last executing test programs: 59.347845156s ago: executing program 4 (id=2482): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f000000a240)=0x40000) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000b00)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xa}, 0x1c, 0x0, 0x0, &(0x7f00000013c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}}}}, @hopopts={{0x18, 0x29, 0x36, {0x8}}}], 0x40}}], 0x1, 0x4000014) 59.223907319s ago: executing program 4 (id=2485): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1}) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x80000040}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x6d) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010027c61a7dd1dbdf250f000000080028"], 0x1c}, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) r4 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r4, &(0x7f00000001c0)="bc918bffb3771c2bae5d0e57c3164d2be5", 0xffffffffffffffea, 0x0, 0x0, 0x0) (async) sendto$inet(r4, &(0x7f00000001c0)="bc918bffb3771c2bae5d0e57c3164d2be5", 0xffffffffffffffea, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000206b000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000800000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c2900333f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00"], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) 57.591974155s ago: executing program 4 (id=2488): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001040000000400000000000000002853a02dcdeb3e96650c8bbcb6da9a3f1e446a69dd4dbf3769c53595d2abef79c566f39019fb", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYBLOB="257043f9212e9f78493d60ca95896e092d6f1029e8425adb950f5674b03254482a157373c43164f26f69b055944268e1c85f799c047058fc25d049da0c3ea3aa9706fd59fe76638e077cb2a82c5ffc368c50574306fafa025b96e21e4aebba514eff7e02da35bd783f09aba716f8b7f4f24facf0e76b3496c08410ae2f7324fc1010a941ed3bb20fa9f9054cc3b94b500005c339f9ccdfc2b75fcc0d8b26b3f3836934062e0284db", @ANYBLOB="0000000000000400", @ANYRESOCT=r0, @ANYRES64=r0], 0x48}}, 0x0) 57.583086851s ago: executing program 4 (id=2492): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x3, 0x103, @empty, 0x20010}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) socket$key(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x28}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x4f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbfd}, 0x14}}, 0x0) 57.580602557s ago: executing program 4 (id=2495): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000300)=""/162, 0xa2}], 0x1) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000000c0)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_AF_SPEC={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'dvmrp1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) (async) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000300)=""/162, 0xa2}], 0x1) (async) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000000c0)=0x1, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_AF_SPEC={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'dvmrp1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) 57.556251725s ago: executing program 4 (id=2501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x800) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x1, 0x4, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffff00}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa416}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000140)=0x5, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0xffff, @rand_addr=0x64010101}}}, 0x108) 42.267822699s ago: executing program 32 (id=2501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x800) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r3, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x1, 0x4, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffff00}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa416}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000140)=0x5, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0xffff, @rand_addr=0x64010101}}}, 0x108) 39.706421513s ago: executing program 0 (id=2744): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) recvfrom$inet6(r1, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @random="42c3a6a34ab0", 'geneve0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @multicast, 'veth1_to_bond\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) clock_gettime(0x4, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) clock_gettime(0x0, &(0x7f0000002d40)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000002c80)=[{{&(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/64, 0x40}, {&(0x7f0000000140)=""/88, 0x58}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000200)=""/14, 0xe}], 0x4, &(0x7f0000000440)=""/204, 0xcc}, 0xa}, {{&(0x7f00000002c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/43, 0x2b}, {&(0x7f0000000580)=""/249, 0xf9}, {&(0x7f0000000680)=""/254, 0xfe}], 0x3, &(0x7f00000007c0)=""/255, 0xff}, 0x2}, {{&(0x7f00000008c0)=@nfc, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000940)=""/162, 0xa2}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/38, 0x26}, {&(0x7f0000001a40)=""/231, 0xe7}, {&(0x7f0000001b40)=""/93, 0x5d}, {&(0x7f0000001bc0)}, {&(0x7f0000002dc0)=""/4096, 0x1000}], 0x7}, 0x6}], 0x3, 0x2100, &(0x7f0000002d80)={r6, r7+10000000}) 38.729556164s ago: executing program 0 (id=2753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x4c, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}]}, 0x4c}}, 0x804) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xd8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) 38.147715599s ago: executing program 0 (id=2759): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f0000000180013070000000000000000ac1e0001000000000000000000000000e000000100000000000000000000000000000000000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d432000000ac1414000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000100000000000000020004000000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 38.109384135s ago: executing program 0 (id=2760): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x1, 'dh\x00', 0x0, 0x85, 0x4080069}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 37.882922488s ago: executing program 0 (id=2763): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0xfe, 0x6}, [@RTA_MULTIPATH={0x5, 0x9, {0xc15}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_ENCAP_TYPE, @RTA_ENCAP={0x0, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x0, 0x2, @private=0xa010102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) 37.560897772s ago: executing program 0 (id=2765): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 21.739436749s ago: executing program 33 (id=2765): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r2, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 9.927720966s ago: executing program 3 (id=2961): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="428758e2"]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 9.869882451s ago: executing program 3 (id=2963): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)=0x1) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1003}}]}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x6c}, 0x1, 0xba01}, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 9.686587853s ago: executing program 3 (id=2964): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000100000000000000fe34645787fb3f870000000a05000000000000000000020000000900010073797a3000000000080002400000000000000000000000000a00"/76], 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000100000000000000fe34645787fb3f870000000a05000000000000000000020000000900010073797a3000000000080002400000000000000000000000000a00"/76], 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r2}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) (async) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r4, &(0x7f0000000b80)="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", 0x5ad, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2}, 0x1c) read(r4, &(0x7f0000000040)=""/244, 0xf4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000300), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB="c75f7d51663dd6698e3cd82779b7e0bb9c142a10f539a73dced5381b3bce5374f5268040234a90170420e1ca200762f487f5635dce", @ANYRES16=r5, @ANYBLOB="010000000000030000000700000008000300", @ANYRES32=r8, @ANYBLOB="08000500010000001400040074756e6c3000000000000000000000001c00e700d45db24352fd6875313d9a7de85759f58b6d3335d4ff7169"], 0x54}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="04000000", @ANYRES16=r5, @ANYBLOB="00022dbd7000ffdbdf253800000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000e000000080000000c00580040000000000000000c0058003b000000000000000c00580011000000000000000c00580017000000000000000c0058002500000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x8011}, 0x2d083584ff95e3be) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000003c0)={0x0, 0x163563647d8a3b02, 0x1, 0x7}) (async) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000003c0)={0x0, 0x163563647d8a3b02, 0x1, 0x7}) 9.255379336s ago: executing program 3 (id=2966): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0xffff0000, 0x10, 0x0, &(0x7f0000000980)="2b206d3c9d84609e73fb074824b354de", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r3, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9.039802281s ago: executing program 3 (id=2969): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x4c, 0x30, 0x9, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES16=0x0, @ANYBLOB="080026db851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 8.887215783s ago: executing program 3 (id=2972): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000f0000b900"/29], 0x50) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffff, 0xb, 0x4}}}}]}, 0x40}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f00000001c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}, 0x24) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000004000000800100000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000f0000b900"/29], 0x50) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffff, 0xb, 0x4}}}}]}, 0x40}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) bind$rxrpc(r4, &(0x7f00000001c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}, 0x24) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x18) (async) syz_80211_inject_frame(&(0x7f0000000580), 0x0, 0x0) (async) 6.539725803s ago: executing program 2 (id=2981): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x59, 0x7fffffff, {{0x24, 0x4, 0x0, 0x5, 0x90, 0x68, 0x0, 0x1, 0x4, 0x0, @local, @multicast1, {[@timestamp={0x44, 0x10, 0x79, 0x0, 0xb, [0x3, 0x8, 0x218]}, @noop, @timestamp={0x44, 0x18, 0x45, 0x0, 0x1, [0x80000001, 0x39, 0x5, 0x8b3d, 0x3]}, @ssrr={0x89, 0xf, 0xe9, [@multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0xf, 0x3, [{0x7, 0x9, "d9af69f4d56804"}]}, @generic={0x83, 0xc, "f1a1a1f3ec877daa6eb1"}, @lsrr={0x83, 0x27, 0x30, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010100, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, @local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000000000), 0xc, &(0x7f0000001c80)={&(0x7f0000000180)=@newtaction={0x1ae8, 0x30, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [{0x3b4, 0x1, [@m_skbmod={0xb0, 0x17, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xffff}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x46, 0x6, "ee1a4a329133b544edaaf4d75973c4ab6dc3cfaa3fc038f3ed773fed37bd6c9a642ac0dc07b274c2e94b602ebfe1817b4293a64589a7e2a6f7ef086666c6a6832dab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x1bc, 0x2, 0x0, 0x0, {{0x7}, {0x118, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd6, 0x6, {0x0, 'security\x00', 0x1, 0x6, "fcd8a71b1ce926a32316864baa774b4ce82dc8b95a64597d981c782f323cf62edb6aeadb50e681b88976e2969044227444fcef36e31da527e25cdf0e4f104feee37cc4056ae759f71b84319f5e840d15aa2ac04d5a214d35ed7c0844aab4e3b512fbfea53b2807805daf537793ac2a71b3d48ca88b8ef7dbc1b7cc3f9943bd5699bde8f35eaf1de663e0afefeb2a31ae7d8f1f35592fa6cf5203bcad78a3872115079accf61c3cfb4d775e6d"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x43}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x7f, 0x6, "412714739fa0fbdaf9bea5ef3c45c141db8965085cfadecf86a86df1c6c4fa22fb246c4e7f3b18ade7fe458ab09ad1fcf2d40039ad061181dbafe66317e43b979824b5ae6e4689cd9325c8555a0751586042912176a8b2630c21e7d4fbc611b87901dfe851f45fb9c5a7543593e2171c715ae7246d2b806f382cf5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x144, 0x12, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fff, 0x6, 0x8, 0x7f, 0x9}, 0x2, r0}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe5, 0x7, 0x7, 0x3, 0x6}, 0x4, r1}}]}, {0xd5, 0x6, "da5d348a93de98eb53e41dc2a6058f8105bb8ca2a5747ce42b438b7779bfd3a9aab1660238602ce4126b33a7e6422d4e7ec6815078950c712abfa89ec73d66b7ad2cd2a16e403d8f053d9ee8e8e7b8588ef9e022e0f0874d7efd98cce43a35f1ce3cb8bfe833530a73656db40d389b98775ff1938315665f17c43d78f86ef42125839ff66cc4b4dd3330eb190df09af4ed2ae8a0f1a1125d70055644b38dffe386de6de7c0a7500f3a765511cf37073b6aff224d687701c2889d192c2524da71015b3f067730038cd041f8d7ffeda166f0"}, {0xc}, {0xc, 0x8, {0x3, 0x6}}}}]}, {0x1564, 0x1, [@m_gact={0x11c, 0x11, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8, 0x6, 0x1c, 0x401}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1eba, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x100, 0xffff, 0x7, 0x8, 0x9b}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1a0, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xf, 0x5, 0x5, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x788, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2684, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x7f, 0x2, 0x2, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x40, 0xe, 0x0, 0x10001, 0x1ff}}]}, {0x48, 0x6, "3fdfee7d8f2df9a79f980a3a2a52021fc4ef9ffe0bb46c96ce5d5305d1ce4b0ec7a553a6c8cbcc915a77a39e7ca0536374c1dcffaa93489caf4dfb9e694e8bf36de27e30"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0xb0, 0x7, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7ff}]}, {0x71, 0x6, "50e827b6ffbcb3d296939f78f10982a02916130134a658c4ca3484b8c10b10520aa9c1b8d982efccd8c488bf1b36ee1f0faad12159c5e004deb67de711caadaa6cf3e58724a1aae68ef30f5b21b35b4db51b5d9381372d243b3f3983effc6b382d868cb0209c380850af08b41b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x1160, 0x1f, 0x0, 0x0, {{0x7}, {0x138, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x99, 0x6, {0xffb3, 'nat\x00', 0x28, 0x1, "2463d28f17f513349b0ffeced762cf9bcc9a3838b26d7971c494e25121c22c00ebce79b1a6c3976b0436f627681c8069db808e1f934c755a87f30b7408e8853e153ff795b88a21720d2c102cde62e1bfc6634e1bef1b4307b8d41e4a5dea0bea89d02655eba3960570b66371ab3316"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x74, 0x6, {0x9, 'mangle\x00', 0x10, 0x6, "1a78d9c073f60ae58dea8dcb659c17c6a889d8843e8977d097ab5c4c213fc80278f815446e4815ac2a1dd0b0bc3da8dc76342ed50b1cc843a7b9453eae5f8cf33183291c36436a20da35"}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x108, 0xf, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x3, 0x2, 0x7, 0xfffffffb}, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x8, 0x2, 0x1ff, 0xff}, 0x7}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_SMAC={0xa}]}, {0x7d, 0x6, "0e165314c987b35a9cc20528bc03ee0f1d4df64ac36638f133cbfa6848331461e480eca3da9df34d77104e1d804203e9c9461c54f00fdc3c28c566fee324def8e5aa84fbe5309d457fe3e702b33eb584ba6548c48c6bb88953ea19cc169611ab0539c3db304769f98dd3410145a86f2c1911fa45a59676d61c"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x12c, 0x6, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x81, 0x5, 0x20000000, 0xfffffbff, 0xff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x0, 0x0, 0x8000, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0x7, 0x6, 0x10000, 0x101}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x0, 0x0, 0x20, 0x10}}]}, {0x9e, 0x6, "cd0faec3ae6394fb861b2b52ce588d3f09bec63aa9ac28c6d775f1b159639977a1563a1a4bb19dce3a4124216677fe7e27857777d72dd5bc287b90d336cba9b4c22dc088e50fce9ec03fa65ef8bc4a5f40de5c0ddb5593ae01d5da5aec5e2e6a07c53e29818cdf73ea22969d135346ff24399e87761a621c657241fbe98385b721bda829f1527647f762fae9e81a5bb6e1cd3880c1071130d908"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x1bc, 0x1, [@m_csum={0x1b8, 0x11, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffff0001, 0x4, 0x3, 0xd, 0x4}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xffffffff, 0x7, 0xb, 0x7f}, 0x74}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x8, 0xda0, 0x401}, 0x44}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x6, 0x6, 0x0, 0x4}, 0x58}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd6, 0x3, 0x2, 0x1, 0x9}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1800000, 0xa06f, 0x10000000, 0x4, 0x6e4}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xffff, 0x1, 0xfff, 0x16ab}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xfffffeff, 0x0, 0x4, 0x441}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x6, 0xfffffffffffffffd, 0x7}, 0x7}}]}, {0x8d, 0x6, "c830567cf347d8a95773d717a6fca8dcd0f6567d12c183876a9b31290a22909f45d835e29d18e0388073735655d353336bfe172ccdfdd745088cb61901b8afcf9ca00f2c7eab14e9785ee4b5426890d3ae527a5f4d8f4473e55606362f2563b775ff5875bee3ae46677876fbe2a4308c3991585d5e8373c82f8d01d089c5c543abab3d7cbfcf909608"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1ae8}, 0x1, 0x0, 0x0, 0x48001}, 0x40000) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001d00)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001d80)=""/41, 0x29}, {&(0x7f0000001dc0)=""/42, 0x2a}], 0x2, &(0x7f0000001e40)=""/204, 0xcc}, 0x140) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001fc0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x5c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xffff}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x19}]}, 0x5c}}, 0x8040) (async) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000002100), &(0x7f0000002140)=0x10, 0x80000) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f00000026c0)={0x7, &(0x7f00000025c0)=[{0xffff4540, 0x9e, &(0x7f0000002180)="7c6338373645ae78da672889ad5ca38cca2dc55fc87c8f7dd8f3d23a24cf6e5d05698e25a80966f650bcce75a5a9b9df692db666340779612bce3b2b0525010be17c6924b87ebd8275e2400abeaf3f51759d138a0154c7e3cff05b4d4a7754bd4f8a18b618bb3ae169382000763d6e175abd3270839fe824cc9354058aefa7b9117653898640ba98ab91d4c4b77c6398b7aedf8722b461357eebf7206911", 0x0, 0x1}, {0xf3, 0x77, &(0x7f0000002240)="bf715d05fff0c114c50cba9b6a4941f33f554428eaf15549ee11e814a43838d8f589509d0c385ba7893007f6eeb12fdc501b59fa98cc228642471290e07417417f13dd7b62616dfab60823fb5f04765af3e6e632337700ff3d90054d2ca3ca37867bd63f8b90b7e24b2e27d7bf1c6bf13d2f52de458c13", 0x1}, {0x5, 0x9, &(0x7f00000022c0)="5650ce6fc6b7b01ad6", 0x0, 0x1}, {0x1000, 0x68, &(0x7f0000002300)="acb71ff829f44815c5a3b14b7b9cc6394eed65889433a64d0afe5c88a21b644cc41d64bba75e4957288dc3924d4e630f7e169c762e05b70ac43340af8cee98967d3dc08a996d5282f9dd4ec985d3e0eb38c2371d8d53e91bf2e88591b366e4b1a4dd62dbd1d345ec", 0x0, 0x1}, {0x6, 0xe0, &(0x7f0000002380)="ff501038a89a24587ac0176d8392d8443ab364517575935d23f81a8c29143f12318eb864de9de6836ffd8906d96a2b8d27ca068ff3f6dc37ca60c306604d8a61fda9eb4c80ba8eb46b4a9ad557c92c1aeb9586eabd4bc9bff33192a6ec403d92ce45c2619fc3aa794171a1ee0a4cd296029ec0e0fd1976f72ab4622c40b51cacde3c7c8f4d5762950a523da4c4f160e7684533b7ab75712b69e40fef562f6fa2c1ef2ccc3bf9d74053047bb2c45010c32425fed196ac7289c1522eab8963b1c440a7e55b3937f6074379abcd03aa357f1835936f6bb5b1efa478f9a7e442182a", 0x0, 0x8a8ffa87dfae72a6}, {0x1, 0x1b, &(0x7f0000002480)="cdebe344d3dc2bbaa1012ff618f38c0e26550a4a249d6119ed2996", 0x0, 0x1}, {0x9, 0xf7, &(0x7f00000024c0)="09d392dce64538152cf2f7f5dba6f9144bc8a047af7ab08548afbd96c908b8083226621a71766d636ab64e95cf60b4c87512961c9913358d73f9e3f993348b2aa0b83e03ff3abf2396415210913dca0293c96d9ac43373917b13c5d23c096d11918e19a8927f35f83e9889d4a616c49a3b6b25d0da9c8005a74a497c3c85b4a5c32ff0edb671d681e2fcec02a870a0a6397a9eca98ae48372c360792314908c5b35d0038f80328d4f633f96d1eb10df992ba0192af6e9c0c530d2cfab33b37e2ec520528076132345c7f199b5b97f2d1d88b2def79a92899f54e6e6120c65d6af4c52f25cb486be6ee40787fbe65ea9e763de437b4189d", 0x1}]}) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000002700)={0x1, 'vcan0\x00', {}, 0xa64e}) (async) r4 = accept(0xffffffffffffffff, &(0x7f0000002740)=@ieee802154, &(0x7f00000027c0)=0x80) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x54, r2, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9e}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40800) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002940)='cpuset.memory_pressure\x00', 0x0, 0x0) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d40)={&(0x7f0000002b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xab, 0xab, 0x3, [@restrict={0xd, 0x0, 0x0, 0xb, 0x5}, @datasec={0x7, 0x2, 0x0, 0xf, 0x3, [{0x4, 0x1, 0xd}, {0x2, 0x6, 0x3a}], "0fe11a"}, @struct={0xa, 0x2, 0x0, 0x4, 0x0, 0x9, [{0x6, 0x2, 0xf}, {0xf, 0x4, 0x4}]}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x68, 0x0, 0x7b}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x4, 0x8}, @func={0xf, 0x0, 0x0, 0xc, 0x5}, @enum={0xc, 0x2, 0x0, 0x6, 0x4, [{0xf, 0x9fcf}, {0xb, 0x9}]}, @ptr={0x7, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x0]}}, &(0x7f0000002c80)=""/187, 0xc7, 0xbb, 0x1, 0x4, 0x10000}, 0x28) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002e00)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x7, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002e80)={0xffffffffffffffff, 0x1, 0x10}, 0xc) (async) pipe(&(0x7f0000002ec0)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002f80)={0x6, 0x1e, &(0x7f0000002980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3d5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x0, 0xc, 0x6, 0xb, 0xfffffffffffffff0, 0xffffffffffffffff}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa52}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002a80)='syzkaller\x00', 0x3, 0x8f, &(0x7f0000002ac0)=""/143, 0x40f00, 0x29, '\x00', r0, 0x25, r7, 0x8, &(0x7f0000002d80)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000002dc0)={0x0, 0xc, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002f00)=[r8, r9, r10, r5], &(0x7f0000002f40)=[{0x0, 0x5, 0xc, 0x1}, {0x0, 0x2, 0x6, 0x1}], 0x10, 0x4}, 0x94) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003040)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003240)={&(0x7f00000030c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xb, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x4}, @enum={0x5, 0x4, 0x0, 0x6, 0x4, [{0xe, 0x6}, {0xe, 0x4}, {0x2, 0x6}, {0x0, 0x1}]}]}, {0x0, [0x5f, 0x2e, 0x30, 0x2e, 0x5f, 0x5f, 0x30, 0x0, 0x30]}}, &(0x7f0000003140)=""/245, 0x5f, 0xf5, 0x1, 0x1, 0x10000, @value=r10}, 0x28) (async) ioctl$int_out(r11, 0x0, &(0x7f0000003280)) (async) connect$rds(r10, &(0x7f00000032c0)={0x2, 0x4e23, @loopback}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$pppl2tp(r10, &(0x7f0000003300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x1, 0x0, 0x4, {0xa, 0x4e24, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}}}, 0x32) (async) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000003340)=@req={0x7415, 0x3ff, 0x0, 0xe}, 0x10) (async) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003440)={&(0x7f00000033c0)={0x78, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x7c}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x448c0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r13, &(0x7f0000003580)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x4814) (async) sendmmsg$inet_sctp(r6, &(0x7f0000004b00)=[{&(0x7f00000035c0)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000003980)=[{&(0x7f0000003600)="6275f7dc286f3e7d38fff8caf51b0feaddba210edb2202f80c19d3e555179a9b1b556860cad693b8e6cc1ab7cb375f81098af0268942a33cd6cd3ace1087b5a10c27a8f1c2558fa2367766dd0c3bad01101b578b8828bb1debdcaa57fbe537ddf21ca5925781a3fc12fb5ee926cf82495892d28358b1b30495cf8472073203d5d662c31e749677ded6e44371c13b142a189cc750035ab589c8889f0edc539052fedeed66178819ddcb8bd66dcb710bb77c61cb210dad91dddaca85085e55da0b5aa5", 0xc2}, {&(0x7f0000003700)="ae768be34ee5b201390ba59b0620c8353a447b34efb96b66423b607069cdf642c0e32136371c668f9ede0c8961f2fc75ff64ecf9ae1a9fbfca21481ce9273398767370570145a41ff044152944c09d58a10deeb1b9f7ec009c8b17635e47f5028b20db3c411b9ee3775e314a814dfdc46b378cb086dd9afeee6df48a4be783d3f7a0162677fb81", 0x87}, {&(0x7f00000037c0)="a86f7591907a2d601885f2f44e4b3bca5019045842751795be84574b35d5b0c7e24d6fa4397239436ddde0f449b87c38045d7d489f3f1f03317ba8fa875772df3947dce09d36098f2e55f4560ee2f78abe78fbfdc63f5cc1f7486336fe46672e6fe371920f69341687c24cd7f437eb83887e8186c1fdeae86d887969d37a2dfab65adaf4b6618409fd943d80875c9bcbf9a9a2", 0x93}, {&(0x7f0000003880)}, {&(0x7f00000038c0)="b2d61af110744bca0e3d336b14f44036c42f6f0e893034fdaefc6858976b0e6f3d029d826e6da26bcd03a5058b34e84b0def25b26bc03902e6641fc20e2b103d25259fc192edec7c6edee6124cf70c7195c3b4810f0af2cdde050bc433c7f8e81b337d89f8955ecdcf76bb6cb29585e8e6fcaa0f330953f51d6752b900b8ab98177ebcea695b25a70b3b1334657710a2d7583ca04c6f4ce337b5cf6f1006f12a3af797bf8017fe418e4da3d1e2e35bd9feb5770a0e0d14ec60", 0xb9}], 0x5, &(0x7f0000003a80)=[@authinfo={0x18, 0x84, 0x6, {0x6}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x3411fbb8}}, @sndinfo={0x20, 0x84, 0x2, {0xffff, 0x8008, 0xce7f, 0xce09}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x5, 0x4, 0xffffffff, 0x1, 0x2, 0x5, 0x3}}, @init={0x18, 0x84, 0x0, {0x42d, 0x8, 0x2, 0xd}}, @authinfo={0x18, 0x84, 0x6, {0x1}}], 0xb0, 0x48010}, {&(0x7f0000003b40)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000003d40)=[{&(0x7f0000003b80)="76d176c983f98251fa37689ba2b58362f28048d153de31b99a0a1d9d15e0129f3113fb9e84b9ff031f2890e1ab60939030c27623d47b0d08776aee7bfcbe915963f044fe76e36a27379344e3e5b74aadf9bb3072dc07b8d439e691394c303ddf9337331bfa80dc5f77512b5f7310a9bb3b0b0d7e09b69558988fd426031d6633e53b1c60ee96d162a3968529d1", 0x8d}, {&(0x7f0000003c40)="04996bb1bdff54081a7affc2b76f0f78c4e5005e2f0b5a1c47d1a17a4f975c9a19a7e91c1366dc7217c0b47554eac578972999ecd307f1f435b741a9f584ac7e5bfc3588ca7112cd0fde0b8b397a06e2599f12d66b4acc82f2d0fdab7471e067ec657d0ccbf6e8119974062a0a787f9b704ae65bd330aed52ea28a2b0cbbdcfe49e2840b4f6be07ffc096b72ef98d3ebb4ac80007cebf6b076857378c3bdeb4db2657873ae27915840c075002e8e98495f9fd27c15ffb6059f36ea06793e4ddffc34d3275a50e11f9e42a252f7d2173a7b9daef71da3ac", 0xd7}], 0x2, &(0x7f0000003e80)=[@sndinfo={0x20, 0x84, 0x2, {0x289, 0x0, 0x1, 0x40}}, @init={0x18, 0x84, 0x0, {0x8, 0x2, 0x1, 0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x401, 0xe, 0x2, 0xa1b}}], 0x58, 0xc0}, {&(0x7f0000003f00)=@in6={0xa, 0x4e24, 0xee6, @mcast2, 0xa4}, 0x1c, &(0x7f0000004240)=[{&(0x7f0000003f40)="fb0b844f60d820a1c4f31dfcf4791a0fb6b0ce9735e3d81301cbc3b173fe5621dca1dc5707de45087b3409bbc36e01d64f5c477ec439460144863b2161b8ace795aa74f7ab8ae00a3824cdf335487196bc3ab0217c124f4eec399aa77cc224b1b9940b7294f881ba774f12ab01dfc34ccc721b13499589a1c57a99b79e9e180ace8bc5fe2d9d8a53ea547c644be2a4ce8476c006e4794466c3382e7bb26e1d59071ee54b855b608bf4ca9a29f4396e379c9f257f6ff882f2ff8647f2100ccb71d7cebe7db574", 0xc6}, {&(0x7f0000004040)="6b71c424314c130180b75bef53e9df06fe3e7937dde28501bafd9be914eb28b605cdcfdc26901b23fa64ec2b52425e984f2d50013573d9745b30d618de80dacbb3b0a3fcd4f1f4af0ca4f9568ae29821606368e24f4d", 0x56}, {&(0x7f00000040c0)="de712161f094efff14a6357f4dc1025b9ee5c27acededb66e9b53bc4ebedcc00d3ccf23cfc03ed9239a199d566d379edea346dabb96ea281846dc6b25e704cc1d9e70b838b8d9bcc36cf7aa41c7593d9334e15e6f053d1b1cab05af8fd67f94019b7446ac770aad3dfb3dfcc34bf5f9da56e33d7421ff11c12a2006691d6073a04575973d4239d7a70f229", 0x8b}, {&(0x7f0000004180)="2de56efae7888802a3e59c0810394d0b19c95781bce07f1df87ff2ca109afff7bf84d0fc94f8b5bda3afa8d45f3c206a3b79900a9c38b0ee2846954ca8fa129ec7b5ba2f2a7436debe468e557f146e2626286a9ab7ae4351e2a55fdbec67b22450206e29abe3d85132e8efc5dcaaf900944a47828d4bcc683f72fe5477615f1313a1334966c56b7806c2", 0x8a}], 0x4, &(0x7f0000004380)=[@authinfo={0x18, 0x84, 0x6, {0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x5, 0x6, 0xbd9d}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @init={0x18, 0x84, 0x0, {0x5, 0x101, 0x2, 0xffff}}], 0x68}, {&(0x7f0000004400)=@in6={0xa, 0x4e21, 0x3, @private0, 0x8}, 0x1c, &(0x7f0000004540)=[{&(0x7f0000004440)="57c148bbc5541abcac003f8b8bff2ba9586f828fee4b0bc64ba8d9933aa042d829976fe8b7d88a", 0x27}, {&(0x7f0000004480)="249dcf452ebca4ac13f728befb814ba637d5762ad3677deb36315ae660cd113d1d5d52ee227dd39184d8fcfbb3747afba7b83204a48adedb587e2fa3e0205ca935e55936f2fc78cf0dd5b98c4b6e83f794d5ef256edec42860c8342c80a0fe8c7a70bb79858c6c05b2281b92c854b555f3b5fb38c9d37290a85109499b4e970cb01aed8e599f30878e16d25e2db8550902fcb28283fbc82bd6fb49e249", 0x9d}], 0x2, &(0x7f0000004580)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x8801}, {&(0x7f00000045c0)=@in6={0xa, 0x4e23, 0xfffffffb, @remote, 0x2}, 0x1c, &(0x7f0000004980)=[{&(0x7f0000004600)="056b28f3b5d5dc3d3dbb24c1145a48db12e0e653d8e857043cee984aebc9795081ff2ba7e8c7148da310456180bbddfa65d41dcd64b9125798c2caf4a80ae7ae970ec30b321c528ce8de65790c501893f9741155426f85655319fdca943043f8ad16884167929331ac680c291198462321dcde15b355fb83e649e9bac7bf3154f3008f855418beaa69daeb3eabb8cfb92095b60685dfa25865e0dc189fc127474022d448f340dc337f48331e7192b995a9d7cf1a449ac136ea5529bb4d72bdce756e6a9ee50c41375585b0314f26b2343e2bf5a016904930e343794013b8be5d026568fa6a4c9b828e", 0xe9}, {&(0x7f0000004700)="d76e58cada34838eb5c8d75145f01da985476533ffc01874deab77ebad110eb9b1a2126753da0179ecc9b75781fccb6cac865695ecca3b67bd81aa1861", 0x3d}, {&(0x7f0000004740)="003afbf16fba582d9b500a14df5aa2e3485441f6779bb1bde4a93a58ef2afa5b5dd2b0b5301c91c1a65069f29e08f25930105abd74f4f486d9230ef98dabdb458559845db55a17c7cdf291bedb05d88eb9ffe352ea6d85b7a8edf63e5b10e158a37f98bb47029eb323235dec670d87ff35d376cb3b6b3beedbfb0975c0e2cc1249f9a78815", 0x85}, {&(0x7f0000004800)="a5462ffeb153d9b7f76e8e6d0924d376d3769e66c0c93082397d159deed1179f843e423333ce54be0708b2fda3c122897606b6b80ea86bd90947e43ffe01f2e26a26c5210ffbc1bd65f201201e8f8a7743b001a125b781c6fb8f90018196ccc98ecc3ad18bde999ccf83013f1fa8e304759f4b3b524a28a268f568a0a4d76aa36cb2b607a6f57ead17d2fec043c242c616800d1fc5fbc08d7a2e8fc1500f88d2c8c45f6670677010b8fabbb520590f4796838ea6adc2c907b478eb6c9d5b48cd6f31274be825f5c70efeaa065de002ff8fe18035cf2166584a96f94927073be970bb448f00250589638a2d30c90a0ed0d0", 0xf1}, {&(0x7f0000004900)="cbcd86934f4d666f404cc17e5d61615d8fbdad60438df2559e9d93c7833977db66bd7ceb4f3e92b049e83986cbcefa85afa983f8416ad1099e7d576bb742e9ab0e1f0c0076d7", 0x46}], 0x5, &(0x7f0000004a80)=[@sndinfo={0x20, 0x84, 0x2, {0x7, 0x8201, 0x9}}, @authinfo={0x18}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @init={0x18, 0x84, 0x0, {0xfeff, 0x4, 0x9, 0x1}}], 0x68, 0x40}], 0x5, 0x0) 6.143658422s ago: executing program 2 (id=2982): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x14, 0x80000) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) recvfrom$packet(r1, &(0x7f00000001c0)=""/85, 0x55, 0x100, &(0x7f00000002c0)={0x11, 0x4, r2, 0x1, 0xf9, 0x6, @local}, 0x14) 6.00266536s ago: executing program 2 (id=2984): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRES32=0x0], 0x30}}, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608", 0xc1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) (async) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, 0x0, &(0x7f00000000c0)) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r7, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)="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", 0x125}, {&(0x7f0000000cc0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4ba5a0300ee40f4ed347c7997c0c822b355f310b659f42003566ffc26878858a5f20373da0b75bed8465da60f840979b6b18d0cbeb297ce3e1e34d46e9e28b416e60e9f9dceb059bd608a506d563315b1a9c536f6ca", 0x96}], 0x2}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="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", 0x126}, {&(0x7f0000001a80)="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", 0x279}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r7, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000001000010800000000000000000000000002c6543500884619e1225bf935ac1b83edf181da7f5ec99053661e1c8cbcfc1ccf6a08abec4ba2813056c69f6ddb02000000a8ec4e161d09e23288bf3e543e68d6ebe5d04379d5e336871d34ffb841b19f1c310a6f5cdb56cb0969632145b88b08467639c218d732eccf42ed37bbabbeca9e0a08998554599fbe3f7920f6f7c0a51db9a317158f0bc500"/173, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) 5.535753807s ago: executing program 2 (id=2987): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000180)=""/212, 0x2e, 0x91, 0x1}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='virtio_transport_recv_pkt\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pid(r3, &(0x7f00000000c0), 0x40) pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 5.254857517s ago: executing program 2 (id=2989): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c0042e9", @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x50, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 4.943153911s ago: executing program 2 (id=2992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0xffdd) r1 = socket(0x10, 0x80002, 0x0) unshare(0x6a040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r3, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="60d99a4f3631"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x28}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x400000, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000007}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x2}}}}]}]}, 0x70}}, 0x0) r4 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) connect$l2tp(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x4}, 0x10) 3.530668411s ago: executing program 6 (id=3004): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) syz_emit_ethernet(0x1011, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0xffffffff, 0xc, 0x0, 0x0, 0x0, 0x2]}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b0b, &(0x7f0000000040)={'wlan1\x00', @random='\x00\x00 \x00'}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 2.002212489s ago: executing program 6 (id=3009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x48}}, 0x0) r4 = socket$kcm(0x29, 0x7, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000180)={r7, 0x6}, 0x8) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000900)={r2, r9}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x89, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r11, @ANYBLOB="00000000100000001c001a80080002802d00ff00080002"], 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r10, 0x8010661b, &(0x7f0000000940)) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xb0, r13, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x40) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@private, @local}, &(0x7f0000000500)=0xc) 1.554714094s ago: executing program 6 (id=3011): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="eaffffff04000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}]}, 0x1c}}, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r4 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="10004305", 0x4, 0x20008040, &(0x7f0000000040)={0x11, 0x8100, r5, 0x1, 0x6, 0x6, @broadcast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', r5, 0x2f, 0x3e, 0x2, 0x3, 0xc0, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x700, 0x7, 0x50d}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) 1.38718316s ago: executing program 5 (id=3012): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @hci={0x1f, 0x0, 0x3}, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0x4}}, 0x2, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)='bond0\x00', 0x5, 0x8ae1, 0x5}) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000ff8d"}) 1.188518397s ago: executing program 5 (id=3013): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e21, @multicast1}, 0xd1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x9, 0x6}) 1.055663882s ago: executing program 1 (id=3014): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10200}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48010000", @ANYRES16=r0, @ANYBLOB="020027bd7000fbdbdf252e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000380012800e000100697036677265746170000000240002800800040004000000060010000000000005001700", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0a0001"], 0x74}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x1c, r0, 0x5, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) 1.049754852s ago: executing program 6 (id=3015): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="2b637075205158bb7ae9217313b9e1a192d1249e45d3664423958a2c5ba754a5e76ef086d236a55c8c950d62470200000000000000fc0f6b997cdd31b4a3c5bf4d0c8ddbe3836481a857304a7b334c6535bc529b2b50effe78e4f5a7bbb95decb236f833c4fb347bbfcc02400d3ac2b6c31b6a60bbc705856f546022a352dc901c2cfc"], 0x5) write$cgroup_subtree(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB='-cpu'], 0x5) r3 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r3, &(0x7f00000001c0), 0x9) 866.522972ms ago: executing program 6 (id=3016): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newchain={0x1d0, 0x64, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x2, 0x4}, {0x7, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xb}, @filter_kind_options=@f_cgroup={{0xb}, {0x170, 0x2, [@TCA_CGROUP_EMATCHES={0x16c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xe0, 0x3, 0x0, 0x0, {{0xb, 0x0, 0x4d}, "4088dcebe13d6863ccc0350804db894c0a057093506fcb19be653b54be806c9c2cb431779172634d852bf210babfdb73817c90724a4ce4ae1b725d1104f79624ab99bdc0cd5c5b8c4fbee7e5b15d314e5048d41659ed95c9d0821b7e7022b2090eb16ef277b7b603ba68eeb0921523c6460117f760e04860f94f5c71f148da9ed13349b8d180fb04eb2147a41b1171cc1251b9d3c39bd95ee1848d80468dd064334ecbbd590a70bab3deb8d4b3f4773116b4b8ae0429504c3494c2bfa4b4017094d23b2ae3a4077b7f539e16d1369b4b2e"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x6}, {0x2, 0x5, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x68, 0x3, 0x0, 0x0, {{0x40, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="903963", @TCF_META_TYPE_VAR='g2', @TCF_META_TYPE_VAR="27af471f64a97071"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x4}, {0x7f, 0x4}}}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="2fe6493f", @TCF_META_TYPE_VAR="f8bd91", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="df8dc8391f31fcfc", @TCF_META_TYPE_VAR="3cf81007a178", @TCF_META_TYPE_VAR="87fb6078"]}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="80"]}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0xeaa}, @TCA_RATE={0x6, 0x5, {0x2, 0x8b}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x5}, 0xc890) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x240087f9, 0x0, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 863.449608ms ago: executing program 1 (id=3017): r0 = socket(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x400}, @TCA_PIE_LIMIT={0x8, 0x2, 0xad3}, @TCA_PIE_BETA={0x8, 0x5, 0x19}]}}]}, 0x48}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 847.86621ms ago: executing program 5 (id=3018): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x400000, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 659.711861ms ago: executing program 1 (id=3019): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x18, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4, 0xc5}]}, 0x18}, 0x1, 0x0, 0x0, 0x2400c845}, 0x4008094) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1c}}}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x9}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xa}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff35}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xfffe}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x82}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xe}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) 657.689007ms ago: executing program 5 (id=3020): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @random="3d4f1250b43a"}]}]}}}]}, 0x50}}, 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001a40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000180)="af8d3a434fa722933d1af3583b06a687c01adb011e08626fce64e276bc1ad1280f735ebf901604be2b3b5c9f534ebbd7fb0f09038dc2c358983bdaeca7dfdfe30c68f29fedfb045a6df708df545e75933e33fee38c6ffee646229525220246ea3b8f6045e37f9ba45ee789d7ec1e93b41bd120d76d488be2e0bb81fbb7922517c77d5d324479e85d58083835f711e0fa10d27eb3a58db6958939cf5acfe4d05c0e0bf7b80f32c94550c1fbc1a5fe9212bb98d175b649d015541da958a863501b7e29ace615b0df3e0f594f0076b84f855412ed031f24c23edb94e167fe7d", 0xde}, {&(0x7f0000000280)="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", 0xfd}], 0x3, &(0x7f0000000080)=[@iv={0x70, 0x117, 0x2, 0x58, "fb21e0e60ab5d052f9c3a6533a01e1243d32346e898db136ec8ba3d5321b236e60da695cb285c1b8f19f88eaa27df24805703e7d6e3bc032c8fee2bc7621d97705d081f63ca0f50e19e351582d09b8a7108cca2ffcf8aaf0"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x20, 0x117, 0x2, 0x8, "9502d1a58e4fed79"}], 0xc0, 0x50}, {0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="7d7eb48e4251ef0604115ac3eb2de893a94a4f081a9a9870ba6ac53b53cdb3a28fb291501f1aa4", 0x27}, {&(0x7f00000003c0)="54edc7ac45f7f65f829479140aa1f8e025939a34", 0x14}], 0x2, &(0x7f0000000440)=[@assoc={0x18, 0x117, 0x4, 0x7}], 0x18, 0x2404c880}, {0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="e6b1b66920d90f9f37ca20b45e32baf0560777842f854f56357e9e5e6e0390dab831f0be795cde691c42ba07144e6408f9e5af4dd6be3c37eb178437cf6424f89bc70e5c8b1d07f38b56dc4f02020ccdbc0cf0d7bf1160b2ca51e2a0dc28e9e1c5126afedd7ce3df308c488af7b1e4a969546d8ee8910a72169809e5af6d3887c3854ad657af6388bf04bd5535e267ee367258cf62edabd47b45617d4aa242ba10bbb33058c4429cd3af8889e791c90bc089bc07ad171c9eff6795f558f2b9d681ebb2e80d4c4bb848a5729e005743d2885862ac31f900cffa72257d083022e05b5585", 0xe3}, {&(0x7f0000000580)="51b7176fd1507b84e23496d6a75ea3c1852b667107bfb0c42e3ae14cba6d44fba19e33cfe7efe80d5b4fa9e48617a4806b42c905dcb84fa046b9", 0x3a}, {&(0x7f0000001680)="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", 0xfa}, {&(0x7f00000005c0)="17562a7d0e0303ffbcde107db130c5da53b455d4100e7d60704cf61c40a183caa21663a926a62095b8411fa03aacade39a768259d5003a7f64714acec192f0a3d2d1e5cff221fba7ca", 0x49}], 0x4, &(0x7f00000017c0)=[@assoc={0x18, 0x117, 0x4, 0x6}, @iv={0xc8, 0x117, 0x2, 0xb4, "c77dcbdccb95194bda4f7babede979610751173ac08b396df2f3cfcaf5a89a06e0afebf53024e42a81800666a106a47e414ad348605eed6cba46836bd8616728c0a886e7762fae1b19b4f3394d3e3b1292185d568adbb80190aaa151006db8d62a68312673260bc4e387e4afa731db5a48f21123dcf0c3664decae4afaf54e3967326a7317abe78880601d98809a7115a8c38f81f246691e98a02fdccb6c53248d11f5dbf7626a33f10b563f960da947afd59730"}, @op={0x18}, @iv={0x90, 0x117, 0x2, 0x79, "025b760ed3fd71e15c19aed311212fd809e20f61c595cf419d72a123d51aa14975076bacd28706c001cf6569e68e2f55e3c754769f6e4e4b6033dc1de19a8858e8894f5d64c5ada79136a98fc354234c75528ae24abe052f3c60585c9f616c0a76a25a291a518bca8581c915f882046af00135b067b74274d9"}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x98, 0x117, 0x2, 0x7f, "b462157ef87b7d5fb14213b6b936fee43dd2af74fe15adfc312f4565d5e46356d1dc70e711d1d44093c5b2ebab52722dca167da99b6186a679aff0023bcc60361d7f99d7b4046e0f3cdd4edec8ed50a0c3032d6f6c08bdf949e3d66950af7e57af4c59e5b7c272880f2daa6b7c12b4039724a5bda99f6c7982be2e9257dc30"}, @op={0x18}], 0x250, 0x4002804}], 0x3, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="2b00009df629728e6a6953d968a5d172e3001000", @ANYRES8=r0, @ANYBLOB="000000000000000008001b000000000008001a8004002d"], 0x30}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 589.141826ms ago: executing program 5 (id=3021): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x38}, 0x48) 502.314685ms ago: executing program 1 (id=3022): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @multicast2, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r1, 0x20, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x27, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 419.329031ms ago: executing program 6 (id=3023): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x41}}, &(0x7f0000000480)='GPL\x00', 0x7}, 0x90) r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x2, r3}, 0x10) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000540)=0x1c0, 0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}}, 0xc800) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x8, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb598}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r10, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x17, {0x18, 0x9, @l2={'ib', 0x3a, 'gre0\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x44024}, 0x20000044) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x34, r10, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x5, 0x5, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r7}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r11}, 0x10) r12 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r12, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) 412.189331ms ago: executing program 5 (id=3024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@RTM_NEWNSID={0x14, 0x58, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x20004804) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) r4 = socket$inet6(0xa, 0x5, 0x6) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x8, 0x5, 0x3, 0x0, 0x0, [{{}, 0xa600000000000000}, {{r1}, 0x7}, {{r4}, 0x7ff}]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x38}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) r11 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r7) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r11, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 211.847304ms ago: executing program 1 (id=3025): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000ef00000000000000000000000091108f00"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 0s ago: executing program 1 (id=3026): r0 = socket(0x21, 0x80000, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @multicast1}}, [0x401, 0x20, 0xed, 0xfffffffffffeffff, 0x2, 0x2, 0x7f1, 0x5, 0x7ff, 0x40, 0x4, 0x5, 0x8000000000000000, 0x5, 0x4]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={r1, 0xb, "a595f0393ed19b64c70174"}, &(0x7f0000000180)=0x13) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000001380)) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11a8bc", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'lo\x00'}) kernel console output (not intermixed with test programs): 07281][T10096] IPVS: set_ctl: invalid protocol: 181 127.0.0.1:20000 [ 186.267857][T10103] veth0: entered promiscuous mode [ 186.275490][T10102] veth0: left promiscuous mode [ 186.291592][T10104] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1160'. [ 186.301336][T10104] 8021q: VLANs not supported on gre0 [ 186.309530][T10104] netlink: 'syz.0.1160': attribute type 1 has an invalid length. [ 186.318371][T10104] netlink: 'syz.0.1160': attribute type 2 has an invalid length. [ 186.464961][T10101] netlink: 'syz.3.1162': attribute type 10 has an invalid length. [ 186.472940][T10101] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1162'. [ 186.896580][T10132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1171'. [ 187.077548][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1173'. [ 187.084284][T10142] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1174'. [ 187.405836][T10164] netlink: 'syz.2.1180': attribute type 7 has an invalid length. [ 187.545454][T10171] tipc: Enabled bearer , priority 0 [ 187.622353][T10171] syzkaller0: entered promiscuous mode [ 187.656365][T10171] syzkaller0: entered allmulticast mode [ 187.788122][T10166] tipc: Resetting bearer [ 189.507680][T10166] tipc: Disabling bearer [ 189.909464][ T8463] IPVS: starting estimator thread 0... [ 189.918106][T10240] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 189.920710][T10241] netlink: 'syz.4.1198': attribute type 10 has an invalid length. [ 190.013677][T10245] __nla_validate_parse: 9 callbacks suppressed [ 190.013698][T10245] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1199'. [ 190.044281][T10245] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1199'. [ 190.053860][T10242] IPVS: using max 23 ests per chain, 55200 per kthread [ 190.063324][T10245] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1199'. [ 190.074690][T10245] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1199'. [ 190.092607][T10245] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1199'. [ 190.106923][T10245] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1199'. [ 190.135256][T10245] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1199'. [ 190.149154][T10245] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1199'. [ 190.161018][T10245] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1199'. [ 190.175751][T10245] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1199'. [ 192.058554][T10351] netlink: 'syz.3.1228': attribute type 2 has an invalid length. [ 192.070329][T10352] netlink: 'syz.3.1228': attribute type 2 has an invalid length. [ 192.505280][T10374] netlink: 'syz.2.1236': attribute type 1 has an invalid length. [ 192.605151][T10374] 8021q: adding VLAN 0 to HW filter on device bond7 [ 192.617284][T10379] netlink: 'syz.0.1237': attribute type 2 has an invalid length. [ 192.722537][T10382] veth13: entered promiscuous mode [ 192.760035][T10382] bond7: (slave veth13): Enslaving as an active interface with a down link [ 192.868071][T10385] macsec0: entered promiscuous mode [ 192.887486][T10385] macsec0: entered allmulticast mode [ 192.908676][T10384] wg1: entered promiscuous mode [ 192.914650][T10384] wg1: entered allmulticast mode [ 192.925542][T10406] openvswitch: netlink: IPv4 tun info is not correct [ 192.960172][T10395] veth0: entered promiscuous mode [ 193.019020][T10394] veth0: left promiscuous mode [ 193.416479][T10428] tipc: Enabled bearer , priority 0 [ 193.427692][T10426] tipc: Enabling of bearer rejected, already enabled [ 193.445973][T10428] syzkaller0: entered promiscuous mode [ 193.463912][T10428] syzkaller0: entered allmulticast mode [ 193.472391][T10431] netlink: 'syz.3.1253': attribute type 58 has an invalid length. [ 193.526201][T10436] netlink: 'syz.1.1254': attribute type 1 has an invalid length. [ 193.626925][T10436] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.657242][T10441] tipc: Resetting bearer [ 193.766424][T10446] veth7: entered promiscuous mode [ 193.785479][T10446] bond5: (slave veth7): Enslaving as an active interface with a down link [ 193.844292][T10428] tipc: Resetting bearer [ 193.875190][T10428] tipc: Disabling bearer [ 194.075645][T10467] IPVS: Scheduler module ip_vs_sip not found [ 194.217498][T10474] netlink: 'syz.4.1263': attribute type 5 has an invalid length. [ 194.228301][T10478] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 194.235259][T10478] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 194.350793][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.387991][T10490] openvswitch: netlink: Unknown key attributes 2 [ 194.557804][T10500] Bluetooth: MGMT ver 1.23 [ 194.729612][T10505] tipc: Enabled bearer , priority 0 [ 194.743565][T10505] syzkaller0: entered promiscuous mode [ 194.750131][T10505] syzkaller0: entered allmulticast mode [ 194.768431][T10505] netlink: 'syz.4.1274': attribute type 10 has an invalid length. [ 194.788958][T10505] tipc: Resetting bearer [ 194.798580][T10503] tipc: Resetting bearer [ 194.836817][T10503] tipc: Disabling bearer [ 195.106413][T10534] netlink: 'syz.4.1282': attribute type 1 has an invalid length. [ 195.332798][T10541] __nla_validate_parse: 55 callbacks suppressed [ 195.332819][T10541] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1284'. [ 195.380675][T10541] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1284'. [ 195.425323][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'. [ 196.205282][T10573] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1295'. [ 196.441184][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 196.472100][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1302'. [ 196.473578][T10591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1301'. [ 196.588824][T10602] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1306'. [ 196.641375][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'. [ 196.725997][T10601] netlink: 'syz.1.1304': attribute type 2 has an invalid length. [ 196.930875][T10619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1311'. [ 197.186400][T10632] netlink: 'syz.1.1315': attribute type 39 has an invalid length. [ 197.469356][T10645] tipc: Enabled bearer , priority 0 [ 197.481231][T10645] syzkaller0: entered promiscuous mode [ 197.490291][T10645] syzkaller0: entered allmulticast mode [ 197.526432][T10645] tipc: Resetting bearer [ 197.546544][T10644] tipc: Resetting bearer [ 197.572802][T10644] tipc: Disabling bearer [ 197.585673][T10653] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 197.643927][T10653] netlink: 'syz.1.1322': attribute type 22 has an invalid length. [ 197.784514][T10660] netlink: 'syz.2.1325': attribute type 3 has an invalid length. [ 198.022604][T10673] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.163093][T10685] macvlan0: entered allmulticast mode [ 198.182156][T10685] veth1_vlan: entered allmulticast mode [ 198.235019][T10685] veth1_vlan: left allmulticast mode [ 198.357129][T10685] macvlan0 (unregistering): left allmulticast mode [ 198.371225][T10693] netlink: 'syz.1.1337': attribute type 1 has an invalid length. [ 198.605065][T10693] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.658647][T10695] veth9: entered promiscuous mode [ 198.675950][T10695] bond6: (slave veth9): Enslaving as an active interface with a down link [ 198.742739][T10701] vlan4: entered allmulticast mode [ 198.769433][T10701] bond6: entered allmulticast mode [ 198.807620][T10701] bond6: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 198.983452][T10704] tc_dump_action: action bad kind [ 199.022416][T10719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.669084][T10755] netlink: 'syz.2.1355': attribute type 1 has an invalid length. [ 199.678744][T10753] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 199.726780][T10755] 8021q: adding VLAN 0 to HW filter on device bond9 [ 199.801284][T10755] veth15: entered promiscuous mode [ 199.825802][T10755] bond9: (slave veth15): Enslaving as an active interface with a down link [ 199.912820][T10761] vlan0: entered allmulticast mode [ 199.918056][T10761] bond9: entered allmulticast mode [ 199.925537][T10761] bond9: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 200.090286][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 200.265168][T10774] xfrm1: entered promiscuous mode [ 200.300604][T10774] xfrm1: entered allmulticast mode [ 200.647913][T10802] netlink: 'syz.1.1367': attribute type 13 has an invalid length. [ 200.663428][T10802] lo: entered promiscuous mode [ 200.673573][T10802] lo: entered allmulticast mode [ 200.683526][T10802] tunl0: entered promiscuous mode [ 200.688717][T10802] tunl0: entered allmulticast mode [ 200.697820][T10802] gre0: entered promiscuous mode [ 200.708287][T10802] gre0: entered allmulticast mode [ 200.737793][T10802] gretap0: entered promiscuous mode [ 200.745371][T10808] sctp: [Deprecated]: syz.2.1369 (pid 10808) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.745371][T10808] Use struct sctp_sack_info instead [ 200.754138][T10802] gretap0: refused to change device tx_queue_len [ 200.768786][T10802] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 200.802610][ T8463] lo speed is unknown, defaulting to 1000 [ 200.813012][ T8463] syz0: Port: 1 Link DOWN [ 200.833755][T10811] netlink: 'syz.3.1370': attribute type 1 has an invalid length. [ 200.895890][T10811] 8021q: adding VLAN 0 to HW filter on device bond10 [ 200.976473][T10811] vlan4: entered allmulticast mode [ 200.982803][T10811] bond10: entered allmulticast mode [ 201.228634][ T8463] lo speed is unknown, defaulting to 1000 [ 201.286409][T10824] __nla_validate_parse: 21 callbacks suppressed [ 201.286431][T10824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1374'. [ 201.316197][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 201.336541][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 201.344466][ T8463] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 201.381488][ T8463] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 201.620814][ T8465] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 201.835956][T10853] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1385'. [ 202.258635][ T8466] IPVS: starting estimator thread 0... [ 202.265208][T10868] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 202.285911][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1390'. [ 202.390630][T10877] IPVS: using max 28 ests per chain, 67200 per kthread [ 202.426742][T10882] dvmrp1: left allmulticast mode [ 202.918310][T10920] netlink: 'syz.1.1404': attribute type 33 has an invalid length. [ 202.926610][T10920] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1404'. [ 202.977601][T10922] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1403'. [ 203.236182][T10928] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 203.292112][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 203.576931][T10947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1410'. [ 203.666117][T10947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1410'. [ 203.880550][T10943] netlink: 'syz.4.1411': attribute type 1 has an invalid length. [ 203.886608][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 203.900351][T10943] netlink: 'syz.4.1411': attribute type 1 has an invalid length. [ 203.981927][T10966] netlink: 'syz.3.1413': attribute type 1 has an invalid length. [ 204.052816][T10966] 8021q: adding VLAN 0 to HW filter on device bond11 [ 204.100467][T10966] veth15: entered promiscuous mode [ 204.119531][T10966] bond11: (slave veth15): Enslaving as an active interface with a down link [ 204.147279][T10966] vlan4: entered allmulticast mode [ 204.152721][T10966] bond11: entered allmulticast mode [ 204.161444][T10966] bond11: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 204.332898][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1420'. [ 204.391058][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1421'. [ 204.552704][T10998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.834107][T11012] ipvlan1: default FDB implementation only supports local addresses [ 205.050392][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 205.128223][T11027] netlink: 'syz.2.1433': attribute type 1 has an invalid length. [ 205.151234][T11028] netlink: 'syz.2.1433': attribute type 1 has an invalid length. [ 205.369219][T11026] bridge11: entered allmulticast mode [ 205.398769][T11031] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 206.154957][T11080] netlink: 'syz.4.1447': attribute type 4 has an invalid length. [ 206.306891][T11089] __nla_validate_parse: 8 callbacks suppressed [ 206.306910][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1450'. [ 206.330311][T11086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1448'. [ 206.369758][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1448'. [ 206.480847][T11086] veth17: entered allmulticast mode [ 206.517444][T11089] syzkaller1: entered promiscuous mode [ 206.524793][T11089] syzkaller1: entered allmulticast mode [ 206.548665][T11095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1452'. [ 206.574360][T11089] 8021q: VLANs not supported on syzkaller1 [ 206.874957][T11118] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1456'. [ 206.951886][T11118] vlan4: entered allmulticast mode [ 206.964009][T11118] erspan0: entered allmulticast mode [ 207.150165][ T8463] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 207.254550][T11116] syzkaller0: entered promiscuous mode [ 207.273044][T11116] syzkaller0: entered allmulticast mode [ 207.361760][T11141] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1464'. [ 207.531251][T11150] netlink: 'syz.2.1466': attribute type 1 has an invalid length. [ 207.597425][T11153] netlink: 'syz.1.1468': attribute type 1 has an invalid length. [ 207.607047][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1468'. [ 207.608135][T11148] veth7: entered promiscuous mode [ 207.647421][T11148] veth7: entered allmulticast mode [ 207.691176][ T8463] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 207.825089][T11150] 8021q: adding VLAN 0 to HW filter on device bond10 [ 207.891772][T11156] veth17: entered promiscuous mode [ 207.911371][T11156] bond10: (slave veth17): Enslaving as an active interface with a down link [ 208.059774][T11179] pimreg3: entered allmulticast mode [ 208.253452][T11190] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1478'. [ 208.375224][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 208.393584][T11196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1480'. [ 208.607670][T11208] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 208.690421][T11208] 8021q: adding VLAN 0 to HW filter on device bond11 [ 208.729755][T11214] veth19: entered promiscuous mode [ 208.752808][T11214] bond11: (slave veth19): Enslaving as an active interface with a down link [ 208.767764][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.815191][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.094377][T11233] netlink: 'syz.0.1492': attribute type 1 has an invalid length. [ 209.136420][T11240] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 209.144763][T11240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.544594][T11268] veth0: entered promiscuous mode [ 209.567787][T11267] veth0: left promiscuous mode [ 209.589648][T11266] tipc: Enabled bearer , priority 0 [ 209.608139][T11266] syzkaller0: entered promiscuous mode [ 209.622248][T11266] syzkaller0: entered allmulticast mode [ 209.652110][T11266] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 209.683712][T11266] tipc: Resetting bearer [ 209.773239][T11265] tipc: Resetting bearer [ 209.897614][T11265] tipc: Disabling bearer [ 210.315889][T11288] v: renamed from dummy0 (while UP) [ 210.573968][T11290] 8021q: adding VLAN 0 to HW filter on device bond6 [ 210.602628][T11297] netlink: 'syz.1.1513': attribute type 29 has an invalid length. [ 210.666373][T11291] vlan0: entered allmulticast mode [ 210.679292][T11291] bond6: entered allmulticast mode [ 210.721390][T11300] netlink: 'syz.1.1513': attribute type 29 has an invalid length. [ 210.979603][T11312] netlink: 'syz.4.1519': attribute type 1 has an invalid length. [ 211.081875][T11313] netlink: 'syz.2.1517': attribute type 2 has an invalid length. [ 211.466254][T11350] __nla_validate_parse: 11 callbacks suppressed [ 211.466276][T11350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1530'. [ 211.629163][T11357] tipc: Enabling of bearer rejected, failed to enable media [ 211.773481][ T5876] Bluetooth: hci2: command 0x0406 tx timeout [ 211.783280][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 211.792857][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 212.081685][T11378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1537'. [ 212.143413][T11385] syzkaller0: entered promiscuous mode [ 212.153132][T11385] syzkaller0: entered allmulticast mode [ 212.250369][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 212.288368][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'. [ 212.550640][T11405] netlink: 'syz.3.1546': attribute type 1 has an invalid length. [ 212.579244][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'. [ 212.591412][T11409] sock: sock_timestamping_bind_phc: sock not bind to device [ 212.596099][T11408] netlink: 'syz.0.1548': attribute type 1 has an invalid length. [ 212.748807][T11408] vlan0: entered allmulticast mode [ 212.754200][T11418] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1551'. [ 212.757669][T11408] veth1: entered allmulticast mode [ 212.821429][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1552'. [ 212.833776][T11418] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1551'. [ 212.852874][T11420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1552'. [ 213.025099][T11425] netlink: 'syz.1.1554': attribute type 2 has an invalid length. [ 213.035732][T11425] netlink: 'syz.1.1554': attribute type 2 has an invalid length. [ 213.101050][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 213.581813][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1564'. [ 213.809610][T11464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.924154][T11467] veth21: entered promiscuous mode [ 214.360610][T11491] validate_nla: 1 callbacks suppressed [ 214.360632][T11491] netlink: 'syz.0.1572': attribute type 13 has an invalid length. [ 214.388514][T11491] lo: entered allmulticast mode [ 214.406898][T11491] tunl0: entered allmulticast mode [ 214.432733][T11491] gre0: entered allmulticast mode [ 214.449649][T11491] gretap0: entered allmulticast mode [ 214.472338][T11491] gretap0: refused to change device tx_queue_len [ 214.495593][T11491] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 214.606704][T11493] netlink: 'syz.2.1573': attribute type 1 has an invalid length. [ 215.120692][T11504] team0: Device vti0 is up. Set it down before adding it as a team port [ 215.829665][T11535] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 215.935293][T11535] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.026625][T11542] veth9: entered promiscuous mode [ 216.038116][T11542] bond4: (slave veth9): Enslaving as an active interface with a down link [ 216.084878][T11535] vlan5: entered allmulticast mode [ 216.090395][T11535] bond4: entered allmulticast mode [ 216.097685][T11535] bond4: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 216.463681][T11565] lo speed is unknown, defaulting to 1000 [ 217.383478][T11606] netlink: 'syz.3.1601': attribute type 1 has an invalid length. [ 217.441182][T11610] __nla_validate_parse: 14 callbacks suppressed [ 217.441203][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1602'. [ 217.462037][T11610] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1602'. [ 217.555247][T11606] 8021q: adding VLAN 0 to HW filter on device bond12 [ 217.627252][T11612] veth19: entered promiscuous mode [ 217.639030][T11612] bond12: (slave veth19): Enslaving as an active interface with a down link [ 217.644354][T11617] netlink: 'syz.2.1605': attribute type 10 has an invalid length. [ 217.680151][T11619] sctp: [Deprecated]: syz.0.1604 (pid 11619) Use of int in max_burst socket option deprecated. [ 217.680151][T11619] Use struct sctp_assoc_value instead [ 217.702130][T11614] vlan4: entered allmulticast mode [ 217.707463][T11614] bond12: entered allmulticast mode [ 217.718198][T11614] bond12: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 217.771515][T11622] syzkaller1: entered promiscuous mode [ 217.777140][T11622] syzkaller1: entered allmulticast mode [ 217.901182][T11622] wg1: entered promiscuous mode [ 217.911484][T11622] wg1: entered allmulticast mode [ 217.926648][T11626] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1607'. [ 217.968222][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1608'. [ 218.618334][T11667] netlink: 'syz.0.1618': attribute type 1 has an invalid length. [ 218.724327][T11667] 8021q: adding VLAN 0 to HW filter on device bond7 [ 218.796614][T11677] veth15: entered promiscuous mode [ 218.812820][T11677] bond7: (slave veth15): Enslaving as an active interface with a down link [ 218.845975][T11680] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 218.852511][T11680] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 218.861471][T11667] vlan0: entered allmulticast mode [ 218.871312][T11667] bond7: entered allmulticast mode [ 218.878531][T11667] bond7: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 219.218494][T11702] bond0: option mode: unable to set because the bond device has slaves [ 219.507614][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1632'. [ 219.664390][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 219.686387][T11726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1635'. [ 219.721264][T11726] openvswitch: netlink: Key type 85 is out of range max 32 [ 219.744089][T11738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1638'. [ 220.414416][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1647'. [ 220.511665][T11774] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1649'. [ 220.748525][T11783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.107701][T11802] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.125259][T11802] gretap2: entered promiscuous mode [ 221.136887][T11802] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 221.158810][T11804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.274602][T11802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.567904][T11833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.735749][T11849] netlink: 'syz.4.1671': attribute type 1 has an invalid length. [ 221.763084][T11849] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 221.778878][T11849] tipc: Enabled bearer , priority 10 [ 221.799511][T11852] sit0: entered promiscuous mode [ 221.837216][T11852] netlink: 'syz.3.1672': attribute type 1 has an invalid length. [ 222.529083][T11887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.547599][T11886] netlink: 'syz.4.1682': attribute type 21 has an invalid length. [ 222.566977][T11886] __nla_validate_parse: 16 callbacks suppressed [ 222.566998][T11886] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1682'. [ 222.593511][T11886] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1682'. [ 222.866532][T11910] veth0: entered promiscuous mode [ 223.090609][T11899] veth0: left promiscuous mode [ 223.231430][T11916] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1689'. [ 223.261261][T11919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1689'. [ 223.276393][T11918] openvswitch: netlink: IPv4 tunnel dst address is zero [ 223.546683][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1694'. [ 223.552275][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1692'. [ 223.602970][T11932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1692'. [ 223.838333][T11953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'. [ 223.870912][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1700'. [ 223.919409][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1700'. [ 223.970981][T11962] openvswitch: netlink: IP tunnel TTL not specified. [ 225.163801][T12028] delete_channel: no stack [ 225.259187][T12039] netlink: 'syz.2.1721': attribute type 10 has an invalid length. [ 225.281199][T12039] veth0_macvtap: left promiscuous mode [ 225.495875][T12052] netlink: 'syz.1.1724': attribute type 2 has an invalid length. [ 225.754742][T12063] openvswitch: netlink: Duplicate or invalid key (type 0). [ 225.809175][T12063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.837577][T12071] netlink: 'syz.0.1731': attribute type 1 has an invalid length. [ 226.104848][T12078] xt_policy: too many policy elements [ 226.373682][T12092] syzkaller1: entered promiscuous mode [ 226.391321][T12092] syzkaller1: entered allmulticast mode [ 226.421739][T12098] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 226.621809][T12104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.631078][T12109] netlink: 'syz.4.1744': attribute type 1 has an invalid length. [ 226.871947][T12119] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.970027][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 227.033538][T12119] macvlan2: entered promiscuous mode [ 227.038895][T12119] macvlan2: entered allmulticast mode [ 227.081813][T12119] bond7: (slave macvlan2): Opening slave failed [ 227.141165][T12135] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 227.455569][T12166] netlink: 'syz.1.1760': attribute type 1 has an invalid length. [ 227.593750][T12174] __nla_validate_parse: 76 callbacks suppressed [ 227.593769][T12174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1762'. [ 227.789544][T12184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1766'. [ 227.923250][T12192] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 228.250347][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.508797][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1774'. [ 228.526199][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1774'. [ 228.969008][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1780'. [ 229.127744][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1783'. [ 229.338279][T12252] tipc: Enabling of bearer rejected, failed to enable media [ 229.347789][T12251] tipc: Enabling of bearer rejected, failed to enable media [ 229.506655][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1786'. [ 229.546416][T12258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1786'. [ 229.669378][T12269] netlink: 'syz.1.1788': attribute type 1 has an invalid length. [ 229.682806][T12264] team_slave_0: entered promiscuous mode [ 229.688753][T12264] team_slave_1: entered promiscuous mode [ 229.791784][T12269] 8021q: adding VLAN 0 to HW filter on device bond8 [ 229.813555][T12279] vlan4: entered allmulticast mode [ 229.839972][T12279] bond8: entered allmulticast mode [ 229.998507][T12273] veth13: entered promiscuous mode [ 230.009415][T12273] bond8: (slave veth13): Enslaving as an active interface with a down link [ 230.274585][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 230.286242][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1794'. [ 230.598420][T12319] vxcan1: tx address claim with different name [ 230.607871][T12319] netlink: 'syz.2.1799': attribute type 1 has an invalid length. [ 230.836887][T12329] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 230.858819][T12329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1801'. [ 230.876868][T12329] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 230.957313][T12304] netlink: 'syz.1.1793': attribute type 2 has an invalid length. [ 231.097594][T12333] netlink: 'syz.3.1803': attribute type 1 has an invalid length. [ 231.140648][T12333] 8021q: adding VLAN 0 to HW filter on device bond13 [ 231.185180][T12333] veth21: entered promiscuous mode [ 231.197505][T12333] bond13: (slave veth21): Enslaving as an active interface with a down link [ 232.156662][T12389] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 232.708743][T12416] bond0: Device is already in use. [ 232.719524][T12416] bond0: Device is already in use. [ 232.841906][T12428] __nla_validate_parse: 4 callbacks suppressed [ 232.841927][T12428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1834'. [ 232.934357][T12437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1837'. [ 232.966344][T12437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1837'. [ 233.124840][T12448] ieee802154 phy0 wpan0: encryption failed: -22 [ 233.553568][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1843'. [ 233.972516][T12482] delete_channel: no stack [ 234.008829][T12482] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1848'. [ 234.472239][T12500] bridge_slave_0: left allmulticast mode [ 234.478159][T12500] bridge_slave_0: left promiscuous mode [ 234.495541][T12500] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.588457][T12500] bridge_slave_1: left allmulticast mode [ 234.651218][T12500] bridge_slave_1: left promiscuous mode [ 234.687755][T12500] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.795475][T12500] bond0: (slave bond_slave_0): Releasing backup interface [ 234.857894][T12500] bond0: (slave bond_slave_1): Releasing backup interface [ 234.913296][T12500] team0: Port device team_slave_0 removed [ 234.962043][T12500] team0: Port device team_slave_1 removed [ 234.985244][T12500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.028054][T12500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.052669][T12500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.067347][T12500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.134743][T12500] bond0: (slave wlan1): Releasing backup interface [ 235.182091][T12500] bond1: (slave veth3): Releasing active interface [ 235.241021][T12500] bond2: (slave veth5): Releasing active interface [ 235.342802][T12500] bond4: (slave veth9): Releasing active interface [ 235.391963][T12500] bond5: (slave gretap2): Releasing backup interface [ 235.438488][T12533] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 235.451913][T12514] team0: Mode changed to "loadbalance" [ 235.587692][T12539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1858'. [ 235.698972][T12546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1861'. [ 235.961367][T12562] netlink: 'syz.2.1866': attribute type 1 has an invalid length. [ 235.985559][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1866'. [ 236.061029][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1868'. [ 236.088339][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1868'. [ 236.174108][T12572] syzkaller0: entered promiscuous mode [ 236.186221][T12572] syzkaller0: entered allmulticast mode [ 236.217553][T12572] tipc: Enabled bearer , priority 0 [ 236.251285][T12571] tipc: Resetting bearer [ 236.309093][T12571] tipc: Disabling bearer [ 236.324844][T12575] netlink: 'syz.4.1870': attribute type 3 has an invalid length. [ 236.538989][T12578] vxcan1: tx address claim with dest, not broadcast [ 236.945578][T12597] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 237.063070][T12600] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 237.214810][T12613] gretap0: left allmulticast mode [ 237.225571][T12613] 0ªî{X¹¦: renamed from gretap0 [ 237.312621][T12613] 0ªî{X¹¦: left promiscuous mode [ 237.328956][T12613] 0ªî{X¹¦: entered allmulticast mode [ 237.352079][T12613] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 237.386548][T12617] netlink: 'syz.4.1885': attribute type 12 has an invalid length. [ 237.515305][T12626] netlink: 'syz.1.1887': attribute type 1 has an invalid length. [ 237.836549][T12641] netlink: 'syz.0.1892': attribute type 1 has an invalid length. [ 237.885979][T12641] 8021q: adding VLAN 0 to HW filter on device bond8 [ 238.015985][T12643] veth17: entered promiscuous mode [ 238.052695][T12646] __nla_validate_parse: 7 callbacks suppressed [ 238.052716][T12646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1893'. [ 238.073442][T12643] bond8: (slave veth17): Enslaving as an active interface with a down link [ 238.130145][T12645] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 238.133960][T12650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1896'. [ 238.268020][T12650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.581222][T12675] netlink: 'syz.2.1904': attribute type 16 has an invalid length. [ 238.595127][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1904'. [ 238.807899][T12689] netlink: 'syz.1.1908': attribute type 1 has an invalid length. [ 238.851832][T12689] 8021q: adding VLAN 0 to HW filter on device bond9 [ 238.898750][T12689] veth15: entered promiscuous mode [ 238.916314][T12689] bond9: (slave veth15): Enslaving as an active interface with a down link [ 238.959656][T12689] vlan4: entered allmulticast mode [ 238.973349][T12689] bond9: entered allmulticast mode [ 238.985658][T12689] bond9: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 239.362141][T12704] tipc: Enabling of bearer rejected, failed to enable media [ 239.421886][ T51] Bluetooth: hci4: link tx timeout [ 239.427197][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 239.447662][ T5862] Bluetooth: hci4: link tx timeout [ 239.455285][ T5862] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 239.463607][ T5862] Bluetooth: hci4: link tx timeout [ 239.469351][ T5862] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 239.478763][ T5862] Bluetooth: hci4: link tx timeout [ 239.487816][ T5862] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 239.495731][ T5862] Bluetooth: hci4: link tx timeout [ 239.501293][ T5862] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 239.588188][T12711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1917'. [ 239.639597][T12718] netlink: 'syz.1.1919': attribute type 1 has an invalid length. [ 239.729783][T12718] 8021q: adding VLAN 0 to HW filter on device bond10 [ 239.824200][T12724] veth17: entered promiscuous mode [ 239.839355][T12724] bond10: (slave veth17): Enslaving as an active interface with a down link [ 239.990145][T12739] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1925'. [ 240.046156][T12740] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1925'. [ 240.153048][T12743] vlan0: entered promiscuous mode [ 240.208797][ T5862] Bluetooth: hci4: link tx timeout [ 240.215269][ T5862] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 240.223279][ T5862] Bluetooth: hci4: link tx timeout [ 240.228486][ T5862] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 240.236451][ T5862] Bluetooth: hci4: link tx timeout [ 240.241707][ T5862] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 240.249524][ T5862] Bluetooth: hci4: link tx timeout [ 240.255246][ T5862] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 240.337950][T12753] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 240.344505][T12753] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 240.467239][T12761] netlink: 'syz.1.1932': attribute type 1 has an invalid length. [ 240.475163][T12761] netlink: 784 bytes leftover after parsing attributes in process `syz.1.1932'. [ 240.578596][T12765] team0: Device veth1_macvtap failed to register rx_handler [ 240.720475][T12770] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1936'. [ 240.730399][T12770] nbd: must specify a device to reconfigure [ 240.762495][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1937'. [ 240.785835][T12768] 8021q: adding VLAN 0 to HW filter on device bond12 [ 240.927612][T12768] veth23: entered promiscuous mode [ 240.944184][T12768] bond12: (slave veth23): Enslaving as an active interface with a down link [ 240.983969][T12778] vlan0: entered allmulticast mode [ 240.989304][T12778] bond12: entered allmulticast mode [ 240.997223][T12778] bond12: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 241.019186][T12777] netlink: 'syz.1.1939': attribute type 11 has an invalid length. [ 241.186692][ T5862] Bluetooth: hci4: link tx timeout [ 241.198255][ T5862] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 241.206400][ T5862] Bluetooth: hci4: link tx timeout [ 241.212804][ T5862] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 241.221678][ T5862] Bluetooth: hci4: link tx timeout [ 241.226894][ T5862] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 241.281229][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1943'. [ 241.366974][T12801] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 241.450464][ T5862] Bluetooth: hci4: command 0x0405 tx timeout [ 242.974550][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 243.325349][T12884] validate_nla: 3 callbacks suppressed [ 243.325370][T12884] netlink: 'syz.1.1962': attribute type 4 has an invalid length. [ 243.370706][ T51] Bluetooth: hci0: command tx timeout [ 243.775969][T12904] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 243.828322][T12904] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 243.956660][T12917] __nla_validate_parse: 6 callbacks suppressed [ 243.956681][T12917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1971'. [ 243.979460][T12916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1972'. [ 244.285988][T12935] netlink: 'syz.2.1978': attribute type 39 has an invalid length. [ 244.407289][T12942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1980'. [ 244.433094][T12942] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1980'. [ 244.717052][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1981'. [ 245.183577][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1986'. [ 245.201977][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1988'. [ 245.297823][T12966] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1986'. [ 245.455909][T12988] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1991'. [ 245.606380][T12997] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1993'. [ 245.897221][T11716] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 246.031268][T13026] netlink: 'syz.0.2000': attribute type 1 has an invalid length. [ 246.888266][T13054] netlink: 'syz.4.2010': attribute type 3 has an invalid length. [ 248.067739][T13118] vlan0: entered allmulticast mode [ 248.079985][T13118] bridge0: entered allmulticast mode [ 248.168260][T13118] gretap2: entered promiscuous mode [ 248.377747][T13141] tipc: Enabled bearer , priority 0 [ 248.468527][T13133] syzkaller0: entered promiscuous mode [ 248.489588][T13133] syzkaller0: entered allmulticast mode [ 248.544209][T13146] netlink: 'syz.4.2038': attribute type 1 has an invalid length. [ 248.583239][T13146] netlink: 'syz.4.2038': attribute type 12 has an invalid length. [ 248.606880][T13146] netlink: 'syz.4.2038': attribute type 11 has an invalid length. [ 248.758777][T13131] tipc: Resetting bearer [ 248.810698][T13131] tipc: Disabling bearer [ 248.829307][T13165] netlink: 'syz.2.2042': attribute type 1 has an invalid length. [ 249.185417][T13185] netlink: 'syz.3.2044': attribute type 16 has an invalid length. [ 249.215277][T13185] netlink: 'syz.3.2044': attribute type 17 has an invalid length. [ 249.282496][T13185] sit0: left promiscuous mode [ 249.325939][T13191] __nla_validate_parse: 11 callbacks suppressed [ 249.325959][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2050'. [ 249.348128][T13185] dummy0: left promiscuous mode [ 249.357375][T13185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.535277][T13191] hsr_slave_0 (unregistering): left promiscuous mode [ 249.701013][T13208] veth0: entered promiscuous mode [ 249.708135][T13206] veth0: left promiscuous mode [ 249.777930][T13210] openvswitch: netlink: Key type 770 is out of range max 32 [ 249.938714][T13221] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2062'. [ 249.983700][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2062'. [ 249.998341][T13226] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2063'. [ 250.831532][T13266] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2073'. [ 250.908855][T13271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2075'. [ 251.038126][T13279] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 251.125777][T13285] netlink: 211288 bytes leftover after parsing attributes in process `syz.0.2079'. [ 251.494655][T13311] netlink: 'syz.4.2088': attribute type 1 has an invalid length. [ 251.628952][T13316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2090'. [ 251.903037][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2094'. [ 251.972057][T13331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2094'. [ 252.034077][T13336] netlink: 'syz.0.2095': attribute type 3 has an invalid length. [ 252.050699][T13336] netlink: 'syz.0.2095': attribute type 3 has an invalid length. [ 252.224462][T13343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.232211][T13343] IPv6: NLM_F_CREATE should be set when creating new route [ 252.292631][T13351] netlink: 'syz.2.2101': attribute type 3 has an invalid length. [ 252.813512][T13374] ip6gre1: entered allmulticast mode [ 253.829582][T13433] tipc: Enabled bearer , priority 0 [ 253.852771][T13433] syzkaller0: entered promiscuous mode [ 253.870655][T13433] syzkaller0: entered allmulticast mode [ 253.890263][T13433] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 253.912625][T13433] openvswitch: netlink: IP tunnel dst address not specified [ 253.923955][T13433] tipc: Resetting bearer [ 253.934004][T13432] tipc: Resetting bearer [ 253.957319][T13432] tipc: Disabling bearer [ 254.637048][T13477] __nla_validate_parse: 12 callbacks suppressed [ 254.637073][T13477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 254.747244][T13481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2142'. [ 254.779034][T13481] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2142'. [ 254.793879][T13481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2142'. [ 254.807822][T13481] vlan0: entered promiscuous mode [ 254.859975][T13481] bridge0: entered promiscuous mode [ 254.893375][T13481] vlan0: left allmulticast mode [ 254.898395][T13481] bridge0: left allmulticast mode [ 254.915387][T13471] infiniband syz!: set down [ 254.920104][T13471] infiniband syz!: added team_slave_0 [ 254.992288][T13471] RDS/IB: syz!: added [ 254.996387][T13471] smc: adding ib device syz! with port count 1 [ 255.003481][T13471] smc: ib device syz! port 1 has pnetid [ 255.076479][T13492] openvswitch: netlink: IP tunnel dst address not specified [ 255.130027][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 255.159590][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2145'. [ 255.365247][T13464] validate_nla: 2 callbacks suppressed [ 255.365267][T13464] netlink: 'syz.4.2138': attribute type 7 has an invalid length. [ 255.396846][T13502] tipc: Enabled bearer , priority 0 [ 255.428585][T13501] syzkaller0: entered promiscuous mode [ 255.445078][T13501] syzkaller0: entered allmulticast mode [ 255.507886][T13501] tipc: Resetting bearer [ 255.517555][T13500] tipc: Resetting bearer [ 255.606796][T13500] tipc: Disabling bearer [ 255.780426][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.049110][T13530] IPVS: length: 88 != 8 [ 256.204618][T13527] block nbd1: server does not support multiple connections per device. [ 256.220853][T13527] block nbd1: shutting down sockets [ 256.371982][T13545] netlink: 'syz.0.2160': attribute type 1 has an invalid length. [ 256.480379][T13545] 8021q: adding VLAN 0 to HW filter on device bond9 [ 256.481285][T13552] sctp: [Deprecated]: syz.2.2162 (pid 13552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.481285][T13552] Use struct sctp_sack_info instead [ 256.584719][T13552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2162'. [ 256.594684][T13552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2162'. [ 256.629642][T13551] veth21: entered promiscuous mode [ 256.647059][T13551] bond9: (slave veth21): Enslaving as an active interface with a down link [ 256.818734][T13560] gtp0: entered promiscuous mode [ 256.877756][T13560] sock: sock_set_timeout: `syz.4.2164' (pid 13560) tries to set negative timeout [ 257.045699][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2168'. [ 257.095390][T13572] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 257.124994][T13572] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 257.354466][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2175'. [ 257.401903][T13584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2175'. [ 258.565213][T13629] netlink: 'syz.2.2189': attribute type 1 has an invalid length. [ 259.371752][T13662] netlink: 'syz.0.2198': attribute type 1 has an invalid length. [ 259.435354][T13662] 8021q: adding VLAN 0 to HW filter on device bond10 [ 259.502703][T13662] netlink: 'syz.0.2198': attribute type 5 has an invalid length. [ 259.519243][T13664] veth23: entered promiscuous mode [ 259.529766][T13664] bond10: (slave veth23): Enslaving as an active interface with a down link [ 259.559138][T13662] vlan0: entered allmulticast mode [ 259.564710][T13662] bond10: entered allmulticast mode [ 259.812395][T13679] netlink: 'syz.4.2203': attribute type 2 has an invalid length. [ 259.842920][T13679] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.999744][T13689] __nla_validate_parse: 15 callbacks suppressed [ 259.999763][T13689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'. [ 260.148561][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2209'. [ 260.202614][T13703] netlink: 'syz.3.2212': attribute type 1 has an invalid length. [ 260.229527][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2209'. [ 260.241349][T13703] netlink: 'syz.3.2212': attribute type 1 has an invalid length. [ 260.260615][T13703] netlink: 'syz.3.2212': attribute type 1 has an invalid length. [ 260.278867][T13703] netlink: 'syz.3.2212': attribute type 2 has an invalid length. [ 260.299077][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2212'. [ 260.340240][T13703] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2212'. [ 260.489164][T13718] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.2216'. [ 260.621724][T13724] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2218'. [ 260.631698][T13724] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2218'. [ 260.730682][T13737] unknown channel width for channel at 909000KHz? [ 260.846357][T13742] bond0: (slave bond_slave_1): Releasing backup interface [ 260.872067][T13746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.141528][T13755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2227'. [ 261.225680][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2230'. [ 262.159488][T13790] netlink: 'syz.2.2239': attribute type 12 has an invalid length. [ 262.179696][T13792] netlink: 'syz.2.2239': attribute type 12 has an invalid length. [ 262.211157][T13793] veth0: entered promiscuous mode [ 262.242057][T13791] veth0: left promiscuous mode [ 262.452537][T13811] netlink: 'syz.1.2245': attribute type 10 has an invalid length. [ 262.454735][T13809] netlink: 'syz.1.2245': attribute type 10 has an invalid length. [ 262.484432][T13809] batadv0: entered promiscuous mode [ 262.501310][T13809] batadv0: entered allmulticast mode [ 262.531950][T13809] bridge0: port 3(batadv0) entered blocking state [ 262.550883][T13809] bridge0: port 3(batadv0) entered disabled state [ 262.579493][T13809] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 262.625228][T13807] tipc: Enabled bearer , priority 0 [ 262.633814][T13811] bridge0: port 3(batadv0) entered blocking state [ 262.641047][T13811] bridge0: port 3(batadv0) entered disabled state [ 262.649550][T13811] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 262.668676][T13812] syzkaller0: entered promiscuous mode [ 262.678648][T13812] syzkaller0: entered allmulticast mode [ 262.723999][T13820] bond2: (slave gretap1): Releasing active interface [ 262.758904][T13820] bond5: (slave veth5): Releasing active interface [ 262.784787][T13820] bond6: (slave veth7): Releasing active interface [ 262.808150][T13820] bond7: (slave veth11): Releasing active interface [ 262.848346][T13820] bond8: (slave veth13): Releasing active interface [ 262.873135][T13820] bond11: (slave veth15): Releasing active interface [ 262.894376][T13820] bond12: (slave veth19): Releasing active interface [ 262.913031][T13820] bond13: (slave veth21): Releasing active interface [ 262.956781][T13804] tipc: Resetting bearer [ 263.287824][T13802] tipc: Resetting bearer [ 263.325916][T13802] tipc: Disabling bearer [ 263.444197][T13843] syzkaller0: entered promiscuous mode [ 263.458262][T13843] syzkaller0: entered allmulticast mode [ 263.753675][T13870] netlink: 'syz.4.2259': attribute type 39 has an invalid length. [ 264.067763][T13891] netlink: 'syz.3.2266': attribute type 1 has an invalid length. [ 264.144558][T13891] tipc: Enabling of bearer rejected, failed to enable media [ 264.326643][T13899] openvswitch: netlink: Missing key (keys=40, expected=80) [ 264.440461][T13904] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 264.455993][T13910] netlink: 'syz.3.2272': attribute type 16 has an invalid length. [ 264.517790][T13910] netlink: 'syz.3.2272': attribute type 3 has an invalid length. [ 264.776901][T13931] netlink: 'syz.4.2273': attribute type 10 has an invalid length. [ 264.792507][T13931] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 264.981807][T13945] gre0: left promiscuous mode [ 264.993282][T13945] gre0: left allmulticast mode [ 265.196468][T13957] __nla_validate_parse: 14 callbacks suppressed [ 265.196491][T13957] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2282'. [ 265.213897][T13960] netlink: 'syz.1.2285': attribute type 1 has an invalid length. [ 265.255255][T13960] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 265.400128][T13963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2285'. [ 265.448869][T13960] veth19: entered promiscuous mode [ 265.467110][T13960] bond11: (slave veth19): Enslaving as a backup interface with a down link [ 265.485994][T12004] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 265.502154][T13963] 8021q: adding VLAN 0 to HW filter on device bond11 [ 265.510589][T13965] syz_tun: entered promiscuous mode [ 265.554868][T13965] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 265.613454][T12004] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 265.637118][T13974] nbd1: detected capacity change from 0 to 127 [ 265.645189][T13977] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 265.815703][T13981] bond0: entered promiscuous mode [ 265.837261][T13981] batadv0: entered promiscuous mode [ 265.845210][T13981] debugfs: 'hsr1' already exists in 'hsr' [ 265.855860][T13981] Cannot create hsr debugfs directory [ 265.862592][T13981] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 265.874174][T13981] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 265.884748][T13981] hsr1: entered allmulticast mode [ 265.889860][T13981] batadv0: entered allmulticast mode [ 265.895841][T13981] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 265.927469][ T51] block nbd1: Receive control failed (result -32) [ 266.056572][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2293'. [ 266.072136][T13992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2293'. [ 266.168947][T13998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2294'. [ 266.278298][T14004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2297'. [ 266.298500][T14005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2294'. [ 266.488375][T14015] pimreg: left allmulticast mode [ 266.702999][T14023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2303'. [ 266.724481][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2303'. [ 266.787420][T14028] IPv6: Can't replace route, no match found [ 267.088339][T14044] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2309'. [ 267.132547][T14047] sctp: [Deprecated]: syz.0.2307 (pid 14047) Use of int in max_burst socket option deprecated. [ 267.132547][T14047] Use struct sctp_assoc_value instead [ 267.327098][T14056] Unsupported xt match [ 267.327120][T14056] unable to load match [ 267.849150][T14088] dummy0: vlans aren't supported yet for dev_uc|mc_add() [ 267.946929][T14092] IPVS: Unknown mcast interface: vcan0 [ 268.058702][T14098] team0: Device vti0 is of different type [ 268.187445][T14106] dvmrp1: entered allmulticast mode [ 268.324106][T14118] validate_nla: 2 callbacks suppressed [ 268.324128][T14118] netlink: 'syz.4.2332': attribute type 1 has an invalid length. [ 268.383555][T14118] netlink: 'syz.4.2332': attribute type 1 has an invalid length. [ 268.434206][T14122] xfrm1: entered promiscuous mode [ 268.439297][T14122] xfrm1: entered allmulticast mode [ 268.650805][T14139] netlink: 'syz.4.2338': attribute type 1 has an invalid length. [ 268.658656][T14139] netlink: 'syz.4.2338': attribute type 1 has an invalid length. [ 268.671384][T14139] netlink: 'syz.4.2338': attribute type 1 has an invalid length. [ 268.689642][T14139] netlink: 'syz.4.2338': attribute type 1 has an invalid length. [ 268.700209][T14139] netlink: 'syz.4.2338': attribute type 1 has an invalid length. [ 268.714643][T14139] netlink: 'syz.4.2338': attribute type 1 has an invalid length. [ 268.725435][T14139] netlink: 'syz.4.2338': attribute type 1 has an invalid length. [ 268.738865][T14139] netlink: 'syz.4.2338': attribute type 1 has an invalid length. [ 268.851729][T14147] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.436609][T14169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.844060][T14182] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 269.984979][T14187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 269.992329][T14187] IPv6: NLM_F_CREATE should be set when creating new route [ 270.026890][T14187] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.244850][T14202] __nla_validate_parse: 17 callbacks suppressed [ 270.244871][T14202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2355'. [ 270.342379][T14207] netlink: 'syz.1.2359': attribute type 11 has an invalid length. [ 270.369709][T14207] netlink: 'syz.1.2359': attribute type 11 has an invalid length. [ 270.399566][T14207] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2359'. [ 270.531216][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2361'. [ 270.587509][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2363'. [ 270.817115][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2366'. [ 270.834191][T14232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2366'. [ 270.856715][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2366'. [ 270.884148][T14232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2366'. [ 270.975474][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2368'. [ 271.005187][T14240] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2369'. [ 271.014349][T14240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.035713][T14240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.747479][T14262] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.869627][T14332] sctp: [Deprecated]: syz.1.2394 (pid 14332) Use of int in max_burst socket option. [ 272.869627][T14332] Use struct sctp_assoc_value instead [ 272.952552][T14335] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 273.702893][T14379] validate_nla: 61 callbacks suppressed [ 273.702914][T14379] netlink: 'syz.4.2406': attribute type 23 has an invalid length. [ 273.729255][T14365] syzkaller0: entered promiscuous mode [ 273.735743][T14365] syzkaller0: entered allmulticast mode [ 274.114116][T14398] netlink: 'syz.4.2411': attribute type 2 has an invalid length. [ 274.330710][ T1150] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 274.716368][T14410] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 276.036754][T14436] __nla_validate_parse: 13 callbacks suppressed [ 276.036775][T14436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2423'. [ 276.127759][T14436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2423'. [ 276.259495][T14447] netlink: 191164 bytes leftover after parsing attributes in process `syz.1.2427'. [ 276.315264][T14448] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.321434][T14456] syzkaller1: entered promiscuous mode [ 276.329780][T14456] syzkaller1: entered allmulticast mode [ 276.894881][T14485] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 276.944641][T14485] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2438'. [ 277.086498][T14499] netlink: 'syz.0.2440': attribute type 1 has an invalid length. [ 277.222773][T14504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2442'. [ 277.476422][T14516] lo: left allmulticast mode [ 277.482427][T14516] tunl0: left allmulticast mode [ 277.491271][T14516] gre0: entered promiscuous mode [ 277.505529][T14516] erspan0: entered promiscuous mode [ 277.528334][T14516] ip_vti0: entered promiscuous mode [ 277.744576][T14527] netlink: 'syz.0.2451': attribute type 1 has an invalid length. [ 277.761536][T14528] netlink: 'syz.0.2451': attribute type 1 has an invalid length. [ 277.829184][T14524] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 278.219520][T14555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2458'. [ 278.446073][T14570] netlink: 'syz.3.2462': attribute type 1 has an invalid length. [ 278.459130][T14571] netlink: 'syz.3.2462': attribute type 1 has an invalid length. [ 279.031360][T14587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2467'. [ 279.221972][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2470'. [ 279.235882][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2470'. [ 279.438868][ T1150] tipc: Subscription rejected, illegal request [ 279.448220][T14604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2473'. [ 279.488250][T14614] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 280.150487][ T8463] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 280.443931][ T8463] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 281.673978][T14691] netlink: 'syz.2.2499': attribute type 4 has an invalid length. [ 281.844223][T14700] IPVS: set_ctl: invalid protocol: 135 172.30.9.2:20001 [ 282.072852][T14713] __nla_validate_parse: 10 callbacks suppressed [ 282.072873][T14713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2505'. [ 282.353289][T14721] netlink: 'syz.1.2507': attribute type 21 has an invalid length. [ 282.557119][T14734] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 282.622808][T14739] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2512'. [ 282.924635][T14763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2518'. [ 283.290677][T14781] netlink: 'syz.2.2523': attribute type 4 has an invalid length. [ 283.328235][T14784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2522'. [ 283.519123][T14792] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2528'. [ 283.542998][T14792] netlink: 'syz.1.2528': attribute type 7 has an invalid length. [ 283.557233][T14792] netlink: 'syz.1.2528': attribute type 8 has an invalid length. [ 283.568667][T14792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2528'. [ 283.880815][T14811] netlink: 'syz.1.2536': attribute type 1 has an invalid length. [ 283.888853][T14811] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2536'. [ 283.898789][T14811] nbd: illegal input index 1048576 [ 283.938205][T14812] ipvlan2: entered promiscuous mode [ 283.941779][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 283.946201][T14812] bridge0: port 3(ipvlan2) entered blocking state [ 283.959043][T14812] bridge0: port 3(ipvlan2) entered disabled state [ 283.966485][T14812] ipvlan2: entered allmulticast mode [ 283.971896][T14812] bridge0: entered allmulticast mode [ 283.982683][T14812] ipvlan2: left allmulticast mode [ 283.987946][T14812] bridge0: left allmulticast mode [ 283.994257][T14817] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2537'. [ 284.051909][T14811] ipvlan2: entered promiscuous mode [ 284.058054][T14811] bridge0: port 3(ipvlan2) entered blocking state [ 284.078046][T14811] bridge0: port 3(ipvlan2) entered disabled state [ 284.085617][T14811] ipvlan2: entered allmulticast mode [ 284.091419][T14811] bridge0: entered allmulticast mode [ 284.101370][T14811] ipvlan2: left allmulticast mode [ 284.106600][T14811] bridge0: left allmulticast mode [ 284.135767][T14815] net veth1_virt_wifi .: renamed from virt_wifi0 [ 284.445507][T14839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2541'. [ 284.872512][T14849] lo speed is unknown, defaulting to 1000 [ 285.674982][T14873] vcan0: entered allmulticast mode [ 286.490111][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 287.120871][T14920] __nla_validate_parse: 7 callbacks suppressed [ 287.120893][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2567'. [ 287.138579][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2568'. [ 287.149500][T14922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2568'. [ 287.169053][T14922] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2568'. [ 287.661475][T14939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2573'. [ 287.767964][T14944] netlink: 'syz.3.2574': attribute type 1 has an invalid length. [ 288.074313][T14957] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2577'. [ 288.137714][T14957] vlan1: entered allmulticast mode [ 288.150475][T14957] gretap0: entered allmulticast mode [ 288.306618][T14973] netem: change failed [ 288.396259][T14975] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2583'. [ 288.500913][T14979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2585'. [ 288.540213][T14979] pim6reg1: entered promiscuous mode [ 288.547365][T14979] pim6reg1: entered allmulticast mode [ 288.576319][T14982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2586'. [ 288.601640][T14982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2586'. [ 288.617311][T14983] sctp: [Deprecated]: syz.2.2585 (pid 14983) Use of int in maxseg socket option. [ 288.617311][T14983] Use struct sctp_assoc_value instead [ 289.633271][T15029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.649145][T15029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.748887][T15029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.759664][T15029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.897141][T15029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.935920][T15029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.999544][T15052] bridge14: entered promiscuous mode [ 290.011964][T15052] bridge14: entered allmulticast mode [ 290.192514][T15057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.246466][ T3501] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.271596][ T3501] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.292302][ T3501] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.303674][ T3501] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.368141][ T3501] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.385965][ T3501] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.443789][ T3501] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.466569][ T3501] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.793865][T15088] IPVS: persistence engine module ip_vs_pe_À not found [ 290.805282][T15092] netlink: 'syz.2.2621': attribute type 7 has an invalid length. [ 290.892574][T15092] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 290.924320][T15097] netlink: 'syz.1.2623': attribute type 1 has an invalid length. [ 291.126387][T15112] netlink: 'syz.2.2628': attribute type 10 has an invalid length. [ 291.137427][T15112] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 291.152558][T15112] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 291.210801][T15115] veth0_to_bond: entered allmulticast mode [ 291.341883][T15118] team0: Device gtp0 is up. Set it down before adding it as a team port [ 291.642952][T15135] netlink: 'syz.1.2637': attribute type 1 has an invalid length. [ 291.782827][T15136] bond12: (slave bridge12): making interface the new active one [ 291.800899][T15136] bond12: (slave bridge12): Enslaving as an active interface with an up link [ 291.978474][T15151] netlink: 'syz.0.2643': attribute type 3 has an invalid length. [ 292.370954][T15178] __nla_validate_parse: 19 callbacks suppressed [ 292.370975][T15178] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2651'. [ 292.431072][T15174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2649'. [ 292.639574][T15191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.657405][T15192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.689008][T15194] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2658'. [ 292.774796][T15198] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 292.965907][T15207] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2661'. [ 292.981155][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'. [ 293.022654][T15211] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 293.188490][T15218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2666'. [ 293.217826][T15218] openvswitch: netlink: IPv4 tun info is not correct [ 293.386227][T15225] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.433494][T15225] bridge_slave_1: left allmulticast mode [ 293.446910][T15223] netlink: zone id is out of range [ 293.453333][T15225] bridge_slave_1: left promiscuous mode [ 293.468933][T15225] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.483848][T15223] netlink: zone id is out of range [ 293.499611][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2668'. [ 293.512596][T15223] netlink: zone id is out of range [ 293.517881][T15223] netlink: zone id is out of range [ 293.525949][T15223] netlink: zone id is out of range [ 293.566678][T15225] bond0: (slave bond_slave_0): Releasing backup interface [ 293.605328][T15225] bond0: (slave bond_slave_1): Releasing backup interface [ 293.635587][T15225] team0: Port device team_slave_0 removed [ 293.648938][T15225] team0: Port device team_slave_1 removed [ 293.659572][T15225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.668767][T15225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.745768][T15225] bond0: (slave netdevsim0): Releasing backup interface [ 293.801901][T15225] bond0: (slave wlan1): Releasing backup interface [ 293.813733][T15225] veth1_to_bond: left allmulticast mode [ 293.819638][T15225] veth1_to_bond: left promiscuous mode [ 293.834730][T15225] team0: Port device macvlan2 removed [ 293.843937][T15225] bond1: (slave veth3): Releasing active interface [ 293.858037][T15225] bond2: (slave veth5): Releasing active interface [ 293.872309][T15225] bond3: (slave veth9): Releasing active interface [ 293.884741][T15225] bond4: (slave veth11): Releasing active interface [ 293.895631][T15225] bond5: (slave bond6): Releasing backup interface [ 293.903639][T15225] bond6: left promiscuous mode [ 293.911256][ T983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 293.926363][T15225] bond7: (slave veth13): Releasing active interface [ 293.938758][T15225] bond9: (slave veth15): Releasing active interface [ 293.949158][T15225] bond10: (slave veth17): Releasing active interface [ 293.964945][T15225] bond11: (slave veth19): Releasing active interface [ 293.976280][T15225] bond12: (slave veth23): Releasing active interface [ 294.267936][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2674'. [ 294.356116][T15264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2676'. [ 294.488813][T15266] delete_channel: no stack [ 294.813355][ T983] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.841339][T15280] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2682'. [ 294.933437][T15289] netlink: 'syz.1.2685': attribute type 4 has an invalid length. [ 295.583782][T15327] sctp: [Deprecated]: syz.1.2692 (pid 15327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.583782][T15327] Use struct sctp_sack_info instead [ 295.657863][T15324] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 295.993687][T15349] tc_dump_action: action bad kind [ 296.097803][T15341] ksmbd: Unknown IPC event: 3, ignore. [ 297.037161][T15394] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2 [ 297.090031][T15394] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€ [ 297.743419][ T5862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.756195][ T5862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.774319][ T5862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.783642][ T5862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.793111][ T5862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.877400][T15426] lo speed is unknown, defaulting to 1000 [ 298.194012][T15442] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 298.744860][T15468] __nla_validate_parse: 3 callbacks suppressed [ 298.744882][T15468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2731'. [ 299.421116][T15506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2742'. [ 299.562845][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2743'. [ 299.576315][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2744'. [ 299.590233][T15515] netlink: 'syz.0.2744': attribute type 2 has an invalid length. [ 299.598702][T15515] netlink: 'syz.0.2744': attribute type 1 has an invalid length. [ 299.608211][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2744'. [ 299.702843][T15510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2743'. [ 299.729168][T15525] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2747'. [ 299.744421][T15521] tipc: Enabled bearer , priority 0 [ 299.752724][T15521] syzkaller0: entered promiscuous mode [ 299.758321][T15521] syzkaller0: entered allmulticast mode [ 299.812202][T15521] tipc: Resetting bearer [ 299.860539][ T5862] Bluetooth: hci5: command tx timeout [ 299.874835][T15426] chnl_net:caif_netlink_parms(): no params data found [ 299.883728][T15528] netlink: 'syz.1.2748': attribute type 1 has an invalid length. [ 299.960869][T15528] 8021q: adding VLAN 0 to HW filter on device bond13 [ 300.012545][T15537] xt_limit: Overflow, try lower: 604147548/4200216962 [ 300.036743][T15534] bond13: (slave veth21): Enslaving as an active interface with a down link [ 300.037936][T15538] netlink: 'syz.3.2750': attribute type 1 has an invalid length. [ 300.057912][T15519] tipc: Resetting bearer [ 300.083651][T15519] tipc: Disabling bearer [ 300.102148][T15528] veth0_to_bond: left allmulticast mode [ 300.118443][T15528] bond13: (slave veth0_to_bond): making interface the new active one [ 300.133162][T15528] veth0_to_bond: entered promiscuous mode [ 300.140385][T15528] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 300.179666][T15534] lo: left promiscuous mode [ 300.195626][T15534] tunl0: left promiscuous mode [ 300.202322][T15534] gre0: left promiscuous mode [ 300.207559][T15534] gretap0: left promiscuous mode [ 300.215473][T15534] erspan0: left promiscuous mode [ 300.222791][T15534] ip_vti0: left promiscuous mode [ 300.232577][T15534] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.239962][T15534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.262804][T15534] batadv0: left promiscuous mode [ 300.267958][T15534] batadv0: left allmulticast mode [ 300.276779][T15534] wg1: left promiscuous mode [ 300.283064][T15534] wg1: left allmulticast mode [ 300.317856][T15534] bond1: left promiscuous mode [ 300.322967][T15534] bond1: left allmulticast mode [ 300.339497][T15534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.348129][T15534] vlan3: left allmulticast mode [ 300.354065][T15534] gretap0: left allmulticast mode [ 300.363389][T15534] veth5: left promiscuous mode [ 300.372428][T15534] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.384755][T15534] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 300.392991][T15534] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 300.401327][T15534] macsec0: left promiscuous mode [ 300.406598][T15534] macsec0: left allmulticast mode [ 300.412478][T15534] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 300.424676][T15534] veth7: left promiscuous mode [ 300.432863][T15534] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 300.443121][T15534] veth9: left promiscuous mode [ 300.456612][T15534] veth13: left promiscuous mode [ 300.465782][T15534] veth15: left promiscuous mode [ 300.472029][ T983] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 300.484469][T15534] veth17: left promiscuous mode [ 300.494040][T15534] batadv0: entered promiscuous mode [ 300.505839][T15534] veth19: left promiscuous mode [ 300.535730][T15534] 8021q: adding VLAN 0 to HW filter on device bond12 [ 300.555941][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.563201][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.577512][ T3501] net_ratelimit: 9 callbacks suppressed [ 300.577532][ T3501] bond11: (slave ip6gretap1): link status up again after 0 ms [ 300.630774][ T59] bond11: (slave ip6gretap1): link status up again after 0 ms [ 300.649331][ T3501] bond13: (slave veth21): link status definitely up, 10000 Mbps full duplex [ 300.682338][ T3501] bond11: (slave ip6gretap1): link status up again after 0 ms [ 300.695142][ T8464] lo speed is unknown, defaulting to 1000 [ 300.701573][ T8464] syz0: Port: 1 Link ACTIVE [ 300.702346][ T36] bond5: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 300.722945][ T3501] bond11: (slave ip6gretap1): link status up again after 0 ms [ 300.756475][ T36] bond5: (slave veth7): making interface the new active one [ 300.770416][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 300.778172][ T1150] bond11: (slave ip6gretap1): link status up again after 0 ms [ 300.801004][ T1150] bond11: (slave ip6gretap1): link status up again after 0 ms [ 300.813081][ T36] bond5: active interface up! [ 300.840620][ T59] bond11: (slave ip6gretap1): link status up again after 0 ms [ 300.876971][ T49] bond11: (slave ip6gretap1): link status up again after 0 ms [ 300.887995][T12004] bond6: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 300.919231][T12004] bond6: (slave veth9): making interface the new active one [ 300.931748][ T49] bond11: (slave ip6gretap1): link status up again after 0 ms [ 300.950151][ T1150] bond11: (slave ip6gretap1): link status up again after 0 ms [ 300.960395][T12004] veth9: entered allmulticast mode [ 300.969476][T12004] bond6: active interface up! [ 301.029746][T15565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2758'. [ 301.093545][ T8464] lo speed is unknown, defaulting to 1000 [ 301.122750][ T36] bond9: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 301.160282][ T36] bond9: (slave veth15): making interface the new active one [ 301.161068][T15571] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2758'. [ 301.170619][ T36] veth15: entered allmulticast mode [ 301.188117][ T36] bond9: active interface up! [ 301.234221][ T3501] bond11: (slave veth19): link status definitely up, 10000 Mbps full duplex [ 301.254335][ T3501] bond11: active interface up! [ 301.268258][T15426] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.296105][T15426] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.307641][T15426] bridge_slave_0: entered allmulticast mode [ 301.316819][T15426] bridge_slave_0: entered promiscuous mode [ 301.324403][T15573] netlink: 'syz.1.2761': attribute type 32 has an invalid length. [ 301.327535][T15426] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.340968][T15426] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.351559][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2761'. [ 301.357064][T15426] bridge_slave_1: entered allmulticast mode [ 301.374445][T15426] bridge_slave_1: entered promiscuous mode [ 301.388099][T15573] (unnamed net_device) (uninitialized): option coupled_control: invalid value (12) [ 301.424119][ T36] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 301.440424][ T36] bond3: (slave veth5): making interface the new active one [ 301.454084][T15573] netlink: 'syz.1.2761': attribute type 32 has an invalid length. [ 301.475557][ T36] bond3: active interface up! [ 301.546147][T15426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.558115][T15573] (unnamed net_device) (uninitialized): option coupled_control: invalid value (12) [ 301.590730][T15573] netlink: 'syz.1.2761': attribute type 32 has an invalid length. [ 301.614634][T11716] bond8: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 301.641467][T11716] bond8: (slave veth13): making interface the new active one [ 301.649086][T11716] veth13: entered allmulticast mode [ 301.683758][T11716] bond8: active interface up! [ 301.705559][T15426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.756791][T15573] (unnamed net_device) (uninitialized): option coupled_control: invalid value (12) [ 301.782748][T15573] netlink: 'syz.1.2761': attribute type 32 has an invalid length. [ 301.819134][ T59] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 301.836154][ T59] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 301.844711][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 301.862711][T15573] (unnamed net_device) (uninitialized): option coupled_control: invalid value (12) [ 301.873901][T15573] netlink: 'syz.1.2761': attribute type 32 has an invalid length. [ 301.913289][ T59] bond10: (slave veth17): link status definitely up, 10000 Mbps full duplex [ 301.926372][ T59] bond10: (slave veth17): making interface the new active one [ 301.935004][ T5862] Bluetooth: hci5: command tx timeout [ 301.946359][ T59] bond10: active interface up! [ 301.955916][T15573] (unnamed net_device) (uninitialized): option coupled_control: invalid value (12) [ 302.004405][T15573] netlink: 'syz.1.2761': attribute type 32 has an invalid length. [ 302.023094][T15426] team0: Port device team_slave_0 added [ 302.041483][T15426] team0: Port device team_slave_1 added [ 302.149492][T15573] (unnamed net_device) (uninitialized): option coupled_control: invalid value (12) [ 302.161949][ T983] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 302.181007][T15426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.202182][T15426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.238425][T15426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.264343][T15426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.272142][T15426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.313583][T15426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.430803][T15426] hsr_slave_0: entered promiscuous mode [ 302.447427][T15426] hsr_slave_1: entered promiscuous mode [ 302.893879][ T983] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 304.020380][ T5862] Bluetooth: hci5: command tx timeout [ 304.571657][T15644] nbd: must specify at least one socket [ 304.609774][T15647] nbd: must specify at least one socket [ 304.871489][T15651] tipc: New replicast peer: 255.255.255.255 [ 304.878919][T15651] tipc: Enabled bearer , priority 10 [ 305.054901][T15426] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 305.110366][T15652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.117214][T15426] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 305.169035][T15667] geneve2: entered promiscuous mode [ 305.180151][T15667] geneve2: entered allmulticast mode [ 305.194056][T15426] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 305.246817][T15426] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 305.293307][ T3501] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 305.305956][ T3501] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 305.329247][ T3501] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 305.380626][ T3501] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 305.603543][T15426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.663482][T15426] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.728537][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.735801][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.768721][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.775974][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.817219][T15663] lec:lec_atm_close: lec0: Shut down! [ 305.824840][ T60] net_ratelimit: 20 callbacks suppressed [ 305.824861][ T60] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 305.899368][T15700] __nla_validate_parse: 8 callbacks suppressed [ 305.899389][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'. [ 305.992932][T15700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2795'. [ 306.050539][T12004] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 306.096495][ T5862] Bluetooth: hci5: command tx timeout [ 306.190430][ T60] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 306.250104][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 306.302570][T12004] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 306.341633][T12004] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 306.420090][T12004] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 306.529932][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 306.662115][ T49] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 306.736160][T15426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.803873][T12004] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 306.941278][ T60] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 307.070762][ T3501] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 307.093526][T15743] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2804'. [ 307.158688][T15426] veth0_vlan: entered promiscuous mode [ 307.186058][T15426] veth1_vlan: entered promiscuous mode [ 307.255490][T15426] veth0_macvtap: entered promiscuous mode [ 307.271493][T15426] veth1_macvtap: entered promiscuous mode [ 307.295751][T15426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.382064][T15426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.407608][T15750] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2806'. [ 307.417359][T15753] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2806'. [ 307.418298][T12004] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.438625][T12004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.454630][T12004] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.464548][T12004] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.647208][T11716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.666580][T11716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.718909][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.731489][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.733860][T15760] netlink: 'syz.2.2810': attribute type 1 has an invalid length. [ 307.780996][T15760] 8021q: adding VLAN 0 to HW filter on device bond13 [ 307.799057][T15763] tipc: Enabled bearer , priority 24 [ 307.897619][T15766] syz.5.2711: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 307.915111][T15760] vlan2: entered promiscuous mode [ 307.915278][T15766] CPU: 0 UID: 0 PID: 15766 Comm: syz.5.2711 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 307.915305][T15766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.915316][T15766] Call Trace: [ 307.915323][T15766] [ 307.915331][T15766] dump_stack_lvl+0x189/0x250 [ 307.915362][T15766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.915384][T15766] ? __pfx__printk+0x10/0x10 [ 307.915410][T15766] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 307.915431][T15766] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 307.915455][T15766] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 307.915478][T15766] warn_alloc+0x214/0x310 [ 307.915507][T15766] ? stack_depot_save_flags+0x40/0x860 [ 307.915530][T15766] ? __pfx_warn_alloc+0x10/0x10 [ 307.915560][T15766] ? kasan_save_track+0x4f/0x80 [ 307.915583][T15766] ? xskq_create+0x56/0x170 [ 307.915602][T15766] ? xsk_init_queue+0xb0/0x110 [ 307.915620][T15766] ? xsk_setsockopt+0x4dc/0x8d0 [ 307.915636][T15766] ? do_sock_setsockopt+0x17c/0x1b0 [ 307.915659][T15766] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 307.915681][T15766] ? do_syscall_64+0xfa/0x3b0 [ 307.915702][T15766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.915729][T15766] __vmalloc_node_range_noprof+0x125/0x12f0 [ 307.915788][T15766] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 307.915829][T15766] ? __kasan_kmalloc+0x93/0xb0 [ 307.915856][T15766] vmalloc_user_noprof+0xad/0xf0 [ 307.915881][T15766] ? xskq_create+0xbf/0x170 [ 307.915903][T15766] xskq_create+0xbf/0x170 [ 307.915927][T15766] xsk_init_queue+0xb0/0x110 [ 307.915951][T15766] xsk_setsockopt+0x4dc/0x8d0 [ 307.915973][T15766] ? __pfx_xsk_setsockopt+0x10/0x10 [ 307.915992][T15766] ? __pfx_aa_sk_perm+0x10/0x10 [ 307.916020][T15766] ? aa_sock_opt_perm+0xff/0x1b0 [ 307.916048][T15766] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 307.916067][T15766] ? __pfx_xsk_setsockopt+0x10/0x10 [ 307.916088][T15766] do_sock_setsockopt+0x17c/0x1b0 [ 307.916118][T15766] __x64_sys_setsockopt+0x13f/0x1b0 [ 307.916149][T15766] do_syscall_64+0xfa/0x3b0 [ 307.916170][T15766] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.916191][T15766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.916208][T15766] ? clear_bhb_loop+0x60/0xb0 [ 307.916231][T15766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.916247][T15766] RIP: 0033:0x7fa29298ebe9 [ 307.916264][T15766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.916280][T15766] RSP: 002b:00007fa293792038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 307.916300][T15766] RAX: ffffffffffffffda RBX: 00007fa292bb5fa0 RCX: 00007fa29298ebe9 [ 307.916319][T15766] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 307.916331][T15766] RBP: 00007fa292a11e19 R08: 0000000000000004 R09: 0000000000000000 [ 307.916341][T15766] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.916352][T15766] R13: 00007fa292bb6038 R14: 00007fa292bb5fa0 R15: 00007ffdee4f53b8 [ 307.916384][T15766] [ 307.916447][T15766] Mem-Info: [ 307.929319][T15764] delete_channel: no stack [ 307.934153][T15766] active_anon:4793 inactive_anon:0 isolated_anon:0 [ 307.934153][T15766] active_file:1500 inactive_file:39921 isolated_file:0 [ 307.934153][T15766] unevictable:768 dirty:82 writeback:0 [ 307.934153][T15766] slab_reclaimable:11967 slab_unreclaimable:116069 [ 307.934153][T15766] mapped:34273 shmem:1359 pagetables:1158 [ 307.934153][T15766] sec_pagetables:0 bounce:0 [ 307.934153][T15766] kernel_misc_reclaimable:0 [ 307.934153][T15766] free:1300590 free_pcp:12232 free_cma:0 [ 307.987023][T15760] bond13: entered promiscuous mode [ 307.988987][T15766] Node 0 active_anon:19132kB inactive_anon:0kB active_file:6000kB inactive_file:159480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137116kB dirty:324kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14352kB pagetables:4468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 308.006214][T15760] vlan2: entered allmulticast mode [ 308.010754][T15766] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 308.025857][T15760] bond13: entered allmulticast mode [ 308.030450][T15766] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.030518][T15766] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 308.030565][T15766] Node 0 DMA32 free:1294200kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19188kB inactive_anon:0kB active_file:6000kB inactive_file:157900kB unevictable:1536kB writepending:320kB present:3129332kB managed:2557520kB mlocked:0kB bounce:0kB free_pcp:34236kB local_pcp:12292kB free_cma:0kB [ 308.030623][T15766] lowmem_reserve[]: 0 0 1 1 1 [ 308.030670][T15766] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 308.030727][T15766] lowmem_reserve[]: 0 0 0 0 0 [ 308.030773][T15766] Node 1 Normal free:3893136kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14532kB local_pcp:7940kB free_cma:0kB [ 308.030842][T15766] lowmem_reserve[]: 0 0 0 0 0 [ 308.030889][T15766] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 308.083877][T15764] bond13: (slave gretap3): making interface the new active one [ 308.088532][T15766] Node 0 [ 308.118018][T15764] gretap3: entered promiscuous mode [ 308.126854][T15766] DMA32: 680*4kB (M) 459*8kB (UME) 253*16kB (UM) 107*32kB (UM) 68*64kB (UM) 36*128kB [ 308.164448][T15764] gretap3: entered allmulticast mode [ 308.184996][T15766] (ME) 20*256kB (UM) 15*512kB (UME) 9*1024kB (M) 2*2048kB (ME) 304*4096kB (M) = 1294120kB [ 308.185111][T15766] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 308.185251][T15766] Node 1 Normal: 178*4kB (UME) 47*8kB (UME) 43*16kB (UME) 133*32kB (UME) 48*64kB (UME) 10*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) [ 308.198016][T15764] bond13: (slave gretap3): Enslaving as an active interface with an up link [ 308.209593][T15766] 946*4096kB [ 308.306053][T15764] syz.2.2810 (15764) used greatest stack depth: 19432 bytes left [ 308.325387][T15766] (M) [ 308.327792][T15754] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 308.549195][T15766] = 3893136kB [ 308.651333][T15766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.675924][T15766] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.689174][T15766] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.707189][T15766] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.728386][T15766] 42776 total pagecache pages [ 308.733965][T15766] 0 pages in swap cache [ 308.738149][T15766] Free swap = 124996kB [ 308.765148][T15766] Total swap = 124996kB [ 308.769368][T15766] 2097051 pages RAM [ 308.776597][T15766] 0 pages HighMem/MovableOnly [ 308.786466][T15766] 425645 pages reserved [ 308.791345][T15766] 0 pages cma reserved [ 309.026125][T15796] vxcan1: tx address claim with different name [ 309.206741][T15801] netlink: 'syz.5.2818': attribute type 2 has an invalid length. [ 309.444789][T15809] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2822'. [ 309.454617][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 309.750360][T15831] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.790753][T15827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2826'. [ 309.838126][T15835] netlink: 'syz.2.2830': attribute type 3 has an invalid length. [ 310.116431][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 310.248270][T15854] netlink: 'syz.1.2837': attribute type 64 has an invalid length. [ 310.277167][T15854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2837'. [ 310.284235][T15860] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 310.690512][T15876] IPVS: set_ctl: invalid protocol: 255 10.1.1.2:20000 [ 310.711955][T15880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2842'. [ 310.902147][ T49] net_ratelimit: 28 callbacks suppressed [ 310.902171][ T49] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 311.093063][T12004] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 311.108376][T15896] netlink: 'syz.2.2851': attribute type 1 has an invalid length. [ 311.174069][T15896] bond14: entered promiscuous mode [ 311.179680][T15896] 8021q: adding VLAN 0 to HW filter on device bond14 [ 311.273744][T15899] 8021q: adding VLAN 0 to HW filter on device bond15 [ 311.283891][T15899] bond14: (slave bond15): making interface the new active one [ 311.292695][T15899] bond15: entered promiscuous mode [ 311.298908][T15899] bond14: (slave bond15): Enslaving as an active interface with an up link [ 311.353877][ T59] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 311.402676][ T60] veth0_to_bond: left promiscuous mode [ 311.469173][T15921] delete_channel: no stack [ 311.490004][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 311.600092][T12004] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 311.710382][ T60] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 311.820109][ T59] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 311.915707][T15932] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2861'. [ 311.932511][T11716] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 312.060003][T12004] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 312.094560][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 312.168738][T15937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2863'. [ 312.192451][ T59] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 312.358414][T15944] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.2865'. [ 312.426011][T15944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2865'. [ 312.429178][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2866'. [ 312.474481][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2866'. [ 312.494605][T15944] hsr_slave_0 (unregistering): left promiscuous mode [ 312.839450][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 313.308092][T15972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2874'. [ 313.323224][T15972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2874'. [ 313.633706][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2877'. [ 313.653033][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2877'. [ 313.672140][T15984] netlink: 'syz.1.2877': attribute type 3 has an invalid length. [ 313.721961][T15989] netlink: 'syz.5.2879': attribute type 26 has an invalid length. [ 313.759462][T15989] netlink: 'syz.5.2879': attribute type 26 has an invalid length. [ 314.323946][T16004] netlink: 'syz.5.2886': attribute type 3 has an invalid length. [ 314.558495][T16010] dvmrp0: entered allmulticast mode [ 314.601852][ T983] IPVS: starting estimator thread 0... [ 314.731257][T16013] IPVS: using max 23 ests per chain, 55200 per kthread [ 314.785232][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 314.795474][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 314.804549][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 314.828259][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 314.838305][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 314.968071][T16017] lo speed is unknown, defaulting to 1000 [ 315.180840][T12004] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.201131][T12004] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 315.242116][T16032] netlink: 'syz.3.2895': attribute type 29 has an invalid length. [ 315.254619][T16031] netlink: 'syz.3.2895': attribute type 29 has an invalid length. [ 315.290135][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 315.346228][T12004] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.356954][T12004] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 315.444228][T12004] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.466261][T12004] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 315.558513][T12004] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.584665][T12004] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 315.867999][T16051] lo speed is unknown, defaulting to 1000 [ 315.955736][T16051] lo speed is unknown, defaulting to 1000 [ 316.157118][T16065] netlink: 'syz.5.2903': attribute type 1 has an invalid length. [ 316.183189][T16067] netlink: 'syz.5.2903': attribute type 1 has an invalid length. [ 316.742499][T12004] bond13 (unregistering): (slave gretap3): Releasing active interface [ 316.755994][T12004] gretap3 (unregistering): left promiscuous mode [ 316.763516][T12004] gretap3 (unregistering): left allmulticast mode [ 316.890407][ T51] Bluetooth: hci6: command tx timeout [ 317.215685][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.693165][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.705860][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.714333][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.724617][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.734539][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.309455][T12004] bond0 (unregistering): Released all slaves [ 318.425014][T12004] bond1 (unregistering): Released all slaves [ 318.547765][T12004] bond2 (unregistering): Released all slaves [ 318.666762][T12004] bond3 (unregistering): Released all slaves [ 318.780943][T12004] bond4 (unregistering): Released all slaves [ 318.896616][T12004] bond5 (unregistering): Released all slaves [ 318.970456][ T51] Bluetooth: hci6: command tx timeout [ 319.014124][T12004] bond6 (unregistering): Released all slaves [ 319.129244][T12004] bond7 (unregistering): Released all slaves [ 319.147854][T12004] bond8 (unregistering): Released all slaves [ 319.263785][T12004] bond9 (unregistering): Released all slaves [ 319.391731][T12004] bond10 (unregistering): Released all slaves [ 319.508801][T12004] bond11 (unregistering): Released all slaves [ 319.623481][T12004] bond12 (unregistering): Released all slaves [ 319.747020][T12004] bond13 (unregistering): Released all slaves [ 319.776916][ T51] Bluetooth: hci3: command tx timeout [ 319.876285][T12004] bond14 (unregistering): (slave bond15): Releasing backup interface [ 319.884882][T12004] bond15 (unregistering): left promiscuous mode [ 319.893068][T12004] bond14 (unregistering): Released all slaves [ 320.007739][T12004] bond15 (unregistering): Released all slaves [ 320.050055][T16070] __nla_validate_parse: 14 callbacks suppressed [ 320.050076][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 320.101846][T16070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2905'. [ 320.137659][T16070] netlink: 'syz.1.2905': attribute type 7 has an invalid length. [ 320.259234][T16085] lo speed is unknown, defaulting to 1000 [ 320.339659][T12004] tipc: Left network mode [ 320.345183][ T60] net_ratelimit: 29 callbacks suppressed [ 320.345203][ T60] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 320.481812][T16017] chnl_net:caif_netlink_parms(): no params data found [ 320.825485][T12004] IPVS: stopping master sync thread 7856 ... [ 320.865531][T16102] netlink: 'syz.5.2913': attribute type 4 has an invalid length. [ 321.060959][ T51] Bluetooth: hci6: command tx timeout [ 321.081932][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 321.093213][T16068] lo speed is unknown, defaulting to 1000 [ 321.101563][T16017] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.113207][T16017] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.130642][T16017] bridge_slave_0: entered allmulticast mode [ 321.152124][T16017] bridge_slave_0: entered promiscuous mode [ 321.173506][T16017] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.181161][T16017] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.188417][T16017] bridge_slave_1: entered allmulticast mode [ 321.197118][T16017] bridge_slave_1: entered promiscuous mode [ 321.205042][T16111] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.444004][ T1150] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 321.490317][T16017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.663421][T16017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.850394][ T51] Bluetooth: hci3: command tx timeout [ 321.914927][T16017] team0: Port device team_slave_0 added [ 321.938282][T16017] team0: Port device team_slave_1 added [ 321.960982][T16136] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2921'. [ 321.971373][ T60] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 322.012680][T16138] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2921'. [ 322.143118][T16138] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 322.153854][T16138] 0ªî{X¹¦: entered allmulticast mode [ 322.161307][T16138] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 322.190095][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 322.401812][T16017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.441838][T16017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.490206][T16017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.552585][T16017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.580239][T16017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.632451][T16017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.791922][ T60] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 322.896035][T16159] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2928'. [ 322.938376][T16017] hsr_slave_0: entered promiscuous mode [ 322.952828][T16017] hsr_slave_1: entered promiscuous mode [ 322.959325][T16017] debugfs: 'hsr0' already exists in 'hsr' [ 323.001740][T16017] Cannot create hsr debugfs directory [ 323.130088][ T51] Bluetooth: hci6: command tx timeout [ 323.494371][T12004] hsr_slave_1: left promiscuous mode [ 323.809193][T12004] pimreg3 (unregistering): left allmulticast mode [ 323.932396][ T5862] Bluetooth: hci3: command tx timeout [ 324.799722][T12004] vcan0 (unregistering): left allmulticast mode [ 324.874887][T16195] team0: Cannot enslave team device to itself [ 325.230845][ T13] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 325.408697][T16213] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2936'. [ 325.577651][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2936'. [ 325.770207][T16085] chnl_net:caif_netlink_parms(): no params data found [ 325.976278][T16211] lo speed is unknown, defaulting to 1000 [ 325.977017][ T59] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 326.013164][ T5862] Bluetooth: hci3: command tx timeout [ 326.086128][T16217] tipc: Enabling of bearer rejected, failed to enable media [ 326.103654][T12004] IPVS: stop unused estimator thread 0... [ 326.388581][T16223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2940'. [ 326.433332][T16085] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.446860][T16085] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.466220][T16085] bridge_slave_0: entered allmulticast mode [ 326.483485][T16085] bridge_slave_0: entered promiscuous mode [ 326.494819][T16225] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2940'. [ 326.502997][T16085] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.515034][T16085] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.528175][T16085] bridge_slave_1: entered allmulticast mode [ 326.539295][T16085] bridge_slave_1: entered promiscuous mode [ 326.683180][T12004] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 326.704589][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2941'. [ 326.704687][T16085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.818373][T16227] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 326.819724][T16085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.936972][T16085] team0: Port device team_slave_0 added [ 326.970342][ T59] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 326.987486][T16085] team0: Port device team_slave_1 added [ 327.079877][T16236] nbd5: detected capacity change from 0 to 63 [ 327.087086][T16237] nbd: couldn't find device at index 0 [ 327.104869][T16239] nbd: couldn't find device at index 0 [ 327.112803][T16236] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 327.121934][ T5862] block nbd5: Receive control failed (result -32) [ 327.138156][T16085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.147419][T16085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.174465][T16085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.185707][T16017] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 327.204083][T16085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.211726][T16241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.244878][T16085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.292735][T16085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.314503][T16017] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 327.421479][T16017] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 327.477458][T16245] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2947'. [ 327.528825][T16246] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2947'. [ 327.545006][T16085] hsr_slave_0: entered promiscuous mode [ 327.571652][T16085] hsr_slave_1: entered promiscuous mode [ 327.578453][T16085] debugfs: 'hsr0' already exists in 'hsr' [ 327.594535][T16085] Cannot create hsr debugfs directory [ 327.600354][T16017] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 327.970942][T16257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2949'. [ 328.029471][T16257] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2949'. [ 328.062523][T12004] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 328.292461][ T1150] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 328.555678][T16017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.580335][T16085] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 328.618460][T16085] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 328.671174][ T1150] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 328.685357][T16281] netlink: 'syz.3.2955': attribute type 1 has an invalid length. [ 328.693841][T16085] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 328.721675][T16085] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 328.785050][T16281] 8021q: adding VLAN 0 to HW filter on device bond14 [ 328.825837][T16017] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.876962][T16291] bond14: (slave ip6erspan0): making interface the new active one [ 328.901830][T16291] bond14: (slave ip6erspan0): Enslaving as an active interface with an up link [ 328.941307][T12004] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.948534][T12004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.007093][T12004] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.014328][T12004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.132927][T12004] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 329.141901][T16303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2959'. [ 329.494048][T16085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.556715][T16085] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.602126][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.610400][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.622736][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.629964][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.144121][T16017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.334567][T16017] veth0_vlan: entered promiscuous mode [ 330.383433][T16017] veth1_vlan: entered promiscuous mode [ 330.551240][T16349] __nla_validate_parse: 2 callbacks suppressed [ 330.551263][T16349] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2973'. [ 330.590077][T16346] lo speed is unknown, defaulting to 1000 [ 330.592335][T16017] veth0_macvtap: entered promiscuous mode [ 330.638616][T16085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.665156][T16017] veth1_macvtap: entered promiscuous mode [ 330.771035][T16017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.807042][ T8459] lo speed is unknown, defaulting to 1000 [ 330.815991][ T8459] syz0: Port: 1 Link DOWN [ 330.817206][T16017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.852963][ T8462] lo speed is unknown, defaulting to 1000 [ 330.855972][T16357] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2975'. [ 330.883703][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.915017][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.982291][ T1150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.026865][ T1150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.080372][T11716] net_ratelimit: 12 callbacks suppressed [ 331.080398][T11716] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 331.280255][T12004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.288124][T12004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.342233][ T13] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 331.439127][T12004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.453917][ T13] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 331.478703][T12004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.580212][ T49] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 331.716469][T16085] veth0_vlan: entered promiscuous mode [ 331.751426][ T59] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 331.783092][T16085] veth1_vlan: entered promiscuous mode [ 331.843992][T16348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.850834][T16374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2977'. [ 331.884933][T16374] netlink: 'syz.5.2977': attribute type 1 has an invalid length. [ 331.890060][ T59] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 331.896233][T16374] netlink: 'syz.5.2977': attribute type 1 has an invalid length. [ 331.915925][T16374] netlink: 'syz.5.2977': attribute type 2 has an invalid length. [ 331.925165][T16374] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2977'. [ 332.071145][ T49] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 332.083260][T16377] lo speed is unknown, defaulting to 1000 [ 332.123086][T16085] veth0_macvtap: entered promiscuous mode [ 332.151226][T16085] veth1_macvtap: entered promiscuous mode [ 332.230597][ T49] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 332.254098][T16085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.305570][T16085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.400139][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.410805][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 332.439463][T11716] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.509665][T11716] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.541133][T11716] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.551505][T16392] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 332.573985][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 332.878627][T11716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.897035][T11716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.117681][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.166758][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.125689][T16433] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2990'. [ 334.359065][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2994'. [ 334.560934][T16438] lo speed is unknown, defaulting to 1000 [ 334.703128][T16446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2995'. [ 335.022452][T16457] netlink: 'syz.6.2999': attribute type 9 has an invalid length. [ 335.192064][T16458] pimreg3: entered allmulticast mode [ 335.450432][T16462] netlink: 'syz.6.3001': attribute type 2 has an invalid length. [ 335.662021][T16468] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 336.142330][ T36] net_ratelimit: 22 callbacks suppressed [ 336.142353][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 336.522192][ T36] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 336.641512][ T1150] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 336.761977][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 336.779396][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 336.788530][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 336.797228][ T1150] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 336.822061][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 336.840373][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 337.479037][ T1150] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 337.554124][T16483] lo speed is unknown, defaulting to 1000 [ 337.620471][T12004] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 337.730351][T12004] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 337.860854][T12004] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 337.989909][T12004] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 338.145902][ T1150] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 338.219358][T16507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3014'. [ 338.346193][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 339.013156][T16532] smc: net device bond0 applied user defined pnetid SYZ2 [ 339.050594][ T51] Bluetooth: hci7: command tx timeout [ 339.179291][T16528] tipc: Failed to obtain node identity [ 339.188927][T16528] tipc: Enabling of bearer rejected, failed to enable media [ 339.224152][ C0] ------------[ cut here ]------------ [ 339.229739][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 339.240486][ C0] WARNING: CPU: 0 PID: 15 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 339.250390][ C0] Modules linked in: [ 339.254325][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 339.265942][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.276072][ C0] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 339.282396][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 82 13 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 339.302082][ C0] RSP: 0018:ffffc90000147258 EFLAGS: 00010246 [ 339.308191][ C0] RAX: ec8f3ab3a68cdd00 RBX: 000000000000000c RCX: ffff88801ce9bc00 [ 339.316267][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 339.324316][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 339.332356][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88802e7078e8 [ 339.340394][ C0] R13: 0000000000000000 R14: ffff88804cf08e40 R15: ffff88804cf0b0d8 [ 339.348394][ C0] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 339.357395][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.364047][ C0] CR2: 000000110c25b9ee CR3: 000000007ad34000 CR4: 00000000003526f0 [ 339.372097][ C0] Call Trace: [ 339.375402][ C0] [ 339.378373][ C0] rate_control_send_low+0x194/0x7a0 [ 339.383743][ C0] rate_control_get_rate+0x20b/0x5d0 [ 339.389078][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 339.394970][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 339.401368][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 339.406784][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 339.412581][ C0] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 339.418276][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 339.424353][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 339.429972][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 339.435562][ C0] ? ret_from_fork+0x3fc/0x770 [ 339.440396][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 339.445981][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 339.451599][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 339.457196][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 339.462739][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 339.468862][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 339.474476][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 339.481762][ C0] __iterate_interfaces+0x2ab/0x590 [ 339.487104][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 339.493261][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 339.500543][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 339.506646][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 339.513748][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 339.519026][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 339.524933][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 339.530228][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 339.535984][ C0] ? read_tsc+0x9/0x20 [ 339.540143][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 339.545298][ C0] handle_softirqs+0x283/0x870 [ 339.550140][ C0] ? run_ksoftirqd+0x9b/0x100 [ 339.554858][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 339.560215][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 339.565288][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 339.570457][ C0] run_ksoftirqd+0x9b/0x100 [ 339.574987][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 339.580169][ C0] smpboot_thread_fn+0x53f/0xa60 [ 339.585134][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 339.590248][ C0] kthread+0x70e/0x8a0 [ 339.594367][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 339.599886][ C0] ? __pfx_kthread+0x10/0x10 [ 339.604510][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.609738][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.615003][ C0] ? __pfx_kthread+0x10/0x10 [ 339.619624][ C0] ret_from_fork+0x3fc/0x770 [ 339.624304][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 339.629452][ C0] ? __switch_to_asm+0x39/0x70 [ 339.634282][ C0] ? __switch_to_asm+0x33/0x70 [ 339.639076][ C0] ? __pfx_kthread+0x10/0x10 [ 339.643742][ C0] ret_from_fork_asm+0x1a/0x30 [ 339.648558][ C0] [ 339.651633][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 339.658935][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-syzkaller-12084-g33caa208dba6 #0 PREEMPT(full) [ 339.670496][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.680586][ C0] Call Trace: [ 339.683866][ C0] [ 339.686797][ C0] dump_stack_lvl+0x99/0x250 [ 339.691390][ C0] ? __asan_memcpy+0x40/0x70 [ 339.696100][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.701311][ C0] ? __pfx__printk+0x10/0x10 [ 339.705951][ C0] vpanic+0x281/0x750 [ 339.709938][ C0] ? __pfx__printk+0x10/0x10 [ 339.714567][ C0] ? __pfx_vpanic+0x10/0x10 [ 339.719114][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 339.724447][ C0] panic+0xb9/0xc0 [ 339.728171][ C0] ? __pfx_panic+0x10/0x10 [ 339.732597][ C0] __warn+0x31b/0x4b0 [ 339.736577][ C0] ? __rate_control_send_low+0x5df/0x820 [ 339.742219][ C0] ? __rate_control_send_low+0x5df/0x820 [ 339.747850][ C0] report_bug+0x2be/0x4f0 [ 339.752195][ C0] ? __rate_control_send_low+0x5df/0x820 [ 339.757842][ C0] ? __rate_control_send_low+0x5df/0x820 [ 339.763483][ C0] ? __rate_control_send_low+0x5e1/0x820 [ 339.769136][ C0] handle_bug+0x84/0x160 [ 339.773387][ C0] exc_invalid_op+0x1a/0x50 [ 339.777904][ C0] asm_exc_invalid_op+0x1a/0x20 [ 339.782749][ C0] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 339.788992][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 60 60 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 82 13 94 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 339.808592][ C0] RSP: 0018:ffffc90000147258 EFLAGS: 00010246 [ 339.814666][ C0] RAX: ec8f3ab3a68cdd00 RBX: 000000000000000c RCX: ffff88801ce9bc00 [ 339.822664][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 339.830637][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 339.838636][ C0] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88802e7078e8 [ 339.846604][ C0] R13: 0000000000000000 R14: ffff88804cf08e40 R15: ffff88804cf0b0d8 [ 339.854587][ C0] ? __rate_control_send_low+0x5de/0x820 [ 339.860249][ C0] rate_control_send_low+0x194/0x7a0 [ 339.865578][ C0] rate_control_get_rate+0x20b/0x5d0 [ 339.870909][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 339.876833][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 339.883165][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 339.888566][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 339.894304][ C0] ieee80211_beacon_get_ap+0x1868/0x1f30 [ 339.899958][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 339.905938][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 339.911497][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 339.917072][ C0] ? ret_from_fork+0x3fc/0x770 [ 339.921834][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 339.927381][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 339.932929][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 339.938484][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 339.943950][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 339.950024][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 339.955574][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 339.962788][ C0] __iterate_interfaces+0x2ab/0x590 [ 339.968020][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 339.974111][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 339.981308][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 339.987383][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 339.994458][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 339.999679][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 340.005481][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 340.010707][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 340.016450][ C0] ? read_tsc+0x9/0x20 [ 340.020562][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 340.025693][ C0] handle_softirqs+0x283/0x870 [ 340.030458][ C0] ? run_ksoftirqd+0x9b/0x100 [ 340.035136][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 340.040418][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 340.045447][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 340.050463][ C0] run_ksoftirqd+0x9b/0x100 [ 340.054961][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 340.060083][ C0] smpboot_thread_fn+0x53f/0xa60 [ 340.065045][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 340.070110][ C0] kthread+0x70e/0x8a0 [ 340.074181][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 340.079646][ C0] ? __pfx_kthread+0x10/0x10 [ 340.084238][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 340.089453][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.094646][ C0] ? __pfx_kthread+0x10/0x10 [ 340.099247][ C0] ret_from_fork+0x3fc/0x770 [ 340.103834][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 340.108943][ C0] ? __switch_to_asm+0x39/0x70 [ 340.113711][ C0] ? __switch_to_asm+0x33/0x70 [ 340.118494][ C0] ? __pfx_kthread+0x10/0x10 [ 340.123098][ C0] ret_from_fork_asm+0x1a/0x30 [ 340.127957][ C0] [ 340.131249][ C0] Kernel Offset: disabled [ 340.135577][ C0] Rebooting in 86400 seconds..