last executing test programs: 1m4.84402827s ago: executing program 4 (id=822): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x14, r2, 0x1}, 0x14}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0200000002"], 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r9, r8, 0x2, 0x6, 0x4000}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008081}, 0x20000004) 1m4.649262914s ago: executing program 4 (id=824): syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket(0x10, 0x80002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048000}, 0x814) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m4.353057526s ago: executing program 4 (id=828): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) (async, rerun: 32) unshare(0x400) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000002b703000000000001850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044014) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x4d2, 0xffffff7f, 0x4, 0x4090, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0xd}, 0x50) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000180)={&(0x7f0000000480)=""/159, 0x9f, 0x3, 0x10}) (async) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x3, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x10, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) 57.982355792s ago: executing program 1 (id=874): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x7, 0x40, 0x8, 0xffffffff, {{0xb, 0x4, 0x2, 0x7, 0x2c, 0x68, 0x0, 0x1, 0x0, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x16, 0xffffffffffffffff, [{0x6, 0xa, "52956714c6959b90"}, {0x1, 0x6, "2f34d39e"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', r5, 0x2f, 0x3d, 0x8, 0x9fa, 0x24, @dev={0xfe, 0x80, '\x00', 0x2f}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7800, 0x2, 0x9}}) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r2, 0x2, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280), 0x0, 0x0}, 0x40) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 57.74468434s ago: executing program 1 (id=876): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000004000000040000000300000004080000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a7df6871951d93ca508110415a13eedd0040c7fe9ed4efe77dd496095fd1c3fb1fc3738a653d168294c4cbbfc52b934c44448a15a06b081e63c9512d937f123759d2d79cc9e5c4f9885fcebf58b6fa40915097dff62d0b33309388f2b7b9f12d7705d4d50047ee8e4fe66875c5c7349149a9bd34e87eea18f3a9ff64e69118ece96b7f10c6dbbb0d9d2f84c863c2d2e1a8d30ce78296c3d721e968b3c6a55d4c76fdc5321fe8a018721deb8dc1336f0e26896192", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="fef351f64d23421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="a77e31390e292d75b2c51720ab6be056220ed32ba098dfd9c696d45e13dc0ca5a98f7dbc32e2e60640aa15abdfbadc54681a55acdba7b07db05160f8a1731380dc845e91921ee1d12e4725b2273391977181add62b06fb3efedac45f61cdd57ea78e54b0742f", 0x66}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x1001f, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, r1, 0x0, 0x3, &(0x7f0000000040)=':-\x00'}, 0x30) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x0, 0xba02004b, 0x108, 0x0, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'caif0\x00', 'veth0\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0x2}}]}, @common=@SET={0x60}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'veth0_to_hsr\x00', 'wg2\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) sendmsg$nl_generic(r7, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x20000000}, 0xc081) 57.06115849s ago: executing program 1 (id=880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x64}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4054) 49.417703976s ago: executing program 4 (id=828): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) (async, rerun: 32) unshare(0x400) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000002b703000000000001850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044014) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x4d2, 0xffffff7f, 0x4, 0x4090, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0xd}, 0x50) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000180)={&(0x7f0000000480)=""/159, 0x9f, 0x3, 0x10}) (async) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x3, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x10, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) 39.089882861s ago: executing program 1 (id=880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x64}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4054) 34.571656017s ago: executing program 2 (id=1023): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10a1, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x44) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@mpls_delroute={0xb4, 0x19, 0x1, 0x0, 0x25dfdbfd, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}, @RTA_VIA={0x14, 0x12, {0x1b, "c1fa30ae294770567a7553aa10f0"}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_SIOCADDRT(r5, 0xff08, 0x0) 34.388704975s ago: executing program 2 (id=1026): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5caa}]}, 0x48}}, 0x40840) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv6_getnexthop={0x48, 0x6a, 0x20, 0x3, 0x25dfdbfe, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r2}, @NHA_MASTER={0x8}, @NHA_OIF={0x8, 0x5, r2}, @NHA_OIF={0x8, 0x5, r2}, @NHA_OIF={0x8, 0x5, r3}, @NHA_GROUPS={0x4}]}, 0x48}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r6) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r8, @ANYBLOB="3c00028038"], 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000540)={'sit0\x00', r2, 0x7, 0x1, 0x8, 0xa4b, {{0x14, 0x4, 0x0, 0x2d, 0x50, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @remote, {[@lsrr={0x83, 0x13, 0xa0, [@multicast1, @broadcast, @local, @multicast2]}, @ssrr={0x89, 0x27, 0xf1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local, @local, @local, @multicast2, @remote, @rand_addr=0x64010102, @loopback]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl0\x00', r2, 0x29, 0x81, 0x40, 0x2, 0xfc61a4a6465a230d, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x80, 0x7, 0x7, 0x6}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000c80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x4ac, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2f82}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r2}, {0x1d4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0x7, 0x6, 0x9}, {0x0, 0x9, 0x4, 0x9}, {0xff, 0x11, 0x7, 0xa12e}, {0x9, 0x3, 0x8}, {0x4, 0x3, 0x5, 0xc0}, {0x3, 0x9, 0x3, 0x6}, {0x4, 0x2, 0x1, 0xb1b8}]}}}]}}, {{0x8, 0x1, r3}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x20000081}, 0x4004) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) connect$tipc(r4, &(0x7f0000000000), 0x10) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x4e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xc, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x84, 0x0, 0x0) 33.125205993s ago: executing program 2 (id=1035): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xd, '\x00', r2, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x3, 0x7, 0x101, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x84) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c0000002000010000000000000000000a00100000000001000000001400110076657446305f746f5f6873720000000014000100fc01000000000007000000000000000008000a000700000008000f00ffffffff140002"], 0x7c}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 32.699934202s ago: executing program 2 (id=1039): r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000040)=@qipcrtr, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/247, 0xf7}], 0x1, &(0x7f0000000240)=""/14, 0xe}, 0x0) 32.551119796s ago: executing program 2 (id=1041): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000002e40)=0xa2b, 0x4) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002ec0), r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000003000)={'sit0\x00', &(0x7f0000002f00)={'syztnl0\x00', 0x0, 0x10, 0x1, 0x8, 0x9, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x64, 0x0, 0x52, 0x4, 0x0, @local, @private=0xa010100, {[@end, @timestamp={0x44, 0x8, 0x91, 0x0, 0x4, [0x6]}, @timestamp_prespec={0x44, 0x14, 0x54, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @timestamp_prespec={0x44, 0x1c, 0xf6, 0x3, 0x9, [{@broadcast, 0xd49}, {@rand_addr=0x64010101, 0x101}, {@broadcast, 0xa}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x27, 0x12, [@multicast2, @multicast1, @private=0xa010101, @multicast1, @private=0xa010100, @local, @loopback, @multicast2, @broadcast]}, @cipso={0x86, 0x19, 0x3, [{0x7, 0xc, "d88e119bd41c51329fd5"}, {0x0, 0x2}, {0x1, 0x5, "36c8b1"}]}, @noop, @timestamp={0x44, 0x28, 0xe3, 0x0, 0xc, [0x2, 0xe, 0x8, 0x7fffffff, 0x6, 0x6, 0x5, 0x6, 0x7]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000003140)={'syztnl2\x00', &(0x7f0000003040)={'gretap0\x00', 0x0, 0x40, 0x10, 0xaa, 0xfffffff4, {{0x33, 0x4, 0x0, 0x2, 0xcc, 0x67, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x22}, @local, {[@timestamp_addr={0x44, 0xc, 0x1f, 0x1, 0xd, [{@rand_addr=0x64010101, 0x2}]}, @cipso={0x86, 0x32, 0x3, [{0x1, 0x9, "0e602747716535"}, {0x77e2d0369881da89, 0x6, "76fb6034"}, {0x5, 0x7, "6eb366a337"}, {0x7, 0x4, "fa01"}, {0x1, 0xa, "219107e6c7113f04"}, {0x0, 0x8, "2b4251df38aa"}]}, @cipso={0x86, 0x20, 0x3, [{0x5, 0x4, "cb8a"}, {0x0, 0xf, "3237c9d1178c497e89c52fa321"}, {0x6, 0x4, "9a48"}, {0x7, 0x3, '['}]}, @end, @timestamp={0x44, 0x1c, 0xb, 0x0, 0x9, [0x5, 0xfffffff8, 0x3, 0x1, 0x0, 0x9]}, @timestamp_prespec={0x44, 0x14, 0x1b, 0x3, 0x5, [{@empty, 0x1c2}, {@broadcast, 0x7}]}, @end, @timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x4, [{@remote, 0x81}]}, @lsrr={0x83, 0xf, 0xd5, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @rr={0x7, 0xb, 0xf3, [@private=0xa010101, @rand_addr=0x64010102]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000003280)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003240)={&(0x7f0000003180)={0x94, r3, 0x60f, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xfffffd95}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xb}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x4}, @ETHTOOL_A_COALESCE_TX_USECS={0x8}, @ETHTOOL_A_COALESCE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0xfff}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r7, &(0x7f0000004e40)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004e00)={&(0x7f0000004d80)={0x50, 0x15, 0xa, 0x801, 0x0, 0x0, {0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socket$inet6(0xa, 0x0, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f00000032c0)=ANY=[@ANYBLOB="18000000000000000000000000000000630106000000000095000000000000004aa03ff0d12050eb120fea58def6c5f683b41604de2e52a5803bb9a4c9364b17d8a9f7036a4274627ba3c58a5cae37cda148c56500612a5334251061c293f83a0a6709147a4c19ec8e2bbac8011f128d9536e51c84f8e79fd0e0c416bdea88687723861827dde23f29e53871b9e770dc389b8bafb0d764dffa6460d496070422b56c5225"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xffff, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000004) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) recvmmsg(r8, 0x0, 0x0, 0x2040000, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 32.031052727s ago: executing program 2 (id=1043): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x0, 0x3, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @NDA_VLAN={0x6, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4bd5c6fa5c6152b9}, 0x40800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000002c0)=@xdp={0x2c, 0xb, r1, 0x18}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)="4eb9f78b8d1a778c24a47043bcfb1422239986b8fdf6610064a591044aea5c063171a0fde406b49d0af94260f8dc047c62eee32d744482a9fcf54ec64e77f615b45378c35a624cc7ee7e88fb957732a4ac5a89550062d96eea0f8f42ef4b6a562b7732b69cc9f950da885fde1da5aaae443656739392371b73779ad7dfe4cb385b19cfac14065cefd903e2e2465d433f8a5eab6f7ed2a3def8126189097190696a91b71abeec713d53f3568be0353b64a5d9417da92782cb5295a8d64d1de21ea30e01cf07414d291dec9c2fa1f5a2428c0d1cb06cd62ec7d9268d52aadb5dde2d31d177212906d204488ebed7db7799e68a", 0xf2}, {&(0x7f0000000440)="2518c0252c3ce597d45e42e9aeab0f2db2a965efda5fd3e5a2facd6ea391eca51c67a02dcd0d0888182a8527ddf8e8c7bdcfbbdde50094b1ade95b78b56363fbafadd9a14d3c4652d70000d5fb54242c632dd37d26c6c66243b35b0e2d90dfe206bc713c4a7464598e106a93af49", 0x6e}, {&(0x7f00000004c0)="a5abb2b9d957d5041ea7d46d9df802ebe98da4634c922a2ceb6e1ba5e3303bdf78decf722732f4b7b6dac62dc917c5ba4a17883ecf1cf3b20cbaf57d839c4a6d379dbbf06226a1b3e529fe4ef1fc6c17768cd5f993be999e84ba8843ecfbe448ceb42e69dfcc47f6bbc6e666a36ec49e80c74ddd8f9d43ae05651ee0e66e5821bad254560673b33b1a9dcc5fcde9ec33c64eaebcc40bdaacf1f7d4feec7c1ac6d23c6c5539886e8ad3ce8fa5", 0xac}, {&(0x7f0000000580)="5602f094c9cec16b03715d280894af9d89fd75a14ccbcce2911a71548d49e6b6d19a371357181b84806228cfe881e102c73f8c9b7621a33e7644fc0e28e6fb707e96bc50c8d806301236021405b81df95992e016ac8d305f6eb034031a67465eebad095043bd2442310b4f18756b82ffb788f386e7c3446f2fa94d5dffd25774bd8875d31d3975a9eacd6a2e3ef0237a1182", 0x92}, {&(0x7f0000000080)="3965932556b8147ed284fe23dc21ac4a", 0x10}, {&(0x7f0000000640)="0c0a10a030048ec66568501434d8b064444cc9f1dfb6808d1c64412cc941beb1122e17dfb512b874208d59cb2fc0d6fb86ee8fc4c9506440fbffb3e4b6e00fe544a5852f83798cd55e7119410447a440151197d1157b95a49d9224d2142c86a550a976dd90741f56e07f1fdd30f86fb70e", 0x71}, {&(0x7f00000006c0)="44b90185cb51d69b2f9f76a8406f48a226046b10bda39f80a216f0f7fb1948b37f24f0071a8865b8d75cb9779cb92eabba3813ad19e48696af9bbda92be0a4a5a5f15d3a61f9c0ae23b515488af3d811fc022f042da68aef51d76fd12c8c83047cd96632ac912940c32d", 0x6a}, {&(0x7f0000000740)="307e49b123ffbaa191069c99e39bb95c45db98be1ed2293683be83097493f4a390ea685de75b31a4ce8edb86a2085790b3de7e3e290779aff20cb361c702dd4fb3686fd40ff15f06fb33b453fb357667edf545a8cdd772be3815979a4bb3880740e40c48669ad27899baa347dc82c3", 0x6f}, {&(0x7f00000007c0)="d32080e5a44beb4613d5c3e143c5d09adabe1060de7252c18db1e0737c61178fdc81fe39bdd6a8ccfd6dce3b1ebc7364de51b312223f9da52da2a353b2c2dd3ca7700ff09ed60c515b44adf09ce8f3ee479ffc3eb7d956f4baf15fca444b6b49d3c2cfcb69b00a784f647107c11a8809ad3a548fe737d79b0d79ef97a763fb48655be3b9009e65b9e2086d5cef34545c6b865ddb2d71382ca062666b8d606c3ea72fac93", 0xa4}], 0x9, &(0x7f0000000940)=[{0xf8, 0x101, 0x1, "50dc182cbc16996b113ad401a4d89304d0a44546dead1fd199aae43962dfcc54eac029bf02a279f477a63632869d1067422b84afe87bcf51edc9a41f44d21b3336cb47e9f4f7cd26d100ded9dfc05463dfcc64beae9a4505d7994e8ecddb0ed5d8ae474b0c9c007beb862725908fc279913e9d7d43b47e8acf709286ab79f645ef39735a4b3073fcbd43c9c10d4b382d2eb5f40d22f2815b0db2889757480dc020fce44f10f04e56a3e9ee06ad80c403c335a0db49fd2909e778051bedc148d948e225abe9cfe7a947d428150618f34e663bd95b380e73caacef98d716ab9e6e69"}, {0x18, 0x11, 0x8fe6, "dc8f7664f6b6d7f1"}, {0x1010, 0x1, 0xbe7, "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"}, {0xd0, 0x112, 0x8, "1ef3f1b411caace125ee642a38276039576a7222d2f7fb78193081a1424c295c877e0dc9da192f67a23e26f7601f999321cc5d6e1eed6ac15df02fd036acfa2d64e920b13b046bd2ca2ecf0522038943edd4d6c465db0c9a79172ebad4c3889ddf82acbd11d5a2f3e158cec9804776416722b4f647b7c646acac7737af479a0a39dd99bf027982912bfa55c34d2e3cf52c842b61360af238f279e16939669fc26a3c9bf77e109d3a1440cac39237295874749b5f0e345f3d75da"}, {0x68, 0x111, 0x847, "e7b3f7d5aa583f8794afef0da7ffe8effc065df971f728fc6242ef1e9d2433521eec174a325d59488be10dbdd93d0f2eecc02e706026c6a74a3df4ad5fc07328328e70907188565a865423ebbef81388017c595fee45c453"}, {0x38, 0x29, 0x10001, "1e55d40e26acefa5cfcec7577ed4cccef46c82345c62fd7c07c6e5e42fd0f5e60ced2d"}, {0xf8, 0x1, 0x3, "1834f19b544c7b2f9af12dfd161239a2c7fca8a4e6ecb7fbd4b4797c23d5cc1d466b4f8ee88ec2979b870e99dea6eec6f0639faa0679772b6d972dcce1b18ee7ac4a7db6342a41d561dad71d78dd3794d6fb0799ed9f7ba7306a2f61e8b80d35e99dd38f8e28d964b2d61346834c7a535d304c687d49426d29418719e5210a959f2a2cc8e68c3056a2c6d9e49aeed298d02de80c44b8f1ca49cd21a27bf97150cbe2d82639c30c92abde6c4069ad27c51dc9487bc46f322432c5b72b9b0cfdff9505769880a551dddf4ebe08dc09161b7ed1e2960e96ab96157137fa89f51a1b1c"}, {0x28, 0x111, 0x0, "e93cc4d3290107fa104732866c04442c0dbcd0896d"}, {0x68, 0x8351709b4044d946, 0x9, "50e06bb5a54141528c5c0d761f722b120b5e7fb85585cc238427b1b0c7d12b3c57b8a21a35ecb7d98c1cec57adb0015de4fec8afdc9ac11dc888cab7b57b973f615c9be6d49270ef37518cf9901de1fb53ee4b32b1"}, {0x40, 0x116, 0x7fff800, "b13855ab2a04f6448570912af883c0bdbafcc2ed686a2a023c4cbbefbb6d826ea86f39d29557b0f347c23b48dab953"}], 0x1458}, 0x41000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r3, 0x0, 0x1}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 29.863114586s ago: executing program 4 (id=828): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) (async, rerun: 32) unshare(0x400) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000002b703000000000001850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044014) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x4d2, 0xffffff7f, 0x4, 0x4090, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0xd}, 0x50) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000180)={&(0x7f0000000480)=""/159, 0x9f, 0x3, 0x10}) (async) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x3, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x10, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) 23.464783381s ago: executing program 1 (id=880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x64}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4054) 16.935893634s ago: executing program 32 (id=1043): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000140)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x0, 0x3, {0x7, 0x0, 0x0, r1, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, @NDA_VLAN={0x6, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4bd5c6fa5c6152b9}, 0x40800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000002c0)=@xdp={0x2c, 0xb, r1, 0x18}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)="4eb9f78b8d1a778c24a47043bcfb1422239986b8fdf6610064a591044aea5c063171a0fde406b49d0af94260f8dc047c62eee32d744482a9fcf54ec64e77f615b45378c35a624cc7ee7e88fb957732a4ac5a89550062d96eea0f8f42ef4b6a562b7732b69cc9f950da885fde1da5aaae443656739392371b73779ad7dfe4cb385b19cfac14065cefd903e2e2465d433f8a5eab6f7ed2a3def8126189097190696a91b71abeec713d53f3568be0353b64a5d9417da92782cb5295a8d64d1de21ea30e01cf07414d291dec9c2fa1f5a2428c0d1cb06cd62ec7d9268d52aadb5dde2d31d177212906d204488ebed7db7799e68a", 0xf2}, {&(0x7f0000000440)="2518c0252c3ce597d45e42e9aeab0f2db2a965efda5fd3e5a2facd6ea391eca51c67a02dcd0d0888182a8527ddf8e8c7bdcfbbdde50094b1ade95b78b56363fbafadd9a14d3c4652d70000d5fb54242c632dd37d26c6c66243b35b0e2d90dfe206bc713c4a7464598e106a93af49", 0x6e}, {&(0x7f00000004c0)="a5abb2b9d957d5041ea7d46d9df802ebe98da4634c922a2ceb6e1ba5e3303bdf78decf722732f4b7b6dac62dc917c5ba4a17883ecf1cf3b20cbaf57d839c4a6d379dbbf06226a1b3e529fe4ef1fc6c17768cd5f993be999e84ba8843ecfbe448ceb42e69dfcc47f6bbc6e666a36ec49e80c74ddd8f9d43ae05651ee0e66e5821bad254560673b33b1a9dcc5fcde9ec33c64eaebcc40bdaacf1f7d4feec7c1ac6d23c6c5539886e8ad3ce8fa5", 0xac}, {&(0x7f0000000580)="5602f094c9cec16b03715d280894af9d89fd75a14ccbcce2911a71548d49e6b6d19a371357181b84806228cfe881e102c73f8c9b7621a33e7644fc0e28e6fb707e96bc50c8d806301236021405b81df95992e016ac8d305f6eb034031a67465eebad095043bd2442310b4f18756b82ffb788f386e7c3446f2fa94d5dffd25774bd8875d31d3975a9eacd6a2e3ef0237a1182", 0x92}, {&(0x7f0000000080)="3965932556b8147ed284fe23dc21ac4a", 0x10}, {&(0x7f0000000640)="0c0a10a030048ec66568501434d8b064444cc9f1dfb6808d1c64412cc941beb1122e17dfb512b874208d59cb2fc0d6fb86ee8fc4c9506440fbffb3e4b6e00fe544a5852f83798cd55e7119410447a440151197d1157b95a49d9224d2142c86a550a976dd90741f56e07f1fdd30f86fb70e", 0x71}, {&(0x7f00000006c0)="44b90185cb51d69b2f9f76a8406f48a226046b10bda39f80a216f0f7fb1948b37f24f0071a8865b8d75cb9779cb92eabba3813ad19e48696af9bbda92be0a4a5a5f15d3a61f9c0ae23b515488af3d811fc022f042da68aef51d76fd12c8c83047cd96632ac912940c32d", 0x6a}, {&(0x7f0000000740)="307e49b123ffbaa191069c99e39bb95c45db98be1ed2293683be83097493f4a390ea685de75b31a4ce8edb86a2085790b3de7e3e290779aff20cb361c702dd4fb3686fd40ff15f06fb33b453fb357667edf545a8cdd772be3815979a4bb3880740e40c48669ad27899baa347dc82c3", 0x6f}, {&(0x7f00000007c0)="d32080e5a44beb4613d5c3e143c5d09adabe1060de7252c18db1e0737c61178fdc81fe39bdd6a8ccfd6dce3b1ebc7364de51b312223f9da52da2a353b2c2dd3ca7700ff09ed60c515b44adf09ce8f3ee479ffc3eb7d956f4baf15fca444b6b49d3c2cfcb69b00a784f647107c11a8809ad3a548fe737d79b0d79ef97a763fb48655be3b9009e65b9e2086d5cef34545c6b865ddb2d71382ca062666b8d606c3ea72fac93", 0xa4}], 0x9, &(0x7f0000000940)=[{0xf8, 0x101, 0x1, "50dc182cbc16996b113ad401a4d89304d0a44546dead1fd199aae43962dfcc54eac029bf02a279f477a63632869d1067422b84afe87bcf51edc9a41f44d21b3336cb47e9f4f7cd26d100ded9dfc05463dfcc64beae9a4505d7994e8ecddb0ed5d8ae474b0c9c007beb862725908fc279913e9d7d43b47e8acf709286ab79f645ef39735a4b3073fcbd43c9c10d4b382d2eb5f40d22f2815b0db2889757480dc020fce44f10f04e56a3e9ee06ad80c403c335a0db49fd2909e778051bedc148d948e225abe9cfe7a947d428150618f34e663bd95b380e73caacef98d716ab9e6e69"}, {0x18, 0x11, 0x8fe6, "dc8f7664f6b6d7f1"}, {0x1010, 0x1, 0xbe7, "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"}, {0xd0, 0x112, 0x8, "1ef3f1b411caace125ee642a38276039576a7222d2f7fb78193081a1424c295c877e0dc9da192f67a23e26f7601f999321cc5d6e1eed6ac15df02fd036acfa2d64e920b13b046bd2ca2ecf0522038943edd4d6c465db0c9a79172ebad4c3889ddf82acbd11d5a2f3e158cec9804776416722b4f647b7c646acac7737af479a0a39dd99bf027982912bfa55c34d2e3cf52c842b61360af238f279e16939669fc26a3c9bf77e109d3a1440cac39237295874749b5f0e345f3d75da"}, {0x68, 0x111, 0x847, "e7b3f7d5aa583f8794afef0da7ffe8effc065df971f728fc6242ef1e9d2433521eec174a325d59488be10dbdd93d0f2eecc02e706026c6a74a3df4ad5fc07328328e70907188565a865423ebbef81388017c595fee45c453"}, {0x38, 0x29, 0x10001, "1e55d40e26acefa5cfcec7577ed4cccef46c82345c62fd7c07c6e5e42fd0f5e60ced2d"}, {0xf8, 0x1, 0x3, "1834f19b544c7b2f9af12dfd161239a2c7fca8a4e6ecb7fbd4b4797c23d5cc1d466b4f8ee88ec2979b870e99dea6eec6f0639faa0679772b6d972dcce1b18ee7ac4a7db6342a41d561dad71d78dd3794d6fb0799ed9f7ba7306a2f61e8b80d35e99dd38f8e28d964b2d61346834c7a535d304c687d49426d29418719e5210a959f2a2cc8e68c3056a2c6d9e49aeed298d02de80c44b8f1ca49cd21a27bf97150cbe2d82639c30c92abde6c4069ad27c51dc9487bc46f322432c5b72b9b0cfdff9505769880a551dddf4ebe08dc09161b7ed1e2960e96ab96157137fa89f51a1b1c"}, {0x28, 0x111, 0x0, "e93cc4d3290107fa104732866c04442c0dbcd0896d"}, {0x68, 0x8351709b4044d946, 0x9, "50e06bb5a54141528c5c0d761f722b120b5e7fb85585cc238427b1b0c7d12b3c57b8a21a35ecb7d98c1cec57adb0015de4fec8afdc9ac11dc888cab7b57b973f615c9be6d49270ef37518cf9901de1fb53ee4b32b1"}, {0x40, 0x116, 0x7fff800, "b13855ab2a04f6448570912af883c0bdbafcc2ed686a2a023c4cbbefbb6d826ea86f39d29557b0f347c23b48dab953"}], 0x1458}, 0x41000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r3, 0x0, 0x1}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 14.47024882s ago: executing program 4 (id=828): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) (async, rerun: 32) unshare(0x400) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000002b703000000000001850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4044014) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x4d2, 0xffffff7f, 0x4, 0x4090, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0xd}, 0x50) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r6, 0x80286722, &(0x7f0000000180)={&(0x7f0000000480)=""/159, 0x9f, 0x3, 0x10}) (async) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x3, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x10, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) 8.089462985s ago: executing program 3 (id=1163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) socket$igmp(0x2, 0x3, 0x2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x1c, r3, 0x87, 0x70bd2d, 0x0, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x112}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 7.833099557s ago: executing program 3 (id=1164): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x1a0, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}, {0x188, 0x1, [@m_ctinfo={0x8c, 0x12, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4678}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3ff, 0x17f, 0xffffffffffffffff, 0x9, 0x10}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x3ff, 0x4, 0x566}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffffe}]}, {0x10, 0x6, "079e8a2d82e87792bc1aa3ee"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0xf8, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x4, 0x5af, 0xffff}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x9c, 0x6, "d3de4a8cf280256f5a1b56e9355c42e2ebbea3874072ec41a7cbf7f3284f60beb089da21f87998012d5f156c5e6e306cb18e31c125006949bf218bb586fb601247c51946f5b551ca304530b5dec67b368870be33f0d97937876187246be0829c8fba153c1a130e04e179dd266d5f3218d3db0a24580a89efac0a5fa04c600e3dad3e64080657b5e0110be70c646f2760740313da3867313c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1a0}}, 0x0) socket(0x10, 0x3, 0x0) (async) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x1a0, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}, {0x188, 0x1, [@m_ctinfo={0x8c, 0x12, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4678}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3ff, 0x17f, 0xffffffffffffffff, 0x9, 0x10}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x3ff, 0x4, 0x566}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffffe}]}, {0x10, 0x6, "079e8a2d82e87792bc1aa3ee"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0xf8, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x4, 0x5af, 0xffff}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x9c, 0x6, "d3de4a8cf280256f5a1b56e9355c42e2ebbea3874072ec41a7cbf7f3284f60beb089da21f87998012d5f156c5e6e306cb18e31c125006949bf218bb586fb601247c51946f5b551ca304530b5dec67b368870be33f0d97937876187246be0829c8fba153c1a130e04e179dd266d5f3218d3db0a24580a89efac0a5fa04c600e3dad3e64080657b5e0110be70c646f2760740313da3867313c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1a0}}, 0x0) (async) 7.727404217s ago: executing program 3 (id=1165): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x400000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff004) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x5, 0x10, 0x1, 0x9}, &(0x7f0000000140)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x5, 0x10, 0x1, 0x9}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3, 0x4, 0x10}, &(0x7f0000000200)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3, 0x4, 0x10}, &(0x7f0000000200)=0xc) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff1e}, 0x48) 7.687277414s ago: executing program 1 (id=880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}]}, 0x64}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4054) 6.711642908s ago: executing program 3 (id=1168): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7ff}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x12, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401fd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffe0}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 5.777836898s ago: executing program 3 (id=1169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000340)={'wlan1\x00', @multicast}) (async) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000040)={0x1d, r4}, 0x10) (async) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@getchain={0x24, 0x11, 0x400, 0x0, 0x2000001, {0x0, 0x0, 0x0, r7, {0xe}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRESDEC=r5], 0x50}}, 0x8000) (async) sendmsg$can_bcm(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)={0x5, 0x820, 0xfffffffb, {}, {0x77359400}, {0x0, 0x1, 0x1}, 0x1, @canfd={{0x31c, 0x1, 0x0, 0x1}, 0x2c, 0x0, 0x0, 0x0, "3fb3d4e4011ae684b84cb775fb1b69033846574452064067f6aa7310e759482da9b7b6578ae61afcd1997acf06273fa76185ad16116b2ce25faaeb2a49823b9f"}}, 0x80}, 0x1, 0x0, 0x0, 0x40805}, 0x4840) (async) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) (async) close(r8) (async) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5.430042082s ago: executing program 3 (id=1172): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x350, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3b0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000000000400000007000000", @ANYRES32=r2, @ANYBLOB="800002000a0002"], 0x28}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000101c010012000000000000000700000a20000000000a0300"], 0x8c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 1.337161963s ago: executing program 5 (id=1185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) (async) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x6, @broadcast}, 0x4a, {0x2, 0x0, @dev}, 'syz_tun\x00'}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x28, 0x5, 0x0) (rerun: 64) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r4], 0x50}}, 0xc0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0xfffffcb7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) (async) sendmmsg(r5, &(0x7f0000000280)=[{{&(0x7f00000001c0)=@in6={0xa, 0x4e22, 0x782, @empty, 0x7}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="f22d90bef22b89843b738c4c356f4579b1622b6ef9d1d5b0", 0x18}], 0x1, &(0x7f0000000400)=[{0xc8, 0x115, 0x43, "f6dcdeab949a56c6c693b0cdfff5d993c76260b0a242d1e99952ad8fbcbf1cf21ccf0e64cee6178b7f57abba742e6db44d3f57174e68ef6d3713347a37f569b407ca20b5569161fd53cb04d3e5bd4876284d0ba27b56084b02dbea6c0c285c08c9646c21484e8f75a183f392d440770b0d6f3f17926cbdd47516fe76698e8b91d4f2ef2bbec27fc66c3359a6b0c58cec179df7ad7d28417872db15cd9d451784c7830022dd62bc62bcfb0c1109c9e2a3b159141b0b1693"}, {0x70, 0x104, 0x6, "95a7df97d0c90a8de60c64a67a52af02f7caadf78f23496f816cf4b7e8b054e83befb1470ec4a442519bce5951eb687cfac547736d23163bae7f5bedd98f0baccc79bf250f95c173d14bf24df8694866848c3cf84cf9418656b6989a5a3a18"}], 0x138}}], 0x1, 0x20000800) 1.119224112s ago: executing program 0 (id=1186): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1400}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.092908368s ago: executing program 5 (id=1187): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="40000000000000001c0012800b000100697036746e6c00000c00028006000f0003000000"], 0x3c}}, 0x20004090) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000003080101000000000000000000000000050003000600000006000240000000002400048008000440000000000800054000000000040007"], 0x48}, 0x1, 0x0, 0x0, 0x40840}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) (rerun: 64) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) (async, rerun: 32) socket$pppoe(0x18, 0x1, 0x0) (rerun: 32) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x2c, r5, 0x11, 0x70bd2d, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c081}, 0x0) (async, rerun: 32) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @private}, &(0x7f0000000280)=0xc) (rerun: 32) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, r5, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x20040001) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl(r8, 0x8b1a, &(0x7f0000000040)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x6, [@union={0xd, 0x6, 0x0, 0x5, 0x1, 0x3, [{0xf, 0x5, 0x8}, {0x4, 0x0, 0x5}, {0x10, 0x5, 0x3}, {0xf, 0x4, 0x7}, {0x9, 0x3, 0x3}, {0x7, 0x1, 0x2}]}, @enum={0xc, 0x6, 0x0, 0x6, 0x4, [{0xf, 0x2}, {0x3, 0xb}, {0xc, 0x9}, {0x3, 0x5}, {0x7, 0x3739}, {0x5, 0x7fff}]}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x2}, @const={0xb, 0x0, 0x0, 0xa, 0x2}, @enum64={0x2, 0x1, 0x0, 0x13, 0x1, 0x6, [{0x7, 0x0, 0xfffffff7}]}]}, {0x0, [0x30, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000780)=""/244, 0xde, 0xf4, 0x1, 0xa9}, 0x28) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x2, 0x4, 0x8, 0x1201, 0x1, 0x0, '\x00', r4, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{}, &(0x7f0000000980), &(0x7f00000009c0)=r7}, 0x20) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) (async) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r10, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001600)="f5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="b141fb6163b8ed66bd", 0x9}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="c173375bccd529b71e40065962ded6a6", 0x10}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="8b4bd36852e3f363958f", 0xa}, {&(0x7f0000000100)="878cc9c281ec39b2368cee8a76f3", 0xe}, {&(0x7f0000000340)="fd606cf4c17baf46c6cc040c255cc4d2b865e64e3481a8688f3e73f59dd3c30feb4f31e37a7d89f2efe49e4795b42249475e3a2116e3203769e682c630e40237806700a132b633832cf1bc49f831347cc05a5e673831d596156ef2a2", 0x5c}], 0x3, &(0x7f0000000500)=[@ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x60}}], 0x4, 0xc0) 897.158422ms ago: executing program 0 (id=1188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x980000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48000}, 0x44800) 822.174743ms ago: executing program 0 (id=1189): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={r1, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000001980), &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000001580)=[{}, {}, {}], 0x10, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000001540)}}, 0x7) (async) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000040)=0xe53, 0x4) 624.864182ms ago: executing program 5 (id=1190): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001380)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4030015}, 0x10004800) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001380)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4030015}, 0x10004800) (async) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) 624.621093ms ago: executing program 0 (id=1191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000380)=0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) poll(&(0x7f0000000400)=[{r1, 0x40}], 0x1, 0x3) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='rtc_irq_set_state\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) 504.600783ms ago: executing program 5 (id=1192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x16, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000b48a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x94, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 380.636879ms ago: executing program 5 (id=1193): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000640)={0x5}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260300000fff0748670600000f000000170300000ee60020bf050000000000001d360000000000006507f9ff01000000070700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733b9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819c75c8ac86d8a297dff0445a13d006723888fb126a163f16fb2ad9bc1162ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f3767ce603c9d4867b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424ba1e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef58034c252629aefbfd5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b68f2e2ec7bebe423d4baae0e27845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bf1b3e6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a9586571182526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72b1598a12abddf58ac778bff2f1e49306a1d2f80b2a7d7a28f3997ee60793c62ffee96535e47adac9f367395cf26056a4b76d646f7682f21beafcdb7a9c07acfd145487426f1a009327b8ec6e695e6a7ddcc2c9151cc9c4efa413fa1e521b398151247104bc47748199441cf298e925ef2e3374f4ec0193b38a355c35ee44962fceb3f418510742c93a442f857733b74b6d9197cd62784d7f2afa6a4bc5cae18e33435665250241a7ffd96fc0790000009c17c570096bb75de737107e029b18ec0e61ab3761366452a1c6e3e3c912170f874555aaefc9644cffa768eb2b47c6b040698746df86026730db64859c46cdfb775b86214cfd1932d5ad87c56ea4f38bca780000000000000000000000003bf179c894590cb06b546082451bb735e7152afd5340683663e8effbfb49855ec98703a1e141ab7510fc0e3b081e72d25bfa4e52bedadd11e152bb1dcfcfe942b97b813cf4cdd8626ecfb630425db071c1bfdb03fee96f80b1a96f9427e17edfdc902749ccbab746e26a3a46527b3a32c49dab9608ab1dca3982590c1e78ff5c87d10eef5c3707974981c01c00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x90, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x5}, 0x1) 208.950438ms ago: executing program 0 (id=1194): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="220000000000000000000000000004008b57deb85ec37c0f5140ed49904202d8577a05661e8cb79754f513dd34e56988576f00033358b7448c09675516bfc1f89464b3cd0569890528064032f306d74f0fc128d5f3855e1eaa405567b619ec5ab6fa1f23cf9f840c0775588ba7b4e5d54eb9101c597626ec28e807c422bb647fe95c3e95cb58594e4806adeb439c72f04111e4079d44c41bab8ac4ec3ef82d31c5c47b713f9b5dfa56f13405e22453ebd413583894d421bb64a1577383d24a3a1a5545db4123865b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00002b00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x4001, 0x3, 0x298, 0x0, 0xb, 0x148, 0x0, 0x148, 0x200, 0x242, 0x240, 0x200, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd8, 0x0, {0xff0f000000000000}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x1a10, 0x800, 0x1, 'pptp\x00', 'syz0\x00', {0x7}}}}, {{@uncond, 0xec010000, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x200, 0x8, 0xec1, 'syz0\x00', 'syz1\x00', {0xfe6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x2f8) 132.097248ms ago: executing program 5 (id=1195): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0xfffffffffffffdec, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRES8=r1, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x2040000) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001740)=""/4098, 0xe9c}, {&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f00000013c0)=""/96, 0x60}, {&(0x7f00000001c0)=""/149, 0x95}], 0x4}, 0x5}], 0x1, 0x100, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000f001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="87002dbd7000000000001e0000000a0004007770616e300000000800010007"], 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000480)=0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/time_for_children\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000326bd7000ffdbdf251400000008001d00", @ANYRES32=r6, @ANYBLOB="08001c00", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="08000340", @ANYRES32=r9, @ANYBLOB="08001d00", @ANYRES32=r10, @ANYBLOB="0c00060002000000000000000c0006000300000000000000"], 0x54}}, 0x90) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$cgroup_subtree(r14, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r14, 0x0) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r1, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@getnexthop={0x20, 0x6a, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40012}, 0x4) getsockopt$inet6_tcp_buf(r15, 0x6, 0x19, 0x0, &(0x7f0000000400)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=r13, @ANYBLOB="00000000000000001c0012800b000100627269646707000000000000000000000000000089bc90afa166694e69664d62eba61f892b29bd5264a53585ec36636c9f1da26c4f010a9b177c8d4225332b05ab7881d5e7a0e42c8eb68a10c2a41da4e9a93b3e05162f1bb28bb82facdcdfe1ef1ab7aca9cf332139c0d4daaf207e77ee0000f22045afdc5c4282a798b921a0b0377899118b3fe22946a199d1ffb8175a522aba62beaa55ea1b3de425e5a478d4d589d7aaf20cde40b926cb731aba9e0924e63797cf1581819b185346"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bond0\x00'}) 0s ago: executing program 0 (id=1196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x23}}}}}, 0x28}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) (async) r4 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x2c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) (async) r7 = socket$phonet(0x23, 0x2, 0x1) unshare(0x20400) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) (async) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r5) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00042bbd7000ffdbf6400b64e67c20e68724df250a0000000500050009000000080004007c000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x20040845) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fcdbdf250200000008000300", @ANYRES32, @ANYBLOB="0800a183437ff10008009f0004000000080026006c09"], 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') ioctl$NS_GET_NSTYPE(r11, 0xb703, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000002840), &(0x7f0000002880)=0xc) (async) sendmsg$netlink(r12, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=ANY=[], 0x10}], 0x1, &(0x7f0000002900), 0x0, 0x20000040}, 0x40880) kernel console output (not intermixed with test programs): rt 6081 - 0 [ 78.256727][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.313696][ T3033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.323925][ T3033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.392219][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.424636][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.550642][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.582112][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.623862][ T5965] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7'. [ 78.670337][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.695354][ T5965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.709922][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.793696][ T5970] netlink: 'syz.3.4': attribute type 11 has an invalid length. [ 78.802286][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.827889][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.062996][ T5982] netlink: 'syz.1.11': attribute type 3 has an invalid length. [ 79.076129][ T5982] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11'. [ 79.250781][ T5987] IPv6: addrconf: prefix option has invalid lifetime [ 79.324093][ T5990] netlink: 244 bytes leftover after parsing attributes in process `syz.3.13'. [ 79.356508][ T5840] Bluetooth: hci0: command tx timeout [ 79.477305][ T5993] warning: `syz.2.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.506890][ T5840] Bluetooth: hci1: command tx timeout [ 79.590716][ T5840] Bluetooth: hci2: command tx timeout [ 79.747241][ T5840] Bluetooth: hci4: command tx timeout [ 79.753000][ T5852] Bluetooth: hci3: command tx timeout [ 79.844294][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 80.042613][ T6024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22'. [ 80.182618][ T6027] sit0: entered promiscuous mode [ 80.244181][ T6027] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 80.269013][ T6027] netlink: 1 bytes leftover after parsing attributes in process `syz.3.21'. [ 80.323264][ T6032] netlink: 'syz.1.24': attribute type 2 has an invalid length. [ 80.553485][ T6045] netlink: 256 bytes leftover after parsing attributes in process `syz.1.30'. [ 80.575955][ T6043] netlink: 13 bytes leftover after parsing attributes in process `syz.3.29'. [ 80.616223][ T6048] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.697488][ T6048] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 80.706140][ T6048] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 81.093831][ T6069] tipc: Started in network mode [ 81.113181][ T6069] tipc: Node identity , cluster identity 4711 [ 81.136579][ T6069] tipc: Failed to obtain node identity [ 81.143612][ T6069] tipc: Enabling of bearer rejected, failed to enable media [ 81.216061][ T6072] syz.1.41 uses obsolete (PF_INET,SOCK_PACKET) [ 81.324220][ T6081] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.398108][ T6083] bridge1: entered promiscuous mode [ 81.404112][ T6083] bridge1: entered allmulticast mode [ 81.668554][ T6099] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 81.686728][ T6098] IPVS: stopping master sync thread 6099 ... [ 81.927813][ T6096] netlink: 'syz.3.49': attribute type 33 has an invalid length. [ 81.954296][ T6105] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 81.955041][ T6112] Zero length message leads to an empty skb [ 81.983393][ T6105] netlink: 'syz.4.53': attribute type 2 has an invalid length. [ 82.128769][ T6117] netlink: 'syz.1.56': attribute type 10 has an invalid length. [ 82.165133][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.173604][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.221950][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.229554][ T6117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.237467][ T6117] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.244706][ T6117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.361887][ T6117] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 82.444497][ T6122] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 83.046695][ T6162] Bluetooth: MGMT ver 1.23 [ 83.166707][ T6164] netlink: 'syz.1.63': attribute type 4 has an invalid length. [ 83.485239][ T6191] tunl0: entered promiscuous mode [ 83.491017][ T6188] __nla_validate_parse: 9 callbacks suppressed [ 83.491033][ T6188] netlink: 1296 bytes leftover after parsing attributes in process `syz.0.71'. [ 83.504205][ T6191] netlink: 'syz.3.70': attribute type 3 has an invalid length. [ 83.532998][ T6191] netlink: 9 bytes leftover after parsing attributes in process `syz.3.70'. [ 83.559484][ T6200] sctp: [Deprecated]: syz.3.70 (pid 6200) Use of int in max_burst socket option deprecated. [ 83.559484][ T6200] Use struct sctp_assoc_value instead [ 83.599024][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 83.981628][ T6220] netlink: 'syz.3.78': attribute type 24 has an invalid length. [ 84.191669][ T6227] netlink: 'syz.4.81': attribute type 2 has an invalid length. [ 84.200058][ T6227] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.81'. [ 84.211536][ T6227] nbd: must specify a device to reconfigure [ 84.255582][ T6231] batadv_slave_1: entered promiscuous mode [ 84.270284][ T6231] macsec2: entered promiscuous mode [ 84.291809][ T6231] macsec2: entered allmulticast mode [ 84.312760][ T6233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'. [ 84.321959][ T6231] batadv_slave_1: entered allmulticast mode [ 84.651729][ T6258] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 84.664230][ T6254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.92'. [ 84.686306][ T6254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.92'. [ 84.707896][ T6258] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 84.848062][ T6269] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 84.858618][ T6269] netlink: 'syz.1.95': attribute type 4 has an invalid length. [ 84.867032][ T6269] netlink: 188 bytes leftover after parsing attributes in process `syz.1.95'. [ 84.876655][ T6269] NCSI netlink: No device for ifindex 458760 [ 84.887438][ T6271] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 84.905176][ T6271] netlink: 'syz.1.95': attribute type 4 has an invalid length. [ 84.919459][ T6271] netlink: 188 bytes leftover after parsing attributes in process `syz.1.95'. [ 84.934263][ T6271] NCSI netlink: No device for ifindex 458760 [ 84.964430][ T6273] netlink: 256 bytes leftover after parsing attributes in process `syz.3.96'. [ 84.975664][ T6273] unsupported nlmsg_type 40 [ 85.016225][ T6273] tipc: Started in network mode [ 85.032141][ T6273] tipc: Node identity ac14140f, cluster identity 4711 [ 85.054402][ T6273] tipc: New replicast peer: 255.255.255.255 [ 85.062403][ T6273] tipc: Enabled bearer , priority 10 [ 85.550748][ T6295] netlink: 'syz.4.104': attribute type 2 has an invalid length. [ 85.565472][ T6295] netlink: 'syz.4.104': attribute type 1 has an invalid length. [ 85.609877][ T6290] bond0: entered promiscuous mode [ 85.617838][ T6290] bond_slave_0: entered promiscuous mode [ 85.635589][ T6290] bond_slave_1: entered promiscuous mode [ 85.642642][ T6290] bond0: entered allmulticast mode [ 85.666697][ T6290] bond_slave_0: entered allmulticast mode [ 85.676613][ T6290] bond_slave_1: entered allmulticast mode [ 85.953342][ T6308] netlink: 'syz.3.108': attribute type 29 has an invalid length. [ 85.962925][ T6308] netlink: 'syz.3.108': attribute type 29 has an invalid length. [ 86.041520][ T6310] xt_l2tp: wrong L2TP version: 0 [ 86.178130][ T5897] tipc: Node number set to 2886997007 [ 86.322056][ T6322] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 86.344229][ T6322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.753098][ T24] cfg80211: failed to load regulatory.db [ 87.213225][ T6368] tipc: Started in network mode [ 87.247382][ T6368] tipc: Node identity 4, cluster identity 4711 [ 87.281776][ T6368] tipc: Node number set to 4 [ 87.903820][ T6414] xt_socket: unknown flags 0x3c [ 87.962849][ T6414] batman_adv: batadv0: Adding interface: ipvlan2 [ 88.016150][ T6414] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.066830][ T6414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.079867][ T6414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.088626][ T6417] delete_channel: no stack [ 88.096159][ T6414] batman_adv: batadv0: Interface activated: ipvlan2 [ 88.234817][ T6420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.291642][ T6420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.730351][ T6441] bond1: entered promiscuous mode [ 88.735516][ T6441] bond1: entered allmulticast mode [ 88.742826][ T6441] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.990843][ T6463] validate_nla: 4 callbacks suppressed [ 88.990860][ T6463] netlink: 'syz.1.160': attribute type 1 has an invalid length. [ 89.228121][ T6473] xt_TPROXY: Can be used only with -p tcp or -p udp [ 89.465827][ T6477] __nla_validate_parse: 9 callbacks suppressed [ 89.465845][ T6477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.164'. [ 89.500883][ T6487] netlink: 156 bytes leftover after parsing attributes in process `syz.0.169'. [ 89.993354][ T6513] netlink: 92 bytes leftover after parsing attributes in process `syz.2.175'. [ 90.339885][ T6531] raw_sendmsg: syz.0.177 forgot to set AF_INET. Fix it! [ 90.797688][ T6550] netlink: 156 bytes leftover after parsing attributes in process `syz.4.184'. [ 90.881907][ T6553] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 91.077612][ T6553] netlink: 'syz.2.186': attribute type 10 has an invalid length. [ 91.156117][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.168801][ T6553] team0: entered promiscuous mode [ 91.174013][ T6553] team_slave_0: entered promiscuous mode [ 91.181101][ T6553] team_slave_1: entered promiscuous mode [ 91.193405][ T6553] team0: entered allmulticast mode [ 91.198856][ T6553] team_slave_0: entered allmulticast mode [ 91.205649][ T6553] team_slave_1: entered allmulticast mode [ 91.212250][ T6553] bond0: (slave team0): Enslaving as an active interface with an up link [ 91.375002][ T6566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.189'. [ 91.471575][ T6572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.979506][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 92.020858][ T6598] Bluetooth: MGMT ver 1.23 [ 92.029413][ T6594] bridge_slave_1: left allmulticast mode [ 92.050911][ T6594] bridge_slave_1: left promiscuous mode [ 92.071614][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.103924][ T6594] bridge_slave_0: left allmulticast mode [ 92.112772][ T6594] bridge_slave_0: left promiscuous mode [ 92.149794][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.383876][ T6619] openvswitch: netlink: IPv4 tun info is not correct [ 92.563039][ T6622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.205'. [ 92.603795][ T6623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.207'. [ 92.627771][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'. [ 92.654498][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'. [ 92.690443][ T6628] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 93.171024][ T6654] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 93.183848][ T6654] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 93.450549][ T6670] bridge1: entered promiscuous mode [ 93.461271][ T6670] bridge1: entered allmulticast mode [ 93.966162][ T6698] lo speed is unknown, defaulting to 1000 [ 94.007213][ T6698] lo speed is unknown, defaulting to 1000 [ 94.048564][ T6698] lo speed is unknown, defaulting to 1000 [ 94.094603][ T6698] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.178811][ T6698] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 94.185061][ T6700] netlink: 'syz.4.229': attribute type 6 has an invalid length. [ 94.238070][ T6711] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 94.373969][ T6713] bond0: entered promiscuous mode [ 94.397921][ T6713] bond_slave_0: entered promiscuous mode [ 94.414924][ T6713] bond_slave_1: entered promiscuous mode [ 94.467954][ T6698] lo speed is unknown, defaulting to 1000 [ 94.476467][ T6698] lo speed is unknown, defaulting to 1000 [ 94.522433][ T6698] lo speed is unknown, defaulting to 1000 [ 94.537711][ T6698] lo speed is unknown, defaulting to 1000 [ 94.576955][ T6698] lo speed is unknown, defaulting to 1000 [ 94.780408][ T6746] __nla_validate_parse: 10 callbacks suppressed [ 94.780425][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'. [ 95.203667][ T6767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.404871][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.413244][ T6775] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.633490][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.254'. [ 95.677404][ T6781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.254'. [ 95.924856][ T6795] sctp: [Deprecated]: syz.4.260 (pid 6795) Use of int in max_burst socket option. [ 95.924856][ T6795] Use struct sctp_assoc_value instead [ 95.961334][ T6800] No such timeout policy "syz1" [ 96.027383][ T6803] trusted_key: syz.4.263 sent an empty control message without MSG_MORE. [ 96.041874][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.263'. [ 96.150933][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 96.244953][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 96.325544][ T6814] netlink: 44 bytes leftover after parsing attributes in process `syz.4.267'. [ 96.789859][ T6823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.271'. [ 96.915216][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 96.987008][ T6838] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 96.991866][ T6842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.198617][ T6838] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 97.320273][ T6843] No such timeout policy "syz0" [ 97.324430][ T6856] netlink: 'syz.1.279': attribute type 8 has an invalid length. [ 97.387800][ T6860] sctp: [Deprecated]: syz.1.279 (pid 6860) Use of int in maxseg socket option. [ 97.387800][ T6860] Use struct sctp_assoc_value instead [ 97.421240][ T6862] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 97.482095][ T6865] netlink: 'syz.0.281': attribute type 10 has an invalid length. [ 97.493053][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 97.561945][ T6865] team0: Port device geneve0 added [ 98.197072][ T6901] netlink: 'syz.4.292': attribute type 10 has an invalid length. [ 98.401001][ T30] audit: type=1800 audit(1750811370.924:2): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.294" name="memory.events" dev="tmpfs" ino=325 res=0 errno=0 [ 98.765924][ T6923] netlink: 'syz.0.298': attribute type 1 has an invalid length. [ 98.844556][ T6930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.219750][ T6945] veth0: entered promiscuous mode [ 99.453173][ T6954] xt_CT: No such helper "netbios-ns" [ 99.515365][ T6963] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 99.910036][ T6985] __nla_validate_parse: 10 callbacks suppressed [ 99.910054][ T6985] netlink: 10 bytes leftover after parsing attributes in process `syz.3.321'. [ 99.994957][ T6987] netlink: 36 bytes leftover after parsing attributes in process `syz.4.319'. [ 100.050296][ T6995] netlink: 'syz.0.324': attribute type 1 has an invalid length. [ 100.066187][ T6995] netlink: 236 bytes leftover after parsing attributes in process `syz.0.324'. [ 100.087072][ T6995] tipc: Started in network mode [ 100.091984][ T6995] tipc: Node identity 080211000001, cluster identity 4711 [ 100.100330][ T6995] tipc: Enabled bearer , priority 0 [ 100.108386][ T6995] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 100.117816][ T6995] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 100.149510][ T6995] tipc: Resetting bearer [ 100.407410][ T7016] netlink: 'syz.1.331': attribute type 2 has an invalid length. [ 100.606528][ T7023] netlink: 'syz.0.333': attribute type 29 has an invalid length. [ 100.657953][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.333'. [ 100.862182][ T7039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.337'. [ 100.922317][ T7045] IPVS: length: 1752458614 != 24 [ 100.942532][ T7045] IPVS: length: 1752458614 != 24 [ 100.950419][ T7047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.340'. [ 100.963050][ T7044] x_tables: ip_tables: osf match: only valid for protocol 6 [ 100.980301][ T7047] netlink: 'syz.3.340': attribute type 7 has an invalid length. [ 101.018494][ T7047] netlink: 'syz.3.340': attribute type 8 has an invalid length. [ 101.028695][ T7047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 101.136808][ T5961] tipc: Node number set to 134418688 [ 101.295161][ T7069] netlink: 'syz.2.346': attribute type 10 has an invalid length. [ 101.329667][ T7069] team0: Device hsr_slave_0 failed to register rx_handler [ 101.760467][ T7089] netlink: 'syz.0.351': attribute type 5 has an invalid length. [ 102.045701][ T7106] netlink: 76 bytes leftover after parsing attributes in process `syz.0.358'. [ 102.065746][ T7106] nbd: illegal input index -8454144 [ 102.080163][ T7105] netlink: 76 bytes leftover after parsing attributes in process `syz.0.358'. [ 102.091054][ T7105] nbd: illegal input index -8454144 [ 102.153465][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 102.203738][ T7099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.316119][ T7099] batadv_slave_1 (unregistering): left allmulticast mode [ 102.439341][ T7099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.165405][ T7155] xt_policy: neither incoming nor outgoing policy selected [ 103.234165][ T7155] xt_policy: neither incoming nor outgoing policy selected [ 104.143354][ T7212] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3261 [ 105.851544][ T7296] __nla_validate_parse: 6 callbacks suppressed [ 105.851564][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.409'. [ 105.913773][ T7299] netlink: 'syz.2.410': attribute type 8 has an invalid length. [ 105.970279][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.409'. [ 106.005070][ T7301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.030896][ T7301] netlink: 'syz.0.411': attribute type 1 has an invalid length. [ 106.065317][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.412'. [ 106.382886][ T7330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.414'. [ 106.547647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.675284][ T7340] netlink: 'syz.3.418': attribute type 3 has an invalid length. [ 106.837166][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.421'. [ 106.904653][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.964093][ T7351] bridge_slave_1 (unregistering): left allmulticast mode [ 106.974785][ T7351] bridge_slave_1 (unregistering): left promiscuous mode [ 106.996117][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.012330][ T7360] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 107.047731][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 107.071414][ T7360] vlan2: entered allmulticast mode [ 107.082842][ T7360] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 107.384245][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 107.533947][ T7385] sctp: [Deprecated]: syz.1.432 (pid 7385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.533947][ T7385] Use struct sctp_sack_info instead [ 107.645988][ T7392] netlink: 576 bytes leftover after parsing attributes in process `syz.3.434'. [ 107.915424][ T7408] netlink: 'syz.3.439': attribute type 11 has an invalid length. [ 107.925068][ T7408] netlink: 224 bytes leftover after parsing attributes in process `syz.3.439'. [ 108.163744][ T7418] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 108.191406][ T7413] lo speed is unknown, defaulting to 1000 [ 108.783632][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 108.924739][ T7456] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 109.311716][ T7475] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.345093][ T7473] netlink: 'syz.0.460': attribute type 10 has an invalid length. [ 109.375957][ T7477] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 109.384649][ T7473] batadv0: entered promiscuous mode [ 109.394861][ T7477] netlink: 'syz.2.461': attribute type 3 has an invalid length. [ 109.401105][ T7473] batadv0: entered allmulticast mode [ 109.434057][ T7473] bridge0: port 3(batadv0) entered blocking state [ 109.441238][ T7477] NCSI netlink: No device for ifindex 813332851 [ 109.484476][ T7473] bridge0: port 3(batadv0) entered disabled state [ 109.529204][ T7473] bridge0: port 3(batadv0) entered blocking state [ 109.535796][ T7473] bridge0: port 3(batadv0) entered forwarding state [ 109.817451][ T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 109.827335][ T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 109.932479][ T7503] netlink: 'syz.2.470': attribute type 10 has an invalid length. [ 110.060309][ T7503] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 110.087095][ T7503] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 110.127317][ T7503] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 110.619666][ T7541] ip6gre1: entered allmulticast mode [ 110.963946][ T7563] __nla_validate_parse: 12 callbacks suppressed [ 110.963962][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'. [ 111.108799][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.490'. [ 111.197889][ T7579] x_tables: duplicate underflow at hook 1 [ 111.237082][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.490'. [ 111.353150][ T7592] netlink: 14 bytes leftover after parsing attributes in process `syz.4.494'. [ 111.422591][ T7592] hsr_slave_0: left promiscuous mode [ 111.437104][ T7592] hsr_slave_1: left promiscuous mode [ 111.734782][ T7610] netlink: 'syz.1.500': attribute type 1 has an invalid length. [ 111.756192][ T7610] netlink: 244 bytes leftover after parsing attributes in process `syz.1.500'. [ 111.849653][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 111.906855][ T7618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.503'. [ 111.926430][ T7624] netlink: 'syz.1.505': attribute type 4 has an invalid length. [ 111.966102][ T7624] netlink: 'syz.1.505': attribute type 4 has an invalid length. [ 112.003376][ T55] lo speed is unknown, defaulting to 1000 [ 112.023568][ T55] syz2: Port: 1 Link ACTIVE [ 112.360214][ T7653] netlink: 'syz.2.513': attribute type 6 has an invalid length. [ 112.478579][ T7658] sctp: [Deprecated]: syz.2.514 (pid 7658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.478579][ T7658] Use struct sctp_sack_info instead [ 112.496005][ T7658] netlink: 'syz.2.514': attribute type 3 has an invalid length. [ 112.506117][ T7658] netlink: 32 bytes leftover after parsing attributes in process `syz.2.514'. [ 113.132519][ T7687] netlink: 'syz.4.523': attribute type 11 has an invalid length. [ 113.332526][ T7704] sctp: [Deprecated]: syz.0.527 (pid 7704) Use of int in max_burst socket option. [ 113.332526][ T7704] Use struct sctp_assoc_value instead [ 113.351611][ T7704] sctp: [Deprecated]: syz.0.527 (pid 7704) Use of int in max_burst socket option. [ 113.351611][ T7704] Use struct sctp_assoc_value instead [ 113.367088][ T7704] sctp: [Deprecated]: syz.0.527 (pid 7704) Use of int in max_burst socket option. [ 113.367088][ T7704] Use struct sctp_assoc_value instead [ 113.434359][ T7704] sctp: [Deprecated]: syz.0.527 (pid 7704) Use of int in max_burst socket option. [ 113.434359][ T7704] Use struct sctp_assoc_value instead [ 113.514080][ T7704] sctp: [Deprecated]: syz.0.527 (pid 7704) Use of int in max_burst socket option. [ 113.514080][ T7704] Use struct sctp_assoc_value instead [ 113.575256][ T7704] sctp: [Deprecated]: syz.0.527 (pid 7704) Use of int in max_burst socket option. [ 113.575256][ T7704] Use struct sctp_assoc_value instead [ 113.591380][ T7704] sctp: [Deprecated]: syz.0.527 (pid 7704) Use of int in max_burst socket option. [ 113.591380][ T7704] Use struct sctp_assoc_value instead [ 113.625516][ T7704] sctp: [Deprecated]: syz.0.527 (pid 7704) Use of int in max_burst socket option. [ 113.625516][ T7704] Use struct sctp_assoc_value instead [ 113.698661][ T7718] delete_channel: no stack [ 113.698850][ T7704] sctp: [Deprecated]: syz.0.527 (pid 7704) Use of int in max_burst socket option. [ 113.698850][ T7704] Use struct sctp_assoc_value instead [ 113.720503][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 113.742021][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 113.760547][ T7719] netlink: 'syz.3.531': attribute type 13 has an invalid length. [ 113.768630][ T7704] sctp: [Deprecated]: syz.0.527 (pid 7704) Use of int in max_burst socket option. [ 113.768630][ T7704] Use struct sctp_assoc_value instead [ 113.778771][ T7720] netlink: 'syz.3.531': attribute type 13 has an invalid length. [ 114.157483][ T7742] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.166716][ T7742] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.175475][ T7742] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.184337][ T7742] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.486778][ T7755] netlink: 'syz.2.542': attribute type 1 has an invalid length. [ 114.610819][ T7756] IPVS: Scheduler module ip_vs_sip not found [ 114.619018][ T7763] xt_TPROXY: Can be used only with -p tcp or -p udp [ 114.634473][ T7764] xt_TPROXY: Can be used only with -p tcp or -p udp [ 114.787271][ T7755] x_tables: duplicate underflow at hook 2 [ 114.826930][ T7777] sctp: [Deprecated]: syz.0.549 (pid 7777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.826930][ T7777] Use struct sctp_sack_info instead [ 115.006823][ T7781] netlink: 'syz.3.550': attribute type 2 has an invalid length. [ 115.604127][ T7815] dvmrp1: entered allmulticast mode [ 115.656628][ T7817] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 115.681705][ T7817] netlink: 'syz.2.562': attribute type 7 has an invalid length. [ 115.796248][ T7836] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 115.810976][ T7819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.154404][ T7852] tunl0: left promiscuous mode [ 116.212807][ T7852] sit0: left promiscuous mode [ 116.400093][ T7861] __nla_validate_parse: 12 callbacks suppressed [ 116.400110][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 116.405741][ T7852] bond0: left promiscuous mode [ 116.422391][ T7852] bond_slave_0: left promiscuous mode [ 116.429112][ T7852] bond_slave_1: left promiscuous mode [ 116.436026][ T7852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.447907][ T7852] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.463724][ T7854] netlink: 284 bytes leftover after parsing attributes in process `syz.1.571'. [ 116.478268][ T7861] bridge_slave_1: left allmulticast mode [ 116.483966][ T7861] bridge_slave_1: left promiscuous mode [ 116.490050][ T7861] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.520248][ T7861] bridge_slave_0: left allmulticast mode [ 116.525941][ T7861] bridge_slave_0: left promiscuous mode [ 116.535339][ T7861] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.865333][ T7876] netlink: 104 bytes leftover after parsing attributes in process `syz.2.577'. [ 116.871237][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.576'. [ 116.907585][ T7852] syz.3.572 (7852) used greatest stack depth: 20024 bytes left [ 116.911606][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.576'. [ 116.920105][ T7876] 8021q: VLANs not supported on ip6_vti0 [ 116.952544][ T7882] validate_nla: 3 callbacks suppressed [ 116.952562][ T7882] netlink: 'syz.0.579': attribute type 1 has an invalid length. [ 117.102887][ T7888] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 117.125362][ T7882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.137379][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'. [ 117.193512][ T7882] gretap1: entered promiscuous mode [ 117.218361][ T7894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.581'. [ 117.250558][ T7882] bond1: (slave gretap1): making interface the new active one [ 117.263882][ T7882] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 117.283455][ T7899] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 117.311449][ T7882] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 117.393360][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 117.481215][ T7906] netem: change failed [ 117.672079][ T7916] netlink: 'syz.0.588': attribute type 39 has an invalid length. [ 117.731320][ T7919] netlink: 'syz.3.590': attribute type 6 has an invalid length. [ 118.029436][ T7932] netlink: 68 bytes leftover after parsing attributes in process `syz.0.594'. [ 118.130348][ T7934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.595'. [ 118.421261][ T7954] netlink: 'syz.3.601': attribute type 1 has an invalid length. [ 118.892643][ T7979] syz.3.611 (7979) used greatest stack depth: 17816 bytes left [ 119.013113][ T7985] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.228376][ T8000] netlink: 'syz.0.617': attribute type 23 has an invalid length. [ 119.495097][ T8012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.542421][ T8066] netlink: 'syz.4.634': attribute type 21 has an invalid length. [ 120.644473][ T8075] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 120.661888][ T8076] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 120.739493][ T8081] block nbd0: Unsupported socket: shutdown callout must be supported. [ 121.156962][ T60] batman_adv: batadv0: MLD Querier appeared [ 121.280426][ T8111] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 121.505139][ T8119] __nla_validate_parse: 14 callbacks suppressed [ 121.505155][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 121.529717][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888030d6d000: rx timeout, send abort [ 121.560848][ T8119] openvswitch: netlink: Flow key attr not present in new flow. [ 121.921806][ T8146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.656'. [ 122.029856][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805921ac00: rx timeout, send abort [ 122.038978][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888030d6d000: abort rx timeout. Force session deactivation [ 122.278058][ T8159] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 122.481309][ T8177] netlink: 'syz.4.663': attribute type 9 has an invalid length. [ 122.527291][ T8177] netlink: 212260 bytes leftover after parsing attributes in process `syz.4.663'. [ 122.538221][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805921ac00: abort rx timeout. Force session deactivation [ 122.750441][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.668'. [ 122.809677][ T8186] xfrm2: entered promiscuous mode [ 122.845995][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.668'. [ 122.873497][ T8186] xfrm2: entered allmulticast mode [ 123.096937][ T8208] erspan0: entered allmulticast mode [ 123.299200][ T8215] netlink: 232 bytes leftover after parsing attributes in process `syz.3.675'. [ 123.655320][ T8237] netlink: 48 bytes leftover after parsing attributes in process `syz.4.680'. [ 123.802162][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 123.951151][ T8249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.686'. [ 123.991444][ T8249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.686'. [ 124.003743][ T8249] siw: device registration error -23 [ 124.256238][ T8269] macvtap1: entered promiscuous mode [ 124.279733][ T8269] vlan0: entered promiscuous mode [ 124.285697][ T8269] macvtap1: entered allmulticast mode [ 124.302950][ T8273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.312872][ T8269] vlan0: entered allmulticast mode [ 124.321998][ T8269] veth0_vlan: entered allmulticast mode [ 124.329846][ T8274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.379045][ T8269] Bluetooth: MGMT ver 1.23 [ 124.577552][ T8281] syzkaller1: entered promiscuous mode [ 124.583076][ T8281] syzkaller1: entered allmulticast mode [ 124.899649][ T8308] netlink: 'syz.0.700': attribute type 4 has an invalid length. [ 125.036750][ T8312] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 125.682123][ T8342] wg1: entered promiscuous mode [ 125.702154][ T8344] openvswitch: netlink: Message has -1 unknown bytes. [ 125.790124][ T8348] ip6gre1: entered allmulticast mode [ 126.050361][ T8360] : entered promiscuous mode [ 126.543570][ T8391] __nla_validate_parse: 7 callbacks suppressed [ 126.543590][ T8391] netlink: 52 bytes leftover after parsing attributes in process `syz.1.730'. [ 126.550613][ T5208] udevd[5208]: worker [5837] terminated by signal 33 (Unknown signal 33) [ 126.598630][ T5208] udevd[5208]: worker [5837] failed while handling '/devices/virtual/block/loop2' [ 126.680050][ T8387] lo speed is unknown, defaulting to 1000 [ 126.747104][ T8397] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 127.255024][ T8418] Bluetooth: MGMT ver 1.23 [ 127.261416][ T8425] netlink: 16 bytes leftover after parsing attributes in process `syz.3.741'. [ 127.280062][ T8425] netlink: 224 bytes leftover after parsing attributes in process `syz.3.741'. [ 127.553379][ T8437] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 127.572197][ T8439] netlink: 'syz.3.745': attribute type 3 has an invalid length. [ 127.596232][ T8436] delete_channel: no stack [ 127.615962][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.747'. [ 127.689495][ T8443] tipc: Enabling of bearer rejected, already enabled [ 127.703114][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'. [ 127.712313][ T8443] netlink: 5 bytes leftover after parsing attributes in process `syz.3.745'. [ 127.773148][ T8446] sctp: [Deprecated]: syz.1.748 (pid 8446) Use of int in maxseg socket option. [ 127.773148][ T8446] Use struct sctp_assoc_value instead [ 127.843252][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 127.893791][ T8456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 127.989891][ T8462] netlink: 296 bytes leftover after parsing attributes in process `syz.2.753'. [ 128.044777][ T8463] team_slave_0: entered promiscuous mode [ 128.050756][ T8463] team_slave_1: entered promiscuous mode [ 128.056533][ T8463] geneve0: entered promiscuous mode [ 128.121042][ T8463] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 128.130975][ T8463] team0: Device macvtap1 is already an upper device of the team interface [ 128.142357][ T8463] team_slave_0: left promiscuous mode [ 128.147869][ T8463] team_slave_1: left promiscuous mode [ 128.153471][ T8463] geneve0: left promiscuous mode [ 128.200281][ T8466] netlink: 64 bytes leftover after parsing attributes in process `syz.4.754'. [ 128.218189][ T1171] tipc: Subscription rejected, illegal request [ 128.361562][ T8484] netlink: 'syz.4.758': attribute type 10 has an invalid length. [ 128.430714][ T8484] team0: Port device geneve0 added [ 128.615792][ T8497] netlink: 'syz.0.763': attribute type 12 has an invalid length. [ 128.648209][ T8498] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:0 [ 129.128735][ T8531] tipc: Started in network mode [ 129.133827][ T8531] tipc: Node identity ac1414aa, cluster identity 4711 [ 129.144013][ T8531] tipc: Enabled bearer , priority 10 [ 129.636022][ T8554] sctp: [Deprecated]: syz.0.783 (pid 8554) Use of int in maxseg socket option. [ 129.636022][ T8554] Use struct sctp_assoc_value instead [ 129.804239][ T8561] 8021q: VLANs not supported on ip6tnl0 [ 129.872747][ T8563] xt_addrtype: ipv6 does not support BROADCAST matching [ 129.900101][ T8566] xt_hashlimit: size too large, truncated to 1048576 [ 129.977620][ T8569] macvtap0: entered promiscuous mode [ 129.985387][ T8569] macvtap0: left promiscuous mode [ 130.139094][ T8578] netlink: zone id is out of range [ 130.256454][ T979] tipc: Node number set to 2886997162 [ 130.379816][ T8587] GUP no longer grows the stack in syz.4.794 (8587): 200000003000-200000005000 (200000001000) [ 130.405005][ T8587] CPU: 0 UID: 0 PID: 8587 Comm: syz.4.794 Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) [ 130.405031][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.405048][ T8587] Call Trace: [ 130.405058][ T8587] [ 130.405066][ T8587] dump_stack_lvl+0x189/0x250 [ 130.405103][ T8587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.405127][ T8587] ? __pfx__printk+0x10/0x10 [ 130.405143][ T8587] ? find_vma+0xe7/0x160 [ 130.405174][ T8587] __get_user_pages+0x2a60/0x30b0 [ 130.405242][ T8587] ? __pfx___get_user_pages+0x10/0x10 [ 130.405265][ T8587] ? __gup_longterm_locked+0xbf7/0x15b0 [ 130.405288][ T8587] ? down_read_killable+0x1d1/0x350 [ 130.405303][ T8587] ? try_get_folio+0x633/0x660 [ 130.405321][ T8587] __gup_longterm_locked+0xd66/0x15b0 [ 130.405349][ T8587] ? try_grab_folio_fast+0x1be/0x4f0 [ 130.405376][ T8587] ? gup_fast_fallback+0x1afc/0x2260 [ 130.405402][ T8587] gup_fast_fallback+0x1cd4/0x2260 [ 130.405461][ T8587] ? __pfx_gup_fast_fallback+0x10/0x10 [ 130.405489][ T8587] ? __pfx_get_page_from_freelist+0x10/0x10 [ 130.405508][ T8587] ? is_valid_gup_args+0x11f/0x200 [ 130.405533][ T8587] ? get_user_pages_fast+0x4d/0xb0 [ 130.405556][ T8587] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 130.405574][ T8587] ? vfs_writev+0x31a/0x960 [ 130.405595][ T8587] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 130.405622][ T8587] iov_iter_get_pages2+0x5e/0xa0 [ 130.405643][ T8587] sk_msg_zerocopy_from_iter+0x1f6/0x830 [ 130.405677][ T8587] ? __pfx_sk_msg_zerocopy_from_iter+0x10/0x10 [ 130.405733][ T8587] tls_sw_sendmsg+0x989/0x23d0 [ 130.405793][ T8587] ? __schedule+0x1713/0x4d00 [ 130.405824][ T8587] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 130.405851][ T8587] ? __pfx_aa_sk_perm+0x10/0x10 [ 130.405868][ T8587] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 130.405890][ T8587] ? sock_rps_record_flow+0x19/0x410 [ 130.405910][ T8587] ? inet_getname+0x527/0x530 [ 130.405930][ T8587] ? inet6_sendmsg+0x101/0x120 [ 130.405950][ T8587] __sock_sendmsg+0xe5/0x270 [ 130.405978][ T8587] sock_write_iter+0x258/0x330 [ 130.406002][ T8587] ? __pfx_sock_write_iter+0x10/0x10 [ 130.406037][ T8587] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 130.406059][ T8587] ? __pfx_aa_file_perm+0x10/0x10 [ 130.406089][ T8587] do_iter_readv_writev+0x56e/0x7f0 [ 130.406111][ T8587] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 130.406134][ T8587] ? bpf_lsm_file_permission+0x9/0x20 [ 130.406153][ T8587] ? security_file_permission+0x75/0x290 [ 130.406174][ T8587] ? rw_verify_area+0x258/0x650 [ 130.406211][ T8587] vfs_writev+0x31a/0x960 [ 130.406235][ T8587] ? __lock_acquire+0xab9/0xd20 [ 130.406261][ T8587] ? __pfx_vfs_writev+0x10/0x10 [ 130.406297][ T8587] ? __fget_files+0x2a/0x420 [ 130.406318][ T8587] ? __fget_files+0x3a0/0x420 [ 130.406333][ T8587] ? __fget_files+0x2a/0x420 [ 130.406358][ T8587] do_writev+0x14d/0x2d0 [ 130.406378][ T8587] ? __pfx_do_writev+0x10/0x10 [ 130.406395][ T8587] ? rcu_is_watching+0x15/0xb0 [ 130.406424][ T8587] ? do_syscall_64+0xbe/0x3b0 [ 130.406444][ T8587] do_syscall_64+0xfa/0x3b0 [ 130.406459][ T8587] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.406481][ T8587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.406498][ T8587] ? clear_bhb_loop+0x60/0xb0 [ 130.406519][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.406535][ T8587] RIP: 0033:0x7ffb3b18e929 [ 130.406559][ T8587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.406577][ T8587] RSP: 002b:00007ffb3c0a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 130.406597][ T8587] RAX: ffffffffffffffda RBX: 00007ffb3b3b5fa0 RCX: 00007ffb3b18e929 [ 130.406610][ T8587] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000005 [ 130.406621][ T8587] RBP: 00007ffb3b210b39 R08: 0000000000000000 R09: 0000000000000000 [ 130.406632][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.406642][ T8587] R13: 0000000000000000 R14: 00007ffb3b3b5fa0 R15: 00007ffffe02f488 [ 130.406673][ T8587] [ 131.493052][ T8623] syz.0.807: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 131.563873][ T8623] CPU: 0 UID: 0 PID: 8623 Comm: syz.0.807 Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) [ 131.563899][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.563909][ T8623] Call Trace: [ 131.563916][ T8623] [ 131.563924][ T8623] dump_stack_lvl+0x189/0x250 [ 131.563956][ T8623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.563979][ T8623] ? __pfx__printk+0x10/0x10 [ 131.563997][ T8623] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 131.564014][ T8623] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 131.564033][ T8623] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 131.564052][ T8623] warn_alloc+0x214/0x310 [ 131.564075][ T8623] ? __pfx_warn_alloc+0x10/0x10 [ 131.564102][ T8623] ? __get_vm_area_node+0x28f/0x300 [ 131.564120][ T8623] ? hash_netport_create+0x358/0xfe0 [ 131.564142][ T8623] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 131.564160][ T8623] ? do_syscall_64+0xfa/0x3b0 [ 131.564203][ T8623] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 131.564225][ T8623] ? rcu_is_watching+0x15/0xb0 [ 131.564248][ T8623] ? hash_netport_create+0x358/0xfe0 [ 131.564266][ T8623] ? hash_netport_create+0x358/0xfe0 [ 131.564282][ T8623] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 131.564299][ T8623] ? hash_netport_create+0x358/0xfe0 [ 131.564318][ T8623] ? hash_netport_create+0x2fe/0xfe0 [ 131.564341][ T8623] hash_netport_create+0x358/0xfe0 [ 131.564370][ T8623] ? __nla_parse+0x40/0x60 [ 131.564399][ T8623] ? __pfx_hash_netport_create+0x10/0x10 [ 131.564421][ T8623] ip_set_create+0xa94/0x1940 [ 131.564445][ T8623] ? ip_set_create+0x4a2/0x1940 [ 131.564480][ T8623] ? __pfx_ip_set_create+0x10/0x10 [ 131.564539][ T8623] nfnetlink_rcv_msg+0xb4d/0x1130 [ 131.564564][ T8623] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 131.564605][ T8623] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 131.564625][ T8623] ? kasan_save_free_info+0x46/0x50 [ 131.564697][ T8623] netlink_rcv_skb+0x205/0x470 [ 131.564718][ T8623] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 131.564742][ T8623] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 131.564773][ T8623] ? bpf_lsm_capable+0x9/0x20 [ 131.564788][ T8623] ? security_capable+0x7e/0x2e0 [ 131.564815][ T8623] nfnetlink_rcv+0x26a/0x2520 [ 131.564841][ T8623] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 131.564864][ T8623] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 131.564891][ T8623] ? __dev_queue_xmit+0x27e/0x3a70 [ 131.564912][ T8623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.564939][ T8623] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 131.564960][ T8623] ? __pfx___dev_queue_xmit+0x10/0x10 [ 131.564993][ T8623] ? ref_tracker_free+0x63a/0x7d0 [ 131.565011][ T8623] ? __copy_skb_header+0xa7/0x550 [ 131.565033][ T8623] ? __pfx_ref_tracker_free+0x10/0x10 [ 131.565071][ T8623] ? skb_clone+0x246/0x3a0 [ 131.565094][ T8623] ? __netlink_deliver_tap+0x807/0x850 [ 131.565112][ T8623] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.565137][ T8623] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.565152][ T8623] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.565176][ T8623] netlink_unicast+0x758/0x8d0 [ 131.565205][ T8623] netlink_sendmsg+0x805/0xb30 [ 131.565233][ T8623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.565256][ T8623] ? aa_sock_msg_perm+0x94/0x160 [ 131.565278][ T8623] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 131.565295][ T8623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.565313][ T8623] __sock_sendmsg+0x219/0x270 [ 131.565340][ T8623] ____sys_sendmsg+0x505/0x830 [ 131.565364][ T8623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.565400][ T8623] ? import_iovec+0x74/0xa0 [ 131.565421][ T8623] ___sys_sendmsg+0x21f/0x2a0 [ 131.565441][ T8623] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.565498][ T8623] ? __fget_files+0x2a/0x420 [ 131.565515][ T8623] ? __fget_files+0x3a0/0x420 [ 131.565543][ T8623] __x64_sys_sendmsg+0x19b/0x260 [ 131.565566][ T8623] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.565596][ T8623] ? rcu_is_watching+0x15/0xb0 [ 131.565624][ T8623] ? do_syscall_64+0xbe/0x3b0 [ 131.565644][ T8623] do_syscall_64+0xfa/0x3b0 [ 131.565657][ T8623] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.565679][ T8623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.565695][ T8623] ? clear_bhb_loop+0x60/0xb0 [ 131.565715][ T8623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.565731][ T8623] RIP: 0033:0x7f409ab8e929 [ 131.565747][ T8623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.565759][ T8623] RSP: 002b:00007f409ba32038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.565776][ T8623] RAX: ffffffffffffffda RBX: 00007f409adb5fa0 RCX: 00007f409ab8e929 [ 131.565787][ T8623] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 131.565796][ T8623] RBP: 00007f409ac10b39 R08: 0000000000000000 R09: 0000000000000000 [ 131.565805][ T8623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.565815][ T8623] R13: 0000000000000000 R14: 00007f409adb5fa0 R15: 00007ffdd7f82498 [ 131.565847][ T8623] [ 131.565866][ T8623] Mem-Info: [ 131.658214][ T8635] netlink: 'syz.3.812': attribute type 39 has an invalid length. [ 131.705004][ T8623] active_anon:5212 inactive_anon:0 isolated_anon:0 [ 131.705004][ T8623] active_file:1330 inactive_file:39842 isolated_file:0 [ 131.705004][ T8623] unevictable:768 dirty:32 writeback:0 [ 131.705004][ T8623] slab_reclaimable:10188 slab_unreclaimable:108342 [ 131.705004][ T8623] mapped:29155 shmem:1362 pagetables:1143 [ 131.705004][ T8623] sec_pagetables:0 bounce:0 [ 131.705004][ T8623] kernel_misc_reclaimable:0 [ 131.705004][ T8623] free:1324871 free_pcp:14778 free_cma:0 [ 132.107769][ T8623] Node 0 active_anon:20960kB inactive_anon:0kB active_file:5320kB inactive_file:159168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116876kB dirty:96kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12000kB pagetables:4532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 132.141167][ T8623] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 132.187502][ T8623] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.265201][ T8623] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 132.313476][ T8623] Node 0 DMA32 free:1390424kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20716kB inactive_anon:0kB active_file:5320kB inactive_file:157324kB unevictable:1536kB writepending:96kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:37076kB local_pcp:17992kB free_cma:0kB [ 132.346437][ T8649] __nla_validate_parse: 77 callbacks suppressed [ 132.346452][ T8649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.816'. [ 132.378394][ T8623] lowmem_reserve[]: 0 0 1 1 1 [ 132.383211][ T8623] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 132.427941][ T8623] lowmem_reserve[]: 0 0 0 0 0 [ 132.432796][ T8623] Node 1 Normal free:3893412kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23088kB local_pcp:12200kB free_cma:0kB [ 132.506387][ T8623] lowmem_reserve[]: 0 0 0 0 0 [ 132.511174][ T8623] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 132.540905][ T8623] Node 0 DMA32: 226*4kB (UME) 404*8kB (UME) 191*16kB (UM) 112*32kB (UME) 36*64kB (UM) 17*128kB (UM) 6*256kB (UM) 11*512kB (UME) 6*1024kB (UME) 13*2048kB (UME) 326*4096kB (M) = 1390488kB [ 132.586587][ T8623] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 132.624387][ T8623] Node 1 Normal: 197*4kB (UME) 52*8kB (UME) 47*16kB (UME) 60*32kB (UME) 26*64kB (UME) 8*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3893412kB [ 132.645435][ T8623] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.683405][ T8623] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.698350][ T8623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.718015][ T8623] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.727880][ T8623] 42530 total pagecache pages [ 132.733060][ T8623] 0 pages in swap cache [ 132.738135][ T8623] Free swap = 124996kB [ 132.742322][ T8623] Total swap = 124996kB [ 132.747188][ T8623] 2097051 pages RAM [ 132.752004][ T8623] 0 pages HighMem/MovableOnly [ 132.780534][ T8623] 424690 pages reserved [ 132.785681][ T8623] 0 pages cma reserved [ 132.800152][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.812501][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.318205][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.505413][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.650237][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.726177][ T8693] netlink: 48 bytes leftover after parsing attributes in process `syz.3.833'. [ 133.807232][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.933145][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 134.199293][ T49] bridge_slave_0: left allmulticast mode [ 134.205825][ T49] bridge_slave_0: left promiscuous mode [ 134.231907][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.250521][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 134.259160][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 134.267284][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 134.275739][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 134.284048][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 134.459912][ T8725] netlink: 'syz.2.838': attribute type 10 has an invalid length. [ 134.570033][ T8729] openvswitch: netlink: Key type 16144 is out of range max 32 [ 134.747929][ T49] team0: Port device geneve0 removed [ 135.115299][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.126214][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.139572][ T49] bond0 (unregistering): Released all slaves [ 135.154994][ T49] bond1 (unregistering): Released all slaves [ 135.219871][ T8725] bridge_slave_1: entered promiscuous mode [ 135.230597][ T8742] netlink: 'syz.3.841': attribute type 1 has an invalid length. [ 135.232042][ T8725] bridge_slave_1: entered allmulticast mode [ 135.253407][ T8725] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 135.385031][ T8713] lo speed is unknown, defaulting to 1000 [ 135.613053][ T8763] netlink: 68 bytes leftover after parsing attributes in process `syz.0.843'. [ 136.103928][ T8713] chnl_net:caif_netlink_parms(): no params data found [ 136.387419][ T5852] Bluetooth: hci2: command tx timeout [ 136.589064][ T8808] netlink: 'syz.2.853': attribute type 1 has an invalid length. [ 136.599659][ T8808] netlink: 'syz.2.853': attribute type 4 has an invalid length. [ 136.609583][ T8713] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.622400][ T8808] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.853'. [ 136.630719][ T8713] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.655162][ T8713] bridge_slave_0: entered allmulticast mode [ 136.664497][ T8713] bridge_slave_0: entered promiscuous mode [ 136.723829][ T8713] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.733896][ T8713] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.745115][ T8713] bridge_slave_1: entered allmulticast mode [ 136.753523][ T8713] bridge_slave_1: entered promiscuous mode [ 136.883755][ T8713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.893184][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'. [ 136.905490][ T49] tipc: Disabling bearer [ 136.913099][ T49] tipc: Left network mode [ 136.919125][ T8713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.084862][ T8825] netlink: 256 bytes leftover after parsing attributes in process `syz.2.857'. [ 137.114543][ T8825] netlink: 'syz.2.857': attribute type 9 has an invalid length. [ 137.135040][ T8713] team0: Port device team_slave_0 added [ 137.145782][ T8713] team0: Port device team_slave_1 added [ 137.433571][ T8713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.452248][ T8713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.498529][ T8713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.528375][ T8713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.547712][ T8713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.639146][ T8713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.793337][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.862'. [ 137.885282][ T8848] netlink: 'syz.0.862': attribute type 11 has an invalid length. [ 137.970430][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.998004][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.019897][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.032346][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.072998][ T49] veth1_macvtap: left promiscuous mode [ 138.081262][ T49] veth0_macvtap: left promiscuous mode [ 138.091073][ T49] veth1_vlan: left promiscuous mode [ 138.100195][ T49] veth0_vlan: left promiscuous mode [ 138.184365][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.863'. [ 138.471069][ T5852] Bluetooth: hci2: command tx timeout [ 138.658406][ T49] team0 (unregistering): Port device team_slave_1 removed [ 138.694181][ T49] team0 (unregistering): Port device team_slave_0 removed [ 138.976850][ T8713] hsr_slave_0: entered promiscuous mode [ 138.987748][ T8713] hsr_slave_1: entered promiscuous mode [ 138.994146][ T8713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.008677][ T8713] Cannot create hsr debugfs directory [ 139.158115][ T8888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.869'. [ 139.342447][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 139.624590][ T8916] netlink: 13 bytes leftover after parsing attributes in process `syz.2.873'. [ 139.661592][ T8917] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 140.249478][ T8940] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 140.548035][ T5840] Bluetooth: hci2: command tx timeout [ 140.924169][ T8713] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 140.965237][ T8713] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 140.994555][ T8713] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 141.015854][ T8963] IPVS: Error connecting to the multicast addr [ 141.033046][ T8713] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.157315][ T8972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.458304][ T8713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.564874][ T8713] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.631269][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 141.640317][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 141.650950][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 141.660058][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 141.669675][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 141.727706][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.735625][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.761527][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.768767][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.941166][ T8987] lo speed is unknown, defaulting to 1000 [ 142.269463][ T9017] netlink: 'syz.2.895': attribute type 4 has an invalid length. [ 142.626745][ T5846] Bluetooth: hci2: command 0x0419 tx timeout [ 142.637622][ T9035] netlink: set zone limit has 8 unknown bytes [ 142.679428][ T9035] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 142.838031][ T8713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.948676][ T8987] chnl_net:caif_netlink_parms(): no params data found [ 143.164289][ T9057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.605612][ T9079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.908'. [ 143.643594][ T8987] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.665581][ T9079] netlink: 92 bytes leftover after parsing attributes in process `syz.2.908'. [ 143.682872][ T8987] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.691850][ T8987] bridge_slave_0: entered allmulticast mode [ 143.704393][ T8987] bridge_slave_0: entered promiscuous mode [ 143.740398][ T9090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.908'. [ 143.760090][ T5852] Bluetooth: hci3: command tx timeout [ 143.876561][ T9090] netlink: 92 bytes leftover after parsing attributes in process `syz.2.908'. [ 143.945523][ T8987] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.955165][ T8987] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.962819][ T8987] bridge_slave_1: entered allmulticast mode [ 143.972237][ T8987] bridge_slave_1: entered promiscuous mode [ 144.184878][ T9101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.910'. [ 144.212509][ T8987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.273122][ T8987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.430772][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'. [ 144.490473][ T9106] veth5: entered allmulticast mode [ 144.532882][ T9114] netlink: 'syz.3.913': attribute type 4 has an invalid length. [ 144.561729][ T8987] team0: Port device team_slave_0 added [ 144.655193][ T8987] team0: Port device team_slave_1 added [ 144.714073][ T5852] Bluetooth: hci2: command 0x0419 tx timeout [ 144.715126][ T9117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.914'. [ 144.762793][ T8987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.770096][ T8987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.797080][ T8987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.851879][ T8987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.869031][ T8987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.901279][ T8987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.964195][ T8713] veth0_vlan: entered promiscuous mode [ 145.150333][ T8987] hsr_slave_0: entered promiscuous mode [ 145.163369][ T8987] hsr_slave_1: entered promiscuous mode [ 145.171782][ T8987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.196697][ T8987] Cannot create hsr debugfs directory [ 145.204982][ T8713] veth1_vlan: entered promiscuous mode [ 145.590826][ T9153] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 145.605864][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 145.620585][ T8713] veth0_macvtap: entered promiscuous mode [ 145.625871][ T9154] openvswitch: netlink: Flow key attr not present in new flow. [ 145.670017][ T8713] veth1_macvtap: entered promiscuous mode [ 145.740355][ T9153] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 145.827043][ T5852] Bluetooth: hci3: command tx timeout [ 145.948268][ T8987] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.020962][ T8713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.061979][ T8713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.132519][ T9175] netlink: 'syz.0.925': attribute type 10 has an invalid length. [ 146.143419][ T8987] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.173081][ T9175] veth0_vlan: entered allmulticast mode [ 146.223858][ T9175] veth0_vlan: left promiscuous mode [ 146.233639][ T9175] veth0_vlan: entered promiscuous mode [ 146.248883][ T9175] team0: Device veth0_vlan failed to register rx_handler [ 146.302620][ T8713] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.338009][ T8713] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.359769][ T8713] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.386062][ T8713] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.511698][ T8987] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.579538][ T9193] netlink: 'syz.2.927': attribute type 13 has an invalid length. [ 146.663666][ T8987] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.922121][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.953411][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.980923][ T9208] netlink: 'syz.3.931': attribute type 13 has an invalid length. [ 147.005121][ T9212] lo speed is unknown, defaulting to 1000 [ 147.036895][ T9208] netlink: 'syz.3.931': attribute type 17 has an invalid length. [ 147.103590][ T9208] eql: refused to change device tx_queue_len [ 147.113425][ T9208] A link change request failed with some changes committed already. Interface eql may have been left with an inconsistent configuration, please check. [ 147.155278][ T9215] netlink: 'syz.0.933': attribute type 1 has an invalid length. [ 147.167313][ T9215] netlink: 172 bytes leftover after parsing attributes in process `syz.0.933'. [ 147.179415][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 147.314456][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.323553][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.413609][ T8987] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 147.494908][ T8987] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 147.552875][ T8987] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 147.594130][ T8987] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 147.907031][ T5852] Bluetooth: hci3: command tx timeout [ 148.360570][ T3033] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.504905][ T3033] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.582394][ T8987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.712981][ T3033] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.774176][ T9274] netlink: 248 bytes leftover after parsing attributes in process `syz.2.941'. [ 148.973009][ T3033] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.053980][ T8987] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.158052][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.165235][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.218116][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.225280][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.269336][ T9291] netlink: 'syz.3.943': attribute type 1 has an invalid length. [ 149.460144][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.470400][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.482776][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.507069][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.526869][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.800388][ T9301] lo speed is unknown, defaulting to 1000 [ 149.808382][ T3033] bridge_slave_1: left allmulticast mode [ 149.814159][ T3033] bridge_slave_1: left promiscuous mode [ 149.855856][ T3033] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.970778][ T3033] bridge_slave_0: left allmulticast mode [ 149.979955][ T3033] bridge_slave_0: left promiscuous mode [ 149.986137][ T3033] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.009132][ T5852] Bluetooth: hci3: command tx timeout [ 150.441193][ T3033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.452968][ T3033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.464484][ T3033] bond0 (unregistering): Released all slaves [ 151.011425][ T9352] lo speed is unknown, defaulting to 1000 [ 151.018538][ T8987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.281483][ T9342] lo speed is unknown, defaulting to 1000 [ 151.325347][ T9364] netlink: 'syz.0.955': attribute type 1 has an invalid length. [ 151.497382][ T3033] hsr_slave_0: left promiscuous mode [ 151.518754][ T3033] hsr_slave_1: left promiscuous mode [ 151.536182][ T3033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.549354][ T3033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.561810][ T3033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.570572][ T3033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.597349][ T5852] Bluetooth: hci2: command tx timeout [ 151.610542][ T3033] veth1_macvtap: left promiscuous mode [ 151.622248][ T3033] veth0_macvtap: left promiscuous mode [ 151.628419][ T3033] veth1_vlan: left promiscuous mode [ 151.633706][ T3033] veth0_vlan: left promiscuous mode [ 151.803211][ T9388] netlink: ct family unspecified [ 151.815768][ T9388] openvswitch: netlink: Actions may not be safe on all matching packets [ 152.087545][ T3033] team0 (unregistering): Port device team_slave_1 removed [ 152.130609][ T3033] team0 (unregistering): Port device team_slave_0 removed [ 152.714731][ T9301] chnl_net:caif_netlink_parms(): no params data found [ 153.260574][ T9404] syzkaller0: entered promiscuous mode [ 153.277002][ T9404] syzkaller0: entered allmulticast mode [ 153.401007][ T8987] veth0_vlan: entered promiscuous mode [ 153.670256][ T5852] Bluetooth: hci2: command tx timeout [ 153.994999][ T9430] netlink: 'syz.0.966': attribute type 6 has an invalid length. [ 154.969847][ T9301] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.977152][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.984319][ T9301] bridge_slave_0: entered allmulticast mode [ 154.992636][ T9301] bridge_slave_0: entered promiscuous mode [ 155.002755][ T9301] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.010398][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.018088][ T9301] bridge_slave_1: entered allmulticast mode [ 155.027061][ T9301] bridge_slave_1: entered promiscuous mode [ 155.160179][ T9301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.162183][ T9437] nbd: couldn't find device at index 587202560 [ 155.183236][ T8987] veth1_vlan: entered promiscuous mode [ 155.199405][ T9301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.291482][ T9301] team0: Port device team_slave_0 added [ 155.325987][ T9301] team0: Port device team_slave_1 added [ 155.451782][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 155.498702][ T8987] veth0_macvtap: entered promiscuous mode [ 155.550483][ T9301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.576626][ T9301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.621792][ T9301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.635228][ T9301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.642420][ T9301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.677243][ T9301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.747191][ T5852] Bluetooth: hci2: command tx timeout [ 155.871812][ T8987] veth1_macvtap: entered promiscuous mode [ 155.895903][ T9472] x_tables: duplicate underflow at hook 2 [ 155.923906][ T9301] hsr_slave_0: entered promiscuous mode [ 155.949117][ T9301] hsr_slave_1: entered promiscuous mode [ 155.956264][ T9301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.976432][ T9301] Cannot create hsr debugfs directory [ 156.024411][ T8987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.064215][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.977'. [ 156.295047][ T8987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.340700][ T9489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.979'. [ 156.434333][ T8987] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.450857][ T8987] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.460905][ T8987] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.469838][ T8987] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.727484][ T9504] tipc: Enabled bearer , priority 12 [ 156.792196][ T9509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.985'. [ 156.848718][ T9506] veth1_macvtap: left promiscuous mode [ 156.854239][ T9506] macsec0: entered promiscuous mode [ 156.879360][ T9506] macsec0: entered allmulticast mode [ 156.914055][ T9513] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 157.089237][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 157.114943][ T9514] veth1_macvtap: entered promiscuous mode [ 157.133457][ T9514] veth1_macvtap: entered allmulticast mode [ 157.164605][ T9514] macsec0: left promiscuous mode [ 157.191669][ T9514] macsec0: left allmulticast mode [ 157.209849][ T9514] veth1_macvtap: left allmulticast mode [ 157.439463][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.472068][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.719910][ T3033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.759875][ T3033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.827948][ T5852] Bluetooth: hci2: command tx timeout [ 157.962321][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.993'. [ 158.279573][ T9301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.340351][ T9301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.569712][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.642745][ T9301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.748046][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.795612][ T9301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.876919][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.043147][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.552275][ T9615] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 159.587926][ T9301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.655959][ T63] bridge_slave_1: left allmulticast mode [ 159.680081][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 159.682335][ T63] bridge_slave_1: left promiscuous mode [ 159.694501][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.700156][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.729403][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.739428][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.750025][ T63] bridge_slave_0: left allmulticast mode [ 159.755982][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 159.761328][ T63] bridge_slave_0: left promiscuous mode [ 159.778104][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.144614][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.156618][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.166877][ T63] bond0 (unregistering): Released all slaves [ 160.283033][ T9301] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.323954][ T9616] lo speed is unknown, defaulting to 1000 [ 160.428278][ T9629] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1011'. [ 160.437705][ T9630] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1011'. [ 160.460254][ T3575] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.467444][ T3575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.550661][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.557878][ T3575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.124328][ T63] hsr_slave_0: left promiscuous mode [ 161.133841][ T9666] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 161.149353][ T63] hsr_slave_1: left promiscuous mode [ 161.162248][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.181308][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.201113][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.220507][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.291495][ T63] veth1_macvtap: left promiscuous mode [ 161.298984][ T63] veth0_macvtap: left promiscuous mode [ 161.310290][ T63] veth1_vlan: left promiscuous mode [ 161.325425][ T63] veth0_vlan: left promiscuous mode [ 161.826882][ T5852] Bluetooth: hci3: command tx timeout [ 162.081819][ T63] team0 (unregistering): Port device team_slave_1 removed [ 162.131879][ T63] team0 (unregistering): Port device team_slave_0 removed [ 162.733413][ T9661] erspan0: left allmulticast mode [ 162.788952][ T9661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.863356][ T9616] chnl_net:caif_netlink_parms(): no params data found [ 163.378558][ T9616] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.401585][ T9616] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.422622][ T9616] bridge_slave_0: entered allmulticast mode [ 163.451785][ T9616] bridge_slave_0: entered promiscuous mode [ 163.564167][ T9745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1030'. [ 163.599817][ T9616] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.630884][ T9616] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.663925][ T9616] bridge_slave_1: entered allmulticast mode [ 163.693349][ T9616] bridge_slave_1: entered promiscuous mode [ 163.911533][ T5852] Bluetooth: hci3: command tx timeout [ 163.960144][ T9616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.992727][ T9616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.233344][ T9616] team0: Port device team_slave_0 added [ 164.265853][ T9301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.450374][ T9782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 164.483256][ T9779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1035'. [ 164.596895][ T9786] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.642665][ T9616] team0: Port device team_slave_1 added [ 164.954888][ T9616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.992884][ T9616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.038474][ T9616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.072914][ T9616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.080308][ T9616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.158056][ T9616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.167085][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 165.205137][ T9812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1042'. [ 165.310757][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'. [ 165.371532][ T9616] hsr_slave_0: entered promiscuous mode [ 165.384977][ T9616] hsr_slave_1: entered promiscuous mode [ 165.391944][ T9616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.399841][ T9616] Cannot create hsr debugfs directory [ 165.618281][ T9828] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1044'. [ 165.649775][ T9301] veth0_vlan: entered promiscuous mode [ 165.735734][ T9301] veth1_vlan: entered promiscuous mode [ 165.990244][ T5852] Bluetooth: hci3: command tx timeout [ 166.022302][ T9841] netlink: 'syz.0.1047': attribute type 11 has an invalid length. [ 166.037471][ T9841] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1047'. [ 166.042583][ T9301] veth0_macvtap: entered promiscuous mode [ 166.159186][ T9301] veth1_macvtap: entered promiscuous mode [ 166.205047][ T9301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.315110][ T9301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.491977][ T9301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.521236][ T9301] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.534916][ T9301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.544009][ T9301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.886379][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.914748][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.961714][ T9616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 167.001549][ T9616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 167.045322][ T9616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 167.074695][ T3575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.096539][ T9616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.102647][ T3575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.217566][ T9896] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1059'. [ 167.246884][ T9896] bridge_slave_0: default FDB implementation only supports local addresses [ 167.515185][ T9906] xt_hashlimit: invalid rate [ 167.525545][ T9616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.563830][ T9616] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.673454][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.763197][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.770429][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.885089][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.910106][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.917445][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.968933][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.067630][ T5852] Bluetooth: hci3: command tx timeout [ 168.088157][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.442445][ T9925] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1063'. [ 168.464806][ T63] bridge_slave_1: left allmulticast mode [ 168.481513][ T63] bridge_slave_1: left promiscuous mode [ 168.493151][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.522141][ T63] bridge_slave_0: left allmulticast mode [ 168.532838][ T63] bridge_slave_0: left promiscuous mode [ 168.547249][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.721194][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.731129][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.739501][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.757217][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.777677][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.173779][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.186108][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.203544][ T63] bond0 (unregistering): Released all slaves [ 169.375474][ T9931] lo speed is unknown, defaulting to 1000 [ 169.515271][ T9950] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 169.527261][ T9950] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 169.542144][ T9950] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 169.551358][ T9950] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 169.565349][ T9950] geneve2: entered promiscuous mode [ 169.572342][ T9950] geneve2: entered allmulticast mode [ 169.637072][ T9949] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 169.865557][ T63] hsr_slave_0: left promiscuous mode [ 169.882094][ T63] hsr_slave_1: left promiscuous mode [ 169.888549][ T9966] SET target dimension over the limit! [ 169.894939][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.898654][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'. [ 169.931557][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.952238][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.971821][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.045390][ T63] veth1_macvtap: left promiscuous mode [ 170.057585][ T63] veth0_macvtap: left promiscuous mode [ 170.063312][ T63] veth1_vlan: left promiscuous mode [ 170.073009][ T63] veth0_vlan: left promiscuous mode [ 170.751620][ T63] team0 (unregistering): Port device team_slave_1 removed [ 170.811908][ T63] team0 (unregistering): Port device team_slave_0 removed [ 170.870228][ T5846] Bluetooth: hci2: command tx timeout [ 171.297562][ T9616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.718479][ T9616] veth0_vlan: entered promiscuous mode [ 171.773581][ T9931] chnl_net:caif_netlink_parms(): no params data found [ 171.953568][ T9616] veth1_vlan: entered promiscuous mode [ 172.020232][T10031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1074'. [ 172.069752][ T9931] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.090291][ T9931] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.114259][ T9931] bridge_slave_0: entered allmulticast mode [ 172.135328][ T9931] bridge_slave_0: entered promiscuous mode [ 172.199072][ T9931] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.206275][ T9931] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.215294][ T9931] bridge_slave_1: entered allmulticast mode [ 172.226844][ T9931] bridge_slave_1: entered promiscuous mode [ 172.253942][T10035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1075'. [ 172.279896][ T9931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.303779][ T9931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.411038][ T9616] veth0_macvtap: entered promiscuous mode [ 172.427207][ T9931] team0: Port device team_slave_0 added [ 172.439933][ T9931] team0: Port device team_slave_1 added [ 172.458213][ T3575] bond0: (slave wlan1): link status definitely down, disabling slave [ 172.471069][ T9616] veth1_macvtap: entered promiscuous mode [ 172.490928][T10042] netlink: 'syz.3.1078': attribute type 1 has an invalid length. [ 172.500516][T10042] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1078'. [ 172.512736][T10042] IPv6: NLM_F_CREATE should be specified when creating new route [ 172.541382][ T9931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.550747][ T9931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.578339][ T9931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.630932][ T9931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.652133][ T9931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.680793][ T9931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.705356][ T9616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.741908][T10052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1079'. [ 172.747626][ T9616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.799915][ T9931] hsr_slave_0: entered promiscuous mode [ 172.817824][ T9931] hsr_slave_1: entered promiscuous mode [ 172.824339][ T9931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.833219][ T9931] Cannot create hsr debugfs directory [ 172.844818][ T9616] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.855369][ T9616] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.875008][ T9616] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.884206][ T9616] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.946853][ T5846] Bluetooth: hci2: command tx timeout [ 173.163469][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.187555][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.351792][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.385414][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.404838][T10068] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1081'. [ 174.113092][ T1171] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.280236][ T1171] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.511017][ T1171] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.622239][T10101] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1089'. [ 174.709445][ T1171] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.759271][ T9931] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.823669][ T9931] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.880731][T10105] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1090'. [ 174.891897][ T9931] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.923461][ T9931] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.028455][ T5846] Bluetooth: hci2: command tx timeout [ 175.260722][ T1171] bridge_slave_1: left allmulticast mode [ 175.267084][ T1171] bridge_slave_1: left promiscuous mode [ 175.272858][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.335328][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.337032][ T1171] bridge_slave_0: left allmulticast mode [ 175.352129][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.361748][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.380019][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.403172][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.410233][ T1171] bridge_slave_0: left promiscuous mode [ 175.410483][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.935043][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.952604][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.964179][ T1171] bond0 (unregistering): Released all slaves [ 175.995324][T10136] tipc: Enabling of bearer rejected, already enabled [ 176.019281][T10143] syzkaller0: mtu less than device minimum [ 176.241365][T10158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1095'. [ 176.275716][T10128] lo speed is unknown, defaulting to 1000 [ 176.388727][T10161] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1096'. [ 176.451686][ T1171] hsr_slave_0: left promiscuous mode [ 176.471943][ T1171] hsr_slave_1: left promiscuous mode [ 176.481219][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.496606][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.512428][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.530201][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.579243][ T1171] veth1_macvtap: left promiscuous mode [ 176.588908][ T1171] veth0_macvtap: left promiscuous mode [ 176.594611][ T1171] veth1_vlan: left promiscuous mode [ 176.601221][ T1171] veth0_vlan: left promiscuous mode [ 177.109151][ T5852] Bluetooth: hci2: command tx timeout [ 177.159184][T10185] netlink: 'syz.3.1099': attribute type 13 has an invalid length. [ 177.293235][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 177.335400][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 177.511020][ T5852] Bluetooth: hci3: command tx timeout [ 177.729420][ T9931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.775889][T10185] veth0_macvtap: left promiscuous mode [ 177.782355][T10185] macvtap0: entered allmulticast mode [ 177.797357][T10185] macvtap0: refused to change device tx_queue_len [ 177.953325][ T9931] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.985202][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.992449][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.009132][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1101'. [ 178.065172][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.072391][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.312868][T10128] chnl_net:caif_netlink_parms(): no params data found [ 178.429505][T10212] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1103'. [ 178.863907][T10225] unknown channel width for channel at 909000KHz? [ 178.883758][T10225] unknown channel width for channel at 909000KHz? [ 178.891707][T10225] unknown channel width for channel at 909000KHz? [ 178.914035][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 178.943904][T10231] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 178.959455][T10231] bridge0: entered allmulticast mode [ 178.965446][T10128] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.979470][T10128] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.986915][T10128] bridge_slave_0: entered allmulticast mode [ 178.994853][T10128] bridge_slave_0: entered promiscuous mode [ 179.040155][T10128] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.051990][T10128] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.076650][T10128] bridge_slave_1: entered allmulticast mode [ 179.106686][T10128] bridge_slave_1: entered promiscuous mode [ 179.115936][T10236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1107'. [ 179.185999][T10128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.208684][T10128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.311385][ T9931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.335472][T10128] team0: Port device team_slave_0 added [ 179.360295][T10128] team0: Port device team_slave_1 added [ 179.496081][T10251] sctp: [Deprecated]: syz.3.1110 (pid 10251) Use of int in max_burst socket option deprecated. [ 179.496081][T10251] Use struct sctp_assoc_value instead [ 179.521441][T10128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.569633][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.598635][ T5852] Bluetooth: hci3: command tx timeout [ 179.650147][T10258] Unsupported ieee802154 address type: 0 [ 179.659784][T10128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.682184][T10261] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.682997][T10128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.695648][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.708987][T10258] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.728422][T10128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.961656][T10128] hsr_slave_0: entered promiscuous mode [ 179.997111][T10128] hsr_slave_1: entered promiscuous mode [ 180.003475][T10128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.014176][T10128] Cannot create hsr debugfs directory [ 180.169593][T10270] netlink: 'syz.3.1113': attribute type 21 has an invalid length. [ 180.195973][T10270] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1113'. [ 180.227307][T10270] netlink: 'syz.3.1113': attribute type 5 has an invalid length. [ 180.250523][T10270] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1113'. [ 180.742838][ T9931] veth0_vlan: entered promiscuous mode [ 181.002458][ T9931] veth1_vlan: entered promiscuous mode [ 181.215030][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.244674][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.256404][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.264751][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.275194][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 181.299824][ T9931] veth0_macvtap: entered promiscuous mode [ 181.419275][ T9931] veth1_macvtap: entered promiscuous mode [ 181.480101][T10308] lo speed is unknown, defaulting to 1000 [ 181.546189][ T9931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.622950][ T9931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.638477][T10325] netlink: 'syz.3.1124': attribute type 10 has an invalid length. [ 181.648583][ T9931] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.662673][ T9931] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.666727][ T5846] Bluetooth: hci3: command tx timeout [ 181.671566][ T9931] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.692723][ T9931] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.724084][T10325] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 181.744151][T10325] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 181.893213][T10128] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.934226][T10128] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.945867][T10128] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.957933][T10128] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.138072][T10340] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1126'. [ 182.151580][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.170609][T10308] chnl_net:caif_netlink_parms(): no params data found [ 182.176406][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.259859][T10342] Illegal XDP return value 4294967289 on prog (id 300) dev N/A, expect packet loss! [ 182.382288][ T3575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.392753][ T3575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.735376][T10308] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.755729][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 182.760394][T10308] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.798701][T10308] bridge_slave_0: entered allmulticast mode [ 182.815781][T10308] bridge_slave_0: entered promiscuous mode [ 182.835288][T10308] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.843089][T10308] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.855751][T10367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1133'. [ 182.865133][T10308] bridge_slave_1: entered allmulticast mode [ 182.873746][T10308] bridge_slave_1: entered promiscuous mode [ 182.909651][T10367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1133'. [ 182.931326][T10128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.020432][T10308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.068766][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 183.121798][T10308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.239292][T10377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1136'. [ 183.245413][ T1171] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.346778][ T5846] Bluetooth: hci5: command tx timeout [ 183.374529][ T1171] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.397866][T10308] team0: Port device team_slave_0 added [ 183.415930][T10308] team0: Port device team_slave_1 added [ 183.439188][T10128] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.471321][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.478459][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.490780][T10308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.500188][T10308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.529986][T10308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.544054][T10308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.551526][T10308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.578326][T10308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.619210][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.626403][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.651225][ T1171] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.690767][T10308] hsr_slave_0: entered promiscuous mode [ 183.700259][T10308] hsr_slave_1: entered promiscuous mode [ 183.707531][T10308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.717054][T10308] Cannot create hsr debugfs directory [ 183.746787][ T5846] Bluetooth: hci3: command tx timeout [ 183.782261][ T1171] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.152054][T10389] netlink: 'syz.0.1139': attribute type 64 has an invalid length. [ 184.172938][T10389] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1139'. [ 184.282250][ T1171] bridge_slave_1: left allmulticast mode [ 184.298154][ T1171] bridge_slave_1: left promiscuous mode [ 184.303983][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.352464][ T1171] bridge_slave_0: left allmulticast mode [ 184.368243][ T1171] bridge_slave_0: left promiscuous mode [ 184.374103][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.421465][T10398] xt_l2tp: v2 sid > 0xffff: 262144 [ 184.456083][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 184.466557][T10398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1141'. [ 184.482084][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.491960][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.501544][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.510253][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.520000][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.818070][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.832380][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.844223][ T1171] bond0 (unregistering): Released all slaves [ 185.030983][T10399] lo speed is unknown, defaulting to 1000 [ 185.146019][T10408] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 185.166733][T10408] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1142'. [ 185.186908][T10408] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 185.204096][T10408] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 185.268428][T10408] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 185.282796][T10308] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 185.344399][T10128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.353494][T10408] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 185.363401][T10408] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 185.379193][T10308] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 185.419739][T10408] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 185.430047][ T5852] Bluetooth: hci5: command tx timeout [ 185.436115][T10408] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 185.445409][T10308] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 185.455813][T10408] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 185.470338][T10408] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 185.499424][T10308] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 185.531333][T10408] netlink: 'syz.3.1142': attribute type 3 has an invalid length. [ 185.551844][ T1171] hsr_slave_0: left promiscuous mode [ 185.557957][ T1171] hsr_slave_1: left promiscuous mode [ 185.564342][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.574841][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.583416][ T1171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.594123][ T1171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.615166][ T1171] veth1_macvtap: left promiscuous mode [ 185.621061][ T1171] veth0_macvtap: left promiscuous mode [ 185.627190][ T1171] veth1_vlan: left promiscuous mode [ 185.632542][ T1171] veth0_vlan: left promiscuous mode [ 186.044040][ T1171] team0 (unregistering): Port device team_slave_1 removed [ 186.088475][ T1171] team0 (unregistering): Port device team_slave_0 removed [ 186.456034][T10414] sch_fq: defrate 0 ignored. [ 186.546527][ T5852] Bluetooth: hci2: command tx timeout [ 186.607931][T10128] veth0_vlan: entered promiscuous mode [ 186.804902][T10128] veth1_vlan: entered promiscuous mode [ 186.931632][T10426] lo speed is unknown, defaulting to 1000 [ 186.944633][T10399] chnl_net:caif_netlink_parms(): no params data found [ 187.302268][T10128] veth0_macvtap: entered promiscuous mode [ 187.336897][T10399] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.344316][T10399] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.352944][T10399] bridge_slave_0: entered allmulticast mode [ 187.361354][T10399] bridge_slave_0: entered promiscuous mode [ 187.390105][T10128] veth1_macvtap: entered promiscuous mode [ 187.400909][T10399] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.408863][T10399] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.416242][T10399] bridge_slave_1: entered allmulticast mode [ 187.424964][T10399] bridge_slave_1: entered promiscuous mode [ 187.506953][ T5852] Bluetooth: hci5: command tx timeout [ 187.549725][T10399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.611635][T10399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.739217][T10464] __nla_validate_parse: 15 callbacks suppressed [ 187.739238][T10464] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1153'. [ 187.756052][T10308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.834634][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1155'. [ 187.838105][T10128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.843933][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1155'. [ 187.873331][T10399] team0: Port device team_slave_0 added [ 187.882990][T10399] team0: Port device team_slave_1 added [ 187.971801][T10128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.024196][T10308] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.040192][T10399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.057473][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.085031][T10399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.112190][T10470] : entered promiscuous mode [ 188.142210][T10399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.149866][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.177185][T10399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.218370][T10128] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.230108][T10128] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.239163][T10128] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.247959][T10128] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.264133][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.271458][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.395742][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.402949][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.562765][T10399] hsr_slave_0: entered promiscuous mode [ 188.572470][T10399] hsr_slave_1: entered promiscuous mode [ 188.601807][T10399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.609972][T10399] Cannot create hsr debugfs directory [ 188.626725][ T5852] Bluetooth: hci2: command tx timeout [ 188.702496][T10490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1159'. [ 188.923647][T10308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.022937][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.096243][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.257761][ T3575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.265625][ T3575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.516849][T10308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.587107][ T5852] Bluetooth: hci5: command tx timeout [ 189.800169][T10523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1166'. [ 189.860657][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.067947][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.214286][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.348829][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.433969][T10399] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.465442][T10399] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 190.525559][T10399] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 190.562340][T10399] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 190.621027][T10308] veth0_vlan: entered promiscuous mode [ 190.694587][T10308] veth1_vlan: entered promiscuous mode [ 190.711017][ T5852] Bluetooth: hci2: command tx timeout [ 190.810389][ T49] bridge_slave_1: left allmulticast mode [ 190.816089][ T49] bridge_slave_1: left promiscuous mode [ 190.844015][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.860664][ T49] bridge_slave_0: left allmulticast mode [ 190.876585][ T49] bridge_slave_0: left promiscuous mode [ 190.887266][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.896630][T10558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1167'. [ 191.259925][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.270107][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.280671][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.290153][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.303737][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.545455][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.560378][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.571424][ T49] bond0 (unregistering): Released all slaves [ 191.812182][T10579] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1170'. [ 191.877505][T10566] lo speed is unknown, defaulting to 1000 [ 191.882515][T10308] veth0_macvtap: entered promiscuous mode [ 192.020620][T10308] veth1_macvtap: entered promiscuous mode [ 192.174698][T10399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.212042][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1172'. [ 192.261922][T10591] lo speed is unknown, defaulting to 1000 [ 192.355509][T10591] lo speed is unknown, defaulting to 1000 [ 192.395577][ T49] hsr_slave_0: left promiscuous mode [ 192.406357][ T49] hsr_slave_1: left promiscuous mode [ 192.412455][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.418392][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'. [ 192.435172][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'. [ 192.438639][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.453798][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.463442][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.505370][ T49] veth1_macvtap: left promiscuous mode [ 192.514020][ T49] veth0_macvtap: left promiscuous mode [ 192.524383][ T49] veth1_vlan: left promiscuous mode [ 192.532181][ T49] veth0_vlan: left promiscuous mode [ 192.786457][ T5852] Bluetooth: hci2: command tx timeout [ 193.193910][ T49] team0 (unregistering): Port device team_slave_1 removed [ 193.238560][ T49] team0 (unregistering): Port device team_slave_0 removed [ 193.436977][ T5852] Bluetooth: hci3: command tx timeout [ 193.615529][T10591] lo speed is unknown, defaulting to 1000 [ 193.641773][T10399] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.666266][T10308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.711529][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.718729][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.740992][T10308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.783820][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.791040][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.903225][T10308] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.921072][T10308] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.940667][T10308] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.952316][T10308] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.213421][T10399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.238419][T10591] infiniband syz0: set active [ 194.244987][T10591] infiniband syz0: added lo [ 194.246903][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.252403][T10591] syz0: rxe_create_cq: returned err = -12 [ 194.255762][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.285212][T10591] infiniband syz0: Couldn't create ib_mad CQ [ 194.315354][T10566] chnl_net:caif_netlink_parms(): no params data found [ 194.327318][T10591] infiniband syz0: Couldn't open port 1 [ 194.348519][T10639] __nla_validate_parse: 2 callbacks suppressed [ 194.348537][T10639] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1178'. [ 194.411650][T10591] RDS/IB: syz0: added [ 194.416207][T10591] smc: adding ib device syz0 with port count 1 [ 194.424995][ T5897] lo speed is unknown, defaulting to 1000 [ 194.438238][T10591] smc: ib device syz0 port 1 has pnetid [ 194.499907][ T5897] lo speed is unknown, defaulting to 1000 [ 194.595640][T10591] lo speed is unknown, defaulting to 1000 [ 194.742638][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.760773][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.939678][T10566] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.969353][T10566] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.989893][T10566] bridge_slave_0: entered allmulticast mode [ 195.010152][T10566] bridge_slave_0: entered promiscuous mode [ 195.060426][T10566] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.073170][T10566] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.081185][T10566] bridge_slave_1: entered allmulticast mode [ 195.094571][T10566] bridge_slave_1: entered promiscuous mode [ 195.152060][T10399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.232177][T10591] lo speed is unknown, defaulting to 1000 [ 195.233817][T10666] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 195.249504][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.271430][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.289396][T10666] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 195.316225][T10566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.354668][T10566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.401067][ T5503] eql: remember to turn off Van-Jacobson compression on your slave devices [ 195.507238][ T5840] Bluetooth: hci3: command tx timeout [ 195.533130][T10566] team0: Port device team_slave_0 added [ 195.553175][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1118'. [ 195.584776][T10566] team0: Port device team_slave_1 added [ 195.717212][T10566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.734840][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.756535][T10678] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1182'. [ 195.772144][T10566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.802740][T10678] 0ªX¹¦D: renamed from gretap0 (while UP) [ 195.824880][T10678] 0ªX¹¦D: entered allmulticast mode [ 195.841314][T10678] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 195.864425][T10566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.890112][T10566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.925890][T10566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.957942][T10591] lo speed is unknown, defaulting to 1000 [ 196.143625][T10566] hsr_slave_0: entered promiscuous mode [ 196.162970][T10566] hsr_slave_1: entered promiscuous mode [ 196.170643][T10566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.178566][T10566] Cannot create hsr debugfs directory [ 196.190572][T10686] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1185'. [ 196.201058][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1184'. [ 196.313799][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 196.316355][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 196.434047][T10399] veth0_vlan: entered promiscuous mode [ 196.521790][T10399] veth1_vlan: entered promiscuous mode [ 196.662145][T10591] lo speed is unknown, defaulting to 1000 [ 196.732748][T10399] veth0_macvtap: entered promiscuous mode [ 196.839540][T10399] veth1_macvtap: entered promiscuous mode [ 196.913639][T10706] pim6reg1: entered promiscuous mode [ 196.929246][T10706] pim6reg1: entered allmulticast mode [ 197.006140][T10399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.160247][T10399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.183646][T10399] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.217213][T10399] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.226211][T10399] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.245306][T10399] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.423906][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1195'. [ 197.530607][T10591] lo speed is unknown, defaulting to 1000 [ 197.567250][T10733] validate_nla: 3 callbacks suppressed [ 197.567268][T10733] netlink: 'syz.5.1195': attribute type 4 has an invalid length. [ 197.586914][ T5846] Bluetooth: hci3: command tx timeout [ 197.642555][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.660228][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.840530][T10566] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.843634][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.869626][T10566] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.887061][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.907594][T10566] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.941144][T10566] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 198.165690][T10399] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 198.177630][T10399] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 198.186073][T10399] CPU: 1 UID: 0 PID: 10399 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) [ 198.198333][T10399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.208404][T10399] RIP: 0010:klist_remove+0x14a/0x340 [ 198.213754][T10399] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 41 c7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 41 c7 f6 49 8b 44 24 58 48 89 44 24 08 [ 198.233375][T10399] RSP: 0018:ffffc90003dff840 EFLAGS: 00010202 [ 198.239465][T10399] RAX: 000000000000000b RBX: ffff8880319fbc00 RCX: 0000000000000000 [ 198.247425][T10399] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 198.255386][T10399] RBP: ffffc90003dff928 R08: ffffffff8f8798c3 R09: 1ffffffff1f0f318 [ 198.263345][T10399] R10: dffffc0000000000 R11: fffffbfff1f0f319 R12: 0000000000000000 [ 198.271308][T10399] R13: 1ffff1100aff878c R14: ffff888057fc3c60 R15: dffffc0000000000 [ 198.279267][T10399] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 198.288182][T10399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.294750][T10399] CR2: 00007fff3880ae00 CR3: 000000006ec24000 CR4: 00000000003526f0 [ 198.302713][T10399] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 198.310673][T10399] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 198.318637][T10399] Call Trace: [ 198.321903][T10399] [ 198.324822][T10399] ? __pfx_klist_remove+0x10/0x10 [ 198.329847][T10399] ? __pfx_kobject_move+0x10/0x10 [ 198.334857][T10399] ? get_device_parent+0x366/0x3a0 [ 198.339957][T10399] device_move+0x193/0x700 [ 198.344363][T10399] hci_conn_del_sysfs+0xb8/0x170 [ 198.349296][T10399] hci_conn_del+0x8ff/0xcb0 [ 198.353791][T10399] hci_conn_hash_flush+0x191/0x230 [ 198.358894][T10399] hci_dev_close_sync+0xaef/0x1330 [ 198.363995][T10399] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 198.369528][T10399] ? up_write+0x1c4/0x420 [ 198.373850][T10399] hci_unregister_dev+0x21a/0x510 [ 198.378861][T10399] vhci_release+0x80/0xd0 [ 198.383183][T10399] ? __pfx_vhci_release+0x10/0x10 [ 198.388197][T10399] __fput+0x44c/0xa70 [ 198.392171][T10399] task_work_run+0x1d1/0x260 [ 198.396759][T10399] ? __pfx_task_work_run+0x10/0x10 [ 198.401857][T10399] ? kmem_cache_free+0x18f/0x400 [ 198.406806][T10399] do_exit+0x6ad/0x22e0 [ 198.410952][T10399] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 198.416321][T10399] ? __pfx_do_exit+0x10/0x10 [ 198.420907][T10399] ? _raw_spin_unlock_irq+0x23/0x50 [ 198.426096][T10399] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.431286][T10399] do_group_exit+0x21c/0x2d0 [ 198.435869][T10399] __x64_sys_exit_group+0x3f/0x40 [ 198.440882][T10399] x64_sys_call+0x21ba/0x21c0 [ 198.445545][T10399] do_syscall_64+0xfa/0x3b0 [ 198.450042][T10399] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.455242][T10399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.461295][T10399] ? clear_bhb_loop+0x60/0xb0 [ 198.465963][T10399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.471844][T10399] RIP: 0033:0x7fddeb98e929 [ 198.476259][T10399] Code: Unable to access opcode bytes at 0x7fddeb98e8ff. [ 198.483264][T10399] RSP: 002b:00007fff3880cfd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 198.491663][T10399] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fddeb98e929 [ 198.499630][T10399] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 198.507593][T10399] RBP: 00007fddeb9ee8f0 R08: 00007fff3880ad77 R09: 0000000000000003 [ 198.515550][T10399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.523510][T10399] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff3880d190 [ 198.531474][T10399] [ 198.534477][T10399] Modules linked in: [ 198.539957][T10399] ---[ end trace 0000000000000000 ]--- [ 198.549411][T10399] RIP: 0010:klist_remove+0x14a/0x340 [ 198.554820][T10399] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 41 c7 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 41 c7 f6 49 8b 44 24 58 48 89 44 24 08 [ 198.587218][T10732] caif:caif_disconnect_client(): nothing to disconnect [ 198.593333][T10399] RSP: 0018:ffffc90003dff840 EFLAGS: 00010202 [ 198.622743][T10399] RAX: 000000000000000b RBX: ffff8880319fbc00 RCX: 0000000000000000 [ 198.631739][T10399] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 198.641353][T10399] RBP: ffffc90003dff928 R08: ffffffff8f8798c3 R09: 1ffffffff1f0f318 [ 198.653572][T10399] R10: dffffc0000000000 R11: fffffbfff1f0f319 R12: 0000000000000000 [ 198.662554][T10399] R13: 1ffff1100aff878c R14: ffff888057fc3c60 R15: dffffc0000000000 [ 198.670871][T10399] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 198.680732][T10399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.687611][T10399] CR2: 0000000000000000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 198.695581][T10399] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 198.704526][T10399] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 198.713221][T10399] Kernel panic - not syncing: Fatal exception [ 198.719576][T10399] Kernel Offset: disabled [ 198.723884][T10399] Rebooting in 86400 seconds..