last executing test programs: 3.272812831s ago: executing program 1 (id=1693): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, 0x0, 0x103, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf250e00000008000300", @ANYRES32=r1, @ANYBLOB="080001000100000008000e000800000008000300f12b9f2112823496aaaed79c3e598f2b5c02835602a608cb2606048cd3a48e6b0d28b49567e35af598a29869aeeedc9a88b0f0b9b29ad71400be5081bb63121380becbd3719f1e084a35af7c6e04afcaa13c397548a8fbb35a74071a5c998f9762929648b03901efa1bd15c6a7c106a013145df03b2c5a9b84a064ff35a5f4cfd2eca1403415060659b82ceac3d84509e79550d6d45a0f383b51069caf3fbea51c5774d92bb4", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="080001000000000008000e0006000000"], 0x4c}, 0x1, 0x0, 0x0, 0x92}, 0x200000c4) 2.996448769s ago: executing program 1 (id=1696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x4, 0x7}, 0x9b, 0x0, 0xa, 0x4, 0x6, 0x9, 0x15, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x20040800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @remote}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r8, &(0x7f0000000240)="3014db6e73f121df201232acca63e9f85568c10d0c7857c044115365ec06707901fc2321b89e433dfa2087bb4a94716d6f07a183775dbd0a8f0616b5bd41932341a19b2d035a0ee1db2023", &(0x7f00000002c0)=""/215}, 0x20) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmmsg(r11, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e2613c2b346dc3f0a7387", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.708724626s ago: executing program 3 (id=1703): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r2, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x5c, 0x433547ab64d46445, 0xb, 0x16, 0x48, 0x4, 0x18, 0x6c]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008075}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bb0280000788fb", 0x15}], 0x1}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000003b80)) socket$inet6(0xa, 0x2, 0x8000) 2.559327922s ago: executing program 3 (id=1706): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x10, 0x100000000002, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xfc9f, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0xfffffffffffffc4a, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xfc9f, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0xfffffffffffffc4a, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/153, 0x99}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e200"/154, 0x9a}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) (async) sendmsg$tipc(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="b8d3d8e48974aae56e0046d828cd3b00000000008bdf0100d6b9aa5ffc723899ad120c5a54b1c64080f64f103ee1de769e5e9dd847dc85fea662eaad499c52a16f40cb3a0900000000000000b2e6b5397f7806b6ff846de37a34c8342bbac5a51eacf8a09cede8676044eafd3d7935f90651aa2d9c57276322b82e8976f5a4d980eaeb3b636630b810f2e200"/154, 0x9a}], 0x1, 0x0, 0x0, 0x84}, 0x20000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) (async) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xfb83a000) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20008844) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xe, &(0x7f0000001100)=ANY=[@ANYRES16=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) splice(r4, &(0x7f0000000080)=0x7f, r0, &(0x7f0000000240)=0x7f, 0x1, 0xf) (async) splice(r4, &(0x7f0000000080)=0x7f, r0, &(0x7f0000000240)=0x7f, 0x1, 0xf) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 2.480435951s ago: executing program 2 (id=1707): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x20000000, 0xea, 0x100004}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x8c}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000280)=@llc={0x1a, 0x5, 0x5, 0x40, 0x8, 0xa7}, 0x80, &(0x7f0000000140)=[{&(0x7f00000003c0)="66b7ce0ff817c8385afa18fa1d2d0c3cf7dbd74bb29274a162bcb8c0007cd02243016aab9f689278c15ba3d70d0a2704f959cf3a3972b405c01919e63b3043fb9a4c5d6505e2149d33e051373778bc02468dd4f7a3d07e13563fca3e769b234248", 0x61}], 0x1}, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000300)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000022c0)=ANY=[@ANYBLOB="1c140000", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbdf252e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x141c}, 0x1, 0x0, 0x0, 0x6000000}, 0x4004004) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x2040804) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), 0xffffffffffffffff) 2.320694126s ago: executing program 1 (id=1711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r5 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x6a}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x81, 0x55}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5c}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x74}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x68}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x20004000) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, &(0x7f00000000c0)) 2.320097317s ago: executing program 3 (id=1712): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x88}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r4 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, &(0x7f00000002c0)=0x20) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x21}]}, 0x28}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) (async) setsockopt$inet6_mreq(r1, 0x29, 0x4, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x40, 0x8000, 0x2, 0x2, {{0xb, 0x4, 0x1, 0x5, 0x2c, 0x64, 0x0, 0xd, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x14, 0x2, [{0x6, 0xe, "458d68062966c5604cba10b5"}]}, @noop]}}}}}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x35, 0x0, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r2) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) (async) r9 = openat$cgroup_freezer_state(r7, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendto(r10, &(0x7f0000000380)="b59be516f24547c3ce3e131cb25253da6708fe55c5c8652bc1562996425d9faf25683c54e3aef02e1f136e4e608461d5db4dda157e4dd5e87ee7917ccc8877db053333bed8e9e0f273d34d47648d03d5900211d2d17c83676d00a5f423a46a1e300a1405dd295684dbdf089d1160cf114fae7b23823905d073a13bb5fa2ce5", 0x7f, 0x24000800, 0x0, 0x0) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1700000040683377635914e1973566f5d5dfb8df7ce600"/34, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r11}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x8b, &(0x7f0000000100)=""/139}, 0x90) (async) write$cgroup_freezer_state(r9, &(0x7f00000000c0)='THAWED\x00', 0x7) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000005600010027bd7000fddfd358de8765ac", @ANYRES32=r5, @ANYBLOB="9d87fc37be5b"], 0x18}}, 0x4) 2.124053157s ago: executing program 3 (id=1714): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 2.0726752s ago: executing program 1 (id=1715): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac00028008000300010000000800010010000000010004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaaaa000006000200010000000a000400aaaaaaaaaabb0000100005800a000400b25b12b8e5000000140035006d6163766c616e30"], 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080), 0x4) 1.937925266s ago: executing program 2 (id=1717): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x409, 0x0, 0x8001, 0x1c, 0x3, 0x19, 0x4}}]}}]}, 0x148}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08fc440000240000000000110300ac01000000d482449a00"/50], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) r9 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x79, &(0x7f0000000000)=r12, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000100)=@raw=[@exit, @cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @map_val={0x18, 0x1, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0xb3}, @map_fd={0x18, 0x6, 0x1, 0x0, r6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000040800124080000000050005000000000005000100060000000d000300686173683a6d6163", @ANYRES8=r7, @ANYRES64=r1], 0x5c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000068000100260b7100ff7f00000000000000000c006d00030000000b00000006000700030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x3, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x0, {[@fastopen={0x22, 0x6, "269042f6"}]}}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000665000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200005000f100850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x90) 1.880669451s ago: executing program 4 (id=1718): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x7c}}}}, ["", ""]}, 0x28}}, 0x20004001) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x9c7, 0x6, 0x2}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa000}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048000}, 0x10) r4 = socket(0x10, 0x3, 0xc) write(r4, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) 1.858815484s ago: executing program 0 (id=1719): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_proto_private(r0, 0x89ee, &(0x7f0000007880)="0ecd") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000dfcc0000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x44, r5, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_b, @device_a, @from_mac}, @ext_ch_sw={0x4, 0x4, {{}, @void}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x44}}, 0x0) 1.769991486s ago: executing program 1 (id=1720): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0c}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.68880891s ago: executing program 4 (id=1721): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x400}, 0x1c) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="1400", 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.627753162s ago: executing program 0 (id=1722): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xf9}, [@exit, @generic={0x5, 0xa, 0x1, 0xd, 0x9}, @tail_call]}, &(0x7f0000000080)='GPL\x00', 0x36, 0xe, &(0x7f00000000c0)=""/14, 0x41000, 0x58, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x4, 0x10, 0x1, 0x3000000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000140)=[0x1], &(0x7f0000000180)=[{0x4, 0x4, 0x2, 0x2}, {0x1, 0x4, 0xf, 0x4}, {0x5, 0x5, 0xd, 0xc}, {0x2, 0x4, 0x9, 0xc}]}, 0x94) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="3801000031000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b26b6e0000000000e8001100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bbff02000000000000000000000000000100"/240], 0x138}}, 0x0) 1.586967338s ago: executing program 4 (id=1723): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r3, &(0x7f0000000700)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/55, 0x37}, {&(0x7f0000000480)=""/184, 0xb8}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/47, 0x2f}, {&(0x7f0000000580)=""/3, 0x3}], 0x5, &(0x7f0000000640)=""/186, 0xba}, 0x40000220) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x110, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@generic="0b7265e18ec026f2919aaeccdaabda6dd69664ee0f943a65f5a47e7d25e0a418c46ce0d6c942fb2df6b45f0c8427291a1a5a58ca08e50b6f3fb68ba981a8b102cdb36f6fc85e9a2ed1a2b3b75a85f232ae4990a120f8ce6e4673b240c800f145a9b98a8be0ce69e932b52325898cbeb3a291316012275b561fd3fc010a06f03e2321b0909a4a25832cc5eed94695eb0eacc7c5690aa70c857fc83926c581adf110db69525cd7c79f9f02c9bdf9c2a4d6260a7bd9b6469ef37a1f16f80d9d08e807be15661d054abfd068df418f89f56166ee6f24044a3e9b7cfb70ae2f", @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x26, 0x0, 0x0, @pid=r5}]}]}]}]}, 0x110}}, 0x0) 1.536665879s ago: executing program 2 (id=1724): sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3b000300010000", 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xffff0000, 0x40f, 0xfffffffffffffe4a, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c280"], 0x48}}, 0x40000) bind$alg(r2, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000000)="00f10dfbd04ff81e3468f543b3af0391bee7ee6c24e35496920c373d4aada0adc3cff9f9f5bce958351e618c5ea0394d0cf9c525dd13e49ff95ac559954aeda6af8f875fc1dbbf587d32b1af8783a370e2e3522f0af51605db4e12e0f6fab0da61da65c0fa6ad15b", 0x68, 0x40, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000080)=[{0x5, 0x6, 0x3, 0x3}, {0xff, 0x4a}, {0x7ff, 0x40, 0xe, 0x4}]}, 0x10) r5 = socket$netlink(0x10, 0x3, 0xa) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.535386108s ago: executing program 1 (id=1725): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9000, @rand_addr=' \x01\x00'}], 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x9, 0xae, 0x2, 0xc0000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write(r1, &(0x7f0000000000)="3b000200", 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) 1.403275156s ago: executing program 0 (id=1726): syz_emit_ethernet(0x144, &(0x7f0000000600)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @local, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "409f09", 0x10a, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}]}, @hopopts={0x0, 0x6, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x4, 0xe437, [0xaa7, 0xaf, 0x1, 0xed, 0x5]}}, @pad1]}, @srh={0x3c, 0x6, 0x4, 0x3, 0x5e, 0x8, 0x7f, [@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @dev={0xfe, 0x80, '\x00', 0x2c}]}], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x0, "7a7306422de037a9e88c8aed658b6fc1502b8b8f7dc86149f1a07609adf714d8b206987d334bbc870fd26d4c29b0d927db7d71aed2d12dc7f5960158dea824cd46d1821854daef3a9bff106eead4174937d74438b46949790f004d5f0e822dea9712f97b7b4307212001b7f9551cd0c7e66ab9964955a14d9224"}}}}}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000050) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1.354381287s ago: executing program 4 (id=1727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x20050800) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, &(0x7f00000001c0), 0x0}, 0x20) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'team_slave_1\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x32, 0x11, 0x4, {0x8, @tcp_ip4_spec={@remote, @empty, 0x4e21, 0x4e22, 0x4}, {0x0, @remote, 0xa7, 0x0, [0x40, 0x132]}, @ether_spec={@remote, @random="787ac0791d6b", 0x3}, {0x0, @empty, 0x0, 0x2, [0x1c00]}, 0x6, 0x7}}}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008b000000bf090000000000005509010000000000950000000000000085000000c9000000bf91000000000000b70205000000000085000000c5000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000021c0)=ANY=[@ANYRES8=r1, @ANYRES32=r3, @ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRES64=r2, @ANYBLOB="7666d9749029c3b2dc8698274d6c0e6750ea7340c94d0413e0c9f72a7986210da73b2f3c5dc25bce7f723debb19f0e5825e91a7744101e487d5dbb3a71baf1c7c0c0350f628de9b7f38135b5e9d1176b56f680a81606305028c41d61a79e6e0c79373e18d768dc3db9a7d85e951a23baf18781b88a787d779daa199f80076fd8335bc791da33ed6945fb8f15a0e3082fc43059947b0f26d00e6b7997c8c45cd632c3ea33cde36931739e6e4defcd66dc9a574502a2779b5dd2f09cca91bb890fece376d0f8fbdc29f9f91daa188cdbb099", @ANYRESDEC=r1, @ANYBLOB="b12c9047b3e3270b2e87694123eaa910419ebff42d0396f15547cd56998bc78cf6a1b9ba9075561a49c698785329155c4985d66c8e625802d632e9e4fc3ad88b61bbe1afeb2ebecc89282c65b07a73a5621a3ea1086bdfbec9740099c6b660ea437d5f0cf20f9f682db0313894d94e20c642349930c92b6140e25ed566615ac9bbce7a41b76d10c958da4b3ba01a5766ab7f7ba65f6b089818b46dbf409cbae95bf62bd377931233f282a23987ccda4cb3a85944b799c1d6bfbf70511848e8e723c401d2b57929ba336f9190816e3ded157745d6883fe3dcdfbcc01230b8df7e382fa802fffb61ad7718794e8428c02f23bee68e4c34d2823a5f222d6ad1a198537fc67c8f7baed5607cca6f69e38133bff5020e1393c5b98a8a9af4726a86dd15f38fe597675a7bfb100e51ed51407340b48022f30e54cbb66c5f2796002c3f3fcb54511916c15326f17fd4a5866800603925de7510e2af053fee962686b51c4969bad0289529e5752b4dcd5c83f5320d6c544d4bde6824d6e1de65af51b39b111957ef8d3a123013bc88ebd761d48b8f66254ae5feec494a2c4389b632556c00722b2c95133495c41343b360e2ed9e15ee9930089754538e5ab1fd4097d95399cd46ad058908af850c7b9b56b2fd9b771850923c35a05e40add607a94805bbf9c2d1f7e5583dca897fce2d9bb4c18412849722775369add8b4833629cb2fe2fac004fdf3fd8132f795f96613a000b588b8832bb8e00f77331cfae5ebbc075069ef6d6c49866d1c9159f30d4c1def1380d880a9807b8e134373d2be4d4b97743523dcdfe8389859f13013f033fe955e013d0f59f7d21d6fc76c34404c1be4192cf080d8c29c1b10376e811180cf97f6ba085de8d3bf867e2d4382e658230febd4c727e5c3a2f8b2ea6f5a318fc5adfc20e786e551e63de862fda08526b0ed364771161079a4cb75717792f30429d8b8863f14349775d1fd0ac5ad0a6ac0cd311b75fb8c40a8008203c09245d78fb7a095cd66777731eb4892e3e2e2fdb17cb969f25a07ff4dfef9398ce8772200afb03a74683163edf0567ef63f0eca559d1d7b3d580fb589865c2f7aee0a030418e28a5405bb96b4d440f167e611aefc882479898b38a5e29a43e6c4ad7c5429a91cc7afc6f6ac2d634cd8526c23c62b9c284229da7fa5e229062bbcc157e70d7bba321bb22814bbbbd3b8145e7dc2d597e9dec7ba9ed4a6a77eec92db9d24cd4fa40f2fff936b8756a59bd162f37c06adace949edf4502e3b828f3c9470379997509f55ea1af3186daf1e4a96f032bc04ecc774389ffb123963dae1d1450c8eb04d6f6c508b215b53d0b5600db87ab9462121410f3dc9c15b47295792098d5ff3db9d70c2466aa8ccd763e12541968a2ac9b9ecbcf4b18a61ff051bcfba44d23d0b1f8f3c4006eb9748257c169faa786db02366a1fe459782b469c2aa9ff1b7f4b30b156e60a60add15b6e0782ea2dc57b1afd1010a459f64594d6d033dc4ab97003dc91bc76d4641dbf0bdcc56c459e5a2df99a6ab4eeaf7eccca77f07d788b0afadd94b51d20e8f02baaff3eb2316ef767b3618a52695edb369b27a711ec28a20a261f3727ee41dda9be677c7592b1eb9937d9c481ad8a4e7ff8edfae116c1a2e846af36e70de417ef562fae1bccf0dcc737c35d3538c715fdf313ac9efc81a062ad6ce3071198201d00e211d61f0a7dd3def4412283d6c8b3e36718d8812af012a7f29e3fc503f888aab3deb2c9d4ac8a2c45585e8635ab646be13b50644874ab040d20edaee73c3fca5a0f56a3108847d36a0b5e4d16108bfb7701ac88230f4ef389b387417958d7a16cc1460bee8102806a1ae09a68de0d548264fbd5a7dec7e1548793c30e8f73d2f4f01ef406400f297d11b146c3f7a67d934ee57740a1f1748cb0a983f4075e30cb5495d74a52bed05e801db596abf7da9b9f7ef3bf87aca80f1af5afad6df1b50c4286da7e704aa2d9a98551928039f4962ccf10248e568597348767d257d3a6bb1a5daad945c575fe998509ae46d3bb7bae1ef378940e725a44a8e0e5f2a733daffc9e86b1f8cee475a2d619986f93acab45ebb094b60c3c83b09a7ee3075da129ee9436be994b17747a1238d2cfc41f1c7585c3eeea1e8ddf499e55127801dcae45710b304fbfe9e0ce2113524da4cdebac831a7e77f1cdc1c11137a11669cd70ebd30fa35235ff7564f9cf5ebee40d205a7354998681ea4d0b56d57ef1c2fb8abcdae82337d93b0afa039d2fed120ce994d32d4c848f2ed7d706acb564f67d78de66c4242e86b84710a11bf3aa388daca6015227b1405b668f0cb86e209ff5d75cd446eca74bcb8b374fbf53234d1e8d88d404a724cec6f407df96f519c06b9f2725d6a5287f0f04c2326d69f224ba73892e8a5d4236a2b1bca6e09c9f1c2fa2ddf7dfad0576ffcbcbe07bc2c9dceeafcdbf29a6535ac257f487f3f434560a74047109692833a9859d893e66e2953c4f3b5aae6443033e86e45853b7c831bf01d844928f6166546033d50fb5f2aa3ba69d0d8b125b268d1a52e7a315235bc6eb4c9d2af8bc6736dfe9ff7dc3e04cda5bf8fd8310cdd25fe272b53957e96a22f94cf7be1d3c4bd670366fb18cc4afd5b090006132d477ab49e4e976612b92b30154c5dbb1c9ba30e4bba868b4741c6698416097b8136621f1bb2737a86ec104a20c65e96250b8e1096f3699994469c64595b651326abd9445c76737b691539d207dc9390599bba0e109741e115cf2f559f79c30f6bc704b199d0173e34cfeda03d1fed3b54a481fa48c15109f1a48d6269119f059778568af26c5b65bdd19a1171c74a62e5180f45aad0eb0f7937db9d76507b9efd282a7f2fb1baebba04e46e22ae8ef0bbba2edd6d77e3dc0f27feca0f110cdd276870b9eee42353a292f59384524bf84e03f9c30f16b8013a8cf070cd7fd32e104f9ebe67968e284208175c8ef2ebb1d5be546d9f4ab87081c0986977e0fe5a93bca2b200e8c81298da05d1b219c31b1f2bd577a6af83bc406f97e5f846e4353a2967cf1f5f34a7e1e428c516b5004e9ee12dc86ea8a86f68d7be15e1561ff70e33a05ed6045b48b5b3ff382207dd9880ca6c78e48659624c99d3d31f3aa15bd95c89378e8b5298308da6ad4bfbbc05e7c75b75bbbb8f51d1bd9aa8005232685f5a5aeafb04583313f102032fad80597a443119ffee519daa8fca72aeb201ccafc1775fc3a4403c9b8ff1ce0fd3bace26ee1876a256984a1e05ac1cf10b44631425d54a97cb71bdddc2222c998d0bdd3497653d67e6a04fe1717de27f86eca13dea29790b8e55fb469b3430c7ee0675b15ae7f896fb7cec4195cd1b0239e92ff21996c2a3248624f3adb0a5fdb109f4710902a5ef51e4173d3c947fb29adae8cd77fd8a9610e0d5e20cce5cafdaf6600bbd87666f172b62acaf99d844fef61d2bc4df54f3b24e26f60af742d56d47e3cbbbaab3c5c11d1783a31ef848381b0adffb7efab77bfc6c2b77c9f91f6cf5cde78c5ac4e21506a9e9f6e72ab345674d4c59d667383f26063df1f7bb7e6ef86763dd7ae1ee54adec79a0555b6e84b0b70543988d907359caa2e461c25f32426b5869df87f70585560bbae58137d2d316952b9fa246b984cd09fba5e93cee469907a6201e1bf8d563525b348b4e288293558b226799c35c6e117b82efb9c9f9d1b94d3fd449f68dcf331228aa81338cf39ddbca07ba41e736e12603ffb9912aa4ea20f6f43a96f0955cf267bfc6fa9e316cf1b2e19a02a596aa32d028c1fe9318fcc73b0c915e221b52d27d9bcc72f916bf9a6bfefced3f7d6ab40c18cb30a0dbcb70226eafac22dfe79e747f33d3b7eba06e7dbbac8de3a5f19984c1121b433a26b57315aa4b383ccbb35db24003a23ff75f5b7a2426bce88e02cc0defc394062e6a22351fd0ae8eedfc07e9118e55f6ab143c40e6399d539078e877534c2d317161cc8d13e9d5a65486c7710cf08e2bb7e1915e0359adc5d3a268218cf3d8caede0a15b5dd61b668aa4a3b63b7f46a5f352911b22643be954646e5428ce820ce796a52245fb5106fddbfe21a1cb86a993309cf3789a23295f24e0387e4c01a3e1a6526c5e428bf53c8d43050afe043ecabf6b9ecfac54ce677f1f014cc2d7c2d8d22f2ad83a42970828254fafbeafc1031640468ae75968a697133579d2e8aa61a782f2fa79d9710337cf1e52b46092e56242d59325d1268d984462303dd838e4a3045d0d90a520e29609376becf410a2244019369b112a399a100d8d3673aded8eb5ba815f99599827db110cd5d0bfcb0dcf15e75df7a489d54edd46696211b255c7f21203512106bf7120af7e46fd3cf06c73f90055f12e1e7fe6ee02ce75b802b683631a0387bccacd2b76f4412524b457e98a73dc59588260121523d6aa737e447f6fc040b599a9bfccd8e985875070243595afb603eb5fae4d53f426ef0372b894090de02ed434b6180b516296df71589925e31f95f0d2667fe351970be4eadd7787a51fb7299c0a6d39df563d5e0b39c8ee34a864129b17df099980690e32fa9a3d18b68c7adf319478f6c676862baf3d34d1b0baa7173778bf7d594ab3dc667d6c83cb2e18f5580b6cce7f353aa784ae6fb3275f53b2bedb35ff05e0e7ed20d17768b6740ca735ec70865d3348597db2a7b0cd041d9430a641adb1ac3ffd7c6eb21a3def330e5472b0fe4512802001748ff5a952ca8b80834bf2a87db2b01606cf313d11b48bd0bffa8032b5c5038cdaba1ff2919a88d8acff0b0a6f9f46f967ba3902ba45606b81a07b2a81beafcf3ab90d13e12e82211308f62af6f91cfd482f7b560a8aa2c0ab3de21fdec0a4c0cbeda6c3c3d14c56431bd41c408770dca67f41599a3aa488a1ef29f79a6e75f5ffebb39e641b87e0233bcbdc3dc3f33d8fc44f3b964000ccb99a80432399ab367324603205b15b07bfe07a9aa82cd8980d8fc0d6ed47ea1c4276b3bc240a2f6b3629c15222ad37f6a4ce3491581769d26ce8b25a3f7789025e89d5b009072823abb8c0c16d1b1fecafbf6920beeacb5c683c7121d04becb2936aa240971e72c30f948330bb77777084b0893739b5948d1f0535269be8c3c2ec7030035a91f2d95ca1e05b76bbd4895df67e3e20348ace0e3a43799ab96599d582cfcad57d5e5ce0c5b1dd9c9f844da1fb129cecd786a1d13e0a2e1aa0afb2d0915ff367f75590f648757c84190a99aeadfc57c7e1773833d5e13e808eae77cd475d0940f4df5a672a4b9ab21caab6add5c5d46b08a2e565c02c69281ddb44c90cb1432cbdf838c33f7a4316e5ee4e20adc17f5696423f4f71049f064a6773030143016a297571cdf0af56c7cfbe6a0f940dcf911ed796e2db39787bbea7a530742461ff534122c09181166cca8f680bf80a3ece4c01b250b46f4d4c3c4cb455a685efb6da9a089149ed3bc8e773656200c3fd047374f03f935fb159a0df72dd532fce61e14a32ecc23c848a5e97aef8eb7620eb37b2d440b55854582de1b109e443a17689a24d65bef757972efa1beb83347c0ac2e9cd1efaf391009af3f6fea040251d1ce8fb31d6e75ce8a62122fec349cdb6180d6c50278587210fe9ba843ee0b22cdb6e51f253d872c909675b66d841cc9887fe3714903d05e012783c6718f057831ac7edae62d41d97ba3eee5dcf37a83c49ab30584e8584cdc9b6998c02cda03ffb671e1cf644d8605290ba9ee72d8388eaf62be10f5a39916c585059299b982e0714d782a6699d8403aecad0fc505225f280709b3422e891de3a4bd648d520bb18ba4bd86edca9634b02d1064675056d4bd9f56f9ea97", @ANYBLOB="39ae40e24d5670eca6df1ebe06e8858455d563caa0c564c2306261efe06a0c0fc7a97bf1f91bb5f5877d7824f8d102e2b54006142e3fd44bbb7e6c40b91c41a98c1f5eb5ffcbf761a370de7d1bb578201409837b8e89a321d0359e9e54e06decac18643696140f636d7e86563d3db26fe74489", @ANYRES32=r4], 0x18}, 0x1, 0x0, 0x0, 0x2000c811}, 0xad06d1d00cd63cac) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) bind$alg(r5, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x7, &(0x7f00000000c0)="faffffff", 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = accept4(r8, 0x0, &(0x7f0000000600), 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f0000000800)=0xc) sendmsg$nl_xfrm(r9, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000a40)=@polexpire={0x3d0, 0x1b, 0x0, 0x70bd27, 0x25dfdbfc, {{{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@private=0xa010102, 0x4e24, 0x2c, 0x4e22, 0x5, 0x2, 0xb0, 0x20, 0xe2, 0x0, r10}, {0x401, 0x7, 0xb, 0x7, 0xf, 0x2, 0x9, 0xf}, {0x9, 0x1000, 0xa0, 0x7}, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1}}, [@policy_type={0xa}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x4}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd27, 0x5}}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd2c, 0x70bd28, 0x70bd25, 0x70bd27, 0xd83, [0x8, 0x2, 0x0, 0x8, 0x7, 0xbe, 0x4, 0x1, 0x8]}}, @tmpl={0x84, 0x5, [{{@in6=@remote, 0x4d2, 0x2b}, 0x2, @in=@broadcast, 0x0, 0x1, 0x1, 0x3, 0x80, 0x9, 0xffffffff}, {{@in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4d5}, 0x2, @in=@remote, 0x34ff, 0x3, 0x1, 0x4, 0x101, 0x7, 0x7}]}, @policy_type={0xa}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @algo_auth={0x116, 0x1, {{'md4\x00'}, 0x670, "9aae54678215fccd838004d91fa6bdb9f8002dcb1d27ffca138cd1d84ec242cfeb9bc2266ca709da6d24ef381fb61803341a4c9a51aea0c90ec5539e518a6ab664f51068812d669a432417d80750990e9a8558db3e02e5960e97161dabd9dfb9f221aa38edb0b3fcc8e513240a81d06d0c5d1dff6ff7569a2838643bf09fc9846c0497acb618bf5b5af85842230e16aa9385fbaa554e693d510bcd14a2f47327f71f82fa7f9d7b0f922886a0e7b88aca9c9ed9cb6e90d6934777fa5a87c1b69b1667d7a1b2d94d313f6c17dbb1f6"}}, @XFRMA_SET_MARK_MASK={0x8}, @algo_auth_trunc={0xf3, 0x14, {{'hmac(blake2b-160-generic)\x00'}, 0x538, 0x60, "7508fc7f990dc02560465872b96d37c0e4c8272557d78bdb25017fe130d239b91892eadfa869931aa2a91d0819e267307d5ecba068ef9b63f64b9b9005ac7ce9aee893a53d121fba9fc711a66dc1d072a84c05c51f62f984d35ccd8df17fa89deee62d6b7cb37fff9a8af57fc97d20eee3a92b87e6d612cbdd9dfd01da4823f137556875b1dbeb57df046278441cfed61918508df18192a6a7c1a0691c4aae483c7d9abef5cf62"}}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x44}, 0x0) r11 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r11, 0x89e1, &(0x7f0000000080)={r8}) socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000003780)=""/4097, 0xe3f}, {&(0x7f00000002c0)=""/177, 0xe0}], 0x3}, 0x4}], 0x4000000000000a0, 0x40010000, 0x0) 1.20865971s ago: executing program 0 (id=1728): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0xfffffff3}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x0, @loopback}, 0x15) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000030303"], 0x20}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'pim6reg\x00'}) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) shutdown(r0, 0x2) 1.207741461s ago: executing program 2 (id=1729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0x48}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x14, 0x2b, 0x1, 0x70bd2d, 0x25dfdbfb, {0x13}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.013415037s ago: executing program 2 (id=1730): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x70bd26, 0x2, {0x0, 0x0, 0x0, 0x0, 0x103, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80c0}, 0x8c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="940000002b000b00000000000208000005000000040003007c0001"], 0x94}}, 0xc00) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000200001002bbd700000ff00000a108000000000080400010014000200fc02000000000000000000000000000014000100200100"/67], 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 1.010042561s ago: executing program 3 (id=1731): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="e4a35e0f2ea8d2e7f2296c96840c8ec9f0dccd7351904dc3db4b5246753c7158f613564eb55485429c74f2a1aa804c0f809b9d4a09e0466ea8e649e896", @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf257700000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x80) 876.42963ms ago: executing program 3 (id=1732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="010400000000fdcda8e0934ef9dbdf250aaa8b00", @ANYRES32=r8, @ANYBLOB="1400020020010000000000000000000000000001"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c0}, 0x24004040) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="0500f2fffffffedbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="4b000e0080000000ffffffffffff080211000000f744783da2a900000000000000000000070001000406f0027f0006a7060206003c0401006ca57206030303030303710700000000ff21680004002a00080026006c09000008000c006400000008000d000000000008007e00"], 0x98}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 372.779227ms ago: executing program 4 (id=1733): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @broadcast}, 0x10) (async) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) 221.157871ms ago: executing program 0 (id=1734): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xe, 0x3, 0x1ff, 0xdc02, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xd}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x4, 0x4, 0x0, r0}, 0x50) unshare(0x28000400) unshare(0x800) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x23}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 185.741962ms ago: executing program 2 (id=1735): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000140)='bridge_slave_0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r2, @ANYBLOB="04"], 0xc4}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r5 = socket(0x1e, 0x5, 0x0) getsockname$packet(r5, 0x0, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000000)={0x23, 0x16, 0x4, 0x3}, 0x10) ioctl$SIOCPNENABLEPIPE(r6, 0x89ed, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x1000000}]}}, 0x0, 0x26, 0x0, 0x9}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket(0x25, 0x800, 0xfffffffd) sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x1cc, 0x2, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x5c, 0x6, "bd89934bc1b3db124e5bbb833dbae73431fcc46564e2103e68fa0cdec9abf8231b8fcaf99e50c6d7ff8bb6aef9395bb7f0f195ceddfb1a4081e07f81ea499187d20779bb3695b227effd23422f63053da04a8fabd4db4d96"}, @NFTA_TABLE_USERDATA={0x4e, 0x6, "1a4ca6259812bae09ab390c3bb6ce4c5b2c4f395e4de0b91a3587dc6add998e4d20c62e0f71bb55d9a8165226a5abe17f218267ed59f48b97c051d9fffd82a6613d7d7da562b9bbde536"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xdb, 0x6, "972b5d85e25622cd8c8f3aeb3a6a638b6b896d19bbe8878454471c4737f2208c3fec96a6675600310bd3c1468ade4855166be5920dd69c9bc13d92481c3746bd3fdcec8e0647627926479852140d23846854dab9e942144fdc1e00d4fcf8bda6b61a964f27bead95bac2f2313e30a3e0d66a5c159ec1217483a851237ef6d8bfbe002a013552d3899cfd7b5fd3f86668ecb7291be41945ccdc820417ed86c6f441914bfefa9d5b6d90fc70d754f51197de160b903e35e6851a434b691341ad1f1f3875c20f50e397443fa36ce40d8d700a89d259b313ba"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x42}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x21c}, 0x1, 0x0, 0x0, 0xc081}, 0x4000090) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20008000) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) ioctl(r8, 0x8b32, &(0x7f0000000040)) 67.985392ms ago: executing program 0 (id=1736): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xd0c, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x224, 0x8, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4cab, @loopback, 0x7}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x19c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3380, @local, 0x8000}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8, @private0, 0x3}}, @WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fd60eafb62bf09c68e7c0f4a189df6a6c5b6f2fb8306a60d9539519e16cbed31"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xd5a, @empty, 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xfffffe01, @private1, 0x101}}]}, {0x2c8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2bc, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9c}}]}, {0xc8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x663}, @WGPEER_A_ALLOWEDIPS={0x90, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "920841cf25a5c4cfa1878b6323a6fdd8bf57c8174fc7f20301c4e289e07c81ec"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x30a}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x5f0, 0x8, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xbc, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "dc557d7229bd427a50d1d5bb5cfbab912ca366c03bbc4689ee64c2351521c376"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "594689c5039e0b058a77d861d5b262709eaa096be8a45407487e465bfdf8c432"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x490, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x45c, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfe00}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0xd0c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x79}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 0s ago: executing program 4 (id=1737): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={r1, 0xfc, "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"}, &(0x7f00000001c0)=0x104) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xec, 0x0, 0x0, 0x70bd29, 0x3, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4767c0ac15941e6ea2a8b1bfe5bb254b09554d4f70bcfc15"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="51d419f1375ab03272e9cc229de00491"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d17847146c9bc239"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="64d9d2a4a6c022ce2ae82bd969b0271b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c15660a249d11298ba82728d2601eac3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xc4e5}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6176f1542d3ce7c1466779237a2f0665"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ef39aa5961ad2a85"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="76da6b0406be1a2efe9cecd0c0ec3d7e"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f77f5380d97785091cc6978e0f80b7fe"}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x1000}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000440}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xa}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x40000d4) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x80000) getpeername$packet(r4, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000000780)={'erspan0\x00', r5, 0x700, 0x0, 0x6a, 0x2, {{0x2f, 0x4, 0x3, 0x4, 0xbc, 0x65, 0x0, 0x4, 0x29, 0x0, @private=0xa010100, @broadcast, {[@cipso={0x86, 0x16, 0x3, [{0x5, 0x10, "9c10734bc982969ec26b6e31e9e3"}]}, @cipso={0x86, 0x5b, 0x3, [{0x1, 0xd, "7ab0d6f1132fa84fd40f18"}, {0x2, 0xa, "80b80cb3079d99c7"}, {0x6, 0x5, "3cff77"}, {0x6, 0xf, "eb1b9056bdf38c32e152ae0855"}, {0x0, 0x10, "78053910ff31a7b0efdea655e89b"}, {0x2, 0xe, "78c0786e8fdf364c767c6df6"}, {0x2, 0xc, "93127a7aafe4280c1b67"}]}, @cipso={0x86, 0x2a, 0x3, [{0x2, 0xa, "b7a06c0bc3fc8b94"}, {0x5, 0xf, "b2268695025115da10cfdfc728"}, {0x1, 0x3, "11"}, {0x6, 0x8, "18174d9e5995"}]}, @timestamp_addr={0x44, 0xc, 0x59, 0x1, 0x4, [{@loopback, 0x7fff}]}]}}}}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x15b, 0x15b, 0x4, [@func={0xe, 0x0, 0x0, 0xc, 0x5}, @func={0xf, 0x0, 0x0, 0xc, 0x5}, @enum64={0xb, 0x5, 0x0, 0x13, 0x1, 0x0, [{0x6, 0x5, 0x9}, {0xb, 0x40, 0x4}, {0x2, 0x882, 0x7142}, {0x10, 0x81, 0x1}, {0xd, 0x8a6f, 0x200}]}, @datasec={0x7, 0x2, 0x0, 0xf, 0x3, [{0x1, 0xe0, 0x8001}, {0x3, 0x6, 0x8}], "03b501"}, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{0x7, 0x6}, {0x7, 0x9}, {0xf, 0x1}, {0x0, 0x3}, {0x10}, {0xf, 0x2}, {0x10, 0x101}, {0xd, 0x2}]}, @typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @enum64={0x5, 0x5, 0x0, 0x13, 0x1, 0x0, [{0xe, 0x4db9, 0x3}, {0x5, 0x80, 0x7}, {0x10, 0x8001, 0x8a}, {0xf, 0xa8, 0xfffffff7}, {0x10, 0xfffffe01, 0xf}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x3, 0x7}, @enum={0x3, 0x3, 0x0, 0x6, 0x4, [{0x0, 0x8001}, {0xe, 0x5}, {0x5, 0x4}]}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000a40)=""/190, 0x178, 0xbe}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x2, &(0x7f0000000600)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000640)='GPL\x00', 0x7f, 0xf4, &(0x7f0000000680)=""/244, 0x41100, 0x1a, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000b40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x1, 0x1, 0x7, 0x401}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000bc0)=[{0x4, 0x3, 0xc}, {0x5, 0x1, 0x3, 0x2}], 0x10, 0x8000}, 0x94) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000cc0), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000d00)={[{0x2b, 'net_cls'}, {0x2b, 'hugetlb'}, {0x2b, 'memory'}, {0x2d, 'cpu'}, {0x2b, 'memory'}, {0x2b, 'io'}, {0x2b, 'perf_event'}, {0x2b, 'cpu'}, {0x2d, 'rdma'}]}, 0x42) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, 0x140d, 0x1, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040890}, 0x54) r10 = socket$inet_smc(0x2b, 0x1, 0x0) recvmsg(r10, &(0x7f0000001280)={&(0x7f0000000e80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000f00)=""/3, 0x3}, {&(0x7f0000000f40)=""/118, 0x76}, {&(0x7f0000000fc0)=""/231, 0xe7}, {&(0x7f00000010c0)=""/89, 0x59}], 0x4, &(0x7f0000001180)=""/198, 0xc6}, 0x40) socketpair(0x15, 0x6, 0xff, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(r11, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001340)=0x14) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r11) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r12, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x2c, r14, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x1e}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="f17255da4e67"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40044}, 0x8000) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r2) getsockname$packet(r11, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001580)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000015c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000001780)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001740)={&(0x7f0000001600)={0x124, r15, 0x200, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x14885}, 0x40) sendmsg$802154_dgram(r11, &(0x7f0000001900)={&(0x7f00000017c0)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f00000018c0)={&(0x7f0000001800)="8b5d6ad54d795d17161822730059b6f64e05ef3e14a21987998f33a46f84cbb36954a01e6de57d5ddc583a86f2d115196eb93e818da735cfb12db5a2f85e5ab8f87582368cd3a906db36706fe8a1df0caac15bb816b0b483751e4cd87a5a20040abe08a94941352b5a40f777e9b973641bfe9f76da0bf7cef5e8a810f30712aaa31f3ec42b696002ff316dee35d84d4893d3ba70b12f", 0x96}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r12, 0x89a0, &(0x7f0000001940)='dummy0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 66.596146][ T5850] cgroup: Unknown subsys name 'net' [ 66.750081][ T5850] cgroup: Unknown subsys name 'cpuset' [ 66.758768][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.176735][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.409907][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.416339][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.369306][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.378291][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.382226][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.392728][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.401236][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.409090][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.409541][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.424183][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.436788][ T5867] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.449438][ T5867] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.459537][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.459635][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.475297][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.484473][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.484693][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.492620][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.506199][ T5867] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.515260][ T5867] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.522980][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.530940][ T5877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.532284][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.545617][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.557967][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.575809][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.586175][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.195269][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 73.227044][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 73.312570][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 73.374229][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 73.481278][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 73.550895][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.558519][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.566010][ T5870] bridge_slave_0: entered allmulticast mode [ 73.573581][ T5870] bridge_slave_0: entered promiscuous mode [ 73.613561][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.620831][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.628587][ T5871] bridge_slave_0: entered allmulticast mode [ 73.635608][ T5871] bridge_slave_0: entered promiscuous mode [ 73.654044][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.661525][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.668732][ T5870] bridge_slave_1: entered allmulticast mode [ 73.675712][ T5870] bridge_slave_1: entered promiscuous mode [ 73.711924][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.719064][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.726181][ T5871] bridge_slave_1: entered allmulticast mode [ 73.733556][ T5871] bridge_slave_1: entered promiscuous mode [ 73.780981][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.788173][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.795452][ T5860] bridge_slave_0: entered allmulticast mode [ 73.803399][ T5860] bridge_slave_0: entered promiscuous mode [ 73.830713][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.837949][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.845082][ T5861] bridge_slave_0: entered allmulticast mode [ 73.852494][ T5861] bridge_slave_0: entered promiscuous mode [ 73.873302][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.880539][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.888009][ T5860] bridge_slave_1: entered allmulticast mode [ 73.894974][ T5860] bridge_slave_1: entered promiscuous mode [ 73.917724][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.924863][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.932300][ T5861] bridge_slave_1: entered allmulticast mode [ 73.939349][ T5861] bridge_slave_1: entered promiscuous mode [ 73.949230][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.985613][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.000212][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.025632][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.125416][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.138667][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.145783][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.152996][ T5872] bridge_slave_0: entered allmulticast mode [ 74.159968][ T5872] bridge_slave_0: entered promiscuous mode [ 74.168447][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.175600][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.182936][ T5872] bridge_slave_1: entered allmulticast mode [ 74.190736][ T5872] bridge_slave_1: entered promiscuous mode [ 74.198508][ T5871] team0: Port device team_slave_0 added [ 74.207149][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.217910][ T5870] team0: Port device team_slave_0 added [ 74.225737][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.264791][ T5871] team0: Port device team_slave_1 added [ 74.272473][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.300122][ T5870] team0: Port device team_slave_1 added [ 74.334189][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.393839][ T5860] team0: Port device team_slave_0 added [ 74.402729][ T5860] team0: Port device team_slave_1 added [ 74.411269][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.421411][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.428638][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.454874][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.469469][ T5861] team0: Port device team_slave_0 added [ 74.476163][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.483498][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.509507][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.537123][ T5867] Bluetooth: hci0: command tx timeout [ 74.563439][ T5861] team0: Port device team_slave_1 added [ 74.595112][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.604291][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.630868][ T5183] Bluetooth: hci2: command tx timeout [ 74.631039][ T5867] Bluetooth: hci3: command tx timeout [ 74.636738][ T5183] Bluetooth: hci1: command tx timeout [ 74.645543][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.648133][ T5867] Bluetooth: hci4: command tx timeout [ 74.710889][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.718271][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.744807][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.756537][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.763510][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.789886][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.804273][ T5872] team0: Port device team_slave_0 added [ 74.828414][ T5871] hsr_slave_0: entered promiscuous mode [ 74.835400][ T5871] hsr_slave_1: entered promiscuous mode [ 74.849957][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.857308][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.884234][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.897229][ T5872] team0: Port device team_slave_1 added [ 74.912373][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.919357][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.945520][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.988881][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.995846][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.022885][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.054847][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.062004][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.088256][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.141331][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.149904][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.176200][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.266118][ T5870] hsr_slave_0: entered promiscuous mode [ 75.272427][ T5870] hsr_slave_1: entered promiscuous mode [ 75.279142][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 75.284950][ T5870] Cannot create hsr debugfs directory [ 75.321920][ T5860] hsr_slave_0: entered promiscuous mode [ 75.328382][ T5860] hsr_slave_1: entered promiscuous mode [ 75.334380][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 75.340144][ T5860] Cannot create hsr debugfs directory [ 75.399149][ T5872] hsr_slave_0: entered promiscuous mode [ 75.405383][ T5872] hsr_slave_1: entered promiscuous mode [ 75.413137][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 75.419421][ T5872] Cannot create hsr debugfs directory [ 75.430726][ T5861] hsr_slave_0: entered promiscuous mode [ 75.437289][ T5861] hsr_slave_1: entered promiscuous mode [ 75.443318][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 75.449107][ T5861] Cannot create hsr debugfs directory [ 75.930990][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.964047][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.993255][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.017396][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.064080][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.075783][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.086872][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.100400][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.198578][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.224735][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.248064][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.260273][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.351436][ T5872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.393184][ T5872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.414533][ T5872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.454214][ T5872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.465481][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.488513][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.500181][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.512597][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.534601][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.606425][ T5867] Bluetooth: hci0: command tx timeout [ 76.615389][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.637560][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.668450][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.675721][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.686794][ T5867] Bluetooth: hci4: command tx timeout [ 76.687177][ T5183] Bluetooth: hci1: command tx timeout [ 76.692209][ T5867] Bluetooth: hci3: command tx timeout [ 76.697946][ T5874] Bluetooth: hci2: command tx timeout [ 76.729691][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.741125][ T4532] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.748320][ T4532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.807908][ T4532] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.815004][ T4532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.856178][ T5871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.884424][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.891617][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.950066][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.974544][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.033567][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.080457][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.087643][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.099801][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.107322][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.160287][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.192466][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.262070][ T4532] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.269272][ T4532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.314371][ T4532] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.321826][ T4532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.347521][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.396126][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.403318][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.429783][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.483960][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.491163][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.643435][ T5871] veth0_vlan: entered promiscuous mode [ 77.710067][ T5871] veth1_vlan: entered promiscuous mode [ 77.749844][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.875712][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.919240][ T5871] veth0_macvtap: entered promiscuous mode [ 77.946449][ T5871] veth1_macvtap: entered promiscuous mode [ 78.060799][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.113107][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.158921][ T5860] veth0_vlan: entered promiscuous mode [ 78.213798][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.225030][ T1115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.248904][ T1115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.285269][ T1115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.301393][ T1115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.343234][ T5860] veth1_vlan: entered promiscuous mode [ 78.395536][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.461636][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.474073][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.522929][ T5872] veth0_vlan: entered promiscuous mode [ 78.554389][ T5872] veth1_vlan: entered promiscuous mode [ 78.580233][ T5860] veth0_macvtap: entered promiscuous mode [ 78.589281][ T5870] veth0_vlan: entered promiscuous mode [ 78.601239][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.610656][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.621364][ T5860] veth1_macvtap: entered promiscuous mode [ 78.649226][ T5870] veth1_vlan: entered promiscuous mode [ 78.681942][ T5861] veth0_vlan: entered promiscuous mode [ 78.687763][ T5183] Bluetooth: hci0: command tx timeout [ 78.721390][ T5871] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.751526][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.766919][ T5183] Bluetooth: hci1: command tx timeout [ 78.772361][ T5183] Bluetooth: hci2: command tx timeout [ 78.778504][ T5874] Bluetooth: hci3: command tx timeout [ 78.778698][ T5867] Bluetooth: hci4: command tx timeout [ 78.810053][ T5872] veth0_macvtap: entered promiscuous mode [ 78.831097][ T5861] veth1_vlan: entered promiscuous mode [ 78.841891][ T5872] veth1_macvtap: entered promiscuous mode [ 78.859618][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.899161][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.909192][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.932806][ T5870] veth0_macvtap: entered promiscuous mode [ 78.940864][ T1147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.949784][ T1147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.966081][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.985999][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.002346][ T5870] veth1_macvtap: entered promiscuous mode [ 79.033036][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.044374][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.064704][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.073928][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.114779][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.136075][ T5861] veth0_macvtap: entered promiscuous mode [ 79.147419][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.169421][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.172090][ T5861] veth1_macvtap: entered promiscuous mode [ 79.192146][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.227799][ T1147] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.236708][ T1147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.264905][ T1147] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.274061][ T1147] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.295007][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.303295][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.306538][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.341438][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.370042][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.381844][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.400522][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.418355][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.512396][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.521714][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.605046][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.618744][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.694766][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.730719][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.776126][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.802761][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.909775][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.944947][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.072124][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.095410][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.677218][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13'. [ 80.766708][ T5867] Bluetooth: hci0: command tx timeout [ 80.847775][ T5867] Bluetooth: hci4: command tx timeout [ 80.853232][ T5867] Bluetooth: hci1: command tx timeout [ 80.858954][ T5183] Bluetooth: hci2: command tx timeout [ 80.864374][ T5183] Bluetooth: hci3: command tx timeout [ 80.985656][ T6041] tipc: Started in network mode [ 80.997068][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 81.013534][ T6046] syz.1.20 uses obsolete (PF_INET,SOCK_PACKET) [ 81.016704][ T6041] tipc: Node identity 72fc476bf755, cluster identity 4711 [ 81.028113][ T6041] tipc: Enabled bearer , priority 0 [ 81.039426][ T6048] syzkaller0: entered promiscuous mode [ 81.072407][ T6048] syzkaller0: entered allmulticast mode [ 81.114732][ T6044] vlan2: entered allmulticast mode [ 81.125350][ T6044] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 81.153052][ T6042] nftables ruleset with unbound set [ 81.196125][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 81.275950][ T6060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22'. [ 81.289142][ T6041] tipc: Resetting bearer [ 81.421729][ T6041] tipc: Resetting bearer [ 81.477421][ T6041] tipc: Disabling bearer [ 81.479134][ T6072] netlink: 36 bytes leftover after parsing attributes in process `syz.2.26'. [ 81.516598][ T6065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23'. [ 81.546186][ T6065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23'. [ 81.589613][ T6065] netlink: 'syz.4.23': attribute type 3 has an invalid length. [ 81.604332][ T6079] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.684466][ T6065] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23'. [ 81.707398][ T6081] netlink: 'syz.0.28': attribute type 1 has an invalid length. [ 81.733450][ T6081] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 82.004473][ T6089] netlink: 24 bytes leftover after parsing attributes in process `syz.3.31'. [ 82.473414][ T6112] warning: `syz.3.38' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.793545][ T6123] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 82.955856][ T6131] nbd: must specify a device to reconfigure [ 83.311774][ T6153] trusted_key: syz.2.50 sent an empty control message without MSG_MORE. [ 83.601120][ T6164] netlink: 20 bytes leftover after parsing attributes in process `syz.4.51'. [ 83.909945][ T6183] netlink: 'syz.4.56': attribute type 21 has an invalid length. [ 84.169411][ T6196] tipc: Started in network mode [ 84.174326][ T6196] tipc: Node identity d2e8f69cf57, cluster identity 4711 [ 84.245677][ T6196] tipc: Enabled bearer , priority 0 [ 84.412451][ T6202] syzkaller0: entered promiscuous mode [ 84.444241][ T6202] syzkaller0: entered allmulticast mode [ 84.484860][ T6202] tipc: Resetting bearer [ 84.589231][ T6215] netlink: 'syz.4.65': attribute type 1 has an invalid length. [ 84.613999][ T13] tipc: Resetting bearer [ 84.628014][ T6212] netlink: 'syz.4.65': attribute type 7 has an invalid length. [ 84.643446][ T6218] netlink: 'syz.1.67': attribute type 1 has an invalid length. [ 84.651911][ T6218] netlink: 'syz.1.67': attribute type 1 has an invalid length. [ 84.665308][ T6218] netlink: 'syz.1.67': attribute type 2 has an invalid length. [ 84.671069][ T6212] Zero length message leads to an empty skb [ 84.691708][ T6202] tipc: Resetting bearer [ 85.257593][ T5973] tipc: Node number set to 664336028 [ 85.724161][ T6256] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 85.734956][ T6256] __nla_validate_parse: 7 callbacks suppressed [ 85.734974][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 86.520085][ T6255] delete_channel: no stack [ 86.563951][ T6202] tipc: Disabling bearer [ 86.574903][ T6214] tap0: tun_chr_ioctl cmd 1074025676 [ 86.595060][ T6214] tap0: owner set to 0 [ 86.692974][ T6233] syzkaller0: entered promiscuous mode [ 86.700581][ T6233] syzkaller0: entered allmulticast mode [ 86.721814][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 86.733891][ T6256] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 86.784257][ T6256] netlink: 'syz.0.71': attribute type 2 has an invalid length. [ 86.784460][ T979] cfg80211: failed to load regulatory.db [ 87.026570][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 87.043080][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 87.135443][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 88.292704][ T6300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.76'. [ 88.552873][ T6327] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 88.585325][ T6333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.81'. [ 88.619453][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 88.769126][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 88.775732][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 88.782328][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 88.788817][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.796797][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.804625][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.812654][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.820512][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.828503][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.836371][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.844312][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.852179][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.860141][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.868016][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.875940][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.883806][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.891774][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.899662][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.907698][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.915544][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.923586][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.931489][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.939478][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.947362][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.955438][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.964048][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.972136][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.980116][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 88.988089][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 88.996005][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 89.005401][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 89.013263][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 89.021266][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 89.029703][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 89.038108][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 89.046985][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 89.055222][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 89.064852][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 89.073326][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 89.081369][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 89.089370][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 89.097249][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 89.105183][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 89.113071][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 89.121095][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 89.129609][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 89.138535][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 89.146419][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 89.154348][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 89.162232][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 89.170218][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 89.178105][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 89.186040][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 89.193937][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 89.201932][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 89.210084][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 89.429791][ T6346] veth1_to_bond: mtu less than device minimum [ 89.521382][ T6354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.522361][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.88'. [ 89.592122][ T6354] netlink: 'syz.2.89': attribute type 2 has an invalid length. [ 89.600020][ T6357] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 89.610221][ T6354] netlink: 'syz.2.89': attribute type 2 has an invalid length. [ 89.626903][ T6357] netlink: 224 bytes leftover after parsing attributes in process `syz.0.90'. [ 89.710742][ T6362] netlink: 'syz.1.92': attribute type 4 has an invalid length. [ 89.767190][ T6366] netlink: 'syz.1.92': attribute type 4 has an invalid length. [ 89.866511][ T6362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.887753][ T6368] tipc: Started in network mode [ 89.892721][ T6368] tipc: Node identity 0ef0fc7c1901, cluster identity 4711 [ 89.901252][ T6368] tipc: Enabled bearer , priority 0 [ 89.921031][ T6368] syzkaller0: entered promiscuous mode [ 89.932045][ T6368] syzkaller0: entered allmulticast mode [ 89.985565][ T6367] tipc: Resetting bearer [ 90.006600][ T6367] tipc: Disabling bearer [ 90.094466][ T6382] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 90.128127][ T6378] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 90.465426][ T6400] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 90.525919][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.535087][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.404677][ T6445] __nla_validate_parse: 3 callbacks suppressed [ 91.404697][ T6445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.119'. [ 91.423261][ T6444] netlink: 'syz.1.118': attribute type 17 has an invalid length. [ 91.434013][ T6448] netlink: 'syz.2.120': attribute type 1 has an invalid length. [ 91.441436][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 91.470481][ T6444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.118'. [ 91.483086][ T6452] netlink: 'syz.3.119': attribute type 1 has an invalid length. [ 91.488726][ T6448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.505078][ T6452] netlink: 224 bytes leftover after parsing attributes in process `syz.3.119'. [ 91.532952][ T6455] tap0: tun_chr_ioctl cmd 1074025672 [ 91.549197][ T6452] nbd: couldn't find device at index 1048576 [ 91.557647][ T6455] tap0: ignored: set checksum disabled [ 92.060147][ T6481] delete_channel: no stack [ 92.142786][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.132'. [ 92.152647][ T6490] nbd: must specify at least one socket [ 92.358811][ T6500] netlink: 40 bytes leftover after parsing attributes in process `syz.2.136'. [ 92.410046][ T6502] netlink: 248 bytes leftover after parsing attributes in process `syz.2.137'. [ 92.453817][ T6503] netlink: 248 bytes leftover after parsing attributes in process `syz.2.137'. [ 92.665306][ T6510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 93.271119][ T6534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.143'. [ 94.896769][ T6628] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 94.904126][ T6628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.160957][ T6649] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 95.161412][ T6639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.620053][ T6664] bond2: entered promiscuous mode [ 95.696644][ T6664] bond2: entered allmulticast mode [ 95.712178][ T6664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.832903][ T6691] netlink: 'syz.1.181': attribute type 6 has an invalid length. [ 95.871856][ T6691] netlink: 'syz.1.181': attribute type 1 has an invalid length. [ 95.912134][ T6686] delete_channel: no stack [ 96.279087][ T6710] tc_dump_action: action bad kind [ 96.436734][ T6718] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.562916][ T6727] __nla_validate_parse: 21 callbacks suppressed [ 96.562932][ T6727] netlink: 100 bytes leftover after parsing attributes in process `syz.2.190'. [ 96.775700][ T6737] netlink: 'syz.1.195': attribute type 10 has an invalid length. [ 96.834504][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 97.238316][ T6764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.200'. [ 98.067914][ T6802] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.211'. [ 98.251326][ T6808] geneve2: entered promiscuous mode [ 98.290109][ T6808] geneve2: entered allmulticast mode [ 98.325163][ T1147] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 98.362662][ T1147] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 98.492236][ T6814] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.563668][ T1147] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 98.676695][ T6836] netlink: 16 bytes leftover after parsing attributes in process `syz.4.217'. [ 98.852387][ T6841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.219'. [ 98.904900][ T6842] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 99.297010][ T6862] sctp: [Deprecated]: syz.4.224 (pid 6862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.297010][ T6862] Use struct sctp_sack_info instead [ 99.370559][ T6862] sctp: [Deprecated]: syz.4.224 (pid 6862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.370559][ T6862] Use struct sctp_sack_info instead [ 99.475366][ T6872] delete_channel: no stack [ 99.541448][ T6877] netlink: 76 bytes leftover after parsing attributes in process `syz.3.227'. [ 99.744918][ T6885] netlink: 'syz.3.230': attribute type 1 has an invalid length. [ 99.756116][ T6882] wg1: entered promiscuous mode [ 99.780280][ T6885] netlink: 232 bytes leftover after parsing attributes in process `syz.3.230'. [ 100.024270][ T6889] geneve2: entered promiscuous mode [ 100.047197][ T6889] geneve2: entered allmulticast mode [ 100.309829][ T6814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.352067][ T6814] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 100.495717][ T6814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.520855][ T6814] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 100.629593][ T6814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.644386][ T6814] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 100.723466][ T59] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 100.732430][ T59] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 100.753920][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 100.762412][ T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 100.781963][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 100.790428][ T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 100.803659][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 100.813370][ T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 132.850562][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.857064][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 164.980214][ T6980] netem: change failed [ 165.506439][ T7008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.253'. [ 165.605642][ T7018] team_slave_0: entered promiscuous mode [ 165.611553][ T7018] team_slave_1: entered promiscuous mode [ 165.621204][ T7014] netlink: 'syz.3.257': attribute type 83 has an invalid length. [ 165.636259][ T7018] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 165.644488][ T7018] team0: Device macvtap1 is already an upper device of the team interface [ 165.661405][ T7018] team_slave_0: left promiscuous mode [ 165.667060][ T7018] team_slave_1: left promiscuous mode [ 165.930259][ T7036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.993880][ T7039] netlink: 'syz.3.262': attribute type 3 has an invalid length. [ 166.011101][ T7039] netlink: 224 bytes leftover after parsing attributes in process `syz.3.262'. [ 166.026034][ T7039] netlink: 'syz.3.262': attribute type 1 has an invalid length. [ 166.034539][ T7039] netlink: 224 bytes leftover after parsing attributes in process `syz.3.262'. [ 166.195169][ T7051] netlink: 'syz.4.266': attribute type 1 has an invalid length. [ 166.362763][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.269'. [ 166.384813][ T7062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.266'. [ 166.394531][ T7051] veth5: entered promiscuous mode [ 166.405079][ T7051] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 166.424658][ T7065] netlink: 'syz.1.271': attribute type 1 has an invalid length. [ 166.429643][ T7056] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 166.433117][ T7065] netlink: 244 bytes leftover after parsing attributes in process `syz.1.271'. [ 166.465508][ T36] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 166.483192][ T7062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.494173][ T7060] netlink: 'syz.3.270': attribute type 3 has an invalid length. [ 166.593739][ T7069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'. [ 166.617521][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 166.659976][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.273'. [ 166.790527][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 166.799482][ T7079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.276'. [ 166.874670][ T3555] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.916474][ T3555] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.966091][ T3555] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.988089][ T3555] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.694061][ T7124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.892653][ T7136] tipc: Started in network mode [ 167.911685][ T7136] tipc: Node identity daa4124a22ef, cluster identity 4711 [ 167.923358][ T7136] tipc: Enabled bearer , priority 0 [ 167.957507][ T7142] syzkaller0: entered promiscuous mode [ 167.963042][ T7142] syzkaller0: entered allmulticast mode [ 167.982607][ T7140] tipc: Enabled bearer , priority 0 [ 168.010251][ T7136] tipc: Disabling bearer [ 168.074195][ T7143] tipc: Resetting bearer [ 168.155110][ T7143] tipc: Disabling bearer [ 168.479351][ T7161] IPVS: Scheduler module ip_vs_sip not found [ 168.683740][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 168.764741][ T7188] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 168.795163][ T7188] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 169.467623][ T7225] netlink: 'syz.2.320': attribute type 83 has an invalid length. [ 169.489075][ T7187] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 169.908211][ T7244] netlink: 'syz.0.330': attribute type 2 has an invalid length. [ 170.756164][ T7272] netlink: 'syz.4.338': attribute type 29 has an invalid length. [ 170.810605][ T7272] netlink: 'syz.4.338': attribute type 29 has an invalid length. [ 170.931974][ T7272] __nla_validate_parse: 15 callbacks suppressed [ 170.931992][ T7272] netlink: 596 bytes leftover after parsing attributes in process `syz.4.338'. [ 171.127159][ T7290] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.342'. [ 171.160005][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'. [ 171.389100][ T7303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.346'. [ 171.435195][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.346'. [ 171.529366][ T7303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.346'. [ 171.651227][ T7319] netlink: 256 bytes leftover after parsing attributes in process `syz.1.351'. [ 171.711427][ T7323] netlink: 256 bytes leftover after parsing attributes in process `syz.1.351'. [ 172.034469][ T7343] tipc: Enabled bearer , priority 0 [ 172.105953][ T7338] syzkaller0: entered promiscuous mode [ 172.132340][ T7338] syzkaller0: entered allmulticast mode [ 172.158816][ T7351] netlink: 'syz.4.360': attribute type 39 has an invalid length. [ 172.167023][ T7340] tipc: Enabling of bearer rejected, already enabled [ 172.244159][ T7340] tipc: Resetting bearer [ 172.355574][ T7353] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 172.368581][ T7340] tipc: Disabling bearer [ 172.607285][ T7372] wireguard: wg1: Could not create IPv4 socket [ 173.004712][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 173.053153][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'. [ 173.594810][ T7429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.009196][ T7459] Bluetooth: MGMT ver 1.23 [ 174.079932][ T7459] team_slave_0: entered promiscuous mode [ 174.085709][ T7459] team_slave_1: entered promiscuous mode [ 174.110257][ T7463] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 174.113654][ T7459] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 174.155813][ T7459] team0: Device macvtap1 is already an upper device of the team interface [ 174.182101][ T7459] team_slave_0: left promiscuous mode [ 174.187683][ T7459] team_slave_1: left promiscuous mode [ 174.210479][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 174.536189][ T7496] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 174.966699][ T7517] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 175.007095][ T7517] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 175.280962][ T7541] netlink: 'syz.4.405': attribute type 21 has an invalid length. [ 178.184092][ T7621] netlink: 'syz.3.419': attribute type 1 has an invalid length. [ 178.192485][ T7620] netlink: 'syz.2.418': attribute type 3 has an invalid length. [ 178.200944][ T7620] __nla_validate_parse: 7 callbacks suppressed [ 178.200959][ T7620] netlink: 766 bytes leftover after parsing attributes in process `syz.2.418'. [ 178.250011][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 178.300454][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 178.308402][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'. [ 178.403636][ T7628] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 178.474069][ T7633] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 178.498768][ T7633] bond2 (unregistering): Released all slaves [ 178.518619][ T7641] netlink: 'syz.0.422': attribute type 1 has an invalid length. [ 178.545435][ T7629] syzkaller1: entered promiscuous mode [ 178.558792][ T7629] syzkaller1: entered allmulticast mode [ 178.666692][ T7646] macvlan0: entered promiscuous mode [ 178.672136][ T7646] macvlan0: entered allmulticast mode [ 178.820464][ T7656] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.281481][ T7682] wg1: entered promiscuous mode [ 179.292466][ T7682] wg1: entered allmulticast mode [ 179.457350][ T7691] netlink: 'syz.2.439': attribute type 1 has an invalid length. [ 179.461743][ T7690] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 179.496745][ T7690] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 179.677017][ T7691] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.714322][ T7710] bond3: (slave ip6erspan0): making interface the new active one [ 179.724058][ T7710] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 179.749707][ T7709] netlink: 16 bytes leftover after parsing attributes in process `syz.3.443'. [ 180.018603][ T7722] netlink: 'syz.4.447': attribute type 4 has an invalid length. [ 180.050884][ T7722] netlink: 'syz.4.447': attribute type 4 has an invalid length. [ 180.222453][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 180.340883][ T7738] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 180.358751][ T7739] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 180.433803][ T7743] netlink: 20 bytes leftover after parsing attributes in process `syz.4.455'. [ 180.528723][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 180.551980][ T7749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.455'. [ 180.858011][ T7767] netlink: 'syz.0.463': attribute type 2 has an invalid length. [ 180.872793][ T7767] netlink: 'syz.0.463': attribute type 1 has an invalid length. [ 180.943627][ T7766] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 181.044581][ T7775] syz.2.466: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 181.071526][ T7775] CPU: 0 UID: 0 PID: 7775 Comm: syz.2.466 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 181.071550][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.071567][ T7775] Call Trace: [ 181.071574][ T7775] [ 181.071581][ T7775] dump_stack_lvl+0x189/0x250 [ 181.071614][ T7775] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 181.071638][ T7775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.071657][ T7775] ? __pfx__printk+0x10/0x10 [ 181.071679][ T7775] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 181.071700][ T7775] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 181.071728][ T7775] warn_alloc+0x214/0x310 [ 181.071755][ T7775] ? stack_depot_save_flags+0x40/0x860 [ 181.071778][ T7775] ? __pfx_warn_alloc+0x10/0x10 [ 181.071804][ T7775] ? kasan_save_track+0x4f/0x80 [ 181.071824][ T7775] ? xskq_create+0x56/0x170 [ 181.071841][ T7775] ? xsk_init_queue+0xb0/0x110 [ 181.071857][ T7775] ? xsk_setsockopt+0x4dc/0x8d0 [ 181.071873][ T7775] ? do_sock_setsockopt+0x17c/0x1b0 [ 181.071895][ T7775] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 181.071916][ T7775] ? do_syscall_64+0xfa/0x3b0 [ 181.071936][ T7775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.071960][ T7775] __vmalloc_node_range_noprof+0x125/0x12f0 [ 181.072023][ T7775] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 181.072054][ T7775] ? __kasan_kmalloc+0x93/0xb0 [ 181.072078][ T7775] vmalloc_user_noprof+0xad/0xf0 [ 181.072102][ T7775] ? xskq_create+0xbf/0x170 [ 181.072122][ T7775] xskq_create+0xbf/0x170 [ 181.072144][ T7775] xsk_init_queue+0xb0/0x110 [ 181.072166][ T7775] xsk_setsockopt+0x4dc/0x8d0 [ 181.072187][ T7775] ? __pfx_xsk_setsockopt+0x10/0x10 [ 181.072205][ T7775] ? __pfx_aa_sk_perm+0x10/0x10 [ 181.072231][ T7775] ? aa_sock_opt_perm+0xff/0x1b0 [ 181.072258][ T7775] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 181.072276][ T7775] ? __pfx_xsk_setsockopt+0x10/0x10 [ 181.072296][ T7775] do_sock_setsockopt+0x17c/0x1b0 [ 181.072325][ T7775] __x64_sys_setsockopt+0x13f/0x1b0 [ 181.072353][ T7775] do_syscall_64+0xfa/0x3b0 [ 181.072373][ T7775] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.072393][ T7775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.072410][ T7775] ? clear_bhb_loop+0x60/0xb0 [ 181.072431][ T7775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.072448][ T7775] RIP: 0033:0x7f841c78ebe9 [ 181.072471][ T7775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.072484][ T7775] RSP: 002b:00007f841d6db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 181.072505][ T7775] RAX: ffffffffffffffda RBX: 00007f841c9b5fa0 RCX: 00007f841c78ebe9 [ 181.072517][ T7775] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 181.072527][ T7775] RBP: 00007f841c811e19 R08: 0000000000000004 R09: 0000000000000000 [ 181.072535][ T7775] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.072543][ T7775] R13: 00007f841c9b6038 R14: 00007f841c9b5fa0 R15: 00007ffc4403e0b8 [ 181.072571][ T7775] [ 181.072650][ T7775] Mem-Info: [ 181.133260][ T7780] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 181.141051][ T7775] active_anon:5620 inactive_anon:0 isolated_anon:0 [ 181.141051][ T7775] active_file:1104 inactive_file:39844 isolated_file:0 [ 181.141051][ T7775] unevictable:768 dirty:50 writeback:0 [ 181.141051][ T7775] slab_reclaimable:10502 slab_unreclaimable:96831 [ 181.141051][ T7775] mapped:29054 shmem:1356 pagetables:1162 [ 181.141051][ T7775] sec_pagetables:0 bounce:0 [ 181.141051][ T7775] kernel_misc_reclaimable:0 [ 181.141051][ T7775] free:1335446 free_pcp:15136 free_cma:0 [ 181.440561][ T7775] Node 0 active_anon:22380kB inactive_anon:0kB active_file:4416kB inactive_file:159168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116216kB dirty:200kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12048kB pagetables:4480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 181.479976][ T7775] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 181.511827][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'. [ 181.530385][ T7791] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 181.564657][ T7775] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 181.612262][ T7775] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 181.618853][ T7775] Node 0 DMA32 free:1435988kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22232kB inactive_anon:0kB active_file:4416kB inactive_file:157580kB unevictable:1536kB writepending:200kB present:3129332kB managed:2557520kB mlocked:0kB bounce:0kB free_pcp:39372kB local_pcp:16764kB free_cma:0kB [ 181.694288][ T7775] lowmem_reserve[]: 0 0 1 1 1 [ 181.713174][ T7775] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 181.761516][ T7798] netlink: 'syz.3.474': attribute type 1 has an invalid length. [ 181.793841][ T7775] lowmem_reserve[]: 0 0 0 0 0 [ 181.860892][ T7775] Node 1 Normal free:3891112kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21024kB local_pcp:9024kB free_cma:0kB [ 181.937460][ T7775] lowmem_reserve[]: 0 0 0 0 0 [ 181.964467][ T7775] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 182.025346][ T7775] Node 0 DMA32: 347*4kB (UME) 167*8kB (UME) 290*16kB (UM) 1569*32kB (UM) 606*64kB (UME) 140*128kB (UME) 47*256kB (UME) 12*512kB (UM) 7*1024kB (UM) 7*2048kB (UM) 313*4096kB (M) = 1436004kB [ 182.113960][ T7775] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 182.142434][ T7775] Node 1 Normal: 186*4kB (UE) 54*8kB (UME) 51*16kB (UME) 61*32kB (UME) 19*64kB (UME) 5*128kB (UME) 5*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3891112kB [ 182.235488][ T7817] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 182.292182][ T7775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.323788][ T7775] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 182.357159][ T7775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.427598][ T7775] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 182.456198][ T7775] 42301 total pagecache pages [ 182.492408][ T7775] 0 pages in swap cache [ 182.519864][ T7775] Free swap = 124996kB [ 182.532684][ T7775] Total swap = 124996kB [ 182.544003][ T7775] 2097051 pages RAM [ 182.561234][ T7775] 0 pages HighMem/MovableOnly [ 182.565946][ T7775] 425645 pages reserved [ 182.608963][ T7775] 0 pages cma reserved [ 182.741694][ T7847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.878650][ T7847] bridge0: port 3(vlan2) entered blocking state [ 182.904031][ T7847] bridge0: port 3(vlan2) entered disabled state [ 182.928320][ T7847] vlan2: entered allmulticast mode [ 182.944156][ T7847] bridge0: entered allmulticast mode [ 182.959777][ T7847] vlan2: left allmulticast mode [ 182.964783][ T7847] bridge0: left allmulticast mode [ 183.053496][ T7859] pim6reg1: entered promiscuous mode [ 183.058875][ T7859] pim6reg1: entered allmulticast mode [ 183.463853][ T7891] netlink: 'syz.2.497': attribute type 1 has an invalid length. [ 183.497480][ T7891] __nla_validate_parse: 5 callbacks suppressed [ 183.497495][ T7891] netlink: 220 bytes leftover after parsing attributes in process `syz.2.497'. [ 183.562041][ T7891] netlink: 'syz.2.497': attribute type 1 has an invalid length. [ 183.594836][ T7892] netlink: 19 bytes leftover after parsing attributes in process `syz.4.498'. [ 183.801532][ T7910] netlink: 256 bytes leftover after parsing attributes in process `syz.1.501'. [ 184.229167][ T7925] nbd0: detected capacity change from 0 to 127 [ 184.261055][ T7935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.509'. [ 184.304596][ T30] audit: type=1800 audit(1754889412.617:2): pid=7935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.509" name="memory.events" dev="tmpfs" ino=541 res=0 errno=0 [ 184.333369][ T30] audit: type=1804 audit(1754889412.627:3): pid=7935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.509" name="/newroot/103/memory.events" dev="tmpfs" ino=541 res=1 errno=0 [ 184.412645][ T5867] block nbd0: Receive control failed (result -104) [ 184.608616][ T7954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.512'. [ 184.677829][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 184.857037][ T7968] gtp0: entered promiscuous mode [ 184.896685][ T7968] gtp0: entered allmulticast mode [ 184.934149][ T7972] veth0: entered promiscuous mode [ 185.092548][ T7974] veth0: left promiscuous mode [ 185.142396][ T7988] netlink: 'syz.0.524': attribute type 3 has an invalid length. [ 185.307853][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 185.487798][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 185.540959][ T8005] netlink: 84 bytes leftover after parsing attributes in process `syz.0.529'. [ 186.049796][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz.0.536'. [ 186.132546][ T8036] team0: Device vti0 is of different type [ 186.468174][ T8052] Dead loop on virtual device ip6_vti0, fix it urgently! [ 186.476013][ T8052] Dead loop on virtual device ip6_vti0, fix it urgently! [ 186.483507][ T8052] Dead loop on virtual device ip6_vti0, fix it urgently! [ 186.490988][ T8052] Dead loop on virtual device ip6_vti0, fix it urgently! [ 186.498399][ T8052] Dead loop on virtual device ip6_vti0, fix it urgently! [ 186.506555][ T8052] Dead loop on virtual device ip6_vti0, fix it urgently! [ 187.268671][ T8098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.322070][ T8095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.652898][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.675878][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.925469][ T8117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.950529][ T8117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.971359][ T8117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.987423][ T8117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.049983][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.084887][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.119150][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.159813][ T59] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.711998][ T8164] __nla_validate_parse: 6 callbacks suppressed [ 188.712015][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.573'. [ 188.901383][ T8180] veth0: entered promiscuous mode [ 188.917598][ T8178] netlink: 'syz.1.576': attribute type 49 has an invalid length. [ 189.016488][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.578'. [ 189.038789][ T8184] macvlan0: left promiscuous mode [ 189.043965][ T8184] macvlan0: left allmulticast mode [ 189.078993][ T8195] netlink: 'syz.4.578': attribute type 7 has an invalid length. [ 189.094856][ T8184] netlink: 'syz.4.578': attribute type 1 has an invalid length. [ 189.172256][ T8184] netlink: 'syz.4.578': attribute type 2 has an invalid length. [ 189.254254][ T8195] : entered promiscuous mode [ 189.335888][ T8171] veth0: left promiscuous mode [ 189.372203][ T8208] sctp: [Deprecated]: syz.3.582 (pid 8208) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.372203][ T8208] Use struct sctp_sack_info instead [ 189.527526][ T8216] netlink: 'syz.4.585': attribute type 1 has an invalid length. [ 189.584330][ T8223] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 189.679576][ T8216] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.753412][ T8233] netlink: 'syz.2.589': attribute type 4 has an invalid length. [ 189.845512][ T8237] netlink: 'syz.3.590': attribute type 1 has an invalid length. [ 190.033855][ T8249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.167863][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.595'. [ 190.465199][ T8265] netlink: 'syz.4.597': attribute type 23 has an invalid length. [ 190.571954][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 190.968974][ T8289] bridge_slave_0: left allmulticast mode [ 190.983979][ T8289] bridge_slave_0: left promiscuous mode [ 190.991310][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.010818][ T8289] bridge_slave_1: left allmulticast mode [ 191.046703][ T8289] bridge_slave_1: left promiscuous mode [ 191.054804][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.114494][ T8289] bond0: (slave bond_slave_0): Releasing backup interface [ 191.157640][ T8289] bond0: (slave bond_slave_1): Releasing backup interface [ 191.244918][ T8289] team0: Port device team_slave_0 removed [ 191.300324][ T8289] team0: Port device team_slave_1 removed [ 191.317402][ T8289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.333273][ T8311] sctp: [Deprecated]: syz.3.608 (pid 8311) Use of int in maxseg socket option. [ 191.333273][ T8311] Use struct sctp_assoc_value instead [ 191.356448][ T8289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.371917][ T8289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.395614][ T8289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.567814][ T8296] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 191.727082][ T8326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.610'. [ 191.766143][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 191.795863][ T8325] netlink: 16 bytes leftover after parsing attributes in process `syz.3.610'. [ 191.813120][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 191.830571][ T8336] netlink: 96 bytes leftover after parsing attributes in process `syz.0.612'. [ 191.831645][ T8328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.610'. [ 192.115087][ T8335] syz.1.614 (8335) used greatest stack depth: 17896 bytes left [ 192.699211][ T8377] vxcan1: tx address claim with dlc 1 [ 192.783655][ T8377] vxlan0: entered promiscuous mode [ 192.797497][ T8377] vxlan0: entered allmulticast mode [ 192.807961][ T8388] netlink: 'syz.4.627': attribute type 5 has an invalid length. [ 192.820323][ T59] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.830938][ T8388] chnl_net:caif_netlink_parms(): no params data found [ 192.911857][ T8391] netlink: 'syz.1.629': attribute type 11 has an invalid length. [ 192.921747][ T8391] netlink: 'syz.1.629': attribute type 11 has an invalid length. [ 193.005448][ T59] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.035461][ T59] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.084466][ T59] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.388007][ T8410] tipc: Enabled bearer , priority 0 [ 193.419728][ T8410] syzkaller0: entered promiscuous mode [ 193.448709][ T8410] syzkaller0: entered allmulticast mode [ 193.499576][ T8410] tipc: Resetting bearer [ 193.592880][ T8409] tipc: Resetting bearer [ 193.752671][ T8409] tipc: Disabling bearer [ 193.830321][ T8443] __nla_validate_parse: 6 callbacks suppressed [ 193.830340][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.637'. [ 194.109284][ T8454] tipc: Enabled bearer , priority 0 [ 194.165751][ T8454] syzkaller0: entered promiscuous mode [ 194.173186][ T8454] syzkaller0: entered allmulticast mode [ 194.231546][ T8471] netlink: 'syz.2.647': attribute type 1 has an invalid length. [ 194.241231][ T8471] netlink: 'syz.2.647': attribute type 1 has an invalid length. [ 194.316237][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.341662][ T8451] tipc: Resetting bearer [ 194.384190][ T8451] tipc: Disabling bearer [ 194.569944][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'. [ 194.713753][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 194.735775][ T8502] bpq0: entered allmulticast mode [ 194.892564][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 195.003659][ T8519] netlink: 'syz.4.664': attribute type 4 has an invalid length. [ 195.148890][ T8527] netlink: 244 bytes leftover after parsing attributes in process `syz.2.665'. [ 195.195300][ T8528] netlink: 'syz.3.666': attribute type 5 has an invalid length. [ 195.385562][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.669'. [ 195.451369][ T8537] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 195.567020][ T8541] syzkaller1: entered promiscuous mode [ 195.572646][ T8541] syzkaller1: entered allmulticast mode [ 195.585135][ T8541] syzkaller0: entered promiscuous mode [ 195.592393][ T8541] syzkaller0: entered allmulticast mode [ 195.611527][ T8541] sch_tbf: burst 127 is lower than device macvtap0 mtu (1514) ! [ 195.686533][ T8550] nbd1: detected capacity change from 0 to 549764202496 [ 195.713526][ T5866] block nbd1: Receive control failed (result -104) [ 195.788274][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 196.107732][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.115890][ T8578] netlink: 'syz.2.679': attribute type 18 has an invalid length. [ 196.142064][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.162092][ T8579] netlink: 'syz.4.680': attribute type 1 has an invalid length. [ 196.187923][ T8579] netlink: 'syz.4.680': attribute type 1 has an invalid length. [ 196.214721][ T8585] netlink: 212388 bytes leftover after parsing attributes in process `syz.0.682'. [ 196.215440][ T8586] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.678'. [ 196.230903][ T8585] openvswitch: netlink: Message has 5 unknown bytes. [ 196.290944][ T8585] netlink: 32 bytes leftover after parsing attributes in process `syz.0.682'. [ 196.367130][ T5869] Bluetooth: hci0: command 0x0406 tx timeout [ 196.373487][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 196.379694][ T5866] Bluetooth: hci4: command 0x0405 tx timeout [ 196.385882][ T5869] Bluetooth: hci3: command 0x0406 tx timeout [ 196.393738][ T5866] Bluetooth: hci1: command 0x0406 tx timeout [ 196.444139][ T8591] : entered promiscuous mode [ 196.532699][ T8596] tipc: Enabled bearer , priority 0 [ 196.557483][ T8596] syzkaller0: entered promiscuous mode [ 196.576235][ T8596] syzkaller0: entered allmulticast mode [ 196.596678][ T30] audit: type=1800 audit(1754889424.927:4): pid=8607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.688" name="memory.events" dev="tmpfs" ino=746 res=0 errno=0 [ 196.630586][ T30] audit: type=1804 audit(1754889424.927:5): pid=8607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.688" name="/newroot/143/memory.events" dev="tmpfs" ino=746 res=1 errno=0 [ 196.697275][ T8596] tipc: Resetting bearer [ 196.704546][ T8595] tipc: Resetting bearer [ 196.722390][ T8595] tipc: Disabling bearer [ 196.967945][ T8629] netlink: 'syz.2.692': attribute type 1 has an invalid length. [ 196.975953][ T8629] netlink: 'syz.2.692': attribute type 1 has an invalid length. [ 196.984242][ T8629] netlink: 'syz.2.692': attribute type 1 has an invalid length. [ 198.226839][ T8670] bond0: entered promiscuous mode [ 198.264235][ T8670] bond_slave_0: entered promiscuous mode [ 198.322418][ T8670] bond_slave_1: entered promiscuous mode [ 198.339322][ T8670] bond0: left promiscuous mode [ 198.349177][ T8670] bond_slave_0: left promiscuous mode [ 198.355103][ T8670] bond_slave_1: left promiscuous mode [ 198.532374][ T8685] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 198.540364][ T8685] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 198.549397][ T8685] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 198.557358][ T8685] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 198.565287][ T8685] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 198.573313][ T8685] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 198.581301][ T8685] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 198.589242][ T8685] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 198.597214][ T8685] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 198.605123][ T8685] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 198.989421][ T8711] __nla_validate_parse: 10 callbacks suppressed [ 198.989439][ T8711] netlink: 200 bytes leftover after parsing attributes in process `syz.3.712'. [ 199.422741][ C0] Illegal XDP return value 16128 on prog (id 145) dev lo, expect packet loss! [ 199.611167][ T8744] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 199.618518][ T8745] validate_nla: 2 callbacks suppressed [ 199.618535][ T8745] netlink: 'syz.4.724': attribute type 24 has an invalid length. [ 199.633219][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.643487][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.867442][ T8759] batadv_slave_1: entered promiscuous mode [ 199.891689][ T8756] batadv_slave_1: left promiscuous mode [ 200.171979][ T8782] unknown channel width for channel at 909000KHz? [ 200.261787][ T43] IPVS: starting estimator thread 0... [ 200.268090][ T8786] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 200.370488][ T8787] IPVS: using max 29 ests per chain, 69600 per kthread [ 200.485856][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.741'. [ 201.975253][ T8814] ip6gre0: Master is either lo or non-ether device [ 202.125039][ T8827] netlink: 100 bytes leftover after parsing attributes in process `syz.0.751'. [ 202.193740][ T8833] ip6erspan0: entered promiscuous mode [ 202.285965][ T8842] netlink: 'syz.1.752': attribute type 1 has an invalid length. [ 202.314641][ T8842] netlink: 244 bytes leftover after parsing attributes in process `syz.1.752'. [ 202.386931][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.756'. [ 202.491451][ T8852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.759'. [ 202.614013][ T8859] netlink: 'syz.3.762': attribute type 1 has an invalid length. [ 202.768307][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 202.794996][ T8874] netlink: 'syz.3.764': attribute type 4 has an invalid length. [ 202.803441][ T8874] netlink: 17 bytes leftover after parsing attributes in process `syz.3.764'. [ 202.955342][ T8880] netlink: 9 bytes leftover after parsing attributes in process `syz.3.766'. [ 202.976831][ T8878] syzkaller1: entered promiscuous mode [ 202.997345][ T8878] syzkaller1: entered allmulticast mode [ 203.017150][ T8888] netlink: 5 bytes leftover after parsing attributes in process `syz.3.766'. [ 203.031703][ T8880] gretap0: entered promiscuous mode [ 203.130217][ T8888] 0ªî{X¹¦: renamed from gretap0 [ 203.152212][ T8888] 0ªî{X¹¦: left promiscuous mode [ 203.157887][ T8888] 0ªî{X¹¦: entered allmulticast mode [ 203.426124][ T8905] syzkaller0: entered promiscuous mode [ 203.433072][ T8905] syzkaller0: entered allmulticast mode [ 203.645346][ T8923] net_ratelimit: 46 callbacks suppressed [ 203.645365][ T8923] openvswitch: netlink: Actions may not be safe on all matching packets [ 203.664239][ T8923] openvswitch: netlink: Key type 1807 is out of range max 32 [ 204.993980][ T8934] __nla_validate_parse: 1 callbacks suppressed [ 204.993997][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'. [ 205.037643][ T8931] netlink: 132 bytes leftover after parsing attributes in process `syz.2.784'. [ 205.053454][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.783'. [ 205.328220][ T8962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'. [ 205.401732][ T8962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'. [ 205.493663][ T8962] gretap0: entered promiscuous mode [ 205.530280][ T8962] gretap0: left promiscuous mode [ 205.563190][ T8968] gtp0: entered promiscuous mode [ 205.569708][ T8968] gtp0: entered allmulticast mode [ 205.662970][ T8977] : renamed from bridge_slave_0 (while UP) [ 205.719857][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.791'. [ 205.740891][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.791'. [ 205.755805][ T8977] netlink: 108 bytes leftover after parsing attributes in process `syz.3.791'. [ 205.761788][ T8979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.793'. [ 205.884902][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'. [ 206.657967][ T9009] netlink: 'syz.4.803': attribute type 3 has an invalid length. [ 206.748991][ T9011] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 206.805846][ T9011] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 206.911610][ T9011] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 206.973070][ T9011] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 207.052582][ T9011] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 207.085090][ T9011] bridge9: the hash_elasticity option has been deprecated and is always 16 [ 207.130984][ T9011] bridge10: the hash_elasticity option has been deprecated and is always 16 [ 207.198783][ T9011] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 207.252964][ T9011] bridge12: the hash_elasticity option has been deprecated and is always 16 [ 207.316175][ T9011] bridge13: the hash_elasticity option has been deprecated and is always 16 [ 207.398177][ T9011] bridge14: the hash_elasticity option has been deprecated and is always 16 [ 207.443098][ T9011] bridge15: the hash_elasticity option has been deprecated and is always 16 [ 207.694414][ T9058] netlink: 'syz.2.816': attribute type 1 has an invalid length. [ 207.958718][ T9076] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.296224][ T9094] netlink: 'syz.4.826': attribute type 8 has an invalid length. [ 208.550702][ T9104] netlink: 'syz.0.829': attribute type 8 has an invalid length. [ 208.911435][ T9130] pim6reg: entered allmulticast mode [ 208.933905][ T9131] netlink: 'syz.0.834': attribute type 33 has an invalid length. [ 209.276805][ T9149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.042655][ T9187] __nla_validate_parse: 14 callbacks suppressed [ 210.042674][ T9187] netlink: 248 bytes leftover after parsing attributes in process `syz.4.847'. [ 210.127717][ T9187] netlink: 52 bytes leftover after parsing attributes in process `syz.4.847'. [ 210.946068][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.865'. [ 211.207906][ T9239] vxcan2: entered promiscuous mode [ 211.223354][ T9239] vxcan2: entered allmulticast mode [ 211.282408][ T9242] vxcan2: entered promiscuous mode [ 211.300893][ T9242] vxcan2: entered allmulticast mode [ 211.435866][ T9256] netlink: 36 bytes leftover after parsing attributes in process `syz.4.873'. [ 211.559161][ T9260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.874'. [ 211.569055][ T9260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.874'. [ 211.587500][ T9260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.874'. [ 211.764171][ T9271] tipc: Failed to remove unknown binding: 66,1,1/0:3933170043/3933170045 [ 211.783435][ T9271] tipc: Failed to remove unknown binding: 66,1,1/0:3933170043/3933170045 [ 212.184739][ T9292] netlink: 100 bytes leftover after parsing attributes in process `syz.0.884'. [ 212.682569][ T9313] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.888'. [ 213.123730][ T9329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.894'. [ 213.363317][ T9336] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.456452][ T9336] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.805243][ T9336] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.835746][ T9336] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.027237][ T9336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.037668][ T9336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.343470][ T9336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.388422][ T9336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.697027][ T4532] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.724361][ T4532] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.787159][ T94] block nbd0: Possible stuck request ffff888025130000: control (read@0,1024B). Runtime 30 seconds [ 214.799531][ T94] block nbd0: Possible stuck request ffff8880251301c0: control (read@1024,1024B). Runtime 30 seconds [ 214.812258][ T94] block nbd0: Possible stuck request ffff888025130380: control (read@2048,1024B). Runtime 30 seconds [ 214.824250][ T94] block nbd0: Possible stuck request ffff888025130540: control (read@3072,1024B). Runtime 30 seconds [ 214.841932][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.850722][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.859633][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.868358][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.911288][ T1115] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.926471][ T1115] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.957519][ T9380] ip6gretap0: entered promiscuous mode [ 214.976081][ T9380] netlink: 'syz.2.911': attribute type 2 has an invalid length. [ 215.278334][ T9393] netlink: 'syz.0.915': attribute type 7 has an invalid length. [ 215.363929][ T9395] netlink: 'syz.2.916': attribute type 21 has an invalid length. [ 215.407696][ T9396] netlink: 'syz.2.916': attribute type 4 has an invalid length. [ 215.870188][ T9412] __nla_validate_parse: 6 callbacks suppressed [ 215.870208][ T9412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.921'. [ 216.017757][ T9418] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.923'. [ 216.198602][ T9395] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 216.392673][ T9423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.925'. [ 216.438899][ T9432] netlink: 'syz.0.927': attribute type 12 has an invalid length. [ 217.444302][ T9471] veth7: entered allmulticast mode [ 217.486688][ T5877] Bluetooth: hci0: command 0x0406 tx timeout [ 217.545495][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.940'. [ 217.655052][ T9474] hsr_slave_1 (unregistering): left promiscuous mode [ 217.871503][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.944'. [ 217.912842][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'. [ 217.981511][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.944'. [ 218.012873][ T9494] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.947'. [ 218.109659][ T9498] netlink: 48 bytes leftover after parsing attributes in process `syz.4.946'. [ 218.290094][ T9503] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.950'. [ 218.719172][ T9527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.760485][ T9527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.831547][ T9531] syzkaller1: entered promiscuous mode [ 218.851719][ T9531] syzkaller1: entered allmulticast mode [ 218.961684][ T9537] netlink: 'syz.0.959': attribute type 9 has an invalid length. [ 219.140767][ T9547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.202197][ T9549] delete_channel: no stack [ 219.446132][ T9557] vlan2: entered allmulticast mode [ 219.446415][ T9560] IPv6: NLM_F_CREATE should be specified when creating new route [ 219.474338][ T9557] bridge0: entered allmulticast mode [ 219.514998][ T9557] bridge2: port 1(vlan2) entered blocking state [ 219.538802][ T9557] bridge2: port 1(vlan2) entered disabled state [ 219.560365][ T9557] vlan2: entered promiscuous mode [ 219.565748][ T9557] bridge0: entered promiscuous mode [ 220.222502][ T9595] nbd: must specify a device to reconfigure [ 220.748166][ T9616] gtp1: entered promiscuous mode [ 220.765240][ T9616] gtp1: entered allmulticast mode [ 220.829331][ T9621] netlink: 'syz.4.986': attribute type 2 has an invalid length. [ 220.959038][ T9628] __nla_validate_parse: 9 callbacks suppressed [ 220.959055][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.987'. [ 221.365100][ T9652] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20002 [ 221.551317][ T9666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.999'. [ 221.555556][ T9664] netlink: 40 bytes leftover after parsing attributes in process `syz.2.998'. [ 221.893888][ T9685] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1005'. [ 222.018015][ T9698] sctp: [Deprecated]: syz.3.1008 (pid 9698) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.018015][ T9698] Use struct sctp_sack_info instead [ 222.178658][ T9705] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1011'. [ 222.227302][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1010'. [ 222.630180][ T9747] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1021'. [ 222.782337][ T9759] netlink: 'syz.2.1024': attribute type 2 has an invalid length. [ 222.842003][ T9759] netlink: 'syz.2.1024': attribute type 8 has an invalid length. [ 222.886989][ T9759] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.1024'. [ 223.005196][ T9770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1026'. [ 223.061601][ T9770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1026'. [ 223.182589][ T9777] netlink: 'syz.1.1028': attribute type 1 has an invalid length. [ 223.206832][ T9777] netlink: 'syz.1.1028': attribute type 1 has an invalid length. [ 223.333810][ T9785] dvmrp1: entered allmulticast mode [ 223.689684][ T9796] netlink: 'syz.0.1038': attribute type 11 has an invalid length. [ 223.733460][ T9796] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.744415][ T9799] dvmrp0: entered allmulticast mode [ 223.953060][ T5979] IPVS: starting estimator thread 0... [ 223.964925][ T9811] IPVS: ip_vs_edit_dest(): server weight less than zero [ 224.048523][ T9812] IPVS: using max 25 ests per chain, 60000 per kthread [ 224.582727][ T9828] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.885057][ T9856] vlan2: entered allmulticast mode [ 224.898710][ T9856] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 224.906239][ T9858] netlink: 'syz.2.1054': attribute type 3 has an invalid length. [ 224.909235][ T9860] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 224.946250][ T9858] netlink: 'syz.2.1054': attribute type 2 has an invalid length. [ 225.327454][ T9880] dvmrp1: left allmulticast mode [ 225.986184][ T9916] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 226.129028][ T9921] __nla_validate_parse: 10 callbacks suppressed [ 226.129046][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 226.289070][ T94] block nbd1: Possible stuck request ffff88802521e000: control (read@0,4096B). Runtime 30 seconds [ 226.485079][ T9939] netlink: 'syz.0.1079': attribute type 2 has an invalid length. [ 226.673444][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1081'. [ 226.747251][ T9944] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1081'. [ 226.762828][ T9946] netlink: 'syz.4.1080': attribute type 4 has an invalid length. [ 226.807365][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1082'. [ 226.834790][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1082'. [ 226.863910][ T9950] netlink: 'syz.1.1082': attribute type 14 has an invalid length. [ 226.892517][ T9950] netlink: 'syz.1.1082': attribute type 13 has an invalid length. [ 227.132663][ T9963] gtp0: entered promiscuous mode [ 227.136635][ T9966] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1090'. [ 227.140015][ T9963] gtp0: entered allmulticast mode [ 227.329941][ T9978] netlink: 'syz.3.1093': attribute type 4 has an invalid length. [ 227.497329][ T9987] netlink: 'syz.0.1097': attribute type 10 has an invalid length. [ 227.635831][ T9982] wg1: left promiscuous mode [ 227.643928][ T9982] wg1: left allmulticast mode [ 227.647898][T10003] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.669903][ T9982] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 227.855139][T10016] netlink: 'syz.4.1103': attribute type 6 has an invalid length. [ 227.876139][T10016] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1103'. [ 228.027214][T10024] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1105'. [ 228.027955][T10028] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1105'. [ 228.120404][T10032] netlink: 'syz.4.1107': attribute type 3 has an invalid length. [ 228.145052][T10032] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1107'. [ 228.494411][T10054] netlink: 'syz.3.1112': attribute type 6 has an invalid length. [ 229.094540][T10094] netlink: 'syz.4.1121': attribute type 6 has an invalid length. [ 230.651651][T10184] C: renamed from lo [ 231.346101][T10219] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 231.453149][T10224] sctp: [Deprecated]: syz.1.1155 (pid 10224) Use of int in maxseg socket option. [ 231.453149][T10224] Use struct sctp_assoc_value instead [ 231.618955][T10235] __nla_validate_parse: 5 callbacks suppressed [ 231.618973][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'. [ 231.628204][T10232] tipc: Enabled bearer , priority 0 [ 231.678145][T10232] tipc: Resetting bearer [ 231.698792][T10242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1160'. [ 231.727736][T10242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1160'. [ 231.745404][T10235] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1158'. [ 231.782458][T10231] tipc: Disabling bearer [ 231.891596][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'. [ 232.072910][T10255] vlan2: entered allmulticast mode [ 232.087839][T10255] bond0: entered allmulticast mode [ 232.093156][T10255] bond_slave_0: entered allmulticast mode [ 232.113470][T10255] bond_slave_1: entered allmulticast mode [ 232.210145][T10265] syz.2.1165 (10265) used obsolete PPPIOCDETACH ioctl [ 232.274611][T10273] syzkaller0: create flow: hash 1696304526 index 1 [ 232.330578][T10277] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1166'. [ 232.439847][ T1147] syzkaller0: tun_net_xmit 76 [ 232.445033][ T1147] syzkaller0: tun_net_xmit 48 [ 232.461891][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 232.469553][ T43] syzkaller0: tun_net_xmit 76 [ 232.494495][T10279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 232.528195][T10273] syzkaller0: delete flow: hash 1696304526 index 1 [ 232.565894][T10288] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1170'. [ 232.633003][T10289] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1170'. [ 233.666064][T10279] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 233.789080][T10300] bridge_slave_1: left allmulticast mode [ 233.811391][T10300] bridge_slave_1: left promiscuous mode [ 233.819328][T10300] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.843006][T10300] bridge_slave_0: left allmulticast mode [ 233.867813][T10300] bridge_slave_0: left promiscuous mode [ 233.873966][T10300] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.991336][T10303] sit0: entered promiscuous mode [ 233.998356][T10303] validate_nla: 2 callbacks suppressed [ 233.998372][T10303] netlink: 'syz.4.1174': attribute type 1 has an invalid length. [ 234.683535][T10358] netlink: 'syz.3.1192': attribute type 4 has an invalid length. [ 234.892627][T10374] netlink: 'syz.1.1196': attribute type 1 has an invalid length. [ 235.081661][T10385] netlink: 'syz.4.1198': attribute type 4 has an invalid length. [ 235.775835][ T5979] IPVS: starting estimator thread 0... [ 235.785148][T10441] IPVS: set_ctl: invalid protocol: 8 172.30.1.2:20003 [ 235.811290][T10441] IPVS: set_ctl: invalid protocol: 94 100.1.1.0:20008 [ 235.897179][T10445] IPVS: using max 27 ests per chain, 64800 per kthread [ 235.930442][T10453] tipc: Enabling of bearer rejected, failed to enable media [ 236.170946][T10463] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 236.195176][T10464] tipc: Enabled bearer , priority 0 [ 236.219519][T10464] syzkaller0: entered promiscuous mode [ 236.237388][T10464] syzkaller0: entered allmulticast mode [ 236.484765][T10461] tipc: Resetting bearer [ 236.610041][T10461] tipc: Disabling bearer [ 236.874864][T10494] netlink: 'syz.0.1229': attribute type 1 has an invalid length. [ 237.041632][T10504] veth11: entered allmulticast mode [ 237.049297][T10508] veth0: entered promiscuous mode [ 237.055360][T10502] veth0: left promiscuous mode [ 237.159928][T10512] __nla_validate_parse: 9 callbacks suppressed [ 237.159954][T10512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1236'. [ 237.201729][T10512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1236'. [ 237.253321][T10519] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1237'. [ 237.547051][T10537] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1244'. [ 237.564052][T10537] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1244'. [ 237.580343][T10537] netlink: 'syz.1.1244': attribute type 6 has an invalid length. [ 237.589934][T10537] netlink: 'syz.1.1244': attribute type 5 has an invalid length. [ 237.625029][T10537] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1244'. [ 237.682320][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1247'. [ 237.692538][T10544] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1247'. [ 237.785826][T10546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1245'. [ 238.256110][T10576] netlink: 'syz.0.1255': attribute type 1 has an invalid length. [ 238.413858][T10584] tipc: Enabled bearer , priority 1 [ 238.917431][T10617] netlink: 'syz.4.1268': attribute type 1 has an invalid length. [ 238.938602][T10617] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1268'. [ 239.374219][T10635] syzkaller0: entered promiscuous mode [ 239.380034][T10635] syzkaller0: entered allmulticast mode [ 239.408163][T10635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.417295][T10635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.536485][ T5979] tipc: Node number set to 4165669450 [ 239.644374][T10653] sctp: [Deprecated]: syz.2.1280 (pid 10653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.644374][T10653] Use struct sctp_sack_info instead [ 239.673632][T10653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.045368][T10678] netlink: 'syz.2.1287': attribute type 7 has an invalid length. [ 241.228440][T10692] veth1_macvtap: left promiscuous mode [ 241.257394][T10692] macsec0: entered promiscuous mode [ 241.266543][T10692] macsec0: entered allmulticast mode [ 241.369424][T10703] netlink: 'syz.3.1295': attribute type 6 has an invalid length. [ 241.393006][T10704] netlink: 'syz.1.1296': attribute type 15 has an invalid length. [ 241.593098][T10706] ip6gre0: Master is either lo or non-ether device [ 242.205996][T10748] tipc: Started in network mode [ 242.217022][T10748] tipc: Node identity becdeea8ee88, cluster identity 4711 [ 242.224933][T10748] tipc: Enabled bearer , priority 0 [ 242.238523][T10748] syzkaller0: entered promiscuous mode [ 242.244031][T10748] syzkaller0: entered allmulticast mode [ 242.264614][T10751] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 242.319526][T10748] tipc: Resetting bearer [ 242.357115][T10746] tipc: Resetting bearer [ 242.441078][T10746] tipc: Disabling bearer [ 242.449195][T10770] __nla_validate_parse: 15 callbacks suppressed [ 242.449212][T10770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1310'. [ 242.489237][T10771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1311'. [ 242.960650][T10793] IPv6: sit1: Disabled Multicast RS [ 242.981667][T10793] sit1: entered allmulticast mode [ 243.031718][T10801] IPVS: set_ctl: invalid protocol: 44 172.30.1.4:20001 [ 243.055257][T10797] IPv6: sit1: Disabled Multicast RS [ 243.061681][T10797] sit1: entered allmulticast mode [ 243.211313][T10805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1322'. [ 243.370121][T10818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1327'. [ 243.395172][T10818] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1327'. [ 243.427456][T10821] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1327'. [ 243.563385][T10824] netlink: 'syz.1.1328': attribute type 5 has an invalid length. [ 243.700452][T10833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.795337][T10839] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 244.395575][T10878] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1343'. [ 244.589720][T10893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1346'. [ 244.854644][ T94] block nbd0: Possible stuck request ffff888025130000: control (read@0,1024B). Runtime 60 seconds [ 244.866489][ T94] block nbd0: Possible stuck request ffff8880251301c0: control (read@1024,1024B). Runtime 60 seconds [ 244.880618][ T94] block nbd0: Possible stuck request ffff888025130380: control (read@2048,1024B). Runtime 60 seconds [ 244.892807][ T94] block nbd0: Possible stuck request ffff888025130540: control (read@3072,1024B). Runtime 60 seconds [ 245.775492][T10951] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1358'. [ 245.792288][T10952] netlink: 'syz.3.1359': attribute type 58 has an invalid length. [ 245.802335][T10952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1359'. [ 245.823144][T10951] vlan2: entered allmulticast mode [ 245.835548][T10951] gretap0: entered allmulticast mode [ 246.321997][T10977] 8021q: VLANs not supported on sit0 [ 246.426252][T10985] netlink: 'syz.2.1365': attribute type 21 has an invalid length. [ 246.433197][T10986] IPVS: Unknown mcast interface: nicvf0 [ 246.459527][T10985] IPv6: NLM_F_CREATE should be specified when creating new route [ 247.102791][T11023] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 247.389507][T11048] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 247.391233][T11046] netlink: 'syz.3.1377': attribute type 10 has an invalid length. [ 247.459451][T11046] team0: Port device geneve0 added [ 247.703539][T11063] __nla_validate_parse: 7 callbacks suppressed [ 247.703557][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1385'. [ 247.766957][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1384'. [ 248.002984][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'. [ 248.105200][T11078] erspan0: entered promiscuous mode [ 249.129824][T11144] netlink: 'syz.1.1401': attribute type 1 has an invalid length. [ 249.191349][T11147] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1403'. [ 249.258804][T11155] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1404'. [ 249.772581][T11180] openvswitch: netlink: Actions may not be safe on all matching packets [ 249.927018][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'. [ 250.214546][T11209] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1417'. [ 250.302388][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1419'. [ 250.513153][T11224] netlink: 'syz.0.1421': attribute type 1 has an invalid length. [ 250.528698][T11224] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1421'. [ 250.538602][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 250.944343][T11244] delete_channel: no stack [ 251.273622][T11241] dvmrp1: entered allmulticast mode [ 251.380524][ T4532] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.419615][ T4532] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.467696][ T4532] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.479661][T11258] syzkaller0: entered promiscuous mode [ 251.485178][T11258] syzkaller0: entered allmulticast mode [ 251.493554][T11252] syzkaller0: entered promiscuous mode [ 251.505813][T11252] syzkaller0: entered allmulticast mode [ 251.534025][ T4532] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.556758][ T4532] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.575413][ T4532] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.591700][ T4532] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.604338][ T4532] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.614185][ T4532] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.684705][ T4532] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.693432][ T4532] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.712269][ T4532] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 251.737685][T11274] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.768738][T11283] tipc: Enabled bearer , priority 0 [ 251.781017][T11283] syzkaller0: entered promiscuous mode [ 251.814393][T11283] syzkaller0: entered allmulticast mode [ 251.878966][T11282] tipc: Resetting bearer [ 251.912876][T11282] tipc: Disabling bearer [ 252.390198][T11318] netlink: 'syz.1.1448': attribute type 7 has an invalid length. [ 252.430622][T11318] netlink: 'syz.1.1448': attribute type 8 has an invalid length. [ 252.754131][T11342] __nla_validate_parse: 5 callbacks suppressed [ 252.754147][T11342] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1457'. [ 252.825681][T11346] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1458'. [ 252.863559][T11346] openvswitch: netlink: Flow key attr not present in new flow. [ 252.958768][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1461'. [ 253.277121][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1468'. [ 253.345963][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1468'. [ 253.355540][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.402188][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.425881][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.473894][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.602000][T11394] netlink: 'syz.4.1473': attribute type 1 has an invalid length. [ 253.603884][T11397] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 253.749138][T11404] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1473'. [ 253.769247][T11406] C: renamed from team_slave_0 [ 253.787311][T11406] netlink: 'syz.0.1479': attribute type 1 has an invalid length. [ 253.798057][T11406] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 253.934628][T11425] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1482'. [ 254.082387][T11438] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1486'. [ 254.712959][T11454] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 254.751011][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1491'. [ 254.777142][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1491'. [ 255.043622][T11475] sctp: [Deprecated]: syz.2.1499 (pid 11475) Use of int in maxseg socket option. [ 255.043622][T11475] Use struct sctp_assoc_value instead [ 255.293586][T11487] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 255.305014][ T9] IPVS: starting estimator thread 0... [ 255.312162][T11499] netlink: 'syz.1.1507': attribute type 1 has an invalid length. [ 255.334432][T11499] netlink: 'syz.1.1507': attribute type 1 has an invalid length. [ 255.411982][T11503] IPVS: using max 31 ests per chain, 74400 per kthread [ 255.681398][T11519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.710861][T11519] bond0: (slave rose0): Enslaving as an active interface with an up link [ 255.730809][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.144469][T11543] macvtap1: entered promiscuous mode [ 256.178268][T11543] vlan0: entered promiscuous mode [ 256.215049][T11543] macvtap1: entered allmulticast mode [ 256.228978][T11543] vlan0: entered allmulticast mode [ 256.261539][T11543] veth0_vlan: entered allmulticast mode [ 256.377859][ T94] block nbd1: Possible stuck request ffff88802521e000: control (read@0,4096B). Runtime 60 seconds [ 257.228175][T11611] netlink: 'syz.2.1529': attribute type 12 has an invalid length. [ 257.236118][T11611] netlink: 'syz.2.1529': attribute type 29 has an invalid length. [ 257.699463][T11640] tipc: Enabled bearer , priority 10 [ 258.177070][T11662] __nla_validate_parse: 16 callbacks suppressed [ 258.177089][T11662] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1540'. [ 258.246071][T11662] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1540'. [ 258.273809][T11662] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1540'. [ 258.294079][T11662] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1540'. [ 258.319549][T11662] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1540'. [ 258.351727][T11662] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1540'. [ 258.381890][T11662] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1540'. [ 258.403172][T11662] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1540'. [ 258.436712][T11662] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1540'. [ 258.453417][T11662] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1540'. [ 258.696464][ T43] tipc: Node number set to 2242463595 [ 258.729004][T11683] veth0: entered promiscuous mode [ 258.890086][T11677] veth0: left promiscuous mode [ 260.549305][T11766] unknown channel width for channel at 909000KHz? [ 260.865708][T11776] sctp: [Deprecated]: syz.2.1569 (pid 11776) Use of int in max_burst socket option. [ 260.865708][T11776] Use struct sctp_assoc_value instead [ 261.390368][T11813] lo speed is unknown, defaulting to 1000 [ 261.406633][T11813] lo speed is unknown, defaulting to 1000 [ 261.415060][T11813] lo speed is unknown, defaulting to 1000 [ 261.454187][T11813] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 261.506093][T11813] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 261.517233][T11822] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 261.623986][T11813] lo speed is unknown, defaulting to 1000 [ 261.639626][T11813] lo speed is unknown, defaulting to 1000 [ 261.650651][T11813] lo speed is unknown, defaulting to 1000 [ 261.680703][T11813] lo speed is unknown, defaulting to 1000 [ 261.700036][T11813] lo speed is unknown, defaulting to 1000 [ 262.129566][T11842] tipc: Enabled bearer , priority 0 [ 262.154347][T11842] syzkaller0: entered promiscuous mode [ 262.167309][T11842] syzkaller0: entered allmulticast mode [ 262.383503][T11846] tipc: Resetting bearer [ 262.399283][T11837] tipc: Resetting bearer [ 262.565952][T11837] tipc: Disabling bearer [ 263.315515][T11851] __nla_validate_parse: 66 callbacks suppressed [ 263.315534][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1588'. [ 263.356828][T11852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1588'. [ 263.749117][T11866] netlink: 'syz.0.1593': attribute type 14 has an invalid length. [ 264.016207][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'. [ 264.193870][T11892] netlink: 'syz.2.1600': attribute type 1 has an invalid length. [ 264.321093][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1599'. [ 264.416098][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1603'. [ 265.201362][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'. [ 265.249595][T11936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'. [ 265.356782][T11940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1615'. [ 265.401041][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1615'. [ 265.416493][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1615'. [ 265.644593][T11961] netlink: 'syz.1.1619': attribute type 7 has an invalid length. [ 265.666626][T11961] netlink: 'syz.1.1619': attribute type 8 has an invalid length. [ 266.029184][T11979] netlink: 'syz.3.1626': attribute type 10 has an invalid length. [ 266.066885][T11979] netlink: 'syz.3.1626': attribute type 17 has an invalid length. [ 266.084369][T11979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.248867][T11989] nbd: socks must be embedded in a SOCK_ITEM attr [ 266.668192][T11998] netlink: 'syz.2.1630': attribute type 1 has an invalid length. [ 266.852620][T11998] bond4: entered promiscuous mode [ 266.877809][T11998] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.073882][T12009] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.081756][T12009] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 267.093376][T12009] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 267.110838][T12009] bond4: (slave wireguard0): making interface the new active one [ 267.118845][T12009] wireguard0: entered promiscuous mode [ 267.128707][T12009] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 267.346538][T12044] bond0: (slave bond_slave_0): Releasing backup interface [ 267.372981][T12044] bond0: (slave bond_slave_1): Releasing backup interface [ 267.424715][T12044] team0: Port device team_slave_0 removed [ 267.445188][T12044] team0: Port device team_slave_1 removed [ 267.454625][T12044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.462274][T12044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.475068][T12044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.483861][T12044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.727648][T12063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.764561][T12066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.772021][T12066] bond1: (slave vxcan7): The slave device specified does not support setting the MAC address [ 267.784865][T12066] bond1: (slave vxcan7): Error -95 calling set_mac_address [ 268.057124][T12078] netlink: 'syz.1.1650': attribute type 2 has an invalid length. [ 268.064917][T12078] nbd: must specify at least one socket [ 268.204907][T12092] netlink: 'syz.1.1655': attribute type 10 has an invalid length. [ 268.218268][T12092] syz_tun: entered promiscuous mode [ 268.229122][T12092] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 268.240597][T12084] netdevsim netdevsim4 ÿÿÿÿÿÿD: renamed from netdevsim0 [ 268.570117][T12107] __nla_validate_parse: 7 callbacks suppressed [ 268.570135][T12107] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1660'. [ 268.589946][T12103] can: request_module (can-proto-0) failed. [ 268.616629][T12108] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1660'. [ 268.709774][T12111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.919457][T12122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1665'. [ 269.112269][T12124] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 269.486112][T12142] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 270.018364][T12168] dvmrp1: entered allmulticast mode [ 270.222875][T12192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1678'. [ 270.243304][T12174] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 270.259640][T12190] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1681'. [ 270.290755][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'. [ 270.954584][T12225] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.1689'. [ 271.114683][T12224] syzkaller1: entered promiscuous mode [ 271.155220][T12232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1691'. [ 271.164336][T12224] syzkaller1: entered allmulticast mode [ 271.181945][T12228] raw_sendmsg: syz.1.1690 forgot to set AF_INET. Fix it! [ 271.256218][T12234] netlink: 'syz.3.1692': attribute type 7 has an invalid length. [ 271.477873][T12245] netlink: 'syz.3.1694': attribute type 11 has an invalid length. [ 271.496670][T12245] netlink: 'syz.3.1694': attribute type 11 has an invalid length. [ 271.504630][T12245] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1694'. [ 271.740945][T12255] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1698'. [ 271.757511][T12256] netlink: 'syz.1.1696': attribute type 1 has an invalid length. [ 272.331670][T12286] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 272.580892][T12308] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 272.644141][T12311] IPVS: set_ctl: invalid protocol: 16588 10.1.1.1:20001 [ 272.666681][T12308] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 272.675261][T12308] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 272.736121][T12314] netlink: 'syz.4.1718': attribute type 1 has an invalid length. [ 272.963499][T12322] netlink: 'syz.1.1720': attribute type 11 has an invalid length. [ 273.057860][T12327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.114707][T12333] Bluetooth: MGMT ver 1.23 [ 273.156931][T12327] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 273.593098][T12348] __nla_validate_parse: 11 callbacks suppressed [ 273.593118][T12348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1728'. [ 273.705957][T12354] netlink: 'syz.2.1730': attribute type 1 has an invalid length. [ 274.107749][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1732'. [ 274.582521][ C1] ------------[ cut here ]------------ [ 274.582894][T12375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1736'. [ 274.588078][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 274.589124][ C1] WARNING: CPU: 1 PID: 5870 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 274.617210][ C1] Modules linked in: [ 274.621155][ C1] CPU: 1 UID: 0 PID: 5870 Comm: syz-executor Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 274.633455][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.643628][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 274.649945][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 82 13 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 274.669596][ C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246 [ 274.675815][ C1] RAX: 5fd5686a1fb7ec00 RBX: 000000000000000c RCX: ffff888032ca0000 [ 274.683908][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 274.691953][ C1] RBP: dffffc0000000000 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 274.700030][ C1] R10: dffffc0000000000 R11: ffffed10170e484b R12: ffff888035406b68 [ 274.708068][ C1] R13: 0000000000000000 R14: ffff888027448e40 R15: ffff88802744b0d8 [ 274.716073][ C1] FS: 000055558b478500(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 274.725100][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.731844][ C1] CR2: 00007f8a70ee56c0 CR3: 0000000076e5e000 CR4: 00000000003526f0 [ 274.739912][ C1] Call Trace: [ 274.743224][ C1] [ 274.746103][ C1] rate_control_send_low+0x194/0x7a0 [ 274.751581][ C1] rate_control_get_rate+0x20b/0x5d0 [ 274.757231][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 274.763075][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 274.769660][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 274.775070][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 274.780887][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 274.787112][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 274.793139][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 274.799156][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 274.804772][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 274.810398][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 274.816086][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 274.821770][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 274.827306][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 274.833595][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 274.839261][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 274.846591][ C1] __iterate_interfaces+0x2ab/0x590 [ 274.851854][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 274.858408][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 274.866024][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 274.872206][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 274.880197][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 274.886336][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 274.892268][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 274.897643][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 274.903377][ C1] ? read_tsc+0x9/0x20 [ 274.907732][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 274.913743][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 274.918941][ C1] handle_softirqs+0x283/0x870 [ 274.923777][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 274.928772][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 274.934092][ C1] __irq_exit_rcu+0xca/0x1f0 [ 274.938928][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 274.944178][ C1] irq_exit_rcu+0x9/0x30 [ 274.948503][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 274.954486][ C1] [ 274.957498][ C1] [ 274.960897][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 274.967229][ C1] RIP: 0010:vm_area_dup+0x3cd/0x680 [ 274.972590][ C1] Code: 89 e7 be 04 00 00 00 e8 31 52 1a 00 4c 89 e0 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28 84 c0 0f 85 17 02 00 00 83 80 00 00 00 00 00 00 00 48 8d 7b 28 48 89 f8 48 c1 e8 03 42 [ 274.992492][ C1] RSP: 0018:ffffc9000420f7d8 EFLAGS: 00000246 [ 274.998716][ C1] RAX: 0000000000000000 RBX: ffff88807e419500 RCX: ffffffff8208c6bf [ 275.006797][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88807e419580 [ 275.014872][ C1] RBP: ffff88807e4195e0 R08: ffff88807e419583 R09: 1ffff1100fc832b0 [ 275.023175][ C1] R10: dffffc0000000000 R11: ffffed100fc832b1 R12: ffff88807e419580 [ 275.031301][ C1] R13: dffffc0000000000 R14: ffff888078bfbdc0 R15: 1ffff1100fc832ba [ 275.039372][ C1] ? vm_area_dup+0x3af/0x680 [ 275.044018][ C1] ? vm_area_dup+0x3af/0x680 [ 275.048689][ C1] dup_mmap+0x90c/0x1ac0 [ 275.053002][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 275.057779][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 275.063878][ C1] ? mm_init+0xcc3/0xef0 [ 275.068462][ C1] copy_mm+0x13c/0x4b0 [ 275.073263][ C1] copy_process+0x1706/0x3c00 [ 275.078492][ C1] ? copy_process+0x97f/0x3c00 [ 275.083600][ C1] ? __pfx_copy_process+0x10/0x10 [ 275.088825][ C1] kernel_clone+0x21e/0x840 [ 275.093965][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 275.099162][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 275.104446][ C1] __x64_sys_clone+0x18b/0x1e0 [ 275.109298][ C1] ? count_memcg_event_mm+0x21/0x260 [ 275.114820][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 275.120238][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 275.125587][ C1] ? do_syscall_64+0xbe/0x3b0 [ 275.130334][ C1] do_syscall_64+0xfa/0x3b0 [ 275.134913][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.140539][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.146775][ C1] ? clear_bhb_loop+0x60/0xb0 [ 275.151539][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.157594][ C1] RIP: 0033:0x7f8a70185453 [ 275.162046][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 275.182165][ C1] RSP: 002b:00007ffeec304b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 275.190845][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8a70185453 [ 275.198872][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 275.206904][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 275.214905][ C1] R10: 000055558b4787d0 R11: 0000000000000246 R12: 0000000000000000 [ 275.222943][ C1] R13: 00000000000927c0 R14: 000000000004304a R15: 00007ffeec304cc0 [ 275.230997][ C1] [ 275.234048][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 275.241344][ C1] CPU: 1 UID: 0 PID: 5870 Comm: syz-executor Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 275.253250][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 275.263320][ C1] Call Trace: [ 275.266612][ C1] [ 275.269476][ C1] dump_stack_lvl+0x99/0x250 [ 275.274102][ C1] ? __asan_memcpy+0x40/0x70 [ 275.278716][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.283915][ C1] ? __pfx__printk+0x10/0x10 [ 275.288515][ C1] vpanic+0x281/0x750 [ 275.292501][ C1] ? __pfx__printk+0x10/0x10 [ 275.297237][ C1] ? __pfx_vpanic+0x10/0x10 [ 275.301756][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 275.307059][ C1] panic+0xb9/0xc0 [ 275.310838][ C1] ? __pfx_panic+0x10/0x10 [ 275.315280][ C1] __warn+0x31b/0x4b0 [ 275.319270][ C1] ? __rate_control_send_low+0x5df/0x820 [ 275.324903][ C1] ? __rate_control_send_low+0x5df/0x820 [ 275.330537][ C1] report_bug+0x2be/0x4f0 [ 275.334880][ C1] ? __rate_control_send_low+0x5df/0x820 [ 275.340877][ C1] ? __rate_control_send_low+0x5df/0x820 [ 275.346521][ C1] ? __rate_control_send_low+0x5e1/0x820 [ 275.352173][ C1] handle_bug+0x84/0x160 [ 275.356421][ C1] exc_invalid_op+0x1a/0x50 [ 275.360924][ C1] asm_exc_invalid_op+0x1a/0x20 [ 275.365763][ C1] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 275.372012][ C1] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 82 13 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 275.391878][ C1] RSP: 0018:ffffc90000a08538 EFLAGS: 00010246 [ 275.397945][ C1] RAX: 5fd5686a1fb7ec00 RBX: 000000000000000c RCX: ffff888032ca0000 [ 275.406081][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 275.414058][ C1] RBP: dffffc0000000000 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 275.422026][ C1] R10: dffffc0000000000 R11: ffffed10170e484b R12: ffff888035406b68 [ 275.429991][ C1] R13: 0000000000000000 R14: ffff888027448e40 R15: ffff88802744b0d8 [ 275.438236][ C1] ? __rate_control_send_low+0x5de/0x820 [ 275.444156][ C1] rate_control_send_low+0x194/0x7a0 [ 275.449449][ C1] rate_control_get_rate+0x20b/0x5d0 [ 275.454849][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 275.460689][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 275.467125][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 275.472514][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 275.478338][ C1] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 275.484100][ C1] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 275.490106][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 275.495746][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 275.501300][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 275.506936][ C1] __ieee80211_beacon_get+0x118e/0x1880 [ 275.512492][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 275.518084][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 275.523606][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 275.529681][ C1] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 275.535234][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 275.542431][ C1] __iterate_interfaces+0x2ab/0x590 [ 275.547650][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 275.553734][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 275.561104][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 275.567655][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 275.574688][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 275.579894][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 275.585714][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 275.591086][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 275.596836][ C1] ? read_tsc+0x9/0x20 [ 275.600995][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 275.606840][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 275.611963][ C1] handle_softirqs+0x283/0x870 [ 275.616926][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 275.621715][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 275.627052][ C1] __irq_exit_rcu+0xca/0x1f0 [ 275.631664][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 275.636967][ C1] irq_exit_rcu+0x9/0x30 [ 275.641204][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 275.646844][ C1] [ 275.650119][ C1] [ 275.653047][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 275.659119][ C1] RIP: 0010:vm_area_dup+0x3cd/0x680 [ 275.664404][ C1] Code: 89 e7 be 04 00 00 00 e8 31 52 1a 00 4c 89 e0 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28 84 c0 0f 85 17 02 00 00 83 80 00 00 00 00 00 00 00 48 8d 7b 28 48 89 f8 48 c1 e8 03 42 [ 275.684002][ C1] RSP: 0018:ffffc9000420f7d8 EFLAGS: 00000246 [ 275.690150][ C1] RAX: 0000000000000000 RBX: ffff88807e419500 RCX: ffffffff8208c6bf [ 275.698117][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88807e419580 [ 275.706173][ C1] RBP: ffff88807e4195e0 R08: ffff88807e419583 R09: 1ffff1100fc832b0 [ 275.714136][ C1] R10: dffffc0000000000 R11: ffffed100fc832b1 R12: ffff88807e419580 [ 275.722101][ C1] R13: dffffc0000000000 R14: ffff888078bfbdc0 R15: 1ffff1100fc832ba [ 275.730162][ C1] ? vm_area_dup+0x3af/0x680 [ 275.734769][ C1] ? vm_area_dup+0x3af/0x680 [ 275.739361][ C1] dup_mmap+0x90c/0x1ac0 [ 275.743623][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 275.748305][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 275.754192][ C1] ? mm_init+0xcc3/0xef0 [ 275.758434][ C1] copy_mm+0x13c/0x4b0 [ 275.762506][ C1] copy_process+0x1706/0x3c00 [ 275.767186][ C1] ? copy_process+0x97f/0x3c00 [ 275.771962][ C1] ? __pfx_copy_process+0x10/0x10 [ 275.776999][ C1] kernel_clone+0x21e/0x840 [ 275.781613][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 275.786749][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 275.791809][ C1] __x64_sys_clone+0x18b/0x1e0 [ 275.796735][ C1] ? count_memcg_event_mm+0x21/0x260 [ 275.802225][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 275.807548][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 275.813041][ C1] ? do_syscall_64+0xbe/0x3b0 [ 275.817768][ C1] do_syscall_64+0xfa/0x3b0 [ 275.822321][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.827552][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.833644][ C1] ? clear_bhb_loop+0x60/0xb0 [ 275.838351][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.844266][ C1] RIP: 0033:0x7f8a70185453 [ 275.848693][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 275.868564][ C1] RSP: 002b:00007ffeec304b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 275.877072][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8a70185453 [ 275.885488][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 275.893473][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 275.902082][ C1] R10: 000055558b4787d0 R11: 0000000000000246 R12: 0000000000000000 [ 275.910140][ C1] R13: 00000000000927c0 R14: 000000000004304a R15: 00007ffeec304cc0 [ 275.918138][ C1] [ 275.921434][ C1] Kernel Offset: disabled [ 275.925766][ C1] Rebooting in 86400 seconds..