cbd5815d11dc2b0b79d3a15461b25cb81f3db6e811bdb63916250ba19fe0cc779d106503abb09b9dc9b41c21e65fb92993dad8b6127f599b9db4502013bdfcf2c0e5dad1a13074e9fb6da669e84f21a10c32d21c933880074db1892d51e71d67f6c42836bf688da038d7866a6b2f518ea1cad2c7584b9aa981c3eff9cadab4befaeb943406e4e23129bbded191f7dd22eccd6bec40198e3e8f7cfcaa161326f39a2abf1d8d78a1718ac8e50ea3c20edd1a50d7772cd42ad7211a39771d95c6ceef131efcee0bb3", 0xf6}, {&(0x7f00000003c0)="443b86d7842c15877f4a9ca7834cc0c7bc30140b57eaac6d154ea3d7b8f98f6e3cddec40b7c774f431af49835c8cc67ded0effa90adeab0608e1f549962587078cbb4ada1c0fdb0a3f4fd17bdf984c944a392bd7ec2f9567dc3872904d0b8d15ebc16cef68c38d529643201cd65ff65f9d4df513670bdd5bded8a82993003ebc6da5d086c7c0325368905ac0e755f54ad0bef8", 0x93}, {&(0x7f0000000480)="916069a4a55ad84ad8073b52916ec81979c019557bbdc4341478b4bcfd2935982b84d85e159f5ec6b10bfb1fc623c2daeb980e2534e8781ca60b4bcd11b56f0e0f1cb3b4d6910a83281e04f95ed517387710e660a9e91706abb94b556f3121cf2d7f0a6520af16c4f21774d8afafec3f7f2127464e3bd355945c3d87bfb9ee10378f28ce", 0x84}, {&(0x7f0000000540)="fc11a62ecaec0201eef0e7e5ac84cd4ce81301e47d2c2445ecbdd5fbaffaaeecb5865fbc696b285155d47f3c5851a1bce15a758164b6fe18995726535e2ecfaa734fb06dcf9ddadfe20273d7f5ffcf48038aaa2d06a9dcdcb023af4f9554f07f96f46363b1e3833c44882fa90e4e891984980a8dd27910de9295b3b07a6c86cb6129969e317155d55fc248497a615b93ee6fe3a9da325de56629dfc4c405175a8de931999a1cb652c973033bebdd6f3afb7b022b0fdcc31683c0c56ab055a9d1738a4c74341c32577c40e13846ec56985735b14c55e07c3d0dfd9f46a6c936894fdd3123b684c0bfc299004763b0ba589787e2103eb2646de6", 0xf9}], 0x4, &(0x7f0000000a00)=[@hoplimit={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8001}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @flowinfo={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x207}}, @hopopts_2292={{0x80, 0x29, 0x36, {0xc, 0xc, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @calipso={0x7, 0x20, {0x0, 0x6, 0x9, 0x880, [0x8, 0x401, 0x1ff]}}, @generic={0x2, 0x3b, "0be082dbf4c48b4f18c17acdb8c9d772c7871a4661a350a4555e9918b07d4513e171625bee61e74b91119f58e5aea18c24c6d8ad951fba9dd50382"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r2}}}], 0x120}}, {{&(0x7f0000000b40)={0xa, 0x4e20, 0x7, @mcast2, 0x1}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000b80)="51ed867f8fae83c2302451dbe314716f79b8e8a8fc95a38448d62855c5703dffc7be5a0b6d525cb7e8dda985dea1c5a1715f7104dec3a996b7ce16f5c2638d6b9ec892ed20e0ba59ea47715e5d020f810aa38301d762753e587f3a3a8a16a34c13085c403e84eeaceaf7905652faf12048a87d07af1af5", 0x77}], 0x1, &(0x7f0000000c40)=[@rthdr={{0x98, 0x29, 0x39, {0x73, 0x10, 0x0, 0x0, 0x0, [@remote, @loopback, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @local]}}}], 0x98}}, {{&(0x7f0000000d00)={0xa, 0x4e22, 0x10, @remote, 0xa}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000d40)="35c4454819a1dcd95744b33e8c4d6126a0055847046503a5d04bdd8aac43366687ea624115c709160d887cd6c52f77e0f0343152a0c06ec863436da4e84088de9d94808b54b2f1cb32624ef2a64b4522075677d560726bb450386212eac84b60ce602a6d2ef6078446bb210d74361afc87a3", 0x72}], 0x1, &(0x7f0000000e00)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1ff}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r2}}}, @rthdr={{0x28, 0x29, 0x39, {0x2f, 0x2, 0x0, 0x4, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}]}}}, @rthdrdstopts={{0x60, 0x29, 0x37, {0xff, 0x8, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0x33, "e817d75f7d915c71db6aeccc2fd743a9934856faf4d2e82c5803480df2a5d9e4e68c0a1cb2b2d33f7924a32f27abaa28303170"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x6}]}}}], 0x118}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000f40)="88273c61afb3df7a77fb6377a9e96b87f052d6e9e084ee3fec8af673c8887dcd1136c47cab4a0f80edab2ae2b14e67e3fc3ca8c615c4b700f3504e51e03ae36e0bfb79a9e51e62687490a0a0186138542c25b8524ca8b096f6f09b80a16e2753a6864d26b2945074d213dc716db9101ccf822c4a1f68b72c2fd4efff09990f6b54949d2d2696db47938218b1e32f96a056b86cfa1e15d25d1bc880b977bcd6500f08db4ef0db8d9a63a71ec96671ae3cb6c3e6b5cb29811fc1cf2773af5bcd33afd5316bebe3b929c44895510d78094a05a8c7fed29691c20fd15e02b508675085549c09d3928d98636b158e84adba", 0xef}, {&(0x7f0000001080)="f45c0ce5c0295050d6c441d40847e53dc7e9af0593ba86fcb95b8cad7d3b3831a54311caa92ae723fa7324062697727f4e25689ae6f96fccd2f1e0a0226546367a5c03353480f74f3b63ad1885c0193feece37d6ef0362b19af4cfb03a919b1b6550756afa451de6c565e6617bd931057cfd068a35fdf71d90a0d9e9738c574c5799033d4094aa399ac6d4aeced725e590b5c7f52ee6a40fc424305b3acfd91df8e09aca7e1ccf721fad316e84499121eace4910bc1ea23dd0d6304d1c48bcc35914b103c655e5c3757ef4d39fa4443a0aa1d7d89e", 0xd5}, {&(0x7f0000001180)="57cb36fb986c5c0c32bee9ad0a75a3f56fb93847adbd5b5ab012350e3ea182a56338fc8ec682a554b6c913abc5116551ee72cb51ebc5a648a48739a75eb9286e3ac15475bc1f1e45bb584620e1fea6522c909e3641c6913225772c3e22ac72f4159f4c09ecb2a28e3201f8a7130a9c9ef37d9c08d054d5a16bfea7ee2d051c8107fac9a8ebba2bc3af6f734672f42c66eb4d80eaa0c3b9d87d150355e47241805d6f4f51e96b2b08ef5d82f5ca2187ee90592856b785c31bc802e312bd", 0xbd}, {&(0x7f0000001240)="1c4c143b91cb13cdaca67a7ff62137f360a45f13ca45cb53c6defffd33f2ac7012380e6ac3b06e4a743677f9a7b30f3dbe714557a0c3cf0ae90ca802779968c235e33804f06e267085290a8e05cd8c29bc60654667ec01f93a5854c5f59ef7bca752e9cee70375c754cf28086c5969025fdbf5d2dfd58b81a3a7a5a14529b8831a54e4798da1898dfe6fb1bbc61f8850e1e91d22a86cf550b1a63b0049a6463ca43a09a880466e5930f80ebd00317dd1f7caa8b35971063e98069486407776b22d772b56b20b29cafd78e368187d55f34649ced2ef", 0xd5}, {&(0x7f0000001340)="ac5e750600f8f0e6c178fafe26d8f45e1c8fdfad80cc953cf4827575e95beb7a2d57f768ee39ed59df70f94bbcfdbb3e77cb381792b47e7c38c9649afcab0a029be37c698259d3d1e72f559aa5656130a33c48fa4250d972d5f8998943f5b6eb477ac1acf69fd0a0de985ab8e4f70f26a3ed49e99622d20388099107dc1554b7264d1f3875aadc504eedbc9f15400af9dad523d3e1c5101769d8c16d18792460969de0e5270e9739d98f28111b9c98e49554aa6cf62bed2e020f28831dd2dc942ed5474f7300dddf1b18e5b58e0478270f9b544675ed9bb5f5dc81b665dba11f6b66074c5f83d7e10af3596e36fec6bc08acb1", 0xf3}], 0x5, &(0x7f00000014c0)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x89, 0xc, 0x0, 0x1, 0x0, [@local, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x28}, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffff8}}], 0x90}}, {{&(0x7f0000001580)={0xa, 0x4e24, 0x3, @mcast2, 0x7}, 0x1c, &(0x7f0000001600)=[{&(0x7f00000015c0)="ba651daf36857602714f55286fb9710e29ee5eaec0be1e681af55d5e3ede46", 0x1f}], 0x1, &(0x7f0000001640)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0xc, 0x1, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xae}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r2}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}, @dstopts={{0x130, 0x29, 0x37, {0x5c, 0x23, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x6, 0x2, [0x8, 0x4, 0x5, 0x101, 0xb2, 0x1, 0x7ff, 0x5]}}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x9a, "40805e4da190feb37f63604ae56da94208deab69badaa3f5ef946e73a6c88536bcffc63944c17f6a63ae4df683502ae3b9087156b8a5e6523c02f1e662aa91cd79d2bd67f7e65ec85b87f3c8fd4be3ef5780082e8234113c12e406ce32d7c4b87584f4e5d32eca822410ad4081ea3e065803d22cd6c85c9b9f1f88d2e273a37dce45d461204e1b1b18e7152ae74f948136196740ce52bd5a6e25"}, @jumbo={0xc2, 0x4, 0x43}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @ra={0x5, 0x2, 0xfffc}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0xffff575e}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xffff}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @hopopts={{0xd8, 0x29, 0x36, {0x89, 0x17, '\x00', [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x48, {0x3, 0x10, 0x4f, 0x8, [0xba, 0x5, 0x7, 0x6, 0xe, 0x80000001, 0x80000000, 0x8]}}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x40, {0x1, 0xe, 0x81, 0x8, [0x4, 0xfffffffffffffffd, 0x56e4, 0xc3ce, 0x4, 0x0, 0x8001]}}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x6c, 0x6, 0x0, 0xff, 0x0, [@private1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0x2f8}}], 0x5, 0x4008010) 376.546857ms ago: executing program 3 (id=1388): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000800000000100000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x32, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x3ffe, 0x0, 0x0, @u64=0xfffffffffffffffd}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1}, 0x0) 320.828071ms ago: executing program 0 (id=1389): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/36, @ANYRES32], 0xb8}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x54, r4, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x20000004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/39], 0xb8}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r6, &(0x7f00000000c0)='\x00', 0x1, 0x800, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e23, 0x1000, @empty, 0xe}}, 0x6, 0xa}, 0x90) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e1302040000ba0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f252325000"/120, 0x78, 0x8085, 0x0, 0x24) 289.462443ms ago: executing program 4 (id=1390): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) socket$netlink(0x10, 0x3, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r5, 0x134, 0x2000}}}}}}]}, 0x48}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) splice(r0, 0x0, r6, 0x0, 0x3, 0x9) (async) splice(r0, 0x0, r6, 0x0, 0x3, 0x9) socket$inet_udplite(0x2, 0x2, 0x88) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'macsec0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r9], 0x54}}, 0x800) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000280)=0x4) (async) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000280)=0x4) sendto$inet(r7, 0x0, 0x0, 0x20048800, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, @cgroup_sockopt=0x16, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 256.357981ms ago: executing program 2 (id=1391): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(r0, 0x0, 0x2001) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x58, r2, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x58}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, 0x0, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000040)={0x10, {{0xa, 0x4e22, 0x5, @mcast2, 0x101}}}, 0x88) syz_emit_ethernet(0x3e, &(0x7f00000024c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e10100", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) sendmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="26656ca92d3f", 0x6}], 0x1, 0x0, 0x0, 0x800}, 0x20004819) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000440)=@ringbuf={{}, {}, {}, [@jmp, @cb_func, @ringbuf_output]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(r0, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001040)='p', 0x1}], 0x1}, 0x40081) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x801) 152.888767ms ago: executing program 3 (id=1392): r0 = socket(0x1, 0x801, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_SET_EXPRESSIONS={0x54, 0x12, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x80}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x7}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xcd}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x400}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x34, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xfc}}, 0x0) 144.882371ms ago: executing program 3 (id=1393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000004780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt(r1, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) 107.557231ms ago: executing program 4 (id=1394): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x80805, 0x0) clock_gettime(0xfffffff2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000300)=0x90) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000001a40), 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r2, 0x29, 0x7, 0x0, &(0x7f0000000180)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) connect$ax25(r3, &(0x7f0000000000)={{0x3, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r5 = socket(0x2000000015, 0x80005, 0x0) connect$inet6(r5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x6, 0x5, 0xf0, 0x0, 0x2, 0x2, 0x48, 0x4, 0xf, 0x9, 0x6, 0x7, 0x5}, 0xe) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xd3, &(0x7f0000000340)=""/211, 0x0, 0x0, '\x00', 0x0, @fallback=0x44, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000140)=0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000180)={0x7fffffff, {{0xa, 0x4e22, 0x7, @private0, 0x2}}}, 0x88) 9.010087ms ago: executing program 3 (id=1395): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x4) (async) socket$netlink(0x10, 0x3, 0x4) 7.205938ms ago: executing program 4 (id=1396): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000680)={0x40, r2, 0xb97534d5fe9704cf, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_WME={0x4}]}, 0x40}}, 0x0) 0s ago: executing program 3 (id=1397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000fbff0a03000000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000c00024000000000000000051400000010000100000000000000000000000084"], 0x74}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. syzkaller login: [ 53.103707][ T5818] cgroup: Unknown subsys name 'net' [ 53.266951][ T5818] cgroup: Unknown subsys name 'cpuset' [ 53.275079][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.522339][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.724502][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.736033][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.745772][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.745779][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.753718][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.761121][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.776965][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.783185][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.785429][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.798989][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.803871][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.806333][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.823359][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.823602][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.833212][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.846820][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.853948][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.853953][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.869045][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.876741][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.879168][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.893466][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.893608][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.909700][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.919339][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.927148][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.927243][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.942161][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.950902][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.958769][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.322491][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 57.375841][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 57.408046][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 57.508483][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 57.588082][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.596223][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.604314][ T5831] bridge_slave_0: entered allmulticast mode [ 57.611015][ T5831] bridge_slave_0: entered promiscuous mode [ 57.635918][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.643334][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.650486][ T5829] bridge_slave_0: entered allmulticast mode [ 57.657364][ T5829] bridge_slave_0: entered promiscuous mode [ 57.667464][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.674680][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.681847][ T5829] bridge_slave_1: entered allmulticast mode [ 57.689330][ T5829] bridge_slave_1: entered promiscuous mode [ 57.705675][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.712768][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.720241][ T5831] bridge_slave_1: entered allmulticast mode [ 57.728190][ T5831] bridge_slave_1: entered promiscuous mode [ 57.749563][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 57.769170][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.798408][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.808101][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.815544][ T5839] bridge_slave_0: entered allmulticast mode [ 57.822121][ T5839] bridge_slave_0: entered promiscuous mode [ 57.830397][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.837588][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.844889][ T5839] bridge_slave_1: entered allmulticast mode [ 57.851722][ T5839] bridge_slave_1: entered promiscuous mode [ 57.864908][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.914372][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.928111][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.972202][ T5829] team0: Port device team_slave_0 added [ 57.980415][ T5829] team0: Port device team_slave_1 added [ 58.010982][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.022642][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.045004][ T5831] team0: Port device team_slave_0 added [ 58.094598][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.101567][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.128080][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.141181][ T5831] team0: Port device team_slave_1 added [ 58.156263][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.163521][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.170660][ T5834] bridge_slave_0: entered allmulticast mode [ 58.178433][ T5834] bridge_slave_0: entered promiscuous mode [ 58.189002][ T5839] team0: Port device team_slave_0 added [ 58.197127][ T5839] team0: Port device team_slave_1 added [ 58.209629][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.216773][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.242998][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.260385][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.267685][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.275139][ T5834] bridge_slave_1: entered allmulticast mode [ 58.281693][ T5834] bridge_slave_1: entered promiscuous mode [ 58.316954][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.323977][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.350130][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.363569][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.370523][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.396898][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.432174][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.440063][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.448627][ T5842] bridge_slave_0: entered allmulticast mode [ 58.455382][ T5842] bridge_slave_0: entered promiscuous mode [ 58.476284][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.487966][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.497575][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.504954][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.530983][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.545621][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.552747][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.560048][ T5842] bridge_slave_1: entered allmulticast mode [ 58.567397][ T5842] bridge_slave_1: entered promiscuous mode [ 58.592808][ T5829] hsr_slave_0: entered promiscuous mode [ 58.600033][ T5829] hsr_slave_1: entered promiscuous mode [ 58.622744][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.629903][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.656846][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.709105][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.722188][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.748730][ T5831] hsr_slave_0: entered promiscuous mode [ 58.755276][ T5831] hsr_slave_1: entered promiscuous mode [ 58.761221][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.769163][ T5831] Cannot create hsr debugfs directory [ 58.787026][ T5834] team0: Port device team_slave_0 added [ 58.795935][ T5834] team0: Port device team_slave_1 added [ 58.817062][ T5842] team0: Port device team_slave_0 added [ 58.856959][ T5839] hsr_slave_0: entered promiscuous mode [ 58.863508][ T5839] hsr_slave_1: entered promiscuous mode [ 58.869678][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.877698][ T5839] Cannot create hsr debugfs directory [ 58.893972][ T5842] team0: Port device team_slave_1 added [ 58.910505][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.917618][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.924662][ T54] Bluetooth: hci1: command tx timeout [ 58.949572][ T5833] Bluetooth: hci0: command tx timeout [ 58.950195][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.996333][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.003119][ T5833] Bluetooth: hci4: command tx timeout [ 59.008784][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.008813][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.035162][ T5833] Bluetooth: hci3: command tx timeout [ 59.045410][ T54] Bluetooth: hci2: command tx timeout [ 59.080037][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.087331][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.113330][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.125865][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.132832][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.158797][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.261842][ T5834] hsr_slave_0: entered promiscuous mode [ 59.268485][ T5834] hsr_slave_1: entered promiscuous mode [ 59.275999][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.284285][ T5834] Cannot create hsr debugfs directory [ 59.338148][ T5842] hsr_slave_0: entered promiscuous mode [ 59.344759][ T5842] hsr_slave_1: entered promiscuous mode [ 59.351156][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.358943][ T5842] Cannot create hsr debugfs directory [ 59.473849][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.506717][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.530618][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.541665][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.611926][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.622128][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.647803][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.658822][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.727998][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.736878][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.748626][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.760349][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.840994][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.870640][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.880272][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.911281][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.959425][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.982584][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.990885][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.001103][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.020935][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.031084][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.066855][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.097747][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.107784][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.114993][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.132172][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.139283][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.155565][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.169914][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.177042][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.222039][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.229137][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.254946][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.285240][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.292346][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.301555][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.308693][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.416125][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.475397][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.497511][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.541249][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.557533][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.564750][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.611226][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.618410][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.635809][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.642938][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.658707][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.666213][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.781655][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.818893][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.876538][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.965316][ T5829] veth0_vlan: entered promiscuous mode [ 60.981502][ T5839] veth0_vlan: entered promiscuous mode [ 60.994125][ T5829] veth1_vlan: entered promiscuous mode [ 61.004108][ T54] Bluetooth: hci0: command tx timeout [ 61.007257][ T5843] Bluetooth: hci1: command tx timeout [ 61.048111][ T5829] veth0_macvtap: entered promiscuous mode [ 61.058946][ T5839] veth1_vlan: entered promiscuous mode [ 61.083558][ T5843] Bluetooth: hci2: command tx timeout [ 61.083880][ T54] Bluetooth: hci3: command tx timeout [ 61.088974][ T5843] Bluetooth: hci4: command tx timeout [ 61.108586][ T5829] veth1_macvtap: entered promiscuous mode [ 61.137672][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.184695][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.206059][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.229003][ T5839] veth0_macvtap: entered promiscuous mode [ 61.244268][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.263452][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.272192][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.281333][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.317772][ T5839] veth1_macvtap: entered promiscuous mode [ 61.349307][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.407508][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.420999][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.433767][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.450905][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.461846][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.474595][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.514883][ T5834] veth0_vlan: entered promiscuous mode [ 61.530548][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.542208][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.550680][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.559783][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.570554][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.579477][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.642590][ T5834] veth1_vlan: entered promiscuous mode [ 61.644585][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.657241][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.689821][ T5831] veth0_vlan: entered promiscuous mode [ 61.703513][ T5842] veth0_vlan: entered promiscuous mode [ 61.736483][ T5831] veth1_vlan: entered promiscuous mode [ 61.752086][ T5842] veth1_vlan: entered promiscuous mode [ 61.802188][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.803859][ T5834] veth0_macvtap: entered promiscuous mode [ 61.832346][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.839595][ T5831] veth0_macvtap: entered promiscuous mode [ 61.843766][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.856968][ T5834] veth1_macvtap: entered promiscuous mode [ 61.882637][ T5831] veth1_macvtap: entered promiscuous mode [ 61.935154][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.955164][ T5842] veth0_macvtap: entered promiscuous mode [ 61.963413][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.981329][ T5842] veth1_macvtap: entered promiscuous mode [ 61.990291][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.008001][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.018238][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.028927][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.041807][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.061914][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.089374][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.099933][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.111406][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.121880][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.136496][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.147965][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.164632][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.176743][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.187057][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.197981][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.211723][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.229838][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.246627][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.258784][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.275640][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.288111][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.308070][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.320802][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.337670][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.350334][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.369002][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.381442][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.390594][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.399565][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.420471][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.439830][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.474573][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.492227][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.508501][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.519724][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.531442][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.558657][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.568140][ T5933] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 62.583323][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.594763][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.623058][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.634270][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.647670][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.660327][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.676592][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.688466][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.720331][ T5831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.729459][ T5831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.738358][ T5831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.748318][ T5831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.778514][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.790073][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.800911][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.811538][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.841821][ T5914] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 63.002779][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.023285][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.085921][ T5843] Bluetooth: hci0: command tx timeout [ 63.085931][ T54] Bluetooth: hci1: command tx timeout [ 63.115089][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.123583][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.164347][ T5843] Bluetooth: hci4: command tx timeout [ 63.169798][ T5843] Bluetooth: hci3: command tx timeout [ 63.175379][ T5843] Bluetooth: hci2: command tx timeout [ 63.178005][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.193580][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.240541][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.248932][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.296805][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.305473][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.341587][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.349671][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.655552][ T5967] batadv0: entered promiscuous mode [ 63.661957][ T5964] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2'. [ 63.689136][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 63.691102][ T5962] netlink: 'syz.2.11': attribute type 1 has an invalid length. [ 63.710424][ T5964] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 63.722459][ T5962] netlink: 'syz.2.11': attribute type 2 has an invalid length. [ 63.745708][ T5970] openvswitch: netlink: Tunnel attr 222 out of range max 16 [ 63.767821][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 64.418312][ T5994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17'. [ 64.433266][ T5994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17'. [ 64.483635][ T6002] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18'. [ 64.503609][ T6002] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18'. [ 64.616726][ T6009] hid (null): unknown global tag 0xd [ 64.622312][ T6009] hid (null): unknown global tag 0xd [ 64.685289][ T6017] warning: `syz.2.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.710543][ T6009] hid (null): unknown global tag 0xc [ 64.740245][ T6009] hid (null): unknown global tag 0xd [ 64.813346][ T6009] hid (null): unknown global tag 0x8c [ 64.818793][ T6009] hid (null): unknown global tag 0xd [ 64.833636][ T6009] hid (null): unknown global tag 0xd [ 64.849730][ T6009] hid (null): unknown global tag 0xc [ 64.867255][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 64.878454][ T6009] hid (null): unknown global tag 0xd [ 64.895371][ T6027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.25'. [ 64.909206][ T6009] hid (null): unknown global tag 0xe [ 64.926435][ T6009] hid (null): unknown global tag 0xc [ 64.972825][ T6009] hid (null): unknown global tag 0xea [ 64.993122][ T6009] hid (null): usage index exceeded [ 64.998583][ T6009] hid (null): unknown global tag 0xe [ 65.031350][ T6009] hid (null): unknown global tag 0xe [ 65.061619][ T6009] hid (null): unknown global tag 0xc [ 65.103506][ T6009] hid (null): unknown global tag 0xc [ 65.113667][ T6009] hid (null): unknown global tag 0xc [ 65.135088][ T6009] hid (null): report_id 24451 is invalid [ 65.159399][ T6009] hid (null): report_id 1987338754 is invalid [ 65.166731][ T54] Bluetooth: hci1: command tx timeout [ 65.172517][ T54] Bluetooth: hci0: command tx timeout [ 65.178364][ T6009] hid (null): unknown global tag 0xe1 [ 65.183862][ T6009] hid (null): unknown global tag 0xd [ 65.189215][ T6009] hid (null): unknown global tag 0xc [ 65.194657][ T6009] hid (null): invalid report_size 21805 [ 65.200250][ T6009] hid (null): unknown global tag 0xd [ 65.205638][ T6009] hid (null): unknown global tag 0xd [ 65.216469][ T6009] hid-generic 0005:000D:2F19.0001: unknown main item tag 0x2 [ 65.224216][ T6009] hid-generic 0005:000D:2F19.0001: unknown main item tag 0xe [ 65.231642][ T6009] hid-generic 0005:000D:2F19.0001: unexpected long global item [ 65.239828][ T6009] hid-generic 0005:000D:2F19.0001: probe with driver hid-generic failed with error -22 [ 65.251242][ T5843] Bluetooth: hci2: command tx timeout [ 65.251286][ T5843] Bluetooth: hci3: command tx timeout [ 65.251318][ T5843] Bluetooth: hci4: command tx timeout [ 65.478801][ T6054] openvswitch: netlink: IP tunnel dst address not specified [ 65.876332][ T6054] ieee802154 phy0 wpan0: encryption failed: -90 [ 66.203888][ T6077] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 66.479518][ T6088] netlink: 'syz.4.43': attribute type 1 has an invalid length. [ 66.490548][ T6088] nbd: error processing sock list [ 66.662626][ T6101] netlink: 'syz.4.47': attribute type 28 has an invalid length. [ 66.682026][ T6101] netlink: 'syz.4.47': attribute type 3 has an invalid length. [ 67.299673][ T6137] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 68.162795][ T6168] Zero length message leads to an empty skb [ 68.238506][ T6170] netlink: 'syz.1.68': attribute type 5 has an invalid length. [ 68.553699][ T6188] openvswitch: netlink: Flow actions attr not present in new flow. [ 68.855014][ T6208] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.925299][ T6208] __nla_validate_parse: 14 callbacks suppressed [ 68.925317][ T6208] netlink: 24 bytes leftover after parsing attributes in process `syz.1.81'. [ 68.979049][ T6215] syz.4.83[6215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.979144][ T6215] syz.4.83[6215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.000879][ T6215] syz.4.83[6215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.040721][ T6215] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 69.080541][ T6223] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.171148][ T6223] netlink: 'syz.3.85': attribute type 1 has an invalid length. [ 69.179098][ T6223] netlink: 'syz.3.85': attribute type 2 has an invalid length. [ 69.187041][ T6223] netlink: 'syz.3.85': attribute type 1 has an invalid length. [ 69.400776][ T6240] netlink: 'syz.0.91': attribute type 2 has an invalid length. [ 69.558780][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 69.852550][ T6259] syzkaller0: entered promiscuous mode [ 69.870783][ T6259] syzkaller0: entered allmulticast mode [ 69.961726][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 70.777624][ T6269] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 71.359534][ T6280] lo: entered promiscuous mode [ 71.364905][ T6280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.550003][ T6293] @ÿ: renamed from veth0_vlan (while UP) [ 71.600601][ T6301] netlink: 'syz.2.105': attribute type 39 has an invalid length. [ 71.609543][ T6300] netlink: 288 bytes leftover after parsing attributes in process `syz.0.107'. [ 71.683647][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.690641][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.919725][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 71.944408][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 71.969912][ T6315] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 72.010378][ T6315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 72.049811][ T54] Bluetooth: hci0: command 0x0c20 tx timeout [ 72.281293][ T6328] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.298880][ T6328] netlink: 'syz.1.118': attribute type 1 has an invalid length. [ 72.500025][ T6339] netlink: 4572 bytes leftover after parsing attributes in process `syz.4.123'. [ 72.726929][ T6358] netlink: 'syz.1.128': attribute type 10 has an invalid length. [ 72.780310][ T6361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 72.793736][ T6358] veth1_macvtap: left promiscuous mode [ 72.905277][ T6369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.164782][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.133'. [ 73.191333][ T6384] netlink: 233 bytes leftover after parsing attributes in process `syz.0.134'. [ 73.204171][ T6385] netlink: 233 bytes leftover after parsing attributes in process `syz.0.134'. [ 73.449986][ T6396] sctp: [Deprecated]: syz.2.138 (pid 6396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.449986][ T6396] Use struct sctp_sack_info instead [ 73.476499][ T6396] sctp: [Deprecated]: syz.2.138 (pid 6396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.476499][ T6396] Use struct sctp_sack_info instead [ 73.865047][ T6412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.901399][ T6417] Bluetooth: MGMT ver 1.23 [ 73.924377][ T6418] netlink: 'syz.1.145': attribute type 6 has an invalid length. [ 73.941023][ T6418] IPv6: NLM_F_CREATE should be specified when creating new route [ 74.501172][ T6446] sctp: [Deprecated]: syz.3.153 (pid 6446) Use of int in maxseg socket option. [ 74.501172][ T6446] Use struct sctp_assoc_value instead [ 74.655640][ T6454] delete_channel: no stack [ 74.831215][ T6470] x_tables: duplicate underflow at hook 4 [ 74.898860][ T6475] netlink: 'syz.4.159': attribute type 2 has an invalid length. [ 74.935122][ T6475] __nla_validate_parse: 2 callbacks suppressed [ 74.935141][ T6475] netlink: 244 bytes leftover after parsing attributes in process `syz.4.159'. [ 75.019745][ T6480] netlink: 'syz.2.161': attribute type 3 has an invalid length. [ 75.043723][ T6480] netlink: 224 bytes leftover after parsing attributes in process `syz.2.161'. [ 75.136583][ T6480] netlink: 'syz.2.161': attribute type 3 has an invalid length. [ 75.156592][ T6480] netlink: 224 bytes leftover after parsing attributes in process `syz.2.161'. [ 75.386833][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 75.562706][ T6510] tipc: Enabling of bearer rejected, failed to enable media [ 75.974430][ T6524] vlan2: entered promiscuous mode [ 75.991851][ T6524] team0: Device vlan2 is already an upper device of the team interface [ 76.254425][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'. [ 76.287103][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 76.300236][ T6553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.180'. [ 76.550459][ T6566] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 76.803198][ T975] cfg80211: failed to load regulatory.db [ 76.879656][ T6579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.186'. [ 77.052694][ T6592] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 77.279450][ T6603] netlink: 56 bytes leftover after parsing attributes in process `syz.4.192'. [ 77.319681][ T6611] netlink: 56 bytes leftover after parsing attributes in process `syz.4.192'. [ 77.378116][ T6603] netlink: 'syz.4.192': attribute type 2 has an invalid length. [ 77.443672][ T6611] netlink: 'syz.4.192': attribute type 2 has an invalid length. [ 78.379776][ T6659] syzkaller0: entered promiscuous mode [ 78.404067][ T6659] syzkaller0: entered allmulticast mode [ 78.903370][ T6695] GUP no longer grows the stack in syz.4.210 (6695): 20003000-2000a000 (20001000) [ 78.949697][ T6695] CPU: 1 UID: 0 PID: 6695 Comm: syz.4.210 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 78.960352][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 78.970440][ T6695] Call Trace: [ 78.973746][ T6695] [ 78.976692][ T6695] dump_stack_lvl+0x241/0x360 [ 78.981421][ T6695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.986650][ T6695] ? __pfx__printk+0x10/0x10 [ 78.991269][ T6695] ? find_vma+0xf9/0x170 [ 78.995555][ T6695] ? vma_is_secretmem+0xd/0x50 [ 79.000354][ T6695] ? check_vma_flags+0x52b/0x5a0 [ 79.005327][ T6695] __get_user_pages+0x4385/0x49e0 [ 79.010380][ T6695] ? 0xffffffffa000095c [ 79.014603][ T6695] ? __pfx___get_user_pages+0x10/0x10 [ 79.020026][ T6695] __gup_longterm_locked+0x49a/0x17f0 [ 79.025421][ T6695] ? __pfx___might_resched+0x10/0x10 [ 79.030749][ T6695] ? __pfx___gup_longterm_locked+0x10/0x10 [ 79.036575][ T6695] ? down_read+0x82b/0xa40 [ 79.041026][ T6695] ? is_valid_gup_args+0x124/0x200 [ 79.046154][ T6695] pin_user_pages+0x137/0x1f0 [ 79.050832][ T6695] ? __pfx_pin_user_pages+0x10/0x10 [ 79.056024][ T6695] ? trace_kmalloc+0x1f/0xd0 [ 79.060619][ T6695] xdp_umem_create+0x978/0xf30 [ 79.065390][ T6695] xsk_setsockopt+0x732/0x950 [ 79.070064][ T6695] ? __pfx_xsk_setsockopt+0x10/0x10 [ 79.075264][ T6695] ? __pfx_lock_acquire+0x10/0x10 [ 79.080281][ T6695] ? aa_sock_opt_perm+0x79/0x120 [ 79.085230][ T6695] ? __pfx_xsk_setsockopt+0x10/0x10 [ 79.090426][ T6695] do_sock_setsockopt+0x3af/0x720 [ 79.095457][ T6695] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 79.101003][ T6695] ? __fget_files+0x395/0x410 [ 79.105679][ T6695] ? __fget_files+0x2a/0x410 [ 79.110271][ T6695] __x64_sys_setsockopt+0x1ee/0x280 [ 79.115471][ T6695] do_syscall_64+0xf3/0x230 [ 79.119974][ T6695] ? clear_bhb_loop+0x35/0x90 [ 79.124648][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.130553][ T6695] RIP: 0033:0x7f0e8fb85d29 [ 79.134968][ T6695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.154577][ T6695] RSP: 002b:00007f0e9096a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 79.162995][ T6695] RAX: ffffffffffffffda RBX: 00007f0e8fd75fa0 RCX: 00007f0e8fb85d29 [ 79.170972][ T6695] RDX: 0000000000000004 RSI: 000000000000011b RDI: 000000000000000a [ 79.178938][ T6695] RBP: 00007f0e8fc01aa8 R08: 000000000000001c R09: 0000000000000000 [ 79.186903][ T6695] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 79.194867][ T6695] R13: 0000000000000000 R14: 00007f0e8fd75fa0 R15: 00007ffd9f3d6a98 [ 79.202846][ T6695] [ 80.415803][ T6699] tipc: Invalid UDP bearer configuration [ 80.415844][ T6699] tipc: Enabling of bearer rejected, failed to enable media [ 80.443300][ T6705] __nla_validate_parse: 11 callbacks suppressed [ 80.443319][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 80.459590][ T6705] nbd: couldn't find device at index -1 [ 80.669792][ T6729] openvswitch: netlink: Duplicate or invalid key (type 0). [ 80.695413][ T6729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.977019][ T6743] netlink: 'syz.3.226': attribute type 2 has an invalid length. [ 81.006047][ T6749] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 81.266297][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 81.345084][ T6763] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 81.517234][ T6772] netlink: 'syz.4.236': attribute type 4 has an invalid length. [ 81.583473][ T6780] netlink: 'syz.4.236': attribute type 4 has an invalid length. [ 81.635037][ T6779] Illegal XDP return value 8 on prog (id 51) dev N/A, expect packet loss! [ 81.964480][ T6802] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 82.174611][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 82.200905][ T6823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'. [ 85.440554][ T6853] netlink: 56 bytes leftover after parsing attributes in process `syz.2.260'. [ 85.449638][ T6852] netlink: 56 bytes leftover after parsing attributes in process `syz.2.260'. [ 85.458600][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 85.468341][ T6852] netlink: 31 bytes leftover after parsing attributes in process `syz.2.260'. [ 85.477635][ T6852] netlink: 'syz.2.260': attribute type 3 has an invalid length. [ 85.485553][ T6852] netlink: 'syz.2.260': attribute type 2 has an invalid length. [ 85.496030][ T6852] netlink: 31 bytes leftover after parsing attributes in process `syz.2.260'. [ 85.506176][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 85.515576][ T6853] netlink: 31 bytes leftover after parsing attributes in process `syz.2.260'. [ 85.524754][ T6853] netlink: 'syz.2.260': attribute type 3 has an invalid length. [ 85.532557][ T6853] netlink: 'syz.2.260': attribute type 2 has an invalid length. [ 85.541452][ T6853] netlink: 31 bytes leftover after parsing attributes in process `syz.2.260'. [ 85.728483][ T6865] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 85.765141][ T6870] netlink: 'syz.4.268': attribute type 20 has an invalid length. [ 85.819336][ T6874] ipt_REJECT: ECHOREPLY no longer supported. [ 85.823179][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.270'. [ 85.935784][ T6877] netlink: 'syz.2.273': attribute type 1 has an invalid length. [ 85.951208][ T6877] netlink: 'syz.2.273': attribute type 2 has an invalid length. [ 85.959142][ T6877] netlink: 3 bytes leftover after parsing attributes in process `syz.2.273'. [ 86.006895][ T6884] netlink: 60 bytes leftover after parsing attributes in process `syz.4.272'. [ 86.262230][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 86.348387][ T6905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.281'. [ 86.555474][ T6908] delete_channel: no stack [ 86.825730][ T6933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.922277][ T6945] netlink: 'syz.1.292': attribute type 5 has an invalid length. [ 86.959200][ T6937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.984166][ T6937] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 87.018686][ T6937] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 87.461681][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.602818][ T6985] vxcan1 speed is unknown, defaulting to 1000 [ 87.617134][ T6991] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 87.641613][ T6985] vxcan1 speed is unknown, defaulting to 1000 [ 87.671300][ T6985] vxcan1 speed is unknown, defaulting to 1000 [ 88.048555][ T5874] vxcan1 speed is unknown, defaulting to 1000 [ 88.063083][ T6985] infiniband syz2: set active [ 88.071438][ T6985] infiniband syz2: added vxcan1 [ 88.163272][ T6985] RDS/IB: syz2: added [ 88.177127][ T6985] smc: adding ib device syz2 with port count 1 [ 88.198512][ T6985] smc: ib device syz2 port 1 has pnetid [ 88.209854][ T6985] vxcan1 speed is unknown, defaulting to 1000 [ 88.244029][ T5874] vxcan1 speed is unknown, defaulting to 1000 [ 88.510390][ T6985] vxcan1 speed is unknown, defaulting to 1000 [ 88.606845][ T7055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.646446][ T6985] vxcan1 speed is unknown, defaulting to 1000 [ 88.802926][ T6985] vxcan1 speed is unknown, defaulting to 1000 [ 88.813217][ T7059] netlink: 'syz.0.324': attribute type 3 has an invalid length. [ 89.008577][ T6985] vxcan1 speed is unknown, defaulting to 1000 [ 89.170335][ T7076] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 89.710619][ T7109] netlink: 'syz.2.339': attribute type 5 has an invalid length. [ 89.978617][ T7076] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 90.094126][ T5874] IPVS: starting estimator thread 0... [ 90.183344][ T7138] IPVS: using max 22 ests per chain, 52800 per kthread [ 90.223874][ T7141] tipc: Failed to remove unknown binding: 66,1,1/0:3216661372/3216661374 [ 90.232467][ T7141] tipc: Failed to remove unknown binding: 66,1,1/0:3216661372/3216661374 [ 90.261311][ T7143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.303534][ T7143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.311833][ T7147] netlink: 'syz.2.354': attribute type 12 has an invalid length. [ 90.336186][ T7147] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 90.355518][ T7147] netlink: 'syz.2.354': attribute type 12 has an invalid length. [ 90.369402][ T7147] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 90.762322][ T7173] openvswitch: netlink: Missing key (keys=40, expected=80) [ 90.874500][ T7180] vlan0: entered promiscuous mode [ 90.906817][ T7180] team0: Port device vlan0 added [ 91.015985][ T7188] batman_adv: batadv0: Adding interface: dummy0 [ 91.022432][ T7188] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.050786][ T7188] batman_adv: batadv0: Interface activated: dummy0 [ 91.060941][ T7188] __nla_validate_parse: 19 callbacks suppressed [ 91.060958][ T7188] netlink: 48 bytes leftover after parsing attributes in process `syz.0.368'. [ 91.085545][ T7188] batadv0: mtu less than device minimum [ 91.100087][ T7188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.113018][ T7188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.125559][ T7188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.138068][ T7188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.150536][ T7188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.163055][ T7188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.175505][ T7188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.188010][ T7188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 91.256482][ T5843] Bluetooth: hci0: command 0x0c20 tx timeout [ 91.262730][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 91.342156][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 91.389982][ T7201] infiniband syz2: set down [ 91.457233][ T52] smc: removing ib device syz2 [ 91.471995][ T8] vxcan1 speed is unknown, defaulting to 1000 [ 91.478764][ T7205] xt_l2tp: v2 tid > 0xffff: 150994944 [ 91.983553][ T7218] sit0: entered promiscuous mode [ 91.996319][ T7218] netlink: 'syz.0.374': attribute type 1 has an invalid length. [ 92.039038][ T7218] netlink: 1 bytes leftover after parsing attributes in process `syz.0.374'. [ 92.274689][ T7230] netlink: 'syz.2.377': attribute type 6 has an invalid length. [ 92.289093][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.2.377'. [ 92.334946][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.445198][ T7236] netlink: 20 bytes leftover after parsing attributes in process `syz.4.381'. [ 92.581670][ T7246] netlink: 44 bytes leftover after parsing attributes in process `syz.1.382'. [ 92.624638][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 92.849109][ T7264] netlink: 'syz.3.388': attribute type 1 has an invalid length. [ 92.858150][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 93.208172][ T7287] xt_l2tp: unknown flags: 18 [ 93.217225][ T7286] xt_l2tp: unknown flags: 18 [ 93.249727][ T7288] netlink: 40 bytes leftover after parsing attributes in process `syz.0.394'. [ 93.250767][ T7287] netlink: 40 bytes leftover after parsing attributes in process `syz.0.394'. [ 93.536976][ T7301] xt_cgroup: path and classid specified [ 93.936796][ T7339] netlink: 'syz.4.411': attribute type 2 has an invalid length. [ 94.298673][ T7360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 94.333228][ T7360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.388527][ T7360] dummy0: entered promiscuous mode [ 94.407170][ T7360] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 94.519910][ T7372] Bluetooth: MGMT ver 1.23 [ 94.828082][ T7391] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 94.854963][ T7393] No such timeout policy "syz0" [ 94.973383][ T7398] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 94.974886][ T7394] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 95.016179][ T7394] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 95.016958][ T7398] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 95.995171][ T7465] netlink: 'syz.0.458': attribute type 2 has an invalid length. [ 96.040833][ T7467] xfrm0 speed is unknown, defaulting to 1000 [ 96.052106][ T7467] xfrm0 speed is unknown, defaulting to 1000 [ 96.082339][ T7467] xfrm0 speed is unknown, defaulting to 1000 [ 96.112701][ T7467] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 96.146537][ T7479] raw_sendmsg: syz.2.459 forgot to set AF_INET. Fix it! [ 96.158376][ T7467] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 96.169796][ T7469] netlink: 'syz.2.459': attribute type 1 has an invalid length. [ 96.184917][ T7469] netlink: 'syz.2.459': attribute type 2 has an invalid length. [ 96.241330][ T7467] xfrm0 speed is unknown, defaulting to 1000 [ 96.262013][ T7467] xfrm0 speed is unknown, defaulting to 1000 [ 96.285956][ T7467] xfrm0 speed is unknown, defaulting to 1000 [ 96.307282][ T7467] xfrm0 speed is unknown, defaulting to 1000 [ 96.342009][ T7467] xfrm0 speed is unknown, defaulting to 1000 [ 96.467617][ T7495] __nla_validate_parse: 14 callbacks suppressed [ 96.467635][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.2.465'. [ 96.489787][ T7495] netlink: 'syz.2.465': attribute type 7 has an invalid length. [ 96.498287][ T7495] netlink: 'syz.2.465': attribute type 8 has an invalid length. [ 96.507595][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'. [ 96.578283][ T7495] erspan0: entered promiscuous mode [ 96.591227][ T7495] batadv_slave_1: entered promiscuous mode [ 96.611287][ T7503] net_ratelimit: 12 callbacks suppressed [ 96.611873][ T7503] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 96.631893][ T7495] gretap0: entered promiscuous mode [ 96.649852][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.467'. [ 96.653864][ T7503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.678597][ T7505] netlink: 92 bytes leftover after parsing attributes in process `syz.4.467'. [ 96.739508][ T7510] tipc: Enabling of bearer rejected, failed to enable media [ 96.788402][ T7510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.464'. [ 96.908053][ T7516] bridge0: port 3(vlan2) entered blocking state [ 96.925374][ T7516] bridge0: port 3(vlan2) entered disabled state [ 96.929485][ T7518] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 96.931906][ T7516] vlan2: entered allmulticast mode [ 96.957711][ T7518] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 96.977929][ T7516] vlan2: left allmulticast mode [ 97.774901][ T7558] netlink: 48 bytes leftover after parsing attributes in process `syz.3.485'. [ 97.861920][ T7569] netlink: 'syz.2.488': attribute type 4 has an invalid length. [ 97.964845][ T7575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.489'. [ 98.022147][ T7575] dvmrp1: entered allmulticast mode [ 98.089562][ T7582] xt_l2tp: invalid flags combination: c [ 98.193745][ T7582] x_tables: duplicate underflow at hook 3 [ 98.269804][ T7598] netlink: 21 bytes leftover after parsing attributes in process `syz.3.496'. [ 98.291276][ T7595] netlink: 'syz.1.494': attribute type 11 has an invalid length. [ 98.892207][ T7642] netlink: 68 bytes leftover after parsing attributes in process `syz.1.510'. [ 98.912034][ T7642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.510'. [ 98.967528][ T7642] pimreg3: entered allmulticast mode [ 99.020274][ T7642] xfrm0 speed is unknown, defaulting to 1000 [ 100.611372][ T7748] sctp: [Deprecated]: syz.4.542 (pid 7748) Use of int in max_burst socket option. [ 100.611372][ T7748] Use struct sctp_assoc_value instead [ 100.893791][ T7755] vlan2: entered allmulticast mode [ 101.242626][ T7782] netlink: 'syz.2.555': attribute type 8 has an invalid length. [ 101.274081][ T7782] Bluetooth: MGMT ver 1.23 [ 101.608064][ T7808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.690417][ T7813] Cannot find add_set index 0 as target [ 102.036518][ T7826] __nla_validate_parse: 9 callbacks suppressed [ 102.036533][ T7826] netlink: 36 bytes leftover after parsing attributes in process `syz.2.570'. [ 102.067479][ T7827] pim6reg: entered allmulticast mode [ 102.082133][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 102.105210][ T7827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.569'. [ 102.390760][ T7834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 102.440744][ T7834] netlink: 'syz.2.573': attribute type 8 has an invalid length. [ 102.547679][ T7839] xfrm0 speed is unknown, defaulting to 1000 [ 102.668672][ T7854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.579'. [ 102.810863][ T7861] ip6tnl1: entered promiscuous mode [ 102.816504][ T7861] ip6tnl1: entered allmulticast mode [ 103.075909][ T7867] syz.2.583 (7867) used greatest stack depth: 16056 bytes left [ 103.453557][ T7895] netlink: 'syz.1.594': attribute type 1 has an invalid length. [ 103.461243][ T7895] netlink: 244 bytes leftover after parsing attributes in process `syz.1.594'. [ 103.657221][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 103.706387][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 103.733228][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 103.756759][ T7908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 103.782936][ T7919] openvswitch: netlink: IP tunnel dst address not specified [ 103.885731][ T7923] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 104.163096][ T25] IPVS: starting estimator thread 0... [ 104.273709][ T7947] IPVS: using max 23 ests per chain, 55200 per kthread [ 104.556871][ T7971] tunl0: entered promiscuous mode [ 104.578001][ T7971] netlink: 'syz.3.621': attribute type 3 has an invalid length. [ 105.250874][ T8020] netlink: 'syz.2.632': attribute type 1 has an invalid length. [ 105.577073][ T8043] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 105.628023][ T8043] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 106.380730][ T8044] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 106.389165][ T8044] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 133.086985][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.093590][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 154.786850][ T8076] openvswitch: netlink: IP tunnel dst address not specified [ 154.905920][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 155.086650][ T8102] __nla_validate_parse: 43 callbacks suppressed [ 155.086669][ T8102] netlink: 20 bytes leftover after parsing attributes in process `syz.4.650'. [ 155.229451][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.651'. [ 155.288798][ T8117] ip6t_srh: unknown srh invflags 5F00 [ 155.296715][ T8117] netlink: 'syz.4.653': attribute type 2 has an invalid length. [ 156.084713][ T8146] openvswitch: netlink: VXLAN extension 15883 out of range max 1 [ 156.220849][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'. [ 156.360419][ T8175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.671'. [ 156.465787][ T8183] netlink: 52 bytes leftover after parsing attributes in process `syz.2.671'. [ 156.539608][ T8178] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.616687][ T8190] netlink: 'syz.4.674': attribute type 8 has an invalid length. [ 156.806512][ T8203] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 157.428196][ T8242] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 157.719172][ T8261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.698'. [ 157.719339][ T8263] netlink: 'syz.2.700': attribute type 24 has an invalid length. [ 157.763910][ T8261] bridge0: port 3(gretap0) entered blocking state [ 157.770510][ T8261] bridge0: port 3(gretap0) entered disabled state [ 157.781804][ T8261] gretap0: entered allmulticast mode [ 157.791976][ T8261] gretap0: entered promiscuous mode [ 157.798347][ T8261] bridge0: port 3(gretap0) entered blocking state [ 157.804951][ T8261] bridge0: port 3(gretap0) entered forwarding state [ 157.818271][ T8265] netlink: 'syz.3.699': attribute type 4 has an invalid length. [ 157.909949][ T8271] sctp: [Deprecated]: syz.4.701 (pid 8271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.909949][ T8271] Use struct sctp_sack_info instead [ 158.632182][ T8326] netlink: 'syz.0.714': attribute type 7 has an invalid length. [ 158.647548][ T8326] netlink: 15 bytes leftover after parsing attributes in process `syz.0.714'. [ 158.656998][ T8326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.714'. [ 158.666996][ T8326] netlink: 872 bytes leftover after parsing attributes in process `syz.0.714'. [ 158.678286][ T8326] netlink: 'syz.0.714': attribute type 7 has an invalid length. [ 158.690206][ T8326] netlink: 15 bytes leftover after parsing attributes in process `syz.0.714'. [ 159.768840][ T8381] xt_bpf: check failed: parse error [ 160.110018][ T8403] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 160.143165][ T8403] netlink: 'syz.1.741': attribute type 7 has an invalid length. [ 160.162926][ T8403] __nla_validate_parse: 7 callbacks suppressed [ 160.184042][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.741'. [ 160.210237][ T8414] ax25_connect(): syz.4.744 uses autobind, please contact jreuter@yaina.de [ 160.328312][ T8418] netlink: 'syz.4.747': attribute type 1 has an invalid length. [ 160.396906][ T8418] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 160.446746][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'. [ 160.460450][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 160.461049][ T8418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.489693][ T8426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.749'. [ 160.515767][ T8426] netlink: 'syz.1.749': attribute type 15 has an invalid length. [ 160.544448][ T8429] netlink: 108 bytes leftover after parsing attributes in process `syz.1.749'. [ 160.605679][ T1311] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 160.659082][ T8435] netlink: 830 bytes leftover after parsing attributes in process `syz.4.752'. [ 160.707026][ T8438] batadv_slave_1: entered promiscuous mode [ 160.790162][ T8437] batadv_slave_1: left promiscuous mode [ 160.809366][ T8443] netlink: 'syz.4.755': attribute type 11 has an invalid length. [ 160.817883][ T8443] netlink: 204 bytes leftover after parsing attributes in process `syz.4.755'. [ 160.908086][ T8446] nbd: must specify a device to reconfigure [ 160.919323][ T8446] nft_compat: unsupported protocol 9 [ 160.933989][ T8446] netlink: 'syz.3.756': attribute type 11 has an invalid length. [ 160.981613][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 161.134378][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'. [ 161.176146][ T8459] netlink: 'syz.1.758': attribute type 1 has an invalid length. [ 161.264006][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 161.299212][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.762'. [ 161.343688][ T8468] netlink: 'syz.4.763': attribute type 1 has an invalid length. [ 161.352452][ T8471] netlink: 'syz.3.765': attribute type 1 has an invalid length. [ 161.374224][ T8471] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 161.401500][ T8472] trusted_key: syz.2.764 sent an empty control message without MSG_MORE. [ 161.413707][ T8471] netlink: 'syz.3.765': attribute type 1 has an invalid length. [ 161.629914][ T8485] netlink: 'syz.2.770': attribute type 13 has an invalid length. [ 161.677783][ T8485] netlink: 'syz.2.770': attribute type 58 has an invalid length. [ 161.792172][ T8495] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 162.123230][ T54] Bluetooth: hci0: command tx timeout [ 162.363463][ T8535] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 162.410580][ T8536] veth5: entered promiscuous mode [ 162.435588][ T8535] macvlan0: entered promiscuous mode [ 162.442577][ T8535] macvlan0: entered allmulticast mode [ 162.467718][ T8535] veth1_vlan: entered allmulticast mode [ 162.499201][ T8535] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 162.791393][ T8555] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 162.812380][ T8557] netlink: 'syz.3.795': attribute type 7 has an invalid length. [ 163.278947][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.303054][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.268106][ T8652] bond1: entered promiscuous mode [ 164.279186][ T8652] bond1: entered allmulticast mode [ 164.289399][ T8652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.422768][ T8676] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20000 [ 164.433910][ T8682] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_1, syncid = 0, id = 0 [ 164.598784][ T8698] (unnamed net_device) (uninitialized): up delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 164.651831][ T8692] openvswitch: netlink: Message has 44053 unknown bytes. [ 165.241102][ T8743] __nla_validate_parse: 30 callbacks suppressed [ 165.241124][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 165.258421][ T8747] netlink: 40 bytes leftover after parsing attributes in process `syz.4.852'. [ 165.283187][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 165.435501][ T8743] macvlan0: entered allmulticast mode [ 165.589380][ T8757] validate_nla: 5 callbacks suppressed [ 165.589399][ T8757] netlink: 'syz.2.858': attribute type 4 has an invalid length. [ 165.652117][ T8764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.861'. [ 165.663098][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 166.021372][ T8787] netlink: 'syz.4.868': attribute type 29 has an invalid length. [ 166.044164][ T8787] netlink: 'syz.4.868': attribute type 29 has an invalid length. [ 166.055464][ T8796] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 166.115679][ T8796] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 166.139156][ T8796] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 166.157890][ T8796] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 166.247697][ T8812] netlink: 'syz.1.877': attribute type 2 has an invalid length. [ 166.264843][ T8796] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 166.277030][ T8796] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 166.546475][ T8810] team0 (unregistering): Port device team_slave_0 removed [ 166.570759][ T8810] team0 (unregistering): Port device team_slave_1 removed [ 166.619762][ T8803] team0: Port device netdevsim0 added [ 166.890871][ T8839] vlan3: entered allmulticast mode [ 166.908848][ T8839] vlan1: entered allmulticast mode [ 166.922714][ T8839] veth0_vlan: entered allmulticast mode [ 166.951378][ T8839] bridge0: port 3(vlan3) entered blocking state [ 166.971461][ T8839] bridge0: port 3(vlan3) entered disabled state [ 167.003793][ T8839] vlan3: entered promiscuous mode [ 167.022231][ T8839] vlan1: entered promiscuous mode [ 167.035543][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 167.199438][ T8866] sctp: [Deprecated]: syz.4.891 (pid 8866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.199438][ T8866] Use struct sctp_sack_info instead [ 167.445322][ T8885] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.897'. [ 167.454780][ T8885] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.897'. [ 167.463933][ T8885] netlink: 640 bytes leftover after parsing attributes in process `syz.0.897'. [ 167.521010][ T8886] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 167.790967][ T8905] syzkaller0: entered promiscuous mode [ 167.818432][ T8905] syzkaller0: entered allmulticast mode [ 168.073170][ T8922] netlink: 48 bytes leftover after parsing attributes in process `syz.0.910'. [ 168.234487][ T8935] sctp: [Deprecated]: syz.0.912 (pid 8935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.234487][ T8935] Use struct sctp_sack_info instead [ 168.253878][ T8935] sctp: [Deprecated]: syz.0.912 (pid 8935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.253878][ T8935] Use struct sctp_sack_info instead [ 168.709140][ T8963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.717038][ T8963] IPv6: NLM_F_CREATE should be set when creating new route [ 168.759904][ T8968] Unsupported ieee802154 address type: 0 [ 168.766502][ T8965] tipc: Enabling of bearer rejected, failed to enable media [ 169.434067][ T9012] ieee802154 phy0 wpan0: encryption failed: -90 [ 169.658300][ T9033] veth0: entered promiscuous mode [ 169.901228][ T9032] veth0: left promiscuous mode [ 170.210581][ T9076] lo: entered promiscuous mode [ 170.245944][ T9076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.352650][ T9074] __nla_validate_parse: 15 callbacks suppressed [ 170.352671][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 170.427935][ T9074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.556991][ T9093] netlink: 192 bytes leftover after parsing attributes in process `syz.0.961'. [ 170.578225][ T9093] openvswitch: netlink: Flow key attr not present in new flow. [ 170.589458][ T9074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.611670][ T9074] batadv_slave_1 (unregistering): left promiscuous mode [ 170.735833][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 170.788486][ T9098] vlan2: entered allmulticast mode [ 170.920986][ T9117] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.930985][ T9119] validate_nla: 34 callbacks suppressed [ 170.931004][ T9119] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 170.989086][ T9123] netlink: 39 bytes leftover after parsing attributes in process `syz.0.968'. [ 171.029367][ T9119] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.037832][ T9119] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 171.070779][ T9130] netlink: 36 bytes leftover after parsing attributes in process `syz.1.967'. [ 171.094179][ T9119] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 171.102204][ T9119] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 171.117463][ T9119] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 171.175213][ T9119] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 171.213818][ T9119] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 171.237590][ T9119] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 171.268167][ T9119] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 171.281786][ T9119] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 171.460248][ T9150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.974'. [ 171.908460][ T9176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 171.933111][ T9176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.953857][ T9176] macsec1: entered promiscuous mode [ 171.968811][ T9176] macsec1: entered allmulticast mode [ 171.978127][ T9183] netlink: 256 bytes leftover after parsing attributes in process `syz.3.985'. [ 172.330563][ T9201] bond3: entered allmulticast mode [ 172.376913][ T9212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.991'. [ 172.407128][ T9201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.428739][ T9221] netlink: 64 bytes leftover after parsing attributes in process `syz.4.996'. [ 172.447414][ T9201] bond2: (slave bond3): making interface the new active one [ 172.457351][ T9201] bond2: (slave bond3): Enslaving as an active interface with an up link [ 172.475490][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.995'. [ 172.496154][ T9212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.944762][ T9256] vlan0: left promiscuous mode [ 173.027495][ T9261] xt_hashlimit: size too large, truncated to 1048576 [ 173.190421][ T9270] Cannot find add_set index 0 as target [ 173.234893][ T9272] Cannot find add_set index 0 as target [ 173.245682][ T9277] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 174.178476][ T9339] pim6reg527: entered allmulticast mode [ 174.310219][ T9352] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_1, syncid = 2, id = 0 [ 174.720590][ T9381] openvswitch: netlink: nsh attr 8192 is out of range max 3 [ 174.745702][ T9381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.049960][ T9404] netem: unknown loss type 0 [ 175.055894][ T9404] netem: change failed [ 175.061413][ T9403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.875559][ T9450] xt_CT: No such helper "snmp" [ 176.113484][ T9464] __nla_validate_parse: 9 callbacks suppressed [ 176.113502][ T9464] netlink: 352 bytes leftover after parsing attributes in process `syz.0.1061'. [ 176.228127][ T9469] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1062'. [ 176.252715][ T9469] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1062'. [ 176.660706][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 176.955775][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'. [ 177.108456][ T9485] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1068'. [ 177.118158][ T9505] tipc: Started in network mode [ 177.123389][ T9505] tipc: Node identity 7, cluster identity 4711 [ 177.129825][ T9505] tipc: Node number set to 7 [ 177.131502][ T9485] netlink: zone id is out of range [ 177.137667][ T9506] validate_nla: 57 callbacks suppressed [ 177.137688][ T9506] netlink: 'syz.3.1068': attribute type 1 has an invalid length. [ 177.161526][ T9485] netlink: zone id is out of range [ 177.181619][ T9485] netlink: zone id is out of range [ 177.248884][ T9485] netlink: zone id is out of range [ 177.288626][ T9485] netlink: get zone limit has 8 unknown bytes [ 177.330739][ T9506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1068'. [ 177.370886][ T9506] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1068'. [ 177.480969][ T9528] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1081'. [ 177.774570][ T9549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1083'. [ 177.851501][ T9551] netlink: 'syz.4.1085': attribute type 75 has an invalid length. [ 178.337901][ T9583] netlink: 'syz.3.1094': attribute type 2 has an invalid length. [ 178.413723][ T9588] bridge_slave_0: mtu less than device minimum [ 178.885661][ T9615] netlink: 'syz.0.1103': attribute type 29 has an invalid length. [ 178.897029][ T9615] netlink: 'syz.0.1103': attribute type 29 has an invalid length. [ 178.909170][ T9615] netlink: 'syz.0.1103': attribute type 29 has an invalid length. [ 179.054579][ T9619] netlink: 'syz.0.1105': attribute type 30 has an invalid length. [ 179.065737][ T9620] netlink: 'syz.0.1105': attribute type 30 has an invalid length. [ 179.387261][ T9641] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 180.159957][ T9689] netlink: 'syz.1.1127': attribute type 1 has an invalid length. [ 180.239168][ T9692] netlink: 'syz.2.1125': attribute type 12 has an invalid length. [ 180.350503][ T9699] netlink: 'syz.1.1129': attribute type 11 has an invalid length. [ 180.357365][ T9702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.385760][ T9694] Bluetooth: MGMT ver 1.23 [ 180.754163][ T9718] sctp: [Deprecated]: syz.1.1135 (pid 9718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.754163][ T9718] Use struct sctp_sack_info instead [ 180.867177][ T9726] batman_adv: batadv0: Adding interface: dummy0 [ 180.890576][ T9726] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.947196][ T9726] batman_adv: batadv0: Interface activated: dummy0 [ 180.985640][ T9732] batadv0: mtu less than device minimum [ 180.993368][ T9732] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 181.243847][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 181.245641][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 181.250217][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 181.571903][ T9767] pimreg: entered allmulticast mode [ 181.608091][ T9768] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 182.009318][ T9799] x_tables: duplicate underflow at hook 2 [ 182.018532][ T9800] vxcan1: entered allmulticast mode [ 182.037220][ T9800] vxcan1: left allmulticast mode [ 182.042242][ T9800] macvlan0: left allmulticast mode [ 182.255842][ T9816] ip6gre0: entered promiscuous mode [ 182.261682][ T9816] vlan3: entered promiscuous mode [ 182.301542][ T9816] ip6gre0: left promiscuous mode [ 182.431697][ T9829] validate_nla: 3 callbacks suppressed [ 182.431718][ T9829] netlink: 'syz.1.1168': attribute type 7 has an invalid length. [ 182.530292][ T9837] veth1_to_hsr: entered promiscuous mode [ 182.546897][ T9837] __nla_validate_parse: 18 callbacks suppressed [ 182.546919][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1169'. [ 182.572248][ T9839] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1170'. [ 182.638809][ T9837] hsr_slave_1 (unregistering): left promiscuous mode [ 182.648107][ T9839] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1170'. [ 182.661011][ T9841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1170'. [ 182.671910][ T9839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1170'. [ 183.222835][ T9876] veth3: entered allmulticast mode [ 183.230724][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'. [ 183.452735][ T9903] netlink: 'syz.1.1188': attribute type 29 has an invalid length. [ 183.484141][ T9903] netlink: 'syz.1.1188': attribute type 29 has an invalid length. [ 183.614055][ T9909] nftables ruleset with unbound set [ 183.665112][ T9911] netlink: 'syz.4.1192': attribute type 10 has an invalid length. [ 183.715400][ T9911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.748438][ T9911] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 184.035048][ T9938] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 184.058093][ T9938] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 184.077957][ T9938] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 184.212455][ T9944] ebt_among: dst integrity fail: 101 [ 184.262459][ T9949] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1204'. [ 184.515065][ T9956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 184.650211][ T9962] netlink: 'syz.1.1211': attribute type 10 has an invalid length. [ 184.682083][ T9962] team0: Device veth0_macvtap failed to register rx_handler [ 184.738022][ T9968] netlink: 'syz.3.1210': attribute type 1 has an invalid length. [ 184.750757][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1210'. [ 184.815231][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 184.857354][ T9937] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 184.870460][ T9937] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 184.890180][ T9937] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 184.961476][ T9978] veth7: entered allmulticast mode [ 185.049054][ T9986] sctp: [Deprecated]: syz.4.1217 (pid 9986) Use of int in max_burst socket option. [ 185.049054][ T9986] Use struct sctp_assoc_value instead [ 185.509186][T10025] x_tables: duplicate underflow at hook 4 [ 185.927373][T10054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.934696][T10054] IPv6: NLM_F_CREATE should be set when creating new route [ 185.941955][T10054] IPv6: NLM_F_CREATE should be set when creating new route [ 185.949329][T10054] IPv6: NLM_F_CREATE should be set when creating new route [ 186.901334][T10092] netlink: 'syz.3.1250': attribute type 2 has an invalid length. [ 187.703890][T10138] __nla_validate_parse: 8 callbacks suppressed [ 187.703909][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 187.741083][T10148] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 187.804122][T10143] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1265'. [ 188.217764][T10175] x_tables: duplicate underflow at hook 1 [ 188.719094][T10201] netlink: 'syz.4.1282': attribute type 33 has an invalid length. [ 188.808678][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1282'. [ 188.812673][T10204] netlink: 'syz.1.1283': attribute type 2 has an invalid length. [ 188.827473][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1276'. [ 189.172189][T10217] net_ratelimit: 18 callbacks suppressed [ 189.172209][T10217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.554208][T10234] pim6reg: entered allmulticast mode [ 189.854657][T10248] tipc: Enabling not permitted [ 189.865420][T10248] tipc: Enabling of bearer rejected, failed to enable media [ 190.055126][T10265] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 190.073714][T10268] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1304'. [ 190.452585][T10282] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1312'. [ 190.476171][T10282] netlink: 864 bytes leftover after parsing attributes in process `syz.3.1312'. [ 190.491141][T10288] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1313'. [ 190.510173][T10288] netlink: 'syz.0.1313': attribute type 4 has an invalid length. [ 190.522315][T10288] netlink: 'syz.0.1313': attribute type 4 has an invalid length. [ 190.617586][T10282] tipc: Started in network mode [ 190.622584][T10282] tipc: Node identity -, cluster identity 4711 [ 190.650928][T10293] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 190.699148][T10293] netlink: 'syz.0.1315': attribute type 1 has an invalid length. [ 190.798071][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.823080][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.601693][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1329'. [ 191.709759][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 191.726053][T10345] netlink: 'syz.1.1330': attribute type 13 has an invalid length. [ 191.836496][T10349] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 192.126505][T10366] openvswitch: netlink: Missing key (keys=40, expected=100) [ 192.757657][T10392] veth0_vlan: entered allmulticast mode [ 192.966165][T10406] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.985751][T10406] bond0: (slave bond4): Enslaving as an active interface with an up link [ 193.160811][T10417] __nla_validate_parse: 2 callbacks suppressed [ 193.160832][T10417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1354'. [ 193.327411][T10423] netlink: 'syz.1.1356': attribute type 18 has an invalid length. [ 193.528649][ T25] IPVS: starting estimator thread 0... [ 193.566871][T10439] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 193.594086][T10434] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1357'. [ 193.633345][T10435] IPVS: using max 24 ests per chain, 57600 per kthread [ 193.710718][T10442] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1362'. [ 193.741125][T10444] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1363'. [ 193.752678][T10442] netlink: 1275 bytes leftover after parsing attributes in process `syz.2.1362'. [ 193.764196][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1363'. [ 193.773294][T10442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.137988][T10470] delete_channel: no stack [ 194.253266][T10473] netlink: 'syz.3.1370': attribute type 21 has an invalid length. [ 194.389747][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1374'. [ 194.533664][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.540343][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.619052][T10487] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1377'. [ 194.868098][T10502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1381'. [ 194.949077][T10499] x_tables: duplicate underflow at hook 1 [ 195.194894][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1386'. [ 195.618414][T10550] ------------[ cut here ]------------ [ 195.624671][T10550] WARNING: CPU: 1 PID: 10550 at net/mac80211/rate.c:53 rate_control_rate_init+0x5ec/0x680 [ 195.635152][T10550] Modules linked in: [ 195.639108][T10550] CPU: 1 UID: 0 PID: 10550 Comm: syz.4.1396 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 195.650094][T10550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 195.660364][T10550] RIP: 0010:rate_control_rate_init+0x5ec/0x680 [ 195.666851][T10550] Code: 8b 82 01 00 00 20 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 60 ad 65 f6 90 0f 0b 90 eb e2 e8 55 ad 65 f6 90 <0f> 0b 90 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8e 00 00 00 [ 195.687017][T10550] RSP: 0018:ffffc90003d9efd0 EFLAGS: 00010287 [ 195.693565][T10550] RAX: ffffffff8b39c69b RBX: 0000000000000001 RCX: 0000000000080000 [ 195.701574][T10550] RDX: ffffc9000cd69000 RSI: 00000000000003a9 RDI: 00000000000003aa [ 195.709700][T10550] RBP: ffffffff8b39c1e5 R08: ffffffff8b39c2d0 R09: 1ffffffff2854910 [ 195.717816][T10550] R10: dffffc0000000000 R11: fffffbfff2854911 R12: ffff888011fd0e40 [ 195.726056][T10550] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff1100695380a [ 195.734108][T10550] FS: 00007f0e9096a6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 195.743232][T10550] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 195.749848][T10550] CR2: 00007f0e8fb6b7e0 CR3: 000000007efb2000 CR4: 00000000003526f0 [ 195.758007][T10550] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 195.766077][T10550] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 195.774377][T10550] Call Trace: [ 195.777688][T10550] [ 195.780652][T10550] ? __warn+0x165/0x4d0 [ 195.784928][T10550] ? rate_control_rate_init+0x5ec/0x680 [ 195.790524][T10550] ? report_bug+0x2b3/0x500 [ 195.795248][T10550] ? rate_control_rate_init+0x5ec/0x680 [ 195.800854][T10550] ? handle_bug+0x60/0x90 [ 195.805356][T10550] ? exc_invalid_op+0x1a/0x50 [ 195.810077][T10550] ? asm_exc_invalid_op+0x1a/0x20 [ 195.815194][T10550] ? rate_control_rate_init+0x135/0x680 [ 195.820872][T10550] ? rate_control_rate_init+0x220/0x680 [ 195.826612][T10550] ? rate_control_rate_init+0x5eb/0x680 [ 195.832194][T10550] ? rate_control_rate_init+0x5ec/0x680 [ 195.837855][T10550] rate_control_rate_init_all_links+0xfc/0x190 [ 195.844105][T10550] sta_apply_auth_flags+0x1b6/0x410 [ 195.849364][T10550] sta_apply_parameters+0xe23/0x1550 [ 195.854855][T10550] ieee80211_add_station+0x3da/0x630 [ 195.860197][T10550] rdev_add_station+0x11b/0x2b0 [ 195.865189][T10550] nl80211_new_station+0x1d53/0x2550 [ 195.870733][T10550] ? __pfx_nl80211_new_station+0x10/0x10 [ 195.876473][T10550] ? netdev_run_todo+0xf88/0x1000 [ 195.881580][T10550] genl_rcv_msg+0xb14/0xec0 [ 195.886205][T10550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.891276][T10550] ? __pfx_lock_acquire+0x10/0x10 [ 195.896405][T10550] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 195.901826][T10550] ? __pfx_nl80211_new_station+0x10/0x10 [ 195.907565][T10550] ? __pfx_nl80211_post_doit+0x10/0x10 [ 195.913127][T10550] ? __pfx___might_resched+0x10/0x10 [ 195.918466][T10550] netlink_rcv_skb+0x1e3/0x430 [ 195.923355][T10550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.928421][T10550] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.933865][T10550] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 195.939531][T10550] genl_rcv+0x28/0x40 [ 195.943613][T10550] netlink_unicast+0x7f6/0x990 [ 195.948430][T10550] ? __pfx_netlink_unicast+0x10/0x10 [ 195.953810][T10550] ? __virt_addr_valid+0x45f/0x530 [ 195.959135][T10550] ? __phys_addr_symbol+0x2f/0x70 [ 195.964428][T10550] ? __check_object_size+0x47a/0x730 [ 195.969766][T10550] netlink_sendmsg+0x8e4/0xcb0 [ 195.974832][T10550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.980167][T10550] ? aa_sock_msg_perm+0x91/0x160 [ 195.985248][T10550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.990571][T10550] __sock_sendmsg+0x221/0x270 [ 195.995471][T10550] ____sys_sendmsg+0x52a/0x7e0 [ 196.000295][T10550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.005688][T10550] ? __fget_files+0x2a/0x410 [ 196.010342][T10550] ? __fget_files+0x2a/0x410 [ 196.015050][T10550] __sys_sendmsg+0x269/0x350 [ 196.019691][T10550] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.024980][T10550] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.031364][T10550] ? do_syscall_64+0x100/0x230 [ 196.036247][T10550] ? do_syscall_64+0xb6/0x230 [ 196.040984][T10550] do_syscall_64+0xf3/0x230 [ 196.045849][T10550] ? clear_bhb_loop+0x35/0x90 [ 196.050570][T10550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.056598][T10550] RIP: 0033:0x7f0e8fb85d29 [ 196.061058][T10550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.081089][T10550] RSP: 002b:00007f0e9096a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.089632][T10550] RAX: ffffffffffffffda RBX: 00007f0e8fd75fa0 RCX: 00007f0e8fb85d29 [ 196.097700][T10550] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000005 [ 196.105855][T10550] RBP: 00007f0e8fc01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 196.113931][T10550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.121938][T10550] R13: 0000000000000000 R14: 00007f0e8fd75fa0 R15: 00007ffd9f3d6a98 [ 196.130165][T10550] [ 196.133340][T10550] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 196.140646][T10550] CPU: 1 UID: 0 PID: 10550 Comm: syz.4.1396 Not tainted 6.13.0-rc3-syzkaller-00151-gcc54ec56d822 #0 [ 196.151434][T10550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 196.161509][T10550] Call Trace: [ 196.164803][T10550] [ 196.167756][T10550] dump_stack_lvl+0x241/0x360 [ 196.172459][T10550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.177666][T10550] ? __pfx__printk+0x10/0x10 [ 196.182264][T10550] ? vscnprintf+0x5d/0x90 [ 196.186604][T10550] panic+0x349/0x880 [ 196.190550][T10550] ? __warn+0x174/0x4d0 [ 196.194718][T10550] ? __pfx_panic+0x10/0x10 [ 196.199163][T10550] __warn+0x344/0x4d0 [ 196.203168][T10550] ? rate_control_rate_init+0x5ec/0x680 [ 196.208760][T10550] report_bug+0x2b3/0x500 [ 196.213126][T10550] ? rate_control_rate_init+0x5ec/0x680 [ 196.218723][T10550] handle_bug+0x60/0x90 [ 196.222895][T10550] exc_invalid_op+0x1a/0x50 [ 196.227395][T10550] asm_exc_invalid_op+0x1a/0x20 [ 196.232263][T10550] RIP: 0010:rate_control_rate_init+0x5ec/0x680 [ 196.238435][T10550] Code: 8b 82 01 00 00 20 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 60 ad 65 f6 90 0f 0b 90 eb e2 e8 55 ad 65 f6 90 <0f> 0b 90 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8e 00 00 00 [ 196.258405][T10550] RSP: 0018:ffffc90003d9efd0 EFLAGS: 00010287 [ 196.264482][T10550] RAX: ffffffff8b39c69b RBX: 0000000000000001 RCX: 0000000000080000 [ 196.272463][T10550] RDX: ffffc9000cd69000 RSI: 00000000000003a9 RDI: 00000000000003aa [ 196.280441][T10550] RBP: ffffffff8b39c1e5 R08: ffffffff8b39c2d0 R09: 1ffffffff2854910 [ 196.288420][T10550] R10: dffffc0000000000 R11: fffffbfff2854911 R12: ffff888011fd0e40 [ 196.296487][T10550] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff1100695380a [ 196.304461][T10550] ? rate_control_rate_init+0x135/0x680 [ 196.310011][T10550] ? rate_control_rate_init+0x220/0x680 [ 196.315643][T10550] ? rate_control_rate_init+0x5eb/0x680 [ 196.321199][T10550] rate_control_rate_init_all_links+0xfc/0x190 [ 196.327363][T10550] sta_apply_auth_flags+0x1b6/0x410 [ 196.332570][T10550] sta_apply_parameters+0xe23/0x1550 [ 196.337873][T10550] ieee80211_add_station+0x3da/0x630 [ 196.343265][T10550] rdev_add_station+0x11b/0x2b0 [ 196.348221][T10550] nl80211_new_station+0x1d53/0x2550 [ 196.353524][T10550] ? __pfx_nl80211_new_station+0x10/0x10 [ 196.359151][T10550] ? netdev_run_todo+0xf88/0x1000 [ 196.364197][T10550] genl_rcv_msg+0xb14/0xec0 [ 196.368711][T10550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 196.373754][T10550] ? __pfx_lock_acquire+0x10/0x10 [ 196.378773][T10550] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 196.384138][T10550] ? __pfx_nl80211_new_station+0x10/0x10 [ 196.389780][T10550] ? __pfx_nl80211_post_doit+0x10/0x10 [ 196.395251][T10550] ? __pfx___might_resched+0x10/0x10 [ 196.400539][T10550] netlink_rcv_skb+0x1e3/0x430 [ 196.405304][T10550] ? __pfx_genl_rcv_msg+0x10/0x10 [ 196.410329][T10550] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.415631][T10550] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 196.421106][T10550] genl_rcv+0x28/0x40 [ 196.425099][T10550] netlink_unicast+0x7f6/0x990 [ 196.429873][T10550] ? __pfx_netlink_unicast+0x10/0x10 [ 196.435162][T10550] ? __virt_addr_valid+0x45f/0x530 [ 196.440364][T10550] ? __phys_addr_symbol+0x2f/0x70 [ 196.445401][T10550] ? __check_object_size+0x47a/0x730 [ 196.450826][T10550] netlink_sendmsg+0x8e4/0xcb0 [ 196.455687][T10550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.460975][T10550] ? aa_sock_msg_perm+0x91/0x160 [ 196.465925][T10550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.471207][T10550] __sock_sendmsg+0x221/0x270 [ 196.475894][T10550] ____sys_sendmsg+0x52a/0x7e0 [ 196.480667][T10550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.485948][T10550] ? __fget_files+0x2a/0x410 [ 196.490543][T10550] ? __fget_files+0x2a/0x410 [ 196.495143][T10550] __sys_sendmsg+0x269/0x350 [ 196.499759][T10550] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.504902][T10550] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.511233][T10550] ? do_syscall_64+0x100/0x230 [ 196.516006][T10550] ? do_syscall_64+0xb6/0x230 [ 196.520686][T10550] do_syscall_64+0xf3/0x230 [ 196.525199][T10550] ? clear_bhb_loop+0x35/0x90 [ 196.529876][T10550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.535771][T10550] RIP: 0033:0x7f0e8fb85d29 [ 196.540182][T10550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.559798][T10550] RSP: 002b:00007f0e9096a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.568224][T10550] RAX: ffffffffffffffda RBX: 00007f0e8fd75fa0 RCX: 00007f0e8fb85d29 [ 196.576196][T10550] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000005 [ 196.584178][T10550] RBP: 00007f0e8fc01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 196.592145][T10550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.600116][T10550] R13: 0000000000000000 R14: 00007f0e8fd75fa0 R15: 00007ffd9f3d6a98 [ 196.608102][T10550] [ 196.611256][T10550] Kernel Offset: disabled [ 196.615648][T10550] Rebooting in 86400 seconds..