last executing test programs: 2.033573783s ago: executing program 3 (id=1091): recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000006200)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000006200)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x101, 0x5, 0x40, 0x4}, {0xa, 0x9, 0xb7, 0xe41}]}, 0x10) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000000000000000050000000900020073797a31000000000500010007dd82e65de38faf379b360000002c000780060004404e21000005000700018e8a59f1c317fd79040000000c000180080001400a0101010c00028008000140e000000282ddae0100008000000000afd8281e4a1ab5064e61c2a322f9fcb679a8"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.880832991s ago: executing program 3 (id=1094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x20}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000002001c0004000000000000000000fa07945039286c221b30a579405295e42fe10bdebdf9f9c50741695272ac2b37572afdde6dcc6bb888df8927fafb7cc59765ff320cfe0772f6322a261a2fd221a78c90036f7ba41c2941bc142e3dab84bcf3c157d19b66f5b54dc67a6e37b4015af571edd66a1235edfca723b813e51b0505b30ecd1bea72f0c7e2c3cefaf2afc4ef7731bd041cc0b60aad"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@bridge_delvlan={0x58, 0x71, 0x4, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0xda}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x21, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x2}}}]}, 0x58}}, 0x804) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f8483f0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.580530117s ago: executing program 3 (id=1098): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b", 0x2}], 0x1, 0x0, 0x0, 0xbffe}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}], 0x1}}], 0x2, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002500000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.498111292s ago: executing program 1 (id=1099): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100000000000000000000a38000000080a"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) close(r0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random="01008d00"}) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000040)={0x80}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 1.497585593s ago: executing program 4 (id=1100): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x3f8, 0x8}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d80000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x5, 0x0}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x43, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x4, 0x0, 0x3, 0x6, 0x1, 0xfffffffffffffffc, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd41}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0xb1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0x100, 0x1000, &(0x7f0000001080)=""/4096, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x8, 0x5, 0x19}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000700)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000740)=[{0x0, 0x1, 0x10, 0x8}, {0x1, 0x3, 0x3, 0xb}, {0x2, 0x4, 0xa, 0xa}, {0x2, 0x1, 0x5, 0x7}, {0x5, 0x1, 0x7, 0x2}], 0x10, 0x895, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0xe, &(0x7f0000000080)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0x4, 0xa, &(0x7f0000000140)=""/10, 0x41000, 0xc, '\x00', 0x0, @netfilter=0x2d, r2, 0x8, &(0x7f0000000300)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x3, 0x7, 0x7}, 0x10, r5, r6, 0x2, 0x0, &(0x7f0000000880)=[{0x0, 0x2, 0x3, 0x8}, {0x0, 0x3, 0x5, 0x1}], 0x10, 0x4, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1111], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r7, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x71e}, 0x28) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r0, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) 1.353860616s ago: executing program 3 (id=1102): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xf0, "a1f85140d43dda1f997e8d85040b5e3604924d2d6fe349d29f2f215e3a458f96479ed5539971c6b938a843f39cb3fe25a75d333da352e2afca7ef0de79a1ccb3545c932e8faffe23746a5777c270e54235f964c711a4e83a37ea3fad61ba2a7ed7781c80efa3f8b2c9fca39de2bf46c218e493fc466351a4bff18f2cd04e2ae26c8040ea63b8d3e921a45b0704a4edf1e5956d9520bb1d94e612cb705e88808b127a6fd8813cf5d002046f70e590fa5e1736a102368f9dc7dc738f108f6cea8466c81ad4a1273549f9d10f305260988b364acf865ebc025573b882f2f6c153fcf424560ff4fad1f8b0bab5a5e40f4cab"}, &(0x7f0000000040)=0xf8) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x4000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04000000000000000002000000300004802c0001800b0001006e756d67656e00001c000280080002400000d7cdd100000800034030000000000900020073797a320000000005000740c90000001400000011000100"/121], 0x8c}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x3c, r7, 0x1, 0x0, 0x0, {0x2c}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x64, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_xt={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}}, 0x24044094) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000048000000180a0101000b000000000000010000000900020073797a30f9ff00000900010073797a30"], 0xe8}}, 0x0) (async) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000240)={{0x21, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e21, 0x3, 'fo\x00', 0x24, 0x7, 0x64}, {@local, 0x4e20, 0x3, 0x5, 0x1, 0x3}}, 0x44) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0x0, 0x5, 0x7, 0x6, 0x8}, &(0x7f0000000200)=0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xd, 0x6, "00343997622cd13b60"}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x32}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x636b}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 1.285507189s ago: executing program 0 (id=1103): bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0xab95, @local, 0x2}, 0x1c) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) (async) syz_emit_ethernet(0x32, &(0x7f0000000a00)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa3e0800d4228a82000000000011907800000000e0000001400017c100039078a205000100000000"], 0x0) (async) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) socketpair(0x1, 0x20000000000001, 0x0, 0x0) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x4000) (async) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x64, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x9}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_ACT={0x30, 0x3, [@m_xt={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}}, 0x24044094) close(0x3) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000080), 0x12) (async) write$cgroup_pid(r5, &(0x7f00000005c0), 0x12) (async) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040011}, 0x4000) (async) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117200000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x84002, 0x0) ioctl$TUNSETQUEUE(r12, 0x400454d9, &(0x7f0000000080)={'veth1_to_bond\x00', 0x400}) 1.216562923s ago: executing program 2 (id=1104): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r1, 0x111, 0x32, 0x0, &(0x7f0000000380)) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x4100810, r0, 0xffff9000) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0xa0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x6}}, 0x5, 0x8}, 0x90) 1.158366047s ago: executing program 4 (id=1105): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.107161945s ago: executing program 3 (id=1106): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028006000e00b2"], 0x40}}, 0x0) 1.040366166s ago: executing program 0 (id=1107): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$inet(0x10, 0x3, 0x0) (rerun: 64) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0, 0xfffffff8}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}}, 0x800) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x308, 0x70bd2a, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000085}, 0x200080c1) (async, rerun: 64) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x400, 0x70bd2e, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x400c0c5) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000006100000000a1400000011000100000000000000000000000081"], 0x28}}, 0x0) (async) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, 0x464, 0x4, 0x70bd2b, 0x25dfdbff, "d4bb47aae9d425577210d26a5833dd9bcd4f5b5cc858dc4a8e0468cfe490b361abf2bda405f0c6dad81db6d3ad7add53bbfac5991e91235b7231ca0e4cd70188342a9fe290414e2b6cb9dd5a1b2f0adb0bfc10726935889f9756966e9d3ebe68714faf818079ba588bdd2b7b8d083d2edc3f5095859a20ec3e367564fb4b", [""]}, 0x90}, 0x1, 0x0, 0x0, 0x40040}, 0x20044000) 992.140992ms ago: executing program 4 (id=1108): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x48000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 980.714065ms ago: executing program 2 (id=1109): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@loopback, @dev, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz_tun\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}, {{@uncond, 0xc0, 0x108, 0x0, {0x0, 0x1e03}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008001400ffffff7fa8be70261b07f598f4ab02039ca472af5a834741e1fc005c49458acd395cb5779de3852db091f2bd82a3d503126c2916dfed0d9328d01f58e80d6745c9f6e7bbe5006da059d48b12e0deef60e8fab5255707c821b0b6d32ed6b1da743dba7186585b6bb16380e85a25338b90243437b2"], 0x2c}}, 0x0) 928.334638ms ago: executing program 1 (id=1110): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001800010000000000000000001d0100000800050000fd000008000900", @ANYRES32=0x0, @ANYBLOB="05000d000100000008000a00", @ANYRES32=0x0, @ANYBLOB="6410e0b695b5b06ab59c66f86f71c84cae0c5c4bd5ef77ce5d"], 0x60}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r2, 0x1, 0x3c, 0x0, &(0x7f0000000500)) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket(0x11, 0x800000003, 0x1000000) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)) recvfrom$llc(r6, &(0x7f0000000200)=""/61, 0x3d, 0x41, &(0x7f0000000240)={0x1a, 0x320, 0x56, 0x0, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r5, 0x0, &(0x7f0000000540)=""/231}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="130000001000000008"], 0x50) socket$vsock_stream(0x28, 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x0}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r8, &(0x7f0000000500), 0x0}, 0x20) 877.59024ms ago: executing program 3 (id=1111): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x21, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000240001070000000000000000010000000400ae2a46bf815a1e7faa03b29bfbd1574601d768a8fba4fbfe7424b57c9dc328da3a30c6df4ceaa6a48305893c15b0e53b6f87de18a33534a4ae6b1cc377393214915fd82e22b4f19826b6640632149ce75c90cb3a4faaa625d796c52d70bc9de779bff3ae0cf3a83a9d5d104e"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/196, 0xc4}, {&(0x7f0000000680)=""/245, 0xf5}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000940)=""/4070, 0xfe6}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f0000000000)=""/251, 0xfb}], 0x6}, 0x80000000}], 0x4, 0x20, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x34, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r8, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r2, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x30}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008001) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r9) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r10, 0x5, 0x40000000, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2008c0d4) 837.237258ms ago: executing program 2 (id=1112): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000096f0073d628796037e513f622c458226f90ba384", @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000400006803c00040067636d286165732900000000000000000000000000000000000000000000000021000000e3de3d7b4cd07ec3ee777de774fc7987cca41989"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x46, &(0x7f0000000380), 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 720.50908ms ago: executing program 0 (id=1113): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) listen(r0, 0x1ad72f7) (async) accept4$netrom(r0, 0x0, 0x0, 0x80000) (async) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001cc0)=@ipmr_newroute={0xf0, 0x18, 0x200, 0x70bd2a, 0x25dfdbfb, {0x80, 0x10, 0x10, 0x0, 0xfc, 0x2, 0xfd, 0x1, 0x2000}, [@RTA_TABLE={0x8, 0xf, 0x80000000}, @RTA_DPORT={0x6, 0x1d, 0x4e21}, @RTA_PREFSRC={0x8, 0x7, @empty}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x2}}, @RTA_NH_ID={0x8, 0x1e, 0x8}, @RTA_METRICS={0xa5, 0x8, 0x0, 0x1, "defe29c311583067d6045a07c599376a68929d0b256fb3ae4e20020453e44ed81359204c9889aae57a525d20b78167865eda265c37a6e478bddb8e72d6998218a1d4b8d1d01d515db0f9ce1df66cd4ebd528a8122bbbb9cb611f12a47f3b0b302b546020b0361ee0d5c1123b28ce37b2b4a26936c30b0a70cc62f8555502c8b49af7dcf6efe8424abd8b7b01e4cc335c8275fa898cf6c66857b8743e10105dfdb3"}]}, 0xf0}}, 0x51) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x43, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={0x28, r3, 0x801, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0xff}]}]}, 0x28}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 720.288287ms ago: executing program 1 (id=1114): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x54, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x90}, {0xc, 0x90, 0xffffffffffffffff}}]}, 0x54}}, 0x40810) (async, rerun: 32) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000640)={0x0, 0xfffffffffffffff9, 0x8000000000000000}) (rerun: 32) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000a40)={r2, 0x5, 0x18000000000000, 0x1}) 619.299148ms ago: executing program 4 (id=1115): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08000000000000000000110000001000098008000100000000000800020000000000"], 0x28}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, r4, 0x0, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_ext_load_extent\x00', r4, 0x0, 0x1}, 0x18) 597.409676ms ago: executing program 0 (id=1116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x7, 0xa8, 0x8, 0x80, @local, @empty, 0x40, 0x7, 0x5154, 0x77}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="34030000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="080003000200000014000200697036746e6c3000000000000000000014000180080003000100000008000300000000002c01028004000100650005001ca8385cd1d1a2109a17c720564c26643452692e6334ccb9b88177d02b4621b5883a42b76ec9297878a56e8814e861f0367507390d6e6516e896b5ffece3abfe425ccb24ba65084a83234989812c7384bb6e903a93d910a5451c6369092b8807a30000000800020000000000ac000500a9c3dc31105f3191b6332835b061db04b7f49d096a1dfe5e039dc9499e6c7a8f87355551b2c6b2429627bd3cea79924555dc0972c6eaccfac4594d4db6e125984290edf532add53dc46e4f795895d32c59a228fe6cbe0b5a3b4cdd9afc5f28028c06687f9ccd24e5c638d7dfcceb91f735c0d09443041766d54e70b479884ddc3084d8e5cdbf00356e2a7eff236dc9f25e7cd55f0dc203ecbd2dbc4b2d7273515b88c418dc080002000700000052dee0a773386fff967cd1c52d0b92f4092cea073ed8e611a9e9333b051afe3ca7a390991ac79978bd867403959a5afa387cd0d54ca35f613a5cffff56ddb6c69de15ea379fe84db24d7e3ff698ee6367b34b0df35df0994f23e0eb4e883e802198ec3edbfac70cf7d56652359d35fa51e8546936bd8eeb4049e4af3bc3124e90719e84184"], 0x334}}, 0x8000) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) r5 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010024bd7000fddbaa2503000000180001801400020073797a5f74756e0000000000000000000500020004000000050005"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x2000c000) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cbfc0b9af540340c"}}, 0x48}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x280, 0x1, {0x0, 0x2710}, {0x77359400}, {0x3, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "e4720f557d78ea46"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4050) poll(&(0x7f0000000180)=[{r5, 0x1}], 0x1, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) 416.282888ms ago: executing program 4 (id=1117): r0 = socket(0x8, 0x80000, 0x7) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x150, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x26}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x89}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x64}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x840}, 0x48000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xcb5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xc}, @generic={0x10, 0x6, 0x4, 0x9a, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000380)='GPL\x00', 0xfffffffe, 0x65, &(0x7f00000003c0)=""/101, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0x5, 0x1695fc7c, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000500)=[{0x1, 0x4, 0xb, 0x9}, {0x4, 0x2, 0x9, 0x6}], 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000280)='mm_vmscan_wakeup_kswapd\x00', r2, 0x0, 0x66}, 0x18) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000640)={'macvlan0\x00'}) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r1, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcc5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x2c}}, 0x28800) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000780)={0x0, @rand_addr=0x64010100, 0x4e24, 0x1, 'sh\x00', 0x2e, 0x2, 0x31}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f00000007c0)='tegra_dma_isr\x00', r2, 0x0, 0x8}, 0x18) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000840)={'pim6reg0\x00', 0x9}) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000880), &(0x7f00000008c0)=0x4) bind$can_raw(r0, &(0x7f0000000900), 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="028862012e88"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x10}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000080) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000a40)={0x5e7}, 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000a80)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000ac0)={'wlan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000b00)='objagg_obj_root_destroy\x00', r2, 0x0, 0x9a}, 0x18) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000b80)={'filter\x00', 0x0, [0x3ff, 0xfffff890, 0x9]}, &(0x7f0000000c00)=0x44) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000c40)={'team0\x00', 0xfffffffa}) recvmmsg(r4, &(0x7f0000000e80)=[{{&(0x7f0000000c80)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/46, 0x2e}, {&(0x7f0000000d40)=""/141, 0x8d}, {&(0x7f0000000e00)=""/12, 0xc}], 0x3}}], 0x1, 0x2000, &(0x7f0000000ec0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r2, 0x0, 0x5f, 0xf9, &(0x7f0000000f00)="3ee377c70bfba76712284b0b07b06f7e13755734914c52fc91df5ee3ea9171f5e6cbbdc4ca027e63745ef158de96304549e0d8a284280d8a737b33cce2368cd60f0fc59bbc76f992d8dd0d35ae03564b86dfd858ddcf2ab82065c03b87e392", &(0x7f0000000f80)=""/249, 0xd2f00000, 0x0, 0x5d, 0xd5, &(0x7f0000001080)="b4944fae06f5cdac684b5def0317a85ff531879d950b452bc4110f00015b397e6558e54f414b63f2c7ef1e8908aa6f2aa2b750fce47e6ec8ae5c19036af45fcbff8d017cd8ee1b3b45ddde61e958cb777c83de8bd07bfa7cf8191b44bd", &(0x7f0000001100)="f76f2920fb7dee20c668ee7628312443e0c4b7c2d75631055bf21f2c71729a8188ea85cfe43244f699c9ad5b6febc08e2555473ffce66e4b2bceaec8f3869fa31ad277c1efcb7dfdca654d295d2932a62e8d8d548fcd2248a93b0ebfae54d27ffca8e84306ef9eff062642bfd7ef98d35b0d827acaf8e657940d59326b69c9483a97f3e4e0542462d34b2dc4758f67487c7e2218243233585e5cc3af1815683b66a97fc9f2ba33711a373b820f96fe335ee21dc17d375c12097c7178443cc6dafde78e9907577ca1d53f48e8d0200e704d8fb61403", 0x0, 0x0, 0x5}, 0x50) r5 = socket$inet_sctp(0x2, 0x6, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001280)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x7fffffff, 0x7f, 0xffffffff, 0x8, 0x20, 0x6}, &(0x7f0000001340)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000001380)={r6, 0x7}, 0x8) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f00000013c0)={0x0, 0x2, 0xffffffffffffff81}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r2, 0xe0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001480), 0x0, 0x85, &(0x7f00000014c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000001700), &(0x7f0000001740)=0x4) 412.208838ms ago: executing program 1 (id=1118): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x0, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r3, 0x1, 0x0, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@local, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 411.869116ms ago: executing program 2 (id=1119): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x40, 0xcf9fc42, 0xa}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff4}}}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 312.542452ms ago: executing program 0 (id=1120): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000004c0)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x670, 0x5, 0x3b8, 0x250, 0x250, 0xffffffff, 0x250, 0x250, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x40000, 0x2, 0x0, 0x6}}, @common=@ttl={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@dev, @gre_key}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x110}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 308.51952ms ago: executing program 1 (id=1121): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@security={'security\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x1f8, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x1, 0x0, 0x3, 0x1, 0x4], 0x5, 0x3}, {0x4, [0x4, 0x2, 0x7, 0x6, 0x3, 0x4], 0x0, 0x4}}}}, {{@ip={@rand_addr=0x64010102, @loopback, 0xffffffff, 0xff000000, 'vcan0\x00', 'bridge_slave_1\x00', {}, {}, 0x8, 0x2, 0x48}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "f7f5"}}, @common=@addrtype={{0x30}, {0x100, 0x405}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x2, 0x0, 0x2, 0x2, 0x4], 0x3, 0x6}, {0x1, [0x0, 0x1, 0x2, 0x3, 0x4, 0x1], 0x6, 0x7}}}}, {{@ip={@private=0xa010101, @multicast1, 0xff, 0xff000000, 'bridge0\x00', 'caif0\x00', {0xff}, {}, 0x34, 0x0, 0x40}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x1ff, 0x3, [0x27, 0x2c, 0x12, 0x1e, 0x2c, 0x0, 0x36, 0x6, 0x3e, 0x3, 0x3d, 0x30, 0x40, 0x27, 0xb, 0x3b], 0x2, 0x80, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) 204.500943ms ago: executing program 2 (id=1122): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000140)='syz0\x00', 0x1ff) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 139.145753ms ago: executing program 0 (id=1123): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d000000000000000002080000000000000000000b020000000000"], 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 132.18523ms ago: executing program 4 (id=1124): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x2}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'geneve0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x14}}) syz_emit_ethernet(0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffaaaaaaaaaabb86dd0000000000"], 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1], 0x0, [0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) 305.493µs ago: executing program 1 (id=1125): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x0, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffb, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x18, 0x8, 0x0, @void, @value}, 0x20) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @loopback, 0x826f}}}, 0x32) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/236, 0xec}], 0x3}, 0x81}], 0x1, 0x10041, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) sendmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040804) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d3000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 2 (id=1126): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x400, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), r1) socket$inet6(0xa, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r5, @ANYBLOB="0800060013"], 0x24}}, 0x4000) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80) r6 = socket$kcm(0x29, 0x7, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f00000001c0), 0x4) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 71.116042][ T5818] cgroup: Unknown subsys name 'net' [ 71.247642][ T5818] cgroup: Unknown subsys name 'cpuset' [ 71.256759][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.699712][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.151593][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.183121][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.190611][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.198549][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.198991][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.213896][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.221168][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.228966][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.236419][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.237623][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.251586][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.258121][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.259052][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.273858][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.281187][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.284244][ T5142] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.295830][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.298332][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.304671][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.315362][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.330646][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.332957][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.338442][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.357232][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.365003][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.878708][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 76.014426][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 76.067077][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 76.207510][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 76.256378][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.264634][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.271992][ T5836] bridge_slave_0: entered allmulticast mode [ 76.279909][ T5836] bridge_slave_0: entered promiscuous mode [ 76.292519][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.300185][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.307527][ T5836] bridge_slave_1: entered allmulticast mode [ 76.315259][ T5836] bridge_slave_1: entered promiscuous mode [ 76.344120][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 76.411588][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.445335][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.452516][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.459698][ T5828] bridge_slave_0: entered allmulticast mode [ 76.467177][ T5828] bridge_slave_0: entered promiscuous mode [ 76.496342][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.532292][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.539565][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.547134][ T5828] bridge_slave_1: entered allmulticast mode [ 76.554943][ T5828] bridge_slave_1: entered promiscuous mode [ 76.598388][ T5836] team0: Port device team_slave_0 added [ 76.604820][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.611936][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.619367][ T5845] bridge_slave_0: entered allmulticast mode [ 76.626989][ T5845] bridge_slave_0: entered promiscuous mode [ 76.688837][ T5836] team0: Port device team_slave_1 added [ 76.708458][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.715691][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.722900][ T5845] bridge_slave_1: entered allmulticast mode [ 76.730703][ T5845] bridge_slave_1: entered promiscuous mode [ 76.739856][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.754513][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.761699][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.769177][ T5829] bridge_slave_0: entered allmulticast mode [ 76.776616][ T5829] bridge_slave_0: entered promiscuous mode [ 76.813861][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.828761][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.836049][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.843218][ T5829] bridge_slave_1: entered allmulticast mode [ 76.850925][ T5829] bridge_slave_1: entered promiscuous mode [ 76.873646][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.880615][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.906527][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.983786][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.990754][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.019447][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.032891][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.044930][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.056522][ T5828] team0: Port device team_slave_0 added [ 77.092032][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.114845][ T5828] team0: Port device team_slave_1 added [ 77.136713][ T5845] team0: Port device team_slave_0 added [ 77.145610][ T5845] team0: Port device team_slave_1 added [ 77.151626][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.158813][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.166280][ T5835] bridge_slave_0: entered allmulticast mode [ 77.174126][ T5835] bridge_slave_0: entered promiscuous mode [ 77.183179][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.230470][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.237864][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.264262][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.287873][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.295354][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.302478][ T5835] bridge_slave_1: entered allmulticast mode [ 77.310559][ T5835] bridge_slave_1: entered promiscuous mode [ 77.344531][ T55] Bluetooth: hci1: command tx timeout [ 77.350368][ T5843] Bluetooth: hci2: command tx timeout [ 77.362794][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.369821][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.395751][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.423519][ T55] Bluetooth: hci0: command tx timeout [ 77.424044][ T5831] Bluetooth: hci3: command tx timeout [ 77.429210][ T5843] Bluetooth: hci4: command tx timeout [ 77.452070][ T5829] team0: Port device team_slave_0 added [ 77.471050][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.478217][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.504224][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.516626][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.523830][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.549777][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.562995][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.577214][ T5829] team0: Port device team_slave_1 added [ 77.588025][ T5836] hsr_slave_0: entered promiscuous mode [ 77.595360][ T5836] hsr_slave_1: entered promiscuous mode [ 77.621678][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.684734][ T5828] hsr_slave_0: entered promiscuous mode [ 77.691202][ T5828] hsr_slave_1: entered promiscuous mode [ 77.697456][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.705825][ T5828] Cannot create hsr debugfs directory [ 77.738511][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.746416][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.776390][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.820397][ T5835] team0: Port device team_slave_0 added [ 77.857654][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.864741][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.891664][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.929648][ T5835] team0: Port device team_slave_1 added [ 77.970230][ T5845] hsr_slave_0: entered promiscuous mode [ 77.977040][ T5845] hsr_slave_1: entered promiscuous mode [ 77.983118][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.991173][ T5845] Cannot create hsr debugfs directory [ 78.079204][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.086334][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.113109][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.125529][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.132485][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.158685][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.174744][ T5829] hsr_slave_0: entered promiscuous mode [ 78.181247][ T5829] hsr_slave_1: entered promiscuous mode [ 78.188330][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.195943][ T5829] Cannot create hsr debugfs directory [ 78.355492][ T5835] hsr_slave_0: entered promiscuous mode [ 78.362051][ T5835] hsr_slave_1: entered promiscuous mode [ 78.368853][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.376462][ T5835] Cannot create hsr debugfs directory [ 78.614546][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.642488][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.655253][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.684099][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.779589][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.789868][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.815969][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.829744][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.904707][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.915208][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.941160][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.969596][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.030186][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.054332][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.064886][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.095586][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.177618][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.200565][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.228156][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.241005][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.258765][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.272283][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.288129][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.295365][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.325903][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.336964][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.344122][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.423095][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.437835][ T5831] Bluetooth: hci1: command tx timeout [ 79.437853][ T5843] Bluetooth: hci2: command tx timeout [ 79.456085][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.477657][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.484817][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.504587][ T5843] Bluetooth: hci4: command tx timeout [ 79.506713][ T5831] Bluetooth: hci0: command tx timeout [ 79.510087][ T5843] Bluetooth: hci3: command tx timeout [ 79.526583][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.550768][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.557944][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.647971][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.697356][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.704554][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.730267][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.737527][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.771783][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.859039][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.899014][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.970053][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.977184][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.999968][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.007255][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.072105][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.098740][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.168348][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.175597][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.218638][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.225901][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.322445][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.490996][ T5828] veth0_vlan: entered promiscuous mode [ 80.531516][ T5828] veth1_vlan: entered promiscuous mode [ 80.599634][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.670547][ T5828] veth0_macvtap: entered promiscuous mode [ 80.713293][ T5828] veth1_macvtap: entered promiscuous mode [ 80.790856][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.818829][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.842890][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.862967][ T5845] veth0_vlan: entered promiscuous mode [ 80.880613][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.889366][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.898336][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.908359][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.917759][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.968564][ T5836] veth0_vlan: entered promiscuous mode [ 80.997315][ T5845] veth1_vlan: entered promiscuous mode [ 81.065849][ T5836] veth1_vlan: entered promiscuous mode [ 81.102902][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.130054][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.198630][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.205990][ T5835] veth0_vlan: entered promiscuous mode [ 81.212847][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.220420][ T5835] veth1_vlan: entered promiscuous mode [ 81.230281][ T5845] veth0_macvtap: entered promiscuous mode [ 81.239183][ T5829] veth0_vlan: entered promiscuous mode [ 81.279085][ T5845] veth1_macvtap: entered promiscuous mode [ 81.298599][ T5829] veth1_vlan: entered promiscuous mode [ 81.311068][ T5836] veth0_macvtap: entered promiscuous mode [ 81.332953][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.338694][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.371912][ T5835] veth0_macvtap: entered promiscuous mode [ 81.382971][ T5836] veth1_macvtap: entered promiscuous mode [ 81.394155][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.419235][ T5835] veth1_macvtap: entered promiscuous mode [ 81.431767][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.442482][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.453143][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.462276][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.504026][ T5843] Bluetooth: hci1: command tx timeout [ 81.506876][ T5831] Bluetooth: hci2: command tx timeout [ 81.583916][ T5831] Bluetooth: hci0: command tx timeout [ 81.584220][ T5843] Bluetooth: hci4: command tx timeout [ 81.589333][ T5831] Bluetooth: hci3: command tx timeout [ 81.614274][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.625638][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.819517][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.841293][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.869114][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.880096][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.889309][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.899290][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.970167][ T5829] veth0_macvtap: entered promiscuous mode [ 81.991026][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.026775][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.044087][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.052826][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.076588][ T5926] Cannot find add_set index 0 as target [ 82.108186][ T5927] dvmrp5: entered allmulticast mode [ 82.114237][ T5927] dvmrp5: left allmulticast mode [ 82.132388][ T5829] veth1_macvtap: entered promiscuous mode [ 82.171555][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.189503][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.233561][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.267463][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.286934][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.329759][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.352930][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.365905][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.375095][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.383974][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.407862][ T5931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8'. [ 82.470273][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.512421][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.554259][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.575975][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.657671][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.678313][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.692592][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.713460][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.772966][ T5938] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.818494][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.855125][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.938409][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.986762][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.066945][ T5943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12'. [ 83.101369][ T5943] x_tables: duplicate underflow at hook 1 [ 83.139137][ T5943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.267268][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 83.281818][ T5947] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 83.350043][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 83.413264][ T5961] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.585910][ T5843] Bluetooth: hci2: command tx timeout [ 83.591713][ T55] Bluetooth: hci1: command tx timeout [ 83.663715][ T5843] Bluetooth: hci3: command tx timeout [ 83.670670][ T55] Bluetooth: hci0: command tx timeout [ 83.670683][ T5831] Bluetooth: hci4: command tx timeout [ 83.813708][ T5981] netlink: 272 bytes leftover after parsing attributes in process `syz.0.20'. [ 83.815566][ T5982] veth1_to_hsr: entered promiscuous mode [ 84.217835][ T6003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.242827][ T5979] veth1_to_hsr: left promiscuous mode [ 84.279222][ T6005] netlink: 32 bytes leftover after parsing attributes in process `syz.1.27'. [ 84.293228][ T6003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.408286][ T6013] ieee802154 phy0 wpan0: encryption failed: -22 [ 84.501392][ T6017] tunl0: entered promiscuous mode [ 84.523747][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 84.538480][ T6017] netlink: 9 bytes leftover after parsing attributes in process `syz.4.31'. [ 84.561381][ T6021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.32'. [ 84.578235][ T6021] x_tables: duplicate underflow at hook 1 [ 84.590805][ T6021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.641425][ T6016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.33'. [ 85.739522][ T6071] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 85.750698][ T6071] x_tables: unsorted underflow at hook 2 [ 85.846607][ T6077] x_tables: duplicate underflow at hook 1 [ 85.879417][ T6077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.351111][ T6103] dvmrp0: entered allmulticast mode [ 86.362497][ T6105] Bluetooth: MGMT ver 1.23 [ 86.410312][ T6106] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 86.418323][ T6109] netlink: 'syz.0.63': attribute type 1 has an invalid length. [ 86.557978][ T24] cfg80211: failed to load regulatory.db [ 86.920791][ T6140] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 86.950379][ T6140] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 87.175041][ T6138] syz.4.71 (6138) used greatest stack depth: 16424 bytes left [ 87.201194][ T6154] x_tables: duplicate underflow at hook 1 [ 87.220269][ T6155] syz.0.76 uses obsolete (PF_INET,SOCK_PACKET) [ 87.252445][ T6154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.665567][ T6169] __nla_validate_parse: 13 callbacks suppressed [ 87.665584][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.82'. [ 87.668194][ T6166] syzkaller0: entered promiscuous mode [ 87.695116][ T6166] syzkaller0: entered allmulticast mode [ 87.903655][ T6157] Zero length message leads to an empty skb [ 89.182490][ T6190] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.234836][ T6195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.88'. [ 89.336177][ T6201] ieee802154 phy0 wpan0: encryption failed: -22 [ 89.336730][ T6190] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.463503][ T30] audit: type=1804 audit(1748175879.005:2): pid=6209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.93" name="/newroot/13/cgroup.controllers" dev="tmpfs" ino=84 res=1 errno=0 [ 89.596397][ T6204] bond1: entered promiscuous mode [ 89.601729][ T30] audit: type=1800 audit(1748175879.005:3): pid=6209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.93" name="cgroup.controllers" dev="tmpfs" ino=84 res=0 errno=0 [ 89.636298][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 89.652254][ T6204] bond1: entered allmulticast mode [ 89.658014][ T6204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.721736][ T6204] bond1 (unregistering): Released all slaves [ 89.765473][ T6190] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.918922][ T6190] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.205555][ T6190] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.257359][ T6190] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.336228][ T6190] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.441677][ T6190] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.780735][ T6264] syz.3.108: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 90.843617][ T6264] CPU: 1 UID: 0 PID: 6264 Comm: syz.3.108 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 90.843643][ T6264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.843657][ T6264] Call Trace: [ 90.843668][ T6264] [ 90.843677][ T6264] dump_stack_lvl+0x189/0x250 [ 90.843717][ T6264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.843743][ T6264] ? __pfx__printk+0x10/0x10 [ 90.843761][ T6264] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 90.843782][ T6264] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 90.843808][ T6264] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 90.843829][ T6264] warn_alloc+0x214/0x310 [ 90.843862][ T6264] ? __pfx_warn_alloc+0x10/0x10 [ 90.843886][ T6264] ? kasan_save_track+0x4f/0x80 [ 90.843907][ T6264] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 90.843928][ T6264] ? xskq_create+0x56/0x170 [ 90.843951][ T6264] ? __x64_sys_setsockopt+0x18b/0x220 [ 90.843975][ T6264] ? do_syscall_64+0xf6/0x210 [ 90.843996][ T6264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.844021][ T6264] __vmalloc_node_range_noprof+0x125/0x12c0 [ 90.844071][ T6264] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 90.844093][ T6264] ? xskq_create+0x56/0x170 [ 90.844114][ T6264] ? __kasan_kmalloc+0x93/0xb0 [ 90.844139][ T6264] vmalloc_user_noprof+0x74/0x80 [ 90.844163][ T6264] ? xskq_create+0xbf/0x170 [ 90.844182][ T6264] xskq_create+0xbf/0x170 [ 90.844204][ T6264] xsk_init_queue+0xb0/0x110 [ 90.844226][ T6264] xsk_setsockopt+0x43f/0x710 [ 90.844248][ T6264] ? __pfx_xsk_setsockopt+0x10/0x10 [ 90.844278][ T6264] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 90.844298][ T6264] ? __pfx_xsk_setsockopt+0x10/0x10 [ 90.844318][ T6264] do_sock_setsockopt+0x25a/0x3e0 [ 90.844344][ T6264] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 90.844365][ T6264] ? __fget_files+0x2a/0x420 [ 90.844392][ T6264] ? __fget_files+0x3a0/0x420 [ 90.844412][ T6264] ? __fget_files+0x2a/0x420 [ 90.844442][ T6264] __x64_sys_setsockopt+0x18b/0x220 [ 90.844470][ T6264] do_syscall_64+0xf6/0x210 [ 90.844493][ T6264] ? clear_bhb_loop+0x60/0xb0 [ 90.844530][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.844547][ T6264] RIP: 0033:0x7fc65d98e969 [ 90.844569][ T6264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.844584][ T6264] RSP: 002b:00007fc65e73d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.844603][ T6264] RAX: ffffffffffffffda RBX: 00007fc65dbb5fa0 RCX: 00007fc65d98e969 [ 90.844616][ T6264] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 90.844626][ T6264] RBP: 00007fc65da10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 90.844637][ T6264] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.844648][ T6264] R13: 0000000000000000 R14: 00007fc65dbb5fa0 R15: 00007ffdec7e3aa8 [ 90.844676][ T6264] [ 90.844686][ T6264] Mem-Info: [ 91.061464][ T6268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.112'. [ 91.092331][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 91.169235][ T6264] active_anon:5221 inactive_anon:0 isolated_anon:0 [ 91.169235][ T6264] active_file:1094 inactive_file:39825 isolated_file:0 [ 91.169235][ T6264] unevictable:768 dirty:1413 writeback:0 [ 91.169235][ T6264] slab_reclaimable:10073 slab_unreclaimable:98021 [ 91.169235][ T6264] mapped:29065 shmem:1361 pagetables:870 [ 91.169235][ T6264] sec_pagetables:0 bounce:0 [ 91.169235][ T6264] kernel_misc_reclaimable:0 [ 91.169235][ T6264] free:1350788 free_pcp:377 free_cma:0 [ 91.196372][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 91.273213][ T6271] syzkaller0: entered promiscuous mode [ 91.281798][ T6271] syzkaller0: entered allmulticast mode [ 91.316959][ T6264] Node 0 active_anon:21184kB inactive_anon:0kB active_file:4376kB inactive_file:159096kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116360kB dirty:5640kB writeback:0kB shmem:4108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11012kB pagetables:3480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 91.364496][ T6264] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 91.398294][ T6264] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 91.427619][ T6264] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 91.433560][ T6264] Node 0 DMA32 free:1477316kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:21276kB inactive_anon:0kB active_file:4376kB inactive_file:159004kB unevictable:1536kB writepending:5632kB present:3129332kB managed:2564116kB mlocked:0kB bounce:0kB free_pcp:1752kB local_pcp:736kB free_cma:0kB [ 91.467856][ T6264] lowmem_reserve[]: 0 0 0 0 0 [ 91.472635][ T6264] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:8kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 91.505868][ T6264] lowmem_reserve[]: 0 0 0 0 0 [ 91.519606][ T6264] Node 1 Normal free:3909124kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 91.696850][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.701028][ T6264] lowmem_reserve[]: [ 91.705778][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.728224][ T6264] 0 0 0 0 0 [ 91.731518][ T6264] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 91.783003][ T6264] Node 0 DMA32: 1199*4kB (UME) 804*8kB (UE) 507*16kB (UE) 148*32kB (UME) 114*64kB (UME) 66*128kB (UME) 28*256kB (UME) 22*512kB (UM) 20*1024kB (UME) 10*2048kB (UE) 337*4096kB (UM) = 1479564kB [ 91.824154][ T6286] openvswitch: netlink: Key type 260 is out of range max 32 [ 91.867959][ T6264] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 91.949152][ T6264] Node 1 Normal: 197*4kB (UME) 48*8kB (UME) 41*16kB (UME) 215*32kB (UME) 98*64kB (UME) 37*128kB (UME) 13*256kB (UME) 8*512kB (UME) 1*1024kB (M) 1*2048kB (E) 947*4096kB (M) = 3909124kB [ 92.023490][ T6264] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.046185][ T6264] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.076169][ T6306] netlink: 132 bytes leftover after parsing attributes in process `syz.0.120'. [ 92.087830][ T6264] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.121207][ T6264] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.174496][ T6264] 42329 total pagecache pages [ 92.179319][ T6264] 0 pages in swap cache [ 92.226388][ T6264] Free swap = 124996kB [ 92.233426][ T6264] Total swap = 124996kB [ 92.238050][ T6264] 2097051 pages RAM [ 92.258766][ T6264] 0 pages HighMem/MovableOnly [ 92.270642][ T6264] 424364 pages reserved [ 92.275730][ T6312] netlink: 64 bytes leftover after parsing attributes in process `syz.1.124'. [ 92.296640][ T6264] 0 pages cma reserved [ 92.479437][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.126'. [ 92.493024][ T6324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.126'. [ 92.617556][ T6331] sctp: [Deprecated]: syz.4.130 (pid 6331) Use of int in max_burst socket option deprecated. [ 92.617556][ T6331] Use struct sctp_assoc_value instead [ 92.854631][ T6344] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 92.861288][ T6344] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 92.870562][ T6342] __nla_validate_parse: 4 callbacks suppressed [ 92.870577][ T6342] netlink: 668 bytes leftover after parsing attributes in process `syz.0.132'. [ 92.889942][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'. [ 92.915657][ T6342] netlink: 668 bytes leftover after parsing attributes in process `syz.0.132'. [ 92.962917][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.972250][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.982533][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.993244][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.053861][ T6348] netlink: 96 bytes leftover after parsing attributes in process `syz.1.134'. [ 93.223299][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 93.325672][ T6359] netlink: 152064 bytes leftover after parsing attributes in process `syz.0.139'. [ 93.373878][ T6359] netlink: zone id is out of range [ 93.384730][ T6359] netlink: zone id is out of range [ 93.389886][ T6359] netlink: zone id is out of range [ 93.456555][ T6359] netlink: zone id is out of range [ 93.485352][ T6368] netlink: 168 bytes leftover after parsing attributes in process `syz.4.142'. [ 93.505898][ T6368] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 93.518962][ T6367] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 93.526176][ T6359] netlink: zone id is out of range [ 93.564140][ T6359] netlink: zone id is out of range [ 93.569374][ T6359] netlink: zone id is out of range [ 93.956266][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.145'. [ 94.005540][ T6391] bridge0: port 3(batadv0) entered blocking state [ 94.013777][ T6391] bridge0: port 3(batadv0) entered disabled state [ 94.026747][ T6391] batadv0: entered allmulticast mode [ 94.065301][ T6391] batadv0: entered promiscuous mode [ 94.239610][ T6402] netlink: 20 bytes leftover after parsing attributes in process `syz.3.151'. [ 94.507379][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 94.517238][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 95.078487][ T6428] team0: Device vti0 is of different type [ 95.169289][ T6435] netlink: 20 bytes leftover after parsing attributes in process `syz.4.162'. [ 95.777245][ C0] Unknown status report in ack skb [ 96.023658][ T6481] tap0: tun_chr_ioctl cmd 2148553947 [ 96.046408][ T6483] netlink: 'syz.2.178': attribute type 1 has an invalid length. [ 96.113868][ T6483] netlink: 'syz.2.178': attribute type 1 has an invalid length. [ 96.120897][ T6490] netlink: 'syz.3.181': attribute type 1 has an invalid length. [ 96.153930][ T6490] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 96.615647][ T6520] raw_sendmsg: syz.4.188 forgot to set AF_INET. Fix it! [ 97.093853][ T6551] Bluetooth: MGMT ver 1.23 [ 97.133714][ T6551] delete_channel: no stack [ 97.134542][ T6558] xt_l2tp: v2 doesn't support IP mode [ 97.701419][ T6586] sctp: [Deprecated]: syz.0.208 (pid 6586) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.701419][ T6586] Use struct sctp_sack_info instead [ 97.887772][ T6592] netlink: 'syz.1.210': attribute type 4 has an invalid length. [ 98.298929][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e038800: rx timeout, send abort [ 98.308375][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807e038800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.281343][ T6663] x_tables: duplicate underflow at hook 2 [ 99.477157][ T6673] Driver unsupported XDP return value 0 on prog (id 51) dev N/A, expect packet loss! [ 99.649932][ T6678] __nla_validate_parse: 2 callbacks suppressed [ 99.649949][ T6678] netlink: 56 bytes leftover after parsing attributes in process `syz.0.234'. [ 99.654964][ T6684] netlink: 32 bytes leftover after parsing attributes in process `syz.1.236'. [ 101.041355][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 101.042845][ T6714] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 101.100016][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 101.151126][ T6714] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 101.316210][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 101.369499][ T6731] netlink: 'syz.3.250': attribute type 1 has an invalid length. [ 101.442220][ T6734] netlink: 'syz.4.252': attribute type 13 has an invalid length. [ 101.469177][ T6731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.507159][ T6734] veth0_macvtap: left promiscuous mode [ 101.513111][ T6734] macvtap0: entered allmulticast mode [ 101.523742][ T6734] macvtap0: refused to change device tx_queue_len [ 101.603559][ T6729] bond1: (slave veth0_to_bond): making interface the new active one [ 101.629421][ T6729] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 101.682119][ T6731] vlan2: entered allmulticast mode [ 101.691789][ T6731] veth1: entered allmulticast mode [ 101.711062][ T6731] veth1: entered promiscuous mode [ 101.718352][ T6731] veth1: left promiscuous mode [ 101.732209][ T6731] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 101.792952][ T6747] netlink: 'syz.4.254': attribute type 29 has an invalid length. [ 101.817672][ T6750] netlink: 'syz.4.254': attribute type 29 has an invalid length. [ 101.888724][ T6747] netlink: 500 bytes leftover after parsing attributes in process `syz.4.254'. [ 102.248754][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026e91800: rx timeout, send abort [ 102.336359][ T6773] netlink: 'syz.4.262': attribute type 21 has an invalid length. [ 102.344236][ T6773] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.378007][ T6775] netlink: 64 bytes leftover after parsing attributes in process `syz.1.264'. [ 102.441877][ T6780] net_ratelimit: 230 callbacks suppressed [ 102.441896][ T6780] openvswitch: netlink: Duplicate or invalid key (type 0). [ 102.465334][ T6780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.640734][ T6752] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.749141][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026e93400: rx timeout, send abort [ 102.757589][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026e91800: abort rx timeout. Force session deactivation [ 102.853660][ T6792] team0: No ports can be present during mode change [ 103.109805][ T6816] ipt_ECN: cannot use operation on non-tcp rule [ 103.153293][ T6813] batadv1: entered allmulticast mode [ 103.257527][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026e93400: abort rx timeout. Force session deactivation [ 103.353002][ T6831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.281'. [ 103.471464][ T6833] x_tables: unsorted underflow at hook 3 [ 103.478713][ T6833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.599519][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 103.613328][ T6847] veth1_macvtap: left promiscuous mode [ 103.623068][ T6847] macsec0: entered promiscuous mode [ 103.660685][ T6847] veth1_macvtap: entered promiscuous mode [ 103.680657][ T6847] macsec0: left promiscuous mode [ 103.824651][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.436762][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 104.479679][ T6887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.519778][ T6892] veth1_to_team: entered promiscuous mode [ 104.739648][ T6892] veth1_to_team: left promiscuous mode [ 104.746499][ T6904] warning: `syz.3.300' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.032658][ T6924] netlink: 'syz.4.307': attribute type 1 has an invalid length. [ 105.161184][ T6924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.232209][ T6925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.243877][ T6925] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 105.275340][ T6925] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 105.426042][ T6930] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 105.478743][ T6930] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 105.918991][ T6963] __nla_validate_parse: 4 callbacks suppressed [ 105.919007][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 105.982943][ T6968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.318'. [ 106.155306][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 106.189651][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.319'. [ 106.364753][ T6994] netlink: 'syz.4.320': attribute type 11 has an invalid length. [ 106.366357][ T6993] netlink: 104 bytes leftover after parsing attributes in process `syz.1.323'. [ 106.381953][ T6994] netlink: 64 bytes leftover after parsing attributes in process `syz.4.320'. [ 106.594062][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.324'. [ 106.670642][ T7005] netdevsim netdevsim1: Direct firmware load for . [ 106.670642][ T7005] failed with error -2 [ 106.733573][ T7005] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 106.733573][ T7005] [ 106.927842][ T7013] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 106.933868][ T7017] netlink: 'syz.3.331': attribute type 18 has an invalid length. [ 107.167140][ T7026] openvswitch: netlink: Missing valid actions attribute. [ 107.184431][ T7026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.547212][ T7044] netlink: 36 bytes leftover after parsing attributes in process `syz.1.342'. [ 108.258195][ T7085] sctp: [Deprecated]: syz.1.356 (pid 7085) Use of int in max_burst socket option deprecated. [ 108.258195][ T7085] Use struct sctp_assoc_value instead [ 108.265292][ T7090] netlink: 'syz.3.357': attribute type 3 has an invalid length. [ 108.314077][ T7091] netlink: 11 bytes leftover after parsing attributes in process `syz.3.357'. [ 108.504760][ T7099] openvswitch: netlink: Key type 12290 is out of range max 32 [ 108.572289][ T7103] bond0: entered promiscuous mode [ 108.582842][ T7103] bond_slave_0: entered promiscuous mode [ 108.613808][ T7103] bond_slave_1: entered promiscuous mode [ 108.627950][ T7103] batadv0: entered promiscuous mode [ 108.645890][ T7103] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 108.669376][ T7103] bond0: left promiscuous mode [ 108.681860][ T7103] bond_slave_0: left promiscuous mode [ 108.687760][ T7103] bond_slave_1: left promiscuous mode [ 108.715635][ T7103] batadv0: left promiscuous mode [ 108.908695][ T7104] syzkaller0: entered promiscuous mode [ 108.914371][ T7104] syzkaller0: entered allmulticast mode [ 108.976858][ T7128] netlink: 68 bytes leftover after parsing attributes in process `syz.3.371'. [ 109.030583][ T7130] netlink: 'syz.1.372': attribute type 1 has an invalid length. [ 109.140532][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034368400: rx timeout, send abort [ 109.640071][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034368000: rx timeout, send abort [ 109.648755][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034368400: abort rx timeout. Force session deactivation [ 110.037457][ T7130] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 110.096832][ T7134] veth3: entered promiscuous mode [ 110.148389][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034368000: abort rx timeout. Force session deactivation [ 110.217642][ T7158] bond2: entered allmulticast mode [ 110.223278][ T7158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.098058][ T7200] __nla_validate_parse: 1 callbacks suppressed [ 111.098077][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 111.151483][ T7203] xt_l2tp: v2 sid > 0xffff: 262144 [ 111.339166][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.392'. [ 111.567964][ T7223] netlink: 156 bytes leftover after parsing attributes in process `syz.3.396'. [ 111.986214][ T7251] netlink: 'syz.1.404': attribute type 10 has an invalid length. [ 112.003046][ T7251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.014574][ T7251] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 112.210784][ T7260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.409'. [ 112.264667][ T7258] xt_connbytes: Forcing CT accounting to be enabled [ 112.725102][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 112.770017][ T7294] netlink: 2 bytes leftover after parsing attributes in process `syz.4.417'. [ 112.905338][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 112.934735][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 113.268395][ T30] audit: type=1800 audit(1748175902.825:4): pid=7302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.415" name="cgroup.controllers" dev="tmpfs" ino=416 res=0 errno=0 [ 113.294825][ T7321] netlink: 'syz.0.425': attribute type 1 has an invalid length. [ 113.312816][ T7321] netlink: 'syz.0.425': attribute type 2 has an invalid length. [ 113.432419][ T7325] xt_CT: No such helper "pptp" [ 113.471756][ T7333] syzkaller1: entered promiscuous mode [ 113.501916][ T7333] syzkaller1: entered allmulticast mode [ 113.714287][ T7343] netlink: 'syz.0.431': attribute type 29 has an invalid length. [ 113.867631][ T7348] netlink: 'syz.2.432': attribute type 21 has an invalid length. [ 113.892290][ T7348] netlink: 156 bytes leftover after parsing attributes in process `syz.2.432'. [ 114.225915][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 114.914578][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c2d5000: rx timeout, send abort [ 115.414684][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c2d6400: rx timeout, send abort [ 115.423363][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c2d5000: abort rx timeout. Force session deactivation [ 115.683032][ T7445] netlink: 'syz.3.460': attribute type 11 has an invalid length. [ 115.898248][ T7454] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 115.923113][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c2d6400: abort rx timeout. Force session deactivation [ 116.417860][ T7477] openvswitch: netlink: Key 6 has unexpected len 290 expected 2 [ 116.453912][ T7481] __nla_validate_parse: 7 callbacks suppressed [ 116.453927][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 117.065214][ T7500] xt_cgroup: invalid path, errno=-2 [ 117.282399][ T7511] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 117.304949][ T7513] x_tables: duplicate underflow at hook 1 [ 117.421832][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 117.620463][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 117.966259][ T7545] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 118.128656][ T7552] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 118.225837][ T7552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.235841][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 118.276888][ T5831] block nbd0: Receive control failed (result -32) [ 118.349510][ T7570] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 118.367318][ T7572] netlink: 'syz.2.494': attribute type 4 has an invalid length. [ 118.376477][ T3576] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 118.387427][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 118.429072][ T7572] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 118.445145][ T7572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.459573][ T7576] netlink: 'syz.1.495': attribute type 10 has an invalid length. [ 118.472693][ T7576] netlink: 40 bytes leftover after parsing attributes in process `syz.1.495'. [ 118.484273][ T7576] dummy0: entered promiscuous mode [ 118.506634][ T7575] netlink: 'syz.4.496': attribute type 2 has an invalid length. [ 118.518007][ T7576] bridge0: port 3(dummy0) entered blocking state [ 118.529690][ T7576] bridge0: port 3(dummy0) entered disabled state [ 118.539115][ T7576] dummy0: entered allmulticast mode [ 118.556196][ T7577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.604410][ T7579] netlink: 'syz.2.498': attribute type 4 has an invalid length. [ 119.112356][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801bfe0800: rx timeout, send abort [ 119.121021][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801bfe0800: 0x3ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 119.416991][ T7611] xt_CT: No such helper "pptp" [ 119.467972][ T7620] tipc: Started in network mode [ 119.473293][ T7620] tipc: Node identity 327e8965d079, cluster identity 4711 [ 119.498895][ T7620] tipc: Enabled bearer , priority 0 [ 119.530881][ T7620] syzkaller0: entered promiscuous mode [ 119.554644][ T7620] syzkaller0: entered allmulticast mode [ 119.560451][ T7619] xt_CT: No such helper "snmp" [ 119.588216][ T7620] tipc: Resetting bearer [ 119.679870][ T7632] netlink: 'syz.2.516': attribute type 1 has an invalid length. [ 119.693552][ T7618] tipc: Resetting bearer [ 119.734153][ T7632] netlink: 220 bytes leftover after parsing attributes in process `syz.2.516'. [ 119.754410][ T7618] tipc: Disabling bearer [ 119.754637][ T7637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.516'. [ 119.760279][ T7632] netlink: 'syz.2.516': attribute type 1 has an invalid length. [ 119.792852][ T7635] netlink: 'syz.3.515': attribute type 12 has an invalid length. [ 119.800063][ T7640] xt_hashlimit: overflow, rate too high: 0 [ 119.804102][ T7635] netlink: 'syz.3.515': attribute type 29 has an invalid length. [ 119.822907][ T7641] openvswitch: netlink: Message has 24 unknown bytes. [ 119.831520][ T7635] netlink: 148 bytes leftover after parsing attributes in process `syz.3.515'. [ 119.832934][ T7641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.874782][ T7635] netlink: 'syz.3.515': attribute type 1 has an invalid length. [ 119.882586][ T7635] netlink: 39 bytes leftover after parsing attributes in process `syz.3.515'. [ 119.931092][ T7645] team_slave_0: entered promiscuous mode [ 119.936964][ T7645] team_slave_1: entered promiscuous mode [ 119.950772][ T7645] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 119.989522][ T7645] team0: Device macvtap1 is already an upper device of the team interface [ 120.022873][ T7645] team_slave_0: left promiscuous mode [ 120.028436][ T7645] team_slave_1: left promiscuous mode [ 120.274738][ T7664] netlink: 1128 bytes leftover after parsing attributes in process `syz.0.521'. [ 120.494582][ T7678] No such timeout policy "syz0" [ 120.540502][ T7682] veth1_macvtap: left promiscuous mode [ 120.563758][ T7682] macsec0: entered allmulticast mode [ 120.587267][ T7687] No such timeout policy "syz0" [ 120.933458][ T7706] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 121.133221][ T7719] lo: entered allmulticast mode [ 121.140650][ T7719] lo: left allmulticast mode [ 121.648803][ T7754] __nla_validate_parse: 38 callbacks suppressed [ 121.648820][ T7754] netlink: 60 bytes leftover after parsing attributes in process `syz.3.550'. [ 121.718541][ T7754] netlink: 32 bytes leftover after parsing attributes in process `syz.3.550'. [ 121.760790][ T7760] syzkaller1: entered promiscuous mode [ 121.770173][ T7760] syzkaller1: entered allmulticast mode [ 122.419112][ T7794] netlink: 132 bytes leftover after parsing attributes in process `syz.2.561'. [ 122.563556][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.563'. [ 122.602910][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.567'. [ 122.629248][ T7812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.567'. [ 122.658208][ T7800] can: request_module (can-proto-4) failed. [ 122.716331][ T7810] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.724083][ T7810] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.743167][ T7821] tc_dump_action: action bad kind [ 122.848158][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'. [ 122.859054][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.569'. [ 123.221948][ T7849] x_tables: duplicate underflow at hook 1 [ 123.432188][ T7855] netlink: 56 bytes leftover after parsing attributes in process `syz.4.578'. [ 123.450341][ T7858] validate_nla: 5 callbacks suppressed [ 123.450359][ T7858] netlink: 'syz.0.579': attribute type 29 has an invalid length. [ 123.464948][ T7858] netlink: 'syz.0.579': attribute type 29 has an invalid length. [ 123.525467][ T7858] netlink: 596 bytes leftover after parsing attributes in process `syz.0.579'. [ 123.684337][ T7864] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 123.712799][ T7867] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 124.086581][ T7886] tipc: Enabling of bearer rejected, media not registered [ 124.239241][ T7897] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 124.380975][ T7901] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 124.442205][ T7895] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 124.475237][ T7901] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 124.890915][ T7930] syzkaller1: entered promiscuous mode [ 124.902985][ T7930] syzkaller1: entered allmulticast mode [ 125.561026][ T7967] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 125.625102][ T7973] x_tables: duplicate underflow at hook 1 [ 125.680822][ T7978] lo speed is unknown, defaulting to 1000 [ 125.687149][ T7978] lo speed is unknown, defaulting to 1000 [ 125.694682][ T7978] lo speed is unknown, defaulting to 1000 [ 125.717883][ T7978] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 126.029299][ T7981] team0 (unregistering): Port device team_slave_0 removed [ 126.062734][ T7981] team0 (unregistering): Port device team_slave_1 removed [ 126.103420][ T7978] lo speed is unknown, defaulting to 1000 [ 126.124913][ T7978] lo speed is unknown, defaulting to 1000 [ 126.182573][ T7978] lo speed is unknown, defaulting to 1000 [ 126.229872][ T7978] lo speed is unknown, defaulting to 1000 [ 126.245290][ T7978] lo speed is unknown, defaulting to 1000 [ 126.656590][ T8022] __nla_validate_parse: 17 callbacks suppressed [ 126.656607][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'. [ 126.747481][ T8024] netlink: 100 bytes leftover after parsing attributes in process `syz.3.631'. [ 126.771801][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.630'. [ 126.823649][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'. [ 126.842840][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 126.856203][ T8033] netlink: 224 bytes leftover after parsing attributes in process `syz.3.635'. [ 126.872717][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 126.932629][ T8036] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 128.258105][ T8101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.324769][ T8104] : entered promiscuous mode [ 128.349111][ T8108] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20004 [ 129.006623][ T8142] veth1_macvtap: left promiscuous mode [ 129.012156][ T8142] macsec0: entered allmulticast mode [ 129.109230][ T8146] veth1_macvtap: entered promiscuous mode [ 129.118971][ T8146] veth1_macvtap: entered allmulticast mode [ 129.143687][ T8146] macsec0: left allmulticast mode [ 129.157954][ T8146] veth1_macvtap: left allmulticast mode [ 129.532556][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 129.658506][ T8179] TCP: TCP_TX_DELAY enabled [ 129.712923][ T8181] netlink: 96 bytes leftover after parsing attributes in process `syz.0.663'. [ 129.760175][ T8181] netlink: 96 bytes leftover after parsing attributes in process `syz.0.663'. [ 129.982369][ T8191] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 129.999807][ T8193] netlink: 'syz.0.665': attribute type 4 has an invalid length. [ 130.020186][ T8191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.032646][ T8191] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 130.087381][ T978] lo speed is unknown, defaulting to 1000 [ 130.097372][ T978] syz2: Port: 1 Link DOWN [ 130.458595][ T8209] netlink: 'syz.3.671': attribute type 21 has an invalid length. [ 130.489330][ T8209] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.520961][ T8209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.528565][ T8209] IPv6: NLM_F_CREATE should be set when creating new route [ 130.535848][ T8209] IPv6: NLM_F_CREATE should be set when creating new route [ 130.543065][ T8209] IPv6: NLM_F_CREATE should be set when creating new route [ 130.611234][ T8215] batadv_slave_0: entered promiscuous mode [ 130.624100][ T8213] batadv_slave_0: left promiscuous mode [ 130.800590][ T8227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.030200][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.053803][ T8239] netlink: 'syz.2.680': attribute type 4 has an invalid length. [ 131.137599][ T8239] netlink: 'syz.2.680': attribute type 4 has an invalid length. [ 131.472386][ T8258] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 131.670839][ T8268] netlink: 'syz.0.688': attribute type 3 has an invalid length. [ 131.704142][ T8268] netlink: 'syz.0.688': attribute type 3 has an invalid length. [ 131.736178][ T8271] __nla_validate_parse: 2 callbacks suppressed [ 131.736194][ T8271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.688'. [ 131.772701][ T8268] netlink: 'syz.0.688': attribute type 3 has an invalid length. [ 131.844234][ T8268] netlink: 'syz.0.688': attribute type 3 has an invalid length. [ 131.887787][ T8268] netlink: 'syz.0.688': attribute type 3 has an invalid length. [ 131.909781][ T8274] : entered promiscuous mode [ 131.916544][ T8275] netlink: 64 bytes leftover after parsing attributes in process `syz.3.690'. [ 131.949472][ T8275] netlink: 64 bytes leftover after parsing attributes in process `syz.3.690'. [ 132.060316][ T8285] C: renamed from lo (while UP) [ 132.077769][ T8287] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 132.199135][ T8294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.696'. [ 132.395333][ T8300] x_tables: duplicate underflow at hook 2 [ 132.436795][ T8304] x_tables: duplicate underflow at hook 2 [ 132.628309][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.636282][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.863278][ T8314] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.728857][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 133.830816][ T8386] netlink: 52 bytes leftover after parsing attributes in process `syz.1.721'. [ 133.892117][ T8388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.722'. [ 134.117805][ T8404] netlink: 3 bytes leftover after parsing attributes in process `syz.1.725'. [ 134.163469][ T8404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.350416][ T8404] xt_CT: No such helper "syz1" [ 134.491431][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 134.788695][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 134.854806][ T8445] veth1_to_hsr: entered promiscuous mode [ 134.877653][ T8443] veth1_to_hsr: left promiscuous mode [ 134.880620][ T8446] sock: sock_timestamping_bind_phc: sock not bind to device [ 135.054633][ T8454] batman_adv: batadv0: Adding interface: dummy0 [ 135.060932][ T8454] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.091404][ T8454] batman_adv: batadv0: Interface activated: dummy0 [ 135.120758][ T8454] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 135.288434][ T8464] bridge1: entered promiscuous mode [ 135.309714][ T8464] bridge1: entered allmulticast mode [ 154.711027][ T8498] bond2: entered promiscuous mode [ 154.723844][ T8498] bond2: entered allmulticast mode [ 154.751695][ T8498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.856836][ T8494] bridge0: port 3(dummy0) entered blocking state [ 154.863408][ T8494] bridge0: port 3(dummy0) entered forwarding state [ 154.870286][ T8494] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.877891][ T8494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.885382][ T8494] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.892535][ T8494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.959838][ T8494] bridge0: port 3(dummy0) entered disabled state [ 155.028646][ T8494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.100436][ T8515] IPv6: Can't replace route, no match found [ 155.306785][ T8534] validate_nla: 50 callbacks suppressed [ 155.306801][ T8534] netlink: 'syz.1.762': attribute type 21 has an invalid length. [ 155.374530][ T8534] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.474447][ T8537] nbd1: detected capacity change from 0 to 4096 [ 155.492946][ T5831] block nbd1: Receive control failed (result -104) [ 155.630055][ T8550] __nla_validate_parse: 6 callbacks suppressed [ 155.630072][ T8550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.765'. [ 155.701018][ T8550] batman_adv: batadv0: Interface deactivated: dummy0 [ 155.852225][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.770'. [ 155.898552][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.770'. [ 155.932067][ T8564] netlink: 'syz.3.770': attribute type 1 has an invalid length. [ 155.989749][ T8571] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.995486][ T8576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.018975][ T8565] netlink: 'syz.3.770': attribute type 1 has an invalid length. [ 156.146904][ T8571] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.157516][ T8583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.157870][ T8583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.158215][ T8583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.169522][ T8583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.169937][ T8583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.271388][ T8589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.776'. [ 156.281797][ T8590] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 156.305282][ T8590] netlink: 'syz.3.777': attribute type 1 has an invalid length. [ 156.347866][ T8571] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.351944][ T8593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.778'. [ 156.522795][ T8594] veth3: entered promiscuous mode [ 156.559795][ T8605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.781'. [ 156.667894][ T8599] veth5: entered promiscuous mode [ 156.679448][ T8606] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 156.789786][ T8571] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.051651][ T8571] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.083085][ T8571] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.115436][ T8571] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.137966][ T8571] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.165450][ T8643] netlink: 33 bytes leftover after parsing attributes in process `syz.3.789'. [ 157.778045][ T8672] lo speed is unknown, defaulting to 1000 [ 157.823532][ T5831] Bluetooth: hci4: command tx timeout [ 157.988702][ T8686] netlink: 176 bytes leftover after parsing attributes in process `syz.3.801'. [ 158.016330][ T8686] netlink: 32 bytes leftover after parsing attributes in process `syz.3.801'. [ 158.073938][ T8685] netlink: 44 bytes leftover after parsing attributes in process `syz.4.800'. [ 158.612607][ T8706] bridge3: entered promiscuous mode [ 158.633742][ T8706] bridge3: entered allmulticast mode [ 158.700380][ T8714] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 158.723780][ T8672] netlink: 'syz.0.797': attribute type 4 has an invalid length. [ 159.440996][ T8752] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 159.483493][ T8752] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 159.527972][ T8752] netlink: 'syz.3.818': attribute type 2 has an invalid length. [ 159.534840][ T8756] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 160.025692][ T8791] trusted_key: syz.3.828 sent an empty control message without MSG_MORE. [ 160.472588][ T8816] netem: unknown loss type 0 [ 160.480951][ T8816] netem: change failed [ 160.499626][ T8816] nbd: socks must be embedded in a SOCK_ITEM attr [ 160.917151][ T8831] netlink: 'syz.1.841': attribute type 10 has an invalid length. [ 160.959395][ T8831] __nla_validate_parse: 11 callbacks suppressed [ 160.959410][ T8831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.841'. [ 161.065570][ T8831] team0: Port device geneve0 added [ 161.692006][ T8864] lo speed is unknown, defaulting to 1000 [ 162.818779][ T8923] netlink: 32 bytes leftover after parsing attributes in process `syz.3.871'. [ 162.907482][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 162.959800][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'. [ 163.141799][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 163.246442][ T8940] lo speed is unknown, defaulting to 1000 [ 163.382128][ T8948] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.625243][ T8967] 8021q: VLANs not supported on ip6gre0 [ 163.835175][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.888'. [ 163.942120][ T8983] tipc: Started in network mode [ 163.952862][ T8983] tipc: Node identity ac141413, cluster identity 4711 [ 163.961002][ T8983] tipc: Enabled bearer , priority 10 [ 164.083774][ T8998] netlink: 'syz.1.894': attribute type 1 has an invalid length. [ 164.234856][ T9007] x_tables: duplicate underflow at hook 1 [ 164.573948][ T9031] netlink: 76 bytes leftover after parsing attributes in process `syz.2.902'. [ 164.601411][ T9027] bridge_slave_0: left allmulticast mode [ 164.610817][ T9027] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.692570][ T9027] bridge_slave_1: left allmulticast mode [ 164.702343][ T9027] bridge_slave_1: left promiscuous mode [ 164.738020][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.773085][ T9027] bond0: (slave bond_slave_0): Releasing backup interface [ 164.802996][ T9027] bond0: (slave bond_slave_1): Releasing backup interface [ 164.844172][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'. [ 164.853203][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'. [ 164.853613][ T9027] team0: Port device team_slave_0 removed [ 164.912686][ T9027] team0: Port device team_slave_1 removed [ 164.924155][ T9027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.931582][ T9027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.951200][ T9027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.968967][ T9027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.001757][ T9027] bond1: (slave ip6gretap1): Releasing backup interface [ 165.059012][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.906'. [ 165.076834][ T5929] tipc: Node number set to 2886997011 [ 165.135163][ T9046] lo speed is unknown, defaulting to 1000 [ 165.298227][ T9064] netlink: ct family unspecified [ 165.303237][ T9064] openvswitch: netlink: Actions may not be safe on all matching packets [ 166.081983][ T9095] netlink: 'syz.1.919': attribute type 21 has an invalid length. [ 166.154339][ T9099] block nbd3: not configured, cannot reconfigure [ 166.404292][ T9111] __nla_validate_parse: 1 callbacks suppressed [ 166.404326][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 166.455607][ T9111] openvswitch: netlink: nsh attr 0 has unexpected len 32764 expected 0 [ 166.490757][ T9111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.663295][ T9124] netlink: 'syz.3.931': attribute type 1 has an invalid length. [ 166.699718][ T9126] nbd: socks must be embedded in a SOCK_ITEM attr [ 166.803252][ T9133] netlink: 'syz.0.934': attribute type 7 has an invalid length. [ 166.856629][ T9133] : entered promiscuous mode [ 166.879806][ T9133] x_tables: duplicate entry at hook 1 [ 166.936655][ T9135] syzkaller1: entered promiscuous mode [ 166.942159][ T9135] syzkaller1: entered allmulticast mode [ 166.991011][ T9135] x_tables: duplicate underflow at hook 2 [ 167.146842][ T9151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.274058][ T9155] xt_cgroup: xt_cgroup: no path or classid specified [ 167.689387][ T9182] netlink: 44 bytes leftover after parsing attributes in process `syz.3.949'. [ 167.698982][ T9182] netlink: 43 bytes leftover after parsing attributes in process `syz.3.949'. [ 167.709940][ T9182] netlink: 'syz.3.949': attribute type 6 has an invalid length. [ 167.716061][ T9186] tipc: Started in network mode [ 167.722489][ T9182] netlink: 'syz.3.949': attribute type 5 has an invalid length. [ 167.727722][ T9186] tipc: Node identity 92954f667fec, cluster identity 4711 [ 167.735164][ T9182] netlink: 43 bytes leftover after parsing attributes in process `syz.3.949'. [ 167.739119][ T9186] tipc: Enabled bearer , priority 0 [ 167.796815][ T9182] netlink: 20 bytes leftover after parsing attributes in process `syz.3.949'. [ 167.940532][ T9186] syzkaller0: entered promiscuous mode [ 167.947750][ T9186] syzkaller0: entered allmulticast mode [ 167.957665][ T9186] tipc: Resetting bearer [ 168.002805][ T9198] Cannot find del_set index 3 as target [ 168.058901][ T9184] tipc: Resetting bearer [ 168.285307][ T9210] netlink: 668 bytes leftover after parsing attributes in process `syz.4.957'. [ 168.295092][ T9210] netlink: 668 bytes leftover after parsing attributes in process `syz.4.957'. [ 168.507616][ T9212] xt_CT: No such helper "pptp" [ 168.773884][ T5929] tipc: Node number set to 3984150374 [ 169.560332][ T9184] tipc: Disabling bearer [ 169.574569][ T9204] gtp0: entered promiscuous mode [ 169.750560][ T9237] netlink: 48 bytes leftover after parsing attributes in process `syz.0.965'. [ 169.773501][ T9237] netlink: 48 bytes leftover after parsing attributes in process `syz.0.965'. [ 171.070219][ T9318] netlink: 40 bytes leftover after parsing attributes in process `syz.0.983'. [ 171.538874][ T9345] __nla_validate_parse: 1 callbacks suppressed [ 171.538892][ T9345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.989'. [ 171.675732][ T9352] netlink: 'syz.4.990': attribute type 4 has an invalid length. [ 171.788222][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 171.812766][ T9357] netlink: 5 bytes leftover after parsing attributes in process `syz.0.993'. [ 171.879826][ T9360] netlink: 'syz.4.994': attribute type 4 has an invalid length. [ 172.041158][ T9369] netlink: 72 bytes leftover after parsing attributes in process `syz.2.996'. [ 172.057648][ T9369] pimreg3: entered allmulticast mode [ 172.167889][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'. [ 172.221497][ T9373] netlink: 3 bytes leftover after parsing attributes in process `syz.4.997'. [ 172.338651][ T9371] netlink: 88 bytes leftover after parsing attributes in process `syz.4.997'. [ 172.645690][ T9393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1002'. [ 172.775400][ T9355] bond0: entered allmulticast mode [ 172.809548][ T9355] bond_slave_0: entered allmulticast mode [ 172.838341][ T9355] bond_slave_1: entered allmulticast mode [ 172.863777][ T9355] batadv0: entered allmulticast mode [ 173.131239][ T9422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1008'. [ 173.496051][ T9437] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1011'. [ 173.633494][ T9437] 0ªÃøÂFNð¡: renamed from bond_slave_0 [ 173.692653][ T9437] 0ªÃøÂFNð¡: entered allmulticast mode [ 174.023711][ T9473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.075912][ T9525] No such timeout policy "syz0" [ 175.252078][ T9533] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.469421][ T9533] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.550204][ T9550] vlan3: entered promiscuous mode [ 175.569770][ T9550] bridge0: entered promiscuous mode [ 175.646027][ T9533] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.833705][ T9533] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.899450][ T9565] dvmrp5: entered allmulticast mode [ 175.915282][ T9566] dvmrp5: left allmulticast mode [ 176.092651][ T9533] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.139748][ T9533] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.202288][ T9533] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.280038][ T9533] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.692372][ T9608] __nla_validate_parse: 6 callbacks suppressed [ 176.692392][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'. [ 176.749826][ T9608] netlink: 18 bytes leftover after parsing attributes in process `syz.4.1050'. [ 176.808584][ T9610] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1051'. [ 176.831438][ T9614] x_tables: duplicate underflow at hook 1 [ 176.858278][ T9610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.284264][ T9638] lo speed is unknown, defaulting to 1000 [ 177.672619][ T9658] netlink: 'syz.1.1061': attribute type 9 has an invalid length. [ 177.680977][ T9658] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.1061'. [ 177.690556][ T9638] netlink: 'syz.3.1057': attribute type 7 has an invalid length. [ 177.695139][ T9660] netlink: 'syz.1.1061': attribute type 9 has an invalid length. [ 177.706545][ T9660] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.1061'. [ 177.780980][ T9642] netlink: 'syz.3.1057': attribute type 25 has an invalid length. [ 177.809079][ T9665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1062'. [ 177.822283][ T9664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1062'. [ 178.402812][ T9686] xt_hashlimit: overflow, rate too high: 0 [ 178.428641][ T9679] syzkaller1: entered promiscuous mode [ 178.442038][ T9679] syzkaller1: entered allmulticast mode [ 178.451058][ T9688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1070'. [ 178.474022][ T9688] x_tables: duplicate underflow at hook 1 [ 178.513977][ T9688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.269987][ T9734] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1079'. [ 179.304641][ T9734] xt_limit: Overflow, try lower: 0/0 [ 179.349596][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1081'. [ 179.385542][ T9742] x_tables: duplicate underflow at hook 2 [ 179.538404][ T9740] erspan0: entered promiscuous mode [ 179.549820][ T9740] gretap0: entered promiscuous mode [ 179.559650][ T9751] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.397133][ T9782] netlink: 'syz.1.1090': attribute type 1 has an invalid length. [ 180.452141][ T9786] tipc: Enabled bearer , priority 0 [ 180.539020][ T9781] tipc: Disabling bearer [ 180.558095][ T9793] netlink: 'syz.3.1094': attribute type 10 has an invalid length. [ 180.567784][ T9793] veth0_macvtap: left promiscuous mode [ 182.080162][ T9889] xt_l2tp: v2 sid > 0xffff: 262144 [ 182.135760][ T9891] x_tables: duplicate underflow at hook 2 [ 182.279305][ T12] ------------[ cut here ]------------ [ 182.285057][ T12] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 182.299779][ T12] WARNING: CPU: 0 PID: 12 at net/mac80211/tx.c:756 ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 182.309657][ T12] Modules linked in: [ 182.313780][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 182.325804][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.335930][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 182.342215][ T12] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 182.348695][ T12] Code: 31 f6 83 e6 07 41 0f 95 c6 31 ff e8 03 26 ea f6 43 8d 0c 76 83 c1 02 48 c7 c7 60 8b 8c 8c 48 89 de 4c 89 fa e8 3a 7e ae f6 90 <0f> 0b 90 90 41 bf 01 00 00 00 e9 eb 02 00 00 e8 95 21 ea f6 e9 6a [ 182.368343][ T12] RSP: 0018:ffffc90000117460 EFLAGS: 00010246 [ 182.374450][ T12] RAX: 784de873a4f04f00 RBX: ffff88805add9738 RCX: ffff88801c6dda00 [ 182.382453][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 182.390478][ T12] RBP: ffffc900001175d0 R08: 0000000000000003 R09: 0000000000000004 [ 182.398498][ T12] R10: dffffc0000000000 R11: fffffbfff1bba984 R12: dffffc0000000000 [ 182.406511][ T12] R13: ffffc90000117788 R14: 0000000000000001 R15: ffff88802964d3c4 [ 182.414525][ T12] FS: 0000000000000000(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000 [ 182.423489][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.430098][ T12] CR2: 00007fad7b77d2d8 CR3: 0000000032ae2000 CR4: 00000000003526f0 [ 182.438135][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.446149][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.454167][ T12] Call Trace: [ 182.457461][ T12] [ 182.460422][ T12] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 182.466564][ T12] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 182.472748][ T12] invoke_tx_handlers_late+0xb6/0x1820 [ 182.478258][ T12] ? ieee80211_tx_h_select_key+0x13d4/0x1900 [ 182.484298][ T12] ? sta_info_get+0x28d/0x2a0 [ 182.489019][ T12] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 182.494923][ T12] ieee80211_tx+0x2ac/0x420 [ 182.499472][ T12] ? __pfx_ieee80211_tx+0x10/0x10 [ 182.504666][ T12] ? ieee80211_xmit+0x315/0x400 [ 182.509558][ T12] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 182.515598][ T12] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 182.521441][ T12] ? ieee80211_scan_state_send_probe+0x4ee/0xa10 [ 182.527843][ T12] ieee80211_scan_state_send_probe+0x59a/0xa10 [ 182.534068][ T12] ieee80211_scan_work+0x5b1/0x1ce0 [ 182.539318][ T12] cfg80211_wiphy_work+0x2dc/0x460 [ 182.544490][ T12] ? process_scheduled_works+0x9ec/0x17a0 [ 182.550235][ T12] process_scheduled_works+0xadb/0x17a0 [ 182.555893][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 182.561937][ T12] worker_thread+0x8a0/0xda0 [ 182.566606][ T12] kthread+0x70e/0x8a0 [ 182.570708][ T12] ? __pfx_worker_thread+0x10/0x10 [ 182.575879][ T12] ? __pfx_kthread+0x10/0x10 [ 182.580515][ T12] ? __pfx_kthread+0x10/0x10 [ 182.585160][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 182.590382][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.595641][ T12] ? __pfx_kthread+0x10/0x10 [ 182.600254][ T12] ret_from_fork+0x4b/0x80 [ 182.604722][ T12] ? __pfx_kthread+0x10/0x10 [ 182.609345][ T12] ret_from_fork_asm+0x1a/0x30 [ 182.614224][ T12] [ 182.617263][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 182.624563][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc7-syzkaller-00082-g5cdb2c77c4c3 #0 PREEMPT(full) [ 182.636547][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.646614][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 182.652976][ T12] Call Trace: [ 182.656271][ T12] [ 182.659217][ T12] dump_stack_lvl+0x99/0x250 [ 182.663831][ T12] ? __asan_memcpy+0x40/0x70 [ 182.668439][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.673665][ T12] ? __pfx__printk+0x10/0x10 [ 182.678290][ T12] panic+0x2db/0x790 [ 182.682237][ T12] ? __pfx_panic+0x10/0x10 [ 182.686683][ T12] ? show_trace_log_lvl+0x4fb/0x550 [ 182.691924][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 182.696909][ T12] __warn+0x31b/0x4b0 [ 182.701016][ T12] ? ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 182.706852][ T12] ? ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 182.712696][ T12] report_bug+0x2be/0x4f0 [ 182.717063][ T12] ? ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 182.722911][ T12] ? ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 182.728757][ T12] ? ieee80211_tx_h_rate_ctrl+0xc89/0x1780 [ 182.734587][ T12] handle_bug+0x84/0x160 [ 182.738862][ T12] exc_invalid_op+0x1a/0x50 [ 182.743412][ T12] asm_exc_invalid_op+0x1a/0x20 [ 182.748276][ T12] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc87/0x1780 [ 182.754723][ T12] Code: 31 f6 83 e6 07 41 0f 95 c6 31 ff e8 03 26 ea f6 43 8d 0c 76 83 c1 02 48 c7 c7 60 8b 8c 8c 48 89 de 4c 89 fa e8 3a 7e ae f6 90 <0f> 0b 90 90 41 bf 01 00 00 00 e9 eb 02 00 00 e8 95 21 ea f6 e9 6a [ 182.774352][ T12] RSP: 0018:ffffc90000117460 EFLAGS: 00010246 [ 182.780450][ T12] RAX: 784de873a4f04f00 RBX: ffff88805add9738 RCX: ffff88801c6dda00 [ 182.788439][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 182.796422][ T12] RBP: ffffc900001175d0 R08: 0000000000000003 R09: 0000000000000004 [ 182.804413][ T12] R10: dffffc0000000000 R11: fffffbfff1bba984 R12: dffffc0000000000 [ 182.812402][ T12] R13: ffffc90000117788 R14: 0000000000000001 R15: ffff88802964d3c4 [ 182.820440][ T12] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 182.826560][ T12] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 182.832752][ T12] invoke_tx_handlers_late+0xb6/0x1820 [ 182.838228][ T12] ? ieee80211_tx_h_select_key+0x13d4/0x1900 [ 182.844233][ T12] ? sta_info_get+0x28d/0x2a0 [ 182.848929][ T12] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 182.854749][ T12] ieee80211_tx+0x2ac/0x420 [ 182.859267][ T12] ? __pfx_ieee80211_tx+0x10/0x10 [ 182.864321][ T12] ? ieee80211_xmit+0x315/0x400 [ 182.869192][ T12] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 182.875173][ T12] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 182.880992][ T12] ? ieee80211_scan_state_send_probe+0x4ee/0xa10 [ 182.887317][ T12] ieee80211_scan_state_send_probe+0x59a/0xa10 [ 182.893499][ T12] ieee80211_scan_work+0x5b1/0x1ce0 [ 182.898744][ T12] cfg80211_wiphy_work+0x2dc/0x460 [ 182.903867][ T12] ? process_scheduled_works+0x9ec/0x17a0 [ 182.909607][ T12] process_scheduled_works+0xadb/0x17a0 [ 182.915211][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 182.921218][ T12] worker_thread+0x8a0/0xda0 [ 182.925818][ T12] kthread+0x70e/0x8a0 [ 182.929893][ T12] ? __pfx_worker_thread+0x10/0x10 [ 182.935011][ T12] ? __pfx_kthread+0x10/0x10 [ 182.939613][ T12] ? __pfx_kthread+0x10/0x10 [ 182.944208][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 182.949416][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.954618][ T12] ? __pfx_kthread+0x10/0x10 [ 182.959216][ T12] ret_from_fork+0x4b/0x80 [ 182.963632][ T12] ? __pfx_kthread+0x10/0x10 [ 182.968229][ T12] ret_from_fork_asm+0x1a/0x30 [ 182.972998][ T12] [ 182.976320][ T12] Kernel Offset: disabled [ 182.980669][ T12] Rebooting in 86400 seconds..