last executing test programs: 1m13.608054783s ago: executing program 1 (id=767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x80004b}]}}]}, 0x3c}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@multicast, @random="392b663ed19f", @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x12, 0x28, 0x1, 0x0, 0x2, 0x6, 0x0, @remote, @multicast1}, {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0x6}}}}}}, 0x0) 55.921189005s ago: executing program 1 (id=767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x80004b}]}}]}, 0x3c}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@multicast, @random="392b663ed19f", @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x12, 0x28, 0x1, 0x0, 0x2, 0x6, 0x0, @remote, @multicast1}, {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0x6}}}}}}, 0x0) 39.894616573s ago: executing program 1 (id=767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x80004b}]}}]}, 0x3c}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@multicast, @random="392b663ed19f", @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x12, 0x28, 0x1, 0x0, 0x2, 0x6, 0x0, @remote, @multicast1}, {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0x6}}}}}}, 0x0) 24.889690924s ago: executing program 1 (id=767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x80004b}]}}]}, 0x3c}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@multicast, @random="392b663ed19f", @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x12, 0x28, 0x1, 0x0, 0x2, 0x6, 0x0, @remote, @multicast1}, {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0x6}}}}}}, 0x0) 11.146989724s ago: executing program 1 (id=767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x80004b}]}}]}, 0x3c}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@multicast, @random="392b663ed19f", @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x12, 0x28, 0x1, 0x0, 0x2, 0x6, 0x0, @remote, @multicast1}, {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0x6}}}}}}, 0x0) 5.630779116s ago: executing program 3 (id=1592): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005200010008000000000000000200000008000800", @ANYRES32, @ANYBLOB="035996f1ec99323882ebb371aa3d9d3c5cc4fd0cbc299240ab649e574377fd12432346ccc4ffb081ebe18e67c06afd633865668d62d7a78d9bf1d7c9cec9833b76b420eec2f41436b062dd5e8d0989d3f4ab14f31669e6ed6190efb9fad67ed84108d3b583f719b13d3115c35173986e372fcf930cfb5ff27928b162db1d70992b3df661c27824be9982513b069f0022865bfa786ab44cb67e15877f534cff201c752d26bee2e86f30731561d28f446cb60fc239265765d0018303f011a08346bbe2c3ae8e94f26b97a83396ef7213b7193fb822775036"], 0x1c}}, 0x20004000) getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, 0x0) 5.351776281s ago: executing program 3 (id=1596): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x100, 0x18}, 0xc) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x800000}, 0x50) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) (rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (rerun: 64) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000001080)={r7, 0xd}, 0x8) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) (async) r8 = socket$inet(0x2, 0x3, 0x30) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) (async) getpeername$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}}, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) bind$802154_dgram(r4, &(0x7f0000000180), 0x14) 5.047529159s ago: executing program 3 (id=1602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000100)="92034724033eea403a", 0x9}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="00000000400000137d", 0x9}}, 0x40000fe) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x94, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x725}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_DCCP_CLOSING={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x30) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x20, 0x80, 0x3, 0x4f20, {{0xc, 0x4, 0x0, 0x9, 0x30, 0x64, 0x0, 0xd, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x3, [{@remote, 0x9}, {@multicast1, 0x7dc}, {@remote, 0xb737}]}]}}}}}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) r13 = accept4(r10, &(0x7f0000000180)=@l2, &(0x7f0000000200)=0x80, 0xc00) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r13, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r14, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x84) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv4_deladdr={0x20, 0x15, 0x0, 0x70bd29, 0x25dfdbff, {0x2, 0x78, 0x0, 0xfd, r11}, [@IFA_FLAGS={0x8, 0x8, 0x38}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048040}, 0x200500fc) 3.067919267s ago: executing program 3 (id=1626): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000400)="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", 0x13f}, {&(0x7f0000000100)="8bfb4b5443cf4323adc90b07c14543f611f00eb95153c53ae98decbe0177e67e05739773fb2349b209dbb923cb42239d788530714a3f9ee105f2", 0x3a}, {&(0x7f00000002c0)="7e06416320ffb179e5a73957060e6b0a1419f8e1cab46356a10b23ca5c35e2ea61b27c87dfab6741d9d185367d6726da09203403e3eaa1dd474abfb77335798a4a0941d8c8424199c076fdf23ad6d8598ff25c3e98d416b94bcd4945089fd599850f3a16647986beba9a85e544562f314bc9512b123585b728c82e634fa39e9de380cbc55d6af5f87aa8c7a4438f4fa63a6f7d0b93adc44b19e0ec8e2f", 0x9d}], 0x3) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000540)={0xa, 0x4e21, 0x7fc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4000006}, 0x1c) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) getsockopt$inet_mptcp_buf(r10, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) socket$netlink(0x10, 0x3, 0x8000000004) 2.892565846s ago: executing program 3 (id=1629): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x22, 0x200, 0x70bd2c, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c104}, 0x15) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x959}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x31}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xdb}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20008000}, 0x8001) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x100) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000440), 0x9) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x1b0, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x89b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xef4}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x310dbf2b6662574}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1a, 0x10}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1a}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x9}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x257ce1b35c1a0779}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe083}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x80}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@cgroup=0xffffffffffffffff, 0x14, 0x0, 0x10000, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x15, 0x891c, 0xe, 0xc1, 0x200, 0x1, 0x3f3d, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000c00)={&(0x7f0000000900)="81ecaa2de6973324d2d3e0f986a936d005d2452f84180cf00caebc655ec8cbb8dcc78f9e49dd095838692decda097b7be8295a85948bc255e86112025991194b39ab42d0b4d05c8553527b0914d5bab5b66157fe9a02a4c4cd4af42cceb9841e2fc4bcaa53cfe9d7c5d096efcd1d4f4f2029479485eade49", &(0x7f0000000980)=""/34, &(0x7f00000009c0)="fd3591cdebe4885b1d21d44219c2e2fee7b9a348f27839f44f30088508983275881c394e3cdf06a27c9cd9d85708e7ed6ea8e0253667edac905302edd68d0f7c0db94aa68a66e8f1aa112a30bfc42299ba64292fe98921a2ba9856ffbcd8d34f64956ed827f1723c7fceff00a4b68baa3721477ef477123c5016c0a97b5d5e460d6197722ec5a7a5ee58895966f452c6101a22c620753d662825abcc0e93d02fe80ef0e04626367a2e04fedb0383e4258d2e281345d1df27a353cd6df8c6dff4a891a135e4815e3785", &(0x7f0000000ac0)="7301ee0a24d2455e17f1cc1ce5f8fdf03338fb040449e66b9f1bac9e152ad63a56c2e76ade6cb6720e0b7491e70c5866206122356530b9bcc7ebc63210dcaafa94aaba8054031958185e2d93c876daaed2bc360b9ea1835ab09a3b880f7fb99888e0029a72d45de1c8c167c9fd99e7a20e4bb810f213cfc6420bee6128869b65bb2e218bc8838acdf35dcc037e303bc8c3f36f77677b908b0a55cdfa14870017c33875e9ec8c2594497b9382f428746d6b9a", 0x2, r5, 0x4}, 0x38) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000c40)=""/138, &(0x7f0000000d00)=0x8a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000dc0)=@add_del={0x2, &(0x7f0000000d80)='veth0_to_team\x00'}) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x249cb5c0be9d73cc}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x78, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x345c95222adac742}, 0x4010) write$cgroup_type(r2, &(0x7f0000000f40), 0x9) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0xd, &(0x7f0000000fc0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0xf, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xffffffb0}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @ldst={0x3, 0x0, 0x6, 0x1, 0x4, 0x40, 0x10}, @jmp={0x5, 0x0, 0x0, 0x1, 0xe, 0x50, 0x8}], &(0x7f0000001040)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41100, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000010c0)={0x3, 0xf, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001100)=[r5, r5], &(0x7f0000001140)=[{0x5, 0x1, 0x8}, {0x2, 0x5, 0x5, 0x5}], 0x10, 0xd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{r5}, &(0x7f0000000f80), &(0x7f0000001240)=r8}, 0x20) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x68, r9, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x1}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x2, 0x10001, 0x9]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ce}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xf6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x62}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x6044011}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$xdp(0x2c, 0x3, 0x0) writev(r10, &(0x7f00000014c0)=[{&(0x7f0000001440)="9a4620860fea620eec795caa19b0416ee1a6227445654228871a16512967af9e3c26868aba262d658b7b06d1c1cd3cb014403002a1cd167f9b4e4f2441cdac755d8016a1d0c2b2f2747107aa98d216630487e7c89984cf2017ec3fab23e46b1738ec19a69e85c2ab6c2a3e4d880426aefc2d", 0x72}], 0x1) r11 = openat$cgroup_freezer_state(r4, &(0x7f0000001500), 0x2, 0x0) ppoll(&(0x7f0000001540)=[{r11, 0x4040}], 0x1, &(0x7f0000001580)={0x77359400}, &(0x7f00000015c0)={[0xfffffffffffff35c]}, 0x8) 2.234386498s ago: executing program 0 (id=1636): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, 0x4, 0x2, 0x0, 0x2, 0x0, 0x4}, 0x20) read(r0, &(0x7f0000000180)=""/203, 0xcb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x1) shutdown(r1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="250300000000000000001600000014000180100001006574683a697036745a6e6c30"], 0x28}}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="02000000", @ANYRES16=r7, @ANYBLOB="0100000000000000000012000000080008008083000008000900060000000800060004000000"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000014005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000c0003006e657464657673696d30000000000000a40000001100010000000000000000000000000a"], 0xa4}}, 0x0) r8 = socket(0x2d, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) 1.927816749s ago: executing program 3 (id=1640): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc0002042, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) r3 = socket(0x5, 0x80000, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x184, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@migrate={0x134, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in=@multicast2, 0xff, 0x0, 0x0, 0x3501, 0x2, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x2, 0x0, 0x3500, 0xa, 0x8}, {@in=@remote, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@rand_addr=0x64010100, @in=@private=0xa010103, @in=@local, 0x33, 0x4, 0x0, 0x3506, 0xa, 0x8}]}]}, 0x184}}, 0x0) getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000100)=0x2be628de19587dbc) sendfile(r3, r2, &(0x7f0000000000)=0x10, 0x1000) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x800) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc0002042, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) (async) socket(0x5, 0x80000, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x184, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@migrate={0x134, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in=@multicast2, 0xff, 0x0, 0x0, 0x3501, 0x2, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x2, 0x0, 0x3500, 0xa, 0x8}, {@in=@remote, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@rand_addr=0x64010100, @in=@private=0xa010103, @in=@local, 0x33, 0x4, 0x0, 0x3506, 0xa, 0x8}]}]}, 0x184}}, 0x0) (async) getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000100)=0x2be628de19587dbc) (async) sendfile(r3, r2, &(0x7f0000000000)=0x10, 0x1000) (async) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10) (async) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) (async) 1.924987735s ago: executing program 2 (id=1641): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) epoll_pwait(r1, 0x0, 0x0, 0x45, &(0x7f0000000280)={[0x8]}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x36, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03136c", 0x0, 0x87, 0x0, @private2={0xfc, 0x2, '\x00', 0xfd}, @mcast2}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x1, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.776286204s ago: executing program 2 (id=1643): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x1c, r0, 0x20, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c4) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x1c, r0, 0x20, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c4) 1.463839311s ago: executing program 4 (id=1645): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) accept4(r0, &(0x7f00000001c0)=@caif=@util, &(0x7f0000000140)=0x80, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) (async) unshare(0x6020400) (async) setsockopt(r0, 0x200000, 0xffffffff, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef00000000000000000000000006000300000000000800010000000000240002000200000000000000000000000000000001"], 0x4c}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r7 = socket$igmp(0x2, 0x3, 0x2) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x200) (async) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x8, 0x0, 0xb0, @vifc_lcl_ifindex=r6, @rand_addr=0x64010102}, 0x10) (async) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xbe3) (async) close(r4) (async) socket$inet6(0xa, 0x2, 0x3) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0xc, 0x85, 0x40, @local, @local, 0x7800, 0x1, 0x9, 0x5}}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, 0x4, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040024}, 0x8050) 1.320650282s ago: executing program 4 (id=1646): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf253e00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1}, 0x94) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000340)="2ab32ad2e597360500a4056247cf3944993ceb9cc1c5064d53fd79eb4968686f01a062f57b4fdee0efdf7cf40cebff6491a56d3143ccc4888c04addf6516febda83aa2721ff0ad295c38161814792aa7ba64f6d477ebb78d2ce241a2d0e3402aa90bff569705d07c71ce42fa072c99af1057cf7e6714fa91ae94c056a5ae19de4c079b2a7e94f6c7cc9b4696d778a7d6d14d571a69a415f191bf93628ca45b3a39d8f8556d156410f103a5b4a28557c9cc86f7ea9067588b30e279ad7495205b26491d5e06401e24d910dd0f1fe1a6931cee42d476c40fd971d0df5e03c9058c545a0b8fa8a1fcec40e969e03d6b88758b9e59a5e8f8efcf9feb7d611280") r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xd120}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88000}, 0x0) 1.309531902s ago: executing program 2 (id=1647): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b40)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@local}, @in=@multicast2, {@in6=@mcast2, @in6=@private2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@offload={0xc}]}, 0x134}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="000a0000000001000730000000000a00000000000000000000000000000010000000000000000000000000000000000000000000000000000720000000000600000000ecff0000000000000058c997490000feffff"], 0x60) pipe(&(0x7f0000000080)) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRESHEX=r3, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c009900410000005f000000080026006c090000"], 0x30}}, 0x0) 1.208046585s ago: executing program 0 (id=1648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4005804) 1.089726388s ago: executing program 0 (id=1649): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00002c0012800b00010067726574617000001c00028006000e0001000000080007007f0000010600100000fc000008000a00", @ANYRES32=r3, @ANYBLOB="8c8cc5d2317076da1faf8af71bd8e28af296859cbc3994023fdcde9c75fbdeb5e5fe65f1e129818dfa1c6cc6e2fa88caed0de69466b9daa0f3013644b36bf96c4dce0501a57ad8755841d9e8d36313c3f2749ffa830e133754d225daf5f386bbb0e65cecc7949e9152dc676b842b8f41f19c9714ae1f0ae18e2ea0a2990349a9c762e9959c79d16433"], 0x54}}, 0x4000) 1.006122229s ago: executing program 2 (id=1650): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=@getpolicy={0xb4, 0x15, 0x300, 0x70bd28, 0x25dfdbfe, {{@in=@local, @in6=@mcast2, 0x4e21, 0x2, 0x4e20, 0x10, 0x2, 0x80, 0x80, 0x3a, r2, r3}, 0x0, 0x1}, [@algo_aead={0x64, 0x12, {{'echainiv(morus640-sse2)\x00'}, 0xc0, 0x180, "5445a5205eeeeeacb1dd0f443f60f13cbf931f9644faaf7d"}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)={0x194, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6b3}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x4]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8c5}, @NL80211_ATTR_FRAME={0x151, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x40}, @device_b, @device_a, @initial, {0xb, 0xff}, @value=@ver_80211n={0x0, 0x8, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x1, @random=0x5, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x12, 0x1}, {0x24}, {0xb}, {0xc, 0x1}, {0x24, 0x1}, {0x6c}, {0x12, 0x1}, {0x2, 0x1}]}, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x6, 0x6, 0x8}}, @void, @void, @void, @void, [{0xdd, 0x56, "1a17990af0c1179112d7ee12c30fd13bf7e9d6ca47ebecfa133351cc62d47b221ec342c2f60fa133b0dde30cdfe3c15bdd056abd5fe237df88255c1f9147b05aac9da6669248beeb708836f39d24169cc0f5ea136f63"}, {0xdd, 0x3f, "0093618afc58b3cb677ab1ea66e8a99979c9020ebd5a4803d007fea8c2eadf3377c252d0d3c6e2550f5e54695cbc9b7c9ea936a7576010aacf69bd42ff13db"}, {0xdd, 0x6f, "1f989c326721bd03e6ea5a7328d7b7f80ea529afced30d7a4edcff7b9c8d737e00020688b90720ddce6cd6d15424bd0a3ca88faed4492f9c97ae35294dbc9df7f6d4393e65dffb7ae21330ae1387777a09f51ea6fca63a6407aaf483fea4d47277a79eb2c9e85463bb2425cb9e5e17"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x4040145) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x388, 0xffffffff, 0x0, 0x1c0, 0xf8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xf0, 0x169, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@ah={{0x30}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3fd) close(0x3) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x8035, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x1020703971be172d}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0x1f, r7}]}, 0x44}}, 0x4) socket(0x2, 0x800, 0x6) 820.092819ms ago: executing program 4 (id=1651): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) close(r0) 680.033525ms ago: executing program 2 (id=1652): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x7}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000019"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000002c000000180a05000000000000000000010000000900010073797a30000000000c000540000000000000000114000000020a01"], 0xc8}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000006c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd24, 0xffffffff, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000f61f000100003100000000000002408000000000000000000008000200ac725a46"], 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2200c851}, 0x40040) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a31000000000d000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800068000"], 0x54}}, 0x0) 675.745614ms ago: executing program 4 (id=1653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x40880) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) 672.422355ms ago: executing program 0 (id=1654): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1028, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x1004, 0x2, 0x0, 0x1, [@generic="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"]}]}, 0x1028}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x8, 0x40, 0xfffffffb, 0x3, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x67, 0x0, 0x80, 0x29, 0x0, @remote, @loopback, {[@lsrr={0x83, 0x7, 0x45, [@broadcast]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_VOICE(r4, 0x12, 0xb, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010300000000000000002d"], 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r8, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400}]}, &(0x7f00000001c0)='syzkaller\x00', 0xfffffff3, 0x0, 0x0, 0x41100, 0x7a, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002380)={0x5, 0x0, 0x1, 0xe49}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000023c0)=[0x1, r7, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000002400)=[{0x0, 0x1, 0xf, 0x5}, {0x2, 0x3, 0x8, 0xc}], 0x10, 0xc19}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002500)={&(0x7f0000000100)='afs_io_error\x00', r9, 0x0, 0x80000001}, 0x18) write(r0, &(0x7f0000001380)="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", 0x1000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r11, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000002600)={0x80, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x23}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x80}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@map, 0xffffffffffffffff, 0x20, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0500000000000000000006000000080003006d51ebea8047eac2edc9486a73b815407b738b1e19d2305e101805ef5587b3e957d94212bd2c95c6b6adf8baa6881e41425bfa5edc21264c2f53ec6ea26aad615af65df2121d2e7c72a33f135ddf07e84768b3ee3eb0afebca735d7796d7190be644f789762a3574716eb725e4eaa3f512d5b64bbb614a51c6193782a7380573619a62260c71afd1c278f21f855241", @ANYRES32=r12, @ANYBLOB="0800050009000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x88, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x8, 0x1, @val, @void, @val={0x3, 0x1, 0x84}, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x7, 0x0, {0x6, 0x2, 0x0, 0xbc}, 0x400, 0x3, 0x9}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffc}]}, 0x88}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000002700)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x38, r5, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x21}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}]}, 0x38}, 0x1, 0x0, 0x0, 0x4e0a88c58b12b5ca}, 0x24000040) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r13}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004f854500002c0000000000119078ffffffffe000000100004e20001890780400"/58], 0x0) 571.431979ms ago: executing program 4 (id=1655): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, {0x1, @random="7cfbcc1bab0c"}, 0x8, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, 'bridge_slave_1\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff}]}}]}, 0x54}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r7 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r11, r10, 0x0, r8}, 0x10) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f0000000300)=[{r7, 0x1040}], 0x1, 0x81) 419.190519ms ago: executing program 0 (id=1656): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x321}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1d}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x10040000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r3, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000d1}, 0x20048040) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r3, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000d1}, 0x20048040) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x27, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x27, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@getqdisc={0x28, 0x26, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0xa}, {0xffe0, 0x4}, {0x4, 0x9}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40004) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@getqdisc={0x28, 0x26, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0xa}, {0xffe0, 0x4}, {0x4, 0x9}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40004) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000880)={r1, 0x6, 0xffffffffffffffff, 0x7}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xe, &(0x7f00000007c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @alu={0x7, 0x0, 0x7, 0x9, 0x0, 0xfffffffffffffff8, 0x10}], &(0x7f0000000840)='GPL\x00', 0xf04, 0x0, 0x0, 0x41100, 0x36, '\x00', r6, 0x25, r8, 0x8, &(0x7f00000008c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x7, 0x81, 0x7}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000940)=[{0x4, 0x2, 0xc, 0x6}, {0x3, 0x1, 0x9}, {0x3, 0x5, 0x3, 0x6}, {0x3, 0x5, 0x8, 0x1}, {0x5, 0x3, 0x1, 0x3}, {0x0, 0x4, 0x10, 0xa}, {0x3, 0x4, 0x6, 0x5}, {0x4, 0x2, 0x10, 0xc}, {0x0, 0x2, 0x10}], 0x10, 0x63f}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0x5, 0x3, 0x7) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ac0), r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4044040) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x78, r11, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x80) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r12, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x9c, 0xb, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x50}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8001}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x40) (async) sendmsg$IPSET_CMD_TEST(r12, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x9c, 0xb, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x50}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8001}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r9) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r9) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000001440)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001400)={&(0x7f0000000f80)={0x460, r13, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x44c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc1, 0x5, "6445ef89c70f600c88a7df136926f8138188c5fbbcc50a445b20370b0a1c879ab4fa4867a0419b00c9d92e868193a8d8d6d6a7b81844c8a4cd44580876175b7daa9b3cc3bca60828970d0a1c455f1cb1c0b3b1491c57c3887121f195ea8d4658cfc4e94ca5d86ca51ff217bb7dab08e5518c72998aa693193dbddd02a57bf5a8bed92dda29d07b59159f0ae28925d87d518a837192b53536758bbf4d3b0682fabd60b19f7b5991497aa6cb2a8744016e727b5f5985d1d69403d84bb9b9"}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'-\'R'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '1\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan4\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd1}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[@-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa9e}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, ':$),-[#-)%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5fd0}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-\r+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nbd\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xf8, 0x4, "eb1538e3c863f952536bd7260ef5fd86168b3d99b88232afa7de1be563619fa378ab6a780dc8aee9633b60d85f1f3b4cbcab596b5bc77fc5cb9956c7ea494b297934a4699f19f4629de18f3ef334f2668d57bd0a0c61231824c5c9f67bb3a4076c456964269624db0dc205eb7f78d5b8c956f1577f93dd2409abd79cc204337325c3e97ed76438b7da62a5574fb682f94e222f53a755759d5f795dd953018f6892f70fcacfc0be5ee9b76ead9fb329997333e4ca6dbe9d8bd359e6442cfe82f1c0fc9dcf26e7eb7191e927732af0b3a7fa9905ca74976f97cb21b69e149e10eed645ecdca6e45251d7e3ef4cbd04a8a8f1fe28e7"}, @ETHTOOL_A_BITSET_VALUE={0x31, 0x4, "c5809ae76412a3adf5edd097a0eff657b2c6f020cafb3ec217545ff8e69a912fdeb95c9d9a6ee6306ff7c352d3"}, @ETHTOOL_A_BITSET_MASK={0xaf, 0x5, "79dd6f2cb21891790d2208eac121360259ae1c7cfac7b27f963a5abe695c48d5f4e8ba88f056e870dab1e28ebb0a33af07b1f3fd93f6017fde065cb714806cbcf15226a269f91c730517d6160ea3d39c48c3ed5cff7b434a85113b744e9b638739ddebbdfe1a88cb6dd7920116e767ce55ea54e6819a8d9e73c08176f29f27193d44331d1cd5d5428d88b325798794c3ac41003b603144475a724e9ac0b8ac7fcd394a1215a3ae27eccaac"}]}]}, 0x460}}, 0x40) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x30, 0x5, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0xc055) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, r10, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x48814) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r14, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x64, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x48001}, 0x24008085) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r14, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x58, r3, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xf}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0xc080}, 0x4008800) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r14, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x58, r3, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xf}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0xc080}, 0x4008800) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x40, 0x1, 0x4, 0x602, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x1}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000001}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x48081) 114.977119ms ago: executing program 0 (id=1657): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4b00000030d7c8e335d9e2ab49f4f2a0444554aac9135dcfe3a2f6a2f421486d550e8fbcac91f789789d5573de8434601221ce4e9f4a2a2349aaef933f64f2ea48860defa4749f0cc5b71664efe9f69881703614c42b9504ea4a15c67f238fef6199bd2598418693e3f89c3093b2b3935f66f942c29785308966a205f47ca8ab47aa9811d184b22372c4ba749c53dfdfd575bdf8426d42e79e896f9f595b78bd464d397757330fe10757ba43ba6b9a6e260ae46eba399fc70d73eb8ea1313a30d1b46b7b9246d195ee5865f90192c787e337ac3e3a60fe01f58a6965ddec36c79c04ce11cfe58de5b48fe7e83d108f29529a0f63d4d4e34905", @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900e10800001e000000"], 0x28}, 0x1, 0x0, 0x0, 0x400e080}, 0x4) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000040)=@ethtool_ringparam={0xf, 0xac4, 0x2, 0x37d7, 0x9, 0x3, 0x7d, 0x1, 0x10}}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x44, r9, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0900000000000000b7eed5091350fe00a9a5750b7635208f39c362db0073797a310000000008000440040000000000000073797a30000000000800034000000004140000001100010000"], 0x64}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310d2d45c9c52dc6963596000000080003007e1b5b869356e8f5cc14b845e6bd8683099ac46d4e91da6479b2986360a580cb495604dcdeb679c9c50fde46d9676476ea5b444709f0db01b32f79868ee81a6e41b1491fac87185bab76", @ANYRES32=r4, @ANYBLOB="05000800050000000a00340001010101010100000800350000000000080026006c09000008003700020000000a000600"], 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="030100002088020024001280110018016272696467655f736c617665001900000c000580080003000500001a140003006272696467655f736c6176655f30"], 0x58}, 0x1, 0x0, 0x0, 0x4008800}, 0x48000) socket$netlink(0x10, 0x3, 0xa) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4b00000030d7c8e335d9e2ab49f4f2a0444554aac9135dcfe3a2f6a2f421486d550e8fbcac91f789789d5573de8434601221ce4e9f4a2a2349aaef933f64f2ea48860defa4749f0cc5b71664efe9f69881703614c42b9504ea4a15c67f238fef6199bd2598418693e3f89c3093b2b3935f66f942c29785308966a205f47ca8ab47aa9811d184b22372c4ba749c53dfdfd575bdf8426d42e79e896f9f595b78bd464d397757330fe10757ba43ba6b9a6e260ae46eba399fc70d73eb8ea1313a30d1b46b7b9246d195ee5865f90192c787e337ac3e3a60fe01f58a6965ddec36c79c04ce11cfe58de5b48fe7e83d108f29529a0f63d4d4e34905", @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900e10800001e000000"], 0x28}, 0x1, 0x0, 0x0, 0x400e080}, 0x4) (async) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000040)=@ethtool_ringparam={0xf, 0xac4, 0x2, 0x37d7, 0x9, 0x3, 0x7d, 0x1, 0x10}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x44, r9, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0900000000000000b7eed5091350fe00a9a5750b7635208f39c362db0073797a310000000008000440040000000000000073797a30000000000800034000000004140000001100010000"], 0x64}}, 0x0) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310d2d45c9c52dc6963596000000080003007e1b5b869356e8f5cc14b845e6bd8683099ac46d4e91da6479b2986360a580cb495604dcdeb679c9c50fde46d9676476ea5b444709f0db01b32f79868ee81a6e41b1491fac87185bab76", @ANYRES32=r4, @ANYBLOB="05000800050000000a00340001010101010100000800350000000000080026006c09000008003700020000000a000600"], 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="030100002088020024001280110018016272696467655f736c617665001900000c000580080003000500001a140003006272696467655f736c6176655f30"], 0x58}, 0x1, 0x0, 0x0, 0x4008800}, 0x48000) (async) 87.105314ms ago: executing program 4 (id=1658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x7}], 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200440d4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800b0001006578746864720000340002800800034000000000080001400000000005000200000000000800064000000004080004400000000008000540002000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 44.823669ms ago: executing program 1 (id=767): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x80004b}]}}]}, 0x3c}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@multicast, @random="392b663ed19f", @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x12, 0x28, 0x1, 0x0, 0x2, 0x6, 0x0, @remote, @multicast1}, {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0x6}}}}}}, 0x0) 0s ago: executing program 2 (id=1659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x2c, r1, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4005804) kernel console output (not intermixed with test programs): ev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.146083][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.161039][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.205782][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.254741][ T5842] ldm_validate_partition_table(): Disk read failed. [ 93.261635][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.335978][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.363563][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.403367][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.433892][ T5842] Dev nbd0: unable to read RDB block 0 [ 93.440048][ T5842] nbd0: unable to read partition table [ 93.477495][ T6201] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.79'. [ 93.497094][ T5842] ldm_validate_partition_table(): Disk read failed. [ 93.519096][ T5842] Dev nbd0: unable to read RDB block 0 [ 93.533603][ T6201] netlink: 'syz.0.79': attribute type 1 has an invalid length. [ 93.565164][ T5842] nbd0: unable to read partition table [ 93.782473][ T6206] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 93.793717][ T980] IPVS: starting estimator thread 0... [ 93.872472][ T6222] netlink: 277 bytes leftover after parsing attributes in process `syz.2.85'. [ 93.893538][ T6215] IPVS: using max 27 ests per chain, 64800 per kthread [ 93.933229][ T6223] netlink: 277 bytes leftover after parsing attributes in process `syz.2.85'. [ 94.015907][ T6229] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 94.049409][ T6232] netlink: 'syz.1.88': attribute type 1 has an invalid length. [ 94.077786][ T6232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.085365][ T6232] IPv6: NLM_F_CREATE should be set when creating new route [ 94.126383][ T6234] netlink: 'syz.1.88': attribute type 1 has an invalid length. [ 94.142566][ T6234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.161620][ T6228] syzkaller0: entered promiscuous mode [ 94.188350][ T6228] syzkaller0: entered allmulticast mode [ 94.259603][ T6239] bridge0: port 3(gretap0) entered blocking state [ 94.267561][ T6239] bridge0: port 3(gretap0) entered disabled state [ 94.274602][ T6239] gretap0: entered allmulticast mode [ 94.281993][ T6239] gretap0: entered promiscuous mode [ 94.289810][ T6239] bridge0: port 3(gretap0) entered blocking state [ 94.296437][ T6239] bridge0: port 3(gretap0) entered forwarding state [ 94.311346][ T6238] netlink: 20 bytes leftover after parsing attributes in process `syz.4.89'. [ 94.340646][ T6241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'. [ 95.380049][ T6289] netlink: 164 bytes leftover after parsing attributes in process `syz.2.104'. [ 97.235754][ T6305] netlink: 'syz.3.110': attribute type 29 has an invalid length. [ 97.648231][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 97.738337][ T6332] netlink: 56 bytes leftover after parsing attributes in process `syz.3.120'. [ 97.938206][ T6342] tipc: Enabling of bearer rejected, failed to enable media [ 97.971552][ T6342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.123'. [ 97.985337][ T6341] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 98.089386][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'. [ 98.304518][ T6358] netlink: 40 bytes leftover after parsing attributes in process `syz.2.127'. [ 98.357297][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.126'. [ 98.501364][ T6364] netlink: 'syz.1.129': attribute type 10 has an invalid length. [ 98.542269][ T6364] team0: Device ipvlan1 failed to register rx_handler [ 98.647234][ T6370] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 98.659476][ T6370] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 98.717844][ T6368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.131'. [ 98.723925][ T6372] team0: Device gtp0 is of different type [ 98.789817][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 98.839659][ T6377] team0: Device gtp0 is of different type [ 98.980217][ T6387] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 99.025074][ T6387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.107412][ T6387] bond1: (slave gretap1): making interface the new active one [ 99.156346][ T6387] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 99.232031][ T6401] trusted_key: syz.4.139 sent an empty control message without MSG_MORE. [ 99.244386][ T6395] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.528623][ T6387] syz.1.135 (6387) used greatest stack depth: 20040 bytes left [ 99.793080][ T6421] netlink: 72 bytes leftover after parsing attributes in process `syz.3.145'. [ 99.952408][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 99.976173][ T6433] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 100.995336][ T6473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.084480][ T6481] netlink: 'syz.1.165': attribute type 1 has an invalid length. [ 101.109397][ T6473] nftables ruleset with unbound chain [ 101.286188][ T6481] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.310681][ T6483] gretap2: entered promiscuous mode [ 101.327041][ T6483] bond2: (slave gretap2): making interface the new active one [ 101.345081][ T6483] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 101.671391][ T980] IPVS: starting estimator thread 0... [ 101.782491][ T6508] IPVS: using max 30 ests per chain, 72000 per kthread [ 102.016051][ T6526] netlink: 'syz.2.175': attribute type 1 has an invalid length. [ 102.026079][ T6526] netlink: 'syz.2.175': attribute type 3 has an invalid length. [ 103.557936][ T6555] __nla_validate_parse: 5 callbacks suppressed [ 103.557967][ T6555] netlink: 40 bytes leftover after parsing attributes in process `syz.3.186'. [ 103.591071][ T6556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.720331][ T6552] team0 (unregistering): Port device team_slave_0 removed [ 103.731176][ T6552] team0 (unregistering): Port device team_slave_1 removed [ 103.848662][ T6552] delete_channel: no stack [ 103.873874][ T6552] delete_channel: no stack [ 103.878554][ T6552] delete_channel: no stack [ 103.904173][ T6552] delete_channel: no stack [ 103.925281][ T6552] delete_channel: no stack [ 103.929963][ T6552] delete_channel: no stack [ 103.937633][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 103.944187][ T6552] delete_channel: no stack [ 103.951113][ T6552] delete_channel: no stack [ 103.985312][ T6552] delete_channel: no stack [ 103.990054][ T6552] delete_channel: no stack [ 103.995436][ T6552] delete_channel: no stack [ 104.000084][ T6552] delete_channel: no stack [ 104.005743][ T6552] delete_channel: no stack [ 104.016947][ T6575] netlink: 'syz.4.190': attribute type 4 has an invalid length. [ 104.029356][ T6552] delete_channel: no stack [ 104.044412][ T6552] delete_channel: no stack [ 104.054696][ T6552] delete_channel: no stack [ 104.072832][ T6552] delete_channel: no stack [ 104.092860][ T6552] delete_channel: no stack [ 104.107881][ T6552] delete_channel: no stack [ 104.120002][ T6552] delete_channel: no stack [ 104.139062][ T6552] delete_channel: no stack [ 104.152053][ T6552] delete_channel: no stack [ 104.169863][ T6552] delete_channel: no stack [ 104.182462][ T6552] delete_channel: no stack [ 104.220067][ T6552] delete_channel: no stack [ 104.253530][ T6552] delete_channel: no stack [ 104.265922][ T6552] delete_channel: no stack [ 104.286845][ T6581] tipc: MTU too low for tipc bearer [ 104.292438][ T6552] delete_channel: no stack [ 104.311654][ T6552] delete_channel: no stack [ 104.323823][ T6552] delete_channel: no stack [ 104.333822][ T6552] delete_channel: no stack [ 104.338481][ T6552] delete_channel: no stack [ 104.354381][ T6584] openvswitch: netlink: IPv6 tunnel dst address is zero [ 104.378089][ T6552] delete_channel: no stack [ 104.394725][ T6552] delete_channel: no stack [ 104.407184][ T6552] delete_channel: no stack [ 104.420162][ T6552] delete_channel: no stack [ 104.441228][ T6552] delete_channel: no stack [ 104.465169][ T6552] delete_channel: no stack [ 104.476075][ T6581] can: request_module (can-proto-4) failed. [ 104.514143][ T6552] delete_channel: no stack [ 104.550990][ T6552] delete_channel: no stack [ 104.559006][ T6552] delete_channel: no stack [ 104.583612][ T6552] delete_channel: no stack [ 104.588301][ T6552] delete_channel: no stack [ 104.592973][ T6552] delete_channel: no stack [ 104.614769][ T6552] delete_channel: no stack [ 104.619432][ T6552] delete_channel: no stack [ 104.638261][ T6552] delete_channel: no stack [ 104.642958][ T6552] delete_channel: no stack [ 104.656802][ T6552] delete_channel: no stack [ 104.661488][ T6552] delete_channel: no stack [ 104.675445][ T6591] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 104.677495][ T5923] IPVS: starting estimator thread 0... [ 104.702010][ T6552] delete_channel: no stack [ 104.719754][ T6552] delete_channel: no stack [ 104.724747][ T6552] delete_channel: no stack [ 104.729370][ T6552] delete_channel: no stack [ 104.735795][ T6552] delete_channel: no stack [ 104.740426][ T6552] delete_channel: no stack [ 104.752847][ T6552] delete_channel: no stack [ 104.757817][ T6552] delete_channel: no stack [ 104.762458][ T6552] delete_channel: no stack [ 104.769708][ T6552] delete_channel: no stack [ 104.776959][ T6552] delete_channel: no stack [ 104.781891][ T6552] delete_channel: no stack [ 104.793466][ T6595] IPVS: using max 32 ests per chain, 76800 per kthread [ 104.823833][ T6552] delete_channel: no stack [ 104.828560][ T6552] delete_channel: no stack [ 104.833200][ T6552] delete_channel: no stack [ 105.037380][ T6619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.382147][ T6634] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 106.162552][ T6669] IPVS: set_ctl: invalid protocol: 94 172.30.1.3:20003 [ 106.313960][ T6672] tipc: Started in network mode [ 106.319085][ T6672] tipc: Node identity f28ef078f746, cluster identity 4711 [ 106.365666][ T6672] tipc: Enabled bearer , priority 10 [ 106.605015][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 106.787877][ T6698] netlink: 48 bytes leftover after parsing attributes in process `syz.1.232'. [ 106.804090][ T6698] netlink: 48 bytes leftover after parsing attributes in process `syz.1.232'. [ 106.849562][ T6702] netlink: 48 bytes leftover after parsing attributes in process `syz.1.232'. [ 106.887749][ T6702] netlink: 48 bytes leftover after parsing attributes in process `syz.1.232'. [ 106.949103][ T6709] netlink: 256 bytes leftover after parsing attributes in process `syz.3.234'. [ 106.990951][ T6709] unsupported nlmsg_type 40 [ 107.181160][ T6717] veth3: entered allmulticast mode [ 107.296261][ T6727] Driver unsupported XDP return value 0 on prog (id 49) dev N/A, expect packet loss! [ 107.352119][ T6731] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 107.365710][ T6731] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 107.497602][ T5947] tipc: Node number set to 97054840 [ 107.526296][ T6740] netlink: 'syz.1.242': attribute type 21 has an invalid length. [ 107.549366][ T6739] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'. [ 107.559718][ T6740] netlink: 156 bytes leftover after parsing attributes in process `syz.1.242'. [ 107.862467][ T6755] bridge0: port 3(gretap0) entered blocking state [ 107.899340][ T6755] bridge0: port 3(gretap0) entered disabled state [ 107.916447][ T6755] gretap0: entered allmulticast mode [ 107.928240][ T6755] gretap0: entered promiscuous mode [ 107.937373][ T6755] bridge0: port 3(gretap0) entered blocking state [ 107.944169][ T6755] bridge0: port 3(gretap0) entered forwarding state [ 108.411325][ T6784] bridge0: port 3(gretap0) entered disabled state [ 108.418120][ T6784] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.426295][ T6784] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.699419][ T6797] x_tables: unsorted entry at hook 1 [ 108.898681][ T6802] __nla_validate_parse: 4 callbacks suppressed [ 108.898697][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 109.558512][ T6833] netlink: 'syz.0.271': attribute type 3 has an invalid length. [ 109.600792][ T6840] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.272'. [ 109.643724][ T6833] netlink: 256 bytes leftover after parsing attributes in process `syz.0.271'. [ 109.888852][ T6849] netlink: 32 bytes leftover after parsing attributes in process `syz.3.274'. [ 109.978063][ T6855] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 109.996672][ T6855] macsec1: entered allmulticast mode [ 110.032532][ T6855] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 110.099691][ T6855] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 110.123132][ T6863] netlink: 277 bytes leftover after parsing attributes in process `syz.3.277'. [ 110.129719][ T6855] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 110.162141][ T6863] netlink: 'syz.3.277': attribute type 11 has an invalid length. [ 110.171019][ T6863] netlink: 'syz.3.277': attribute type 11 has an invalid length. [ 110.202674][ T6863] netlink: 224 bytes leftover after parsing attributes in process `syz.3.277'. [ 110.433186][ T6874] 8021q: VLANs not supported on lo [ 110.511858][ T6875] vlan2: entered allmulticast mode [ 110.577259][ T6875] veth1: entered allmulticast mode [ 110.754287][ T6888] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 111.131681][ T6906] team_slave_0: entered promiscuous mode [ 111.137544][ T6906] team_slave_1: entered promiscuous mode [ 111.149790][ T6906] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 111.160759][ T6906] team0: Device macvtap1 is already an upper device of the team interface [ 111.218975][ T6906] team_slave_0: left promiscuous mode [ 111.224539][ T6906] team_slave_1: left promiscuous mode [ 111.305622][ T6910] team_slave_0: entered promiscuous mode [ 111.311666][ T6910] team_slave_1: entered promiscuous mode [ 111.331834][ T6910] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 111.344125][ T6910] team0: Device macvtap1 is already an upper device of the team interface [ 111.354848][ T6910] team_slave_0: left promiscuous mode [ 111.360348][ T6910] team_slave_1: left promiscuous mode [ 111.387576][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 111.399104][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 111.421098][ T6907] netlink: 36 bytes leftover after parsing attributes in process `syz.2.290'. [ 111.432263][ T6911] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 111.666909][ C1] Unknown status report in ack skb [ 111.686177][ T6936] tipc: Enabling of bearer rejected, failed to enable media [ 111.741425][ T6939] IPVS: ip_vs_add_dest(): server weight less than zero [ 111.758824][ T5948] IPVS: starting estimator thread 0... [ 111.774805][ T6939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.295'. [ 111.867250][ T6945] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 111.883560][ T6941] IPVS: using max 29 ests per chain, 69600 per kthread [ 111.894071][ T6945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.948226][ T6949] netlink: 'syz.0.298': attribute type 1 has an invalid length. [ 111.984981][ T6949] netlink: 'syz.0.298': attribute type 1 has an invalid length. [ 112.016242][ T6956] netlink: 'syz.4.297': attribute type 10 has an invalid length. [ 115.447465][ T7008] __nla_validate_parse: 3 callbacks suppressed [ 115.447484][ T7008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'. [ 115.462091][ T7011] netlink: 'syz.1.313': attribute type 1 has an invalid length. [ 115.476777][ T7011] netlink: 'syz.1.313': attribute type 2 has an invalid length. [ 115.487887][ T7008] tc_dump_action: action bad kind [ 115.508349][ T7012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.315'. [ 115.534540][ T7016] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 115.545920][ T7012] netlink: 272 bytes leftover after parsing attributes in process `syz.3.315'. [ 115.563582][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 115.752774][ T7016] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 115.833552][ T7016] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 115.910938][ T7011] ªªªªª»: renamed from veth0_virt_wifi (while UP) [ 116.003602][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'. [ 116.068857][ T7016] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 116.122879][ T7016] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 116.328547][ T7058] netlink: 216 bytes leftover after parsing attributes in process `syz.1.324'. [ 116.337745][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'. [ 116.365136][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.323'. [ 116.545105][ T7065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.328'. [ 116.567628][ T7066] netlink: 'syz.4.326': attribute type 178 has an invalid length. [ 116.598985][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'. [ 116.751681][ T7073] netlink: 'syz.0.329': attribute type 10 has an invalid length. [ 116.912798][ T7089] netlink: 'syz.2.334': attribute type 13 has an invalid length. [ 116.955678][ T7089] lo: entered promiscuous mode [ 116.961401][ T7089] lo: entered allmulticast mode [ 117.012247][ T7089] tunl0: entered promiscuous mode [ 117.063341][ T7089] tunl0: entered allmulticast mode [ 117.088437][ T7089] gre0: entered promiscuous mode [ 117.111712][ T7089] gre0: entered allmulticast mode [ 117.176216][ T7089] bridge0: port 3(gretap0) entered disabled state [ 117.198231][ T7089] gretap0: refused to change device tx_queue_len [ 117.217146][ T7089] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 117.219794][ T7103] netlink: 'syz.3.337': attribute type 21 has an invalid length. [ 117.261116][ T7103] netlink: 'syz.3.337': attribute type 1 has an invalid length. [ 118.329648][ T7162] xfrm1: entered allmulticast mode [ 118.571606][ T7170] Bluetooth: MGMT ver 1.23 [ 118.858716][ T7191] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 119.980401][ T7254] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 120.049916][ T7257] : renamed from veth0_vlan (while UP) [ 120.569569][ T7282] __nla_validate_parse: 42 callbacks suppressed [ 120.569597][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 120.592340][ T7286] netlink: 'syz.2.388': attribute type 4 has an invalid length. [ 120.628245][ T7286] netlink: 'syz.2.388': attribute type 4 has an invalid length. [ 120.832086][ T7299] netlink: 88 bytes leftover after parsing attributes in process `syz.2.394'. [ 120.864292][ T7300] vxcan3: entered allmulticast mode [ 120.878773][ T7299] vxcan5: entered allmulticast mode [ 120.981910][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 120.981910][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 121.013078][ T7306] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 121.048308][ T7305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.395'. [ 121.291049][ T7312] netlink: 'syz.2.396': attribute type 11 has an invalid length. [ 121.299452][ T7312] netlink: 'syz.2.396': attribute type 4 has an invalid length. [ 121.308720][ T7312] netlink: 224 bytes leftover after parsing attributes in process `syz.2.396'. [ 121.475171][ T7318] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.486479][ T7318] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.529322][ T7318] tipc: Resetting bearer [ 121.547090][ T7318] tipc: Resetting bearer [ 121.797913][ T7332] No such timeout policy "syz0" [ 122.035423][ T7341] netlink: 'syz.2.406': attribute type 39 has an invalid length. [ 122.607556][ T7371] syzkaller0: entered allmulticast mode [ 122.662679][ T7371] syzkaller0 (unregistering): left allmulticast mode [ 122.792126][ T7382] tap0: tun_chr_ioctl cmd 1074025677 [ 122.807961][ T7382] tap0: linktype set to 65534 [ 122.836012][ T7374] tap0: tun_chr_ioctl cmd 35108 [ 122.877477][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 123.198815][ T7408] netlink: 52 bytes leftover after parsing attributes in process `syz.2.425'. [ 123.251274][ T7408] netlink: 'syz.2.425': attribute type 160 has an invalid length. [ 123.441231][ T7424] netlink: 44 bytes leftover after parsing attributes in process `syz.4.431'. [ 123.786160][ T7450] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 123.797559][ T7446] xt_socket: unknown flags 0x50 [ 124.086244][ T5948] IPVS: starting estimator thread 0... [ 124.092558][ T7456] netlink: 176 bytes leftover after parsing attributes in process `syz.1.438'. [ 124.183419][ T7464] IPVS: using max 28 ests per chain, 67200 per kthread [ 124.636649][ T7498] netlink: 'syz.1.447': attribute type 11 has an invalid length. [ 124.669434][ T7498] netlink: 'syz.1.447': attribute type 11 has an invalid length. [ 124.692415][ T7498] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 125.041037][ T7516] netlink: 'syz.1.452': attribute type 3 has an invalid length. [ 125.158921][ T7529] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 125.452212][ T5832] Bluetooth: hci4: link tx timeout [ 125.458573][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.488682][ T5832] Bluetooth: hci4: link tx timeout [ 125.494343][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.680298][ T7545] bond1: entered promiscuous mode [ 125.695416][ T7545] bond1: entered allmulticast mode [ 125.704568][ T7545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.712714][ T7555] __nla_validate_parse: 9 callbacks suppressed [ 125.712748][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 125.825148][ T7552] bond2: entered promiscuous mode [ 125.849752][ T7552] bond2: entered allmulticast mode [ 125.856588][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.464'. [ 125.868993][ T7552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.914592][ T7562] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 125.939557][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'. [ 126.152407][ T30] audit: type=1107 audit(1751196897.247:2): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='˜õ®1$«>l9ÿko•1éÔ®$ÆnC£(!ØøÙ~ç=äkx{Ðùü½õ~V<±œu˜Sâ [ 126.152407][ T30] É€vxÐÑ}œ{f­”]ÂFi¬oº®˜ö½Ñúædò­cÐPQéÌx”•ÈB;ÀãWÉÁ%S«hsÁ©v~Ö`‹ÒVõ/j>öd}…T´ð£É|ȵûÜðRÓHy6熽sYPㄽC'Õšó¿Èg3Txà‚‹u†çL¦«¤Ÿ™4ûXI˜ÿ"‘™×¶%éòN~`ù¶˜ ·.ýQ;ÿÙû¹S®#fÓã?¨§fFýGpå;Øs3ðŽ}‹ÃVµÐý©-µ›7„¾WI©ú¾m#ôZ7¿©ý8ko[Zb-é¼®¸ZaîÀåN®So) [ 126.152407][ T30] u%Ñï›H ¨÷¸OL2íRÂ' [ 126.224719][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.469'. [ 126.988726][ T7618] netlink: 'syz.3.477': attribute type 4 has an invalid length. [ 127.069458][ T7625] netlink: 'syz.3.477': attribute type 4 has an invalid length. [ 127.495517][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 127.541843][ T5832] Bluetooth: hci4: link tx timeout [ 128.075241][ T5948] hid-generic 0005:046D:FFF9.0001: item fetching failed at offset 0/1 [ 128.084860][ T5948] hid-generic 0005:046D:FFF9.0001: probe with driver hid-generic failed with error -22 [ 128.162612][ T7675] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 128.327083][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 128.440214][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'. [ 128.450242][ T7686] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 129.140484][ T7718] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.169075][ T7718] netlink: 'syz.3.506': attribute type 2 has an invalid length. [ 129.231266][ T7718] netlink: 'syz.3.506': attribute type 8 has an invalid length. [ 129.239424][ T7718] netlink: 132 bytes leftover after parsing attributes in process `syz.3.506'. [ 129.271441][ T7727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.509'. [ 129.533918][ T7743] netlink: 'syz.4.512': attribute type 1 has an invalid length. [ 129.534185][ T7741] netlink: 14 bytes leftover after parsing attributes in process `syz.1.513'. [ 129.541610][ T7743] netlink: 16154 bytes leftover after parsing attributes in process `syz.4.512'. [ 129.951328][ T7755] netlink: 'syz.0.518': attribute type 10 has an invalid length. [ 129.999367][ T7741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.012163][ T7741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.026535][ T7741] bond0 (unregistering): Released all slaves [ 130.072975][ T7755] team0: Device veth1_macvtap failed to register rx_handler [ 130.638781][ T7794] bond_slave_1: Device is already in use. [ 130.737715][ T7796] netlink: 'syz.2.529': attribute type 11 has an invalid length. [ 130.793591][ T7796] netlink: 'syz.2.529': attribute type 4 has an invalid length. [ 130.829870][ T7796] netlink: 224 bytes leftover after parsing attributes in process `syz.2.529'. [ 130.840290][ T7804] netlink: 'syz.4.532': attribute type 28 has an invalid length. [ 130.985415][ T7806] ªªªªª": renamed from dummy0 (while UP) [ 131.062707][ T7812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'. [ 131.065527][ T7811] netlink: 'syz.4.535': attribute type 1 has an invalid length. [ 131.159691][ T7819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.537'. [ 131.241864][ T7824] netlink: 'syz.3.538': attribute type 1 has an invalid length. [ 131.281467][ T7824] netlink: 244 bytes leftover after parsing attributes in process `syz.3.538'. [ 131.458080][ T7833] Bluetooth: MGMT ver 1.23 [ 131.512670][ T7833] netlink: 32 bytes leftover after parsing attributes in process `syz.1.541'. [ 131.641311][ T7839] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.650377][ T7839] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.659263][ T7839] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.668027][ T7839] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.698270][ T7853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.544'. [ 131.722570][ T7839] vxlan0: entered promiscuous mode [ 131.744244][ T7839] vxlan0: entered allmulticast mode [ 131.826350][ T7856] netlink: 60 bytes leftover after parsing attributes in process `syz.2.546'. [ 131.850327][ T7856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.546'. [ 132.203923][ T7872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.549'. [ 132.225028][ T7870] syzkaller1: entered promiscuous mode [ 132.231924][ T7870] syzkaller1: entered allmulticast mode [ 132.280921][ T7873] netlink: 'syz.1.552': attribute type 23 has an invalid length. [ 132.699479][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.706321][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.816692][ T7894] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 132.995090][ T7911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.003815][ T7911] batadv_slave_0: entered promiscuous mode [ 133.031384][ T7904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.562'. [ 133.288036][ T7920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.943125][ T7965] netlink: 'syz.4.581': attribute type 2 has an invalid length. [ 135.742520][ T7997] lo: entered allmulticast mode [ 135.839795][ T8006] __nla_validate_parse: 12 callbacks suppressed [ 135.839813][ T8006] netlink: 112 bytes leftover after parsing attributes in process `syz.0.591'. [ 136.298957][ T8016] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.596'. [ 136.314620][ T8023] x_tables: duplicate underflow at hook 3 [ 136.320466][ T8023] x_tables: duplicate underflow at hook 3 [ 136.352718][ T8016] x_tables: duplicate underflow at hook 2 [ 136.498178][ T8028] netlink: 'syz.0.601': attribute type 1 has an invalid length. [ 136.536108][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.603'. [ 136.550776][ T8028] netlink: 220 bytes leftover after parsing attributes in process `syz.0.601'. [ 136.561562][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.603'. [ 136.602394][ T8037] netlink: 'syz.2.605': attribute type 8 has an invalid length. [ 136.622873][ T8032] netlink: 'syz.1.603': attribute type 14 has an invalid length. [ 136.702219][ T8040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.605'. [ 136.913069][ T8050] netlink: 'syz.4.608': attribute type 10 has an invalid length. [ 136.939630][ T8050] netlink: 40 bytes leftover after parsing attributes in process `syz.4.608'. [ 136.991916][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 137.021538][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.609'. [ 137.043752][ T8058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.608'. [ 137.069778][ T8050] team0: Port device geneve0 added [ 137.080222][ T8062] netlink: 'syz.1.609': attribute type 1 has an invalid length. [ 137.089121][ T8062] netlink: 'syz.1.609': attribute type 1 has an invalid length. [ 137.101964][ T8062] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 137.128938][ T8050] syz.4.608 (8050) used greatest stack depth: 19880 bytes left [ 137.143142][ T8062] netlink: 'syz.1.609': attribute type 1 has an invalid length. [ 137.442010][ T8076] netlink: 'syz.1.615': attribute type 4 has an invalid length. [ 137.589909][ T8082] netlink: 'syz.4.618': attribute type 10 has an invalid length. [ 137.682881][ T8082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.735752][ T8082] team0: Port device bond0 added [ 137.798421][ T8090] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 137.960552][ T8092] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 138.221346][ T8106] netlink: 'syz.3.629': attribute type 29 has an invalid length. [ 138.264199][ T8106] netlink: 'syz.3.629': attribute type 29 has an invalid length. [ 138.530900][ T8119] netlink: 'syz.3.633': attribute type 8 has an invalid length. [ 139.174953][ T8147] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 139.695841][ T8179] netlink: 'syz.2.652': attribute type 13 has an invalid length. [ 139.741008][ T8179] gretap0: refused to change device tx_queue_len [ 139.768230][ T8179] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 139.813761][ T5841] Bluetooth: hci0: command tx timeout [ 139.904313][ T8184] nbd: illegal input index -8454144 [ 139.961424][ T8188] tipc: Enabling of bearer rejected, failed to enable media [ 140.497643][ T8220] openvswitch: netlink: Flow key attribute not present in set flow. [ 141.495507][ T8262] __nla_validate_parse: 20 callbacks suppressed [ 141.495525][ T8262] netlink: 40 bytes leftover after parsing attributes in process `syz.2.679'. [ 142.129122][ T8291] xt_cgroup: path and classid specified [ 142.143756][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 142.163455][ T8289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.685'. [ 142.684674][ T8315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'. [ 142.862073][ T8330] netlink: 'syz.0.696': attribute type 1 has an invalid length. [ 142.927113][ T8330] netlink: 228 bytes leftover after parsing attributes in process `syz.0.696'. [ 143.214789][ T8345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.297235][ T8354] netlink: 576 bytes leftover after parsing attributes in process `syz.4.701'. [ 143.398445][ T8354] tipc: Resetting bearer [ 143.441384][ T8354] tipc: Resetting bearer [ 143.942016][ T8383] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 144.182985][ T8383] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.230110][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 144.278986][ T8405] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.716'. [ 144.295576][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 144.485709][ T8413] netlink: 40 bytes leftover after parsing attributes in process `syz.0.718'. [ 144.577966][ T8415] tipc: Started in network mode [ 144.614050][ T8415] tipc: Node identity -:, cluster identity 4711 [ 144.620393][ T8415] tipc: Enabling of bearer rejected, failed to enable media [ 144.678298][ T8417] netlink: 'syz.3.720': attribute type 1 has an invalid length. [ 144.810242][ T8430] netlink: 'syz.0.723': attribute type 1 has an invalid length. [ 144.851751][ T8439] nbd: must specify at least one socket [ 144.876760][ T8429] bond4: (slave gretap1): making interface the new active one [ 144.921940][ T8429] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 145.772063][ T8487] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 146.014766][ T8500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.097368][ T8493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.162446][ T8487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.249673][ T8493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.405015][ T8518] netlink: 'syz.3.744': attribute type 10 has an invalid length. [ 146.451433][ T8518] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 146.578548][ T8530] __nla_validate_parse: 10 callbacks suppressed [ 146.578565][ T8530] netlink: 52 bytes leftover after parsing attributes in process `syz.0.747'. [ 146.727730][ T8536] x_tables: duplicate underflow at hook 3 [ 146.801914][ T8539] netlink: 40 bytes leftover after parsing attributes in process `syz.2.750'. [ 147.287149][ T8559] netlink: 'syz.3.756': attribute type 1 has an invalid length. [ 147.328671][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'. [ 148.208668][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.219936][ T8591] xt_CT: No such helper "snmp" [ 148.395916][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.535016][ T8611] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 148.559055][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 148.589151][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.603129][ T8616] openvswitch: netlink: IP tunnel TTL not specified. [ 148.874345][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.936535][ T8630] netlink: 'syz.4.774': attribute type 2 has an invalid length. [ 149.149374][ T8642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.779'. [ 149.188327][ T8642] netlink: 52 bytes leftover after parsing attributes in process `syz.3.779'. [ 149.351285][ T12] gretap0: left allmulticast mode [ 149.375665][ T12] gretap0: left promiscuous mode [ 149.412904][ T12] bridge0: port 3(gretap0) entered disabled state [ 149.432021][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 149.441114][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 149.449434][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 149.466809][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 149.481653][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 149.484299][ T12] bridge_slave_1: left allmulticast mode [ 149.501906][ T12] bridge_slave_1: left promiscuous mode [ 149.509658][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.530757][ T8660] netlink: 44 bytes leftover after parsing attributes in process `syz.3.782'. [ 149.541114][ T12] bridge_slave_0: left allmulticast mode [ 149.557411][ T12] bridge_slave_0: left promiscuous mode [ 149.567643][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.920707][ T8675] netlink: 'syz.0.785': attribute type 10 has an invalid length. [ 150.001260][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 150.030776][ T12] bond2 (unregistering): (slave gretap2): Releasing active interface [ 150.357806][ T12] bond1 (unregistering): Released all slaves [ 150.429332][ T12] bond2 (unregistering): Released all slaves [ 150.442517][ T12] bond0 (unregistering): Released all slaves [ 150.519304][ T12] bond3 (unregistering): Released all slaves [ 150.597881][ T8675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.626707][ T8675] team0: Port device bond0 added [ 150.695301][ T8686] netlink: 27 bytes leftover after parsing attributes in process `syz.4.786'. [ 150.769721][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 150.832306][ T12] tipc: Left network mode [ 150.853509][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 151.047574][ T8698] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 151.059039][ T8698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.437287][ T8717] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 151.457470][ T12] hsr_slave_0: left promiscuous mode [ 151.463070][ T8717] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 151.472249][ T12] hsr_slave_1: left promiscuous mode [ 151.478716][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.486625][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.518651][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.536305][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.583509][ T5832] Bluetooth: hci2: command tx timeout [ 151.670765][ T8729] __nla_validate_parse: 1 callbacks suppressed [ 151.670783][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'. [ 151.675985][ T12] veth1_macvtap: left promiscuous mode [ 151.693547][ T12] veth0_macvtap: left promiscuous mode [ 151.699290][ T12] veth1_vlan: left promiscuous mode [ 151.705805][ T12] veth0_vlan: left promiscuous mode [ 151.899775][ T12] pim6reg (unregistering): left allmulticast mode [ 152.310664][ T12] team0 (unregistering): Port device team_slave_1 removed [ 152.340995][ T12] team0 (unregistering): Port device team_slave_0 removed [ 152.616382][ T8726] netlink: 32 bytes leftover after parsing attributes in process `syz.3.797'. [ 152.972499][ T8651] chnl_net:caif_netlink_parms(): no params data found [ 153.049737][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 153.150477][ T8769] rdma_op ffff88806e0fb1f0 conn xmit_rdma 0000000000000000 [ 153.267058][ T8776] netlink: 244 bytes leftover after parsing attributes in process `syz.4.806'. [ 153.274717][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.806'. [ 153.308292][ T8778] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 153.331271][ T8778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.528842][ T8784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.808'. [ 153.581280][ T8790] netlink: 'syz.4.807': attribute type 1 has an invalid length. [ 153.593720][ T8790] netlink: 'syz.4.807': attribute type 21 has an invalid length. [ 153.663575][ T5832] Bluetooth: hci2: command tx timeout [ 153.867289][ T8651] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.894087][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.810'. [ 153.913774][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.935400][ T8651] bridge_slave_0: entered allmulticast mode [ 153.954154][ T8651] bridge_slave_0: entered promiscuous mode [ 153.960146][ T8805] xt_hashlimit: invalid interval [ 153.980913][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.810'. [ 154.014108][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.015982][ T12] IPVS: stop unused estimator thread 0... [ 154.021275][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.047415][ T8804] netlink: 44 bytes leftover after parsing attributes in process `syz.0.810'. [ 154.076971][ T8651] bridge_slave_1: entered allmulticast mode [ 154.102378][ T8651] bridge_slave_1: entered promiscuous mode [ 154.450624][ T8651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.505855][ T8651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.836520][ T8651] team0: Port device team_slave_0 added [ 154.866939][ T8651] team0: Port device team_slave_1 added [ 155.060845][ T8846] xt_socket: unknown flags 0x2 [ 155.085479][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.821'. [ 155.218816][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.236095][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.302987][ T8651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.333767][ T8853] veth0: entered promiscuous mode [ 155.345288][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.360477][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.427038][ T8651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.512189][ T8862] ipt_REJECT: TCP_RESET invalid for non-tcp [ 155.732393][ T8852] veth0: left promiscuous mode [ 155.750496][ T5832] Bluetooth: hci2: command tx timeout [ 155.783052][ T8651] hsr_slave_0: entered promiscuous mode [ 155.812089][ T8651] hsr_slave_1: entered promiscuous mode [ 155.819690][ T8651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.821040][ T8877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.827389][ T8651] Cannot create hsr debugfs directory [ 156.035738][ T8884] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.068775][ T8884] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.453728][ T8907] x_tables: unsorted underflow at hook 1 [ 156.471494][ T8908] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.843674][ T8928] x_tables: duplicate underflow at hook 3 [ 156.915961][ T8934] netlink: 'syz.0.845': attribute type 1 has an invalid length. [ 157.051381][ T8938] __nla_validate_parse: 6 callbacks suppressed [ 157.051398][ T8938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.847'. [ 157.181856][ T8945] netlink: 'syz.2.850': attribute type 4 has an invalid length. [ 157.213884][ T8945] netlink: 17 bytes leftover after parsing attributes in process `syz.2.850'. [ 157.465022][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 157.523474][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.850'. [ 157.625326][ T8963] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 157.817917][ T5832] Bluetooth: hci2: command tx timeout [ 157.823721][ T8956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.854'. [ 157.832674][ T8956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.854'. [ 158.182663][ T8651] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.256566][ T8651] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.308668][ T8651] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.394018][ T8651] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.535565][ T9004] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.862'. [ 158.808558][ T8651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.911858][ T8651] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.988613][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.995938][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.093480][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.100741][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.163648][ T9026] x_tables: unsorted entry at hook 1 [ 159.230401][ T9029] Cannot find del_set index 4 as target [ 159.269134][ T9029] netlink: 'syz.3.868': attribute type 21 has an invalid length. [ 159.659935][ T9048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.872'. [ 159.821515][ T8651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.833765][ T9050] xt_CT: No such helper "pptp" [ 159.912961][ T9060] netlink: 300 bytes leftover after parsing attributes in process `syz.0.873'. [ 160.059889][ T8651] veth0_vlan: entered promiscuous mode [ 160.113112][ T8651] veth1_vlan: entered promiscuous mode [ 160.160855][ T9068] netlink: 'syz.0.876': attribute type 8 has an invalid length. [ 160.326790][ T8651] veth0_macvtap: entered promiscuous mode [ 160.392541][ T8651] veth1_macvtap: entered promiscuous mode [ 160.567367][ T9086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 162.268614][ T9078] vlan3: entered allmulticast mode [ 162.273882][ T9078] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 162.408791][ T9106] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 162.436727][ T9106] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.884'. [ 162.455367][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.479441][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.519310][ T8651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.566067][ T8651] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.614003][ T8651] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.634308][ T8651] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.668179][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 162.713907][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'. [ 162.775499][ T9114] netlink: 'syz.2.887': attribute type 15 has an invalid length. [ 163.101130][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.145769][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.270690][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.329607][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.395868][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'. [ 163.409975][ T9148] batadv1: left allmulticast mode [ 163.417561][ T9148] batadv1: left promiscuous mode [ 163.423116][ T9147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.895'. [ 163.432938][ T9148] bridge0: port 3(batadv1) entered disabled state [ 163.457869][ T9148] bridge_slave_1: left allmulticast mode [ 163.493067][ T9148] bridge_slave_1: left promiscuous mode [ 163.525601][ T9148] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.553860][ T9148] bridge_slave_0: left allmulticast mode [ 163.559689][ T9148] bridge_slave_0: left promiscuous mode [ 163.589529][ T9148] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.724534][ T9142] netlink: 100 bytes leftover after parsing attributes in process `syz.2.893'. [ 163.870061][ T9161] openvswitch: netlink: Key type 29 is not supported [ 164.005132][ T9171] netlink: 'syz.3.899': attribute type 1 has an invalid length. [ 164.237323][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.668043][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.673634][ T9192] openvswitch: netlink: IPv6 tunnel dst address is zero [ 164.903386][ T5832] block nbd1: Receive control failed (result -32) [ 165.101363][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.207387][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.908'. [ 165.326453][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.347525][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.358315][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.383069][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.395130][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.414062][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.493434][ T5841] Bluetooth: hci2: command tx timeout [ 169.517453][ T9334] x_tables: duplicate entry at hook 3 [ 169.529708][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.918'. [ 169.583577][ T5841] Bluetooth: hci2: command tx timeout [ 169.692326][ T9344] netlink: 196 bytes leftover after parsing attributes in process `syz.0.920'. [ 170.062666][ T13] bridge_slave_1: left allmulticast mode [ 170.099958][ T13] bridge_slave_1: left promiscuous mode [ 170.137134][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.182713][ T13] bridge_slave_0: left allmulticast mode [ 170.204525][ T13] bridge_slave_0: left promiscuous mode [ 170.231567][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.836027][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.851549][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.867700][ T13] bond0 (unregistering): Released all slaves [ 170.912854][ T9376] netlink: 'syz.2.928': attribute type 7 has an invalid length. [ 171.194163][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.935'. [ 171.356798][ T9221] chnl_net:caif_netlink_parms(): no params data found [ 171.618276][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.937'. [ 171.651215][ T9440] netlink: 56 bytes leftover after parsing attributes in process `syz.3.939'. [ 171.668002][ T5841] Bluetooth: hci2: command tx timeout [ 171.858064][ T9452] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 171.883783][ T9447] netlink: 'syz.0.937': attribute type 1 has an invalid length. [ 171.910249][ T13] hsr_slave_0: left promiscuous mode [ 171.922625][ T13] hsr_slave_1: left promiscuous mode [ 171.941829][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.970915][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.991585][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.009925][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.059143][ T13] veth1_macvtap: left promiscuous mode [ 172.089117][ T13] veth0_macvtap: left promiscuous mode [ 172.098368][ T13] veth1_vlan: left promiscuous mode [ 172.103906][ T13] veth0_vlan: left promiscuous mode [ 172.554964][ T13] team0 (unregistering): Port device team_slave_1 removed [ 172.592008][ T13] team0 (unregistering): Port device team_slave_0 removed [ 172.897409][ T9439] netlink: 'syz.0.937': attribute type 1 has an invalid length. [ 172.906307][ T9221] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.913647][ T9221] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.920847][ T9221] bridge_slave_0: entered allmulticast mode [ 172.939339][ T9221] bridge_slave_0: entered promiscuous mode [ 172.971891][ T9221] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.988906][ T9221] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.000414][ T9221] bridge_slave_1: entered allmulticast mode [ 173.009065][ T9221] bridge_slave_1: entered promiscuous mode [ 173.096307][ T9221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.125389][ T9221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.159744][ T9471] netlink: 44 bytes leftover after parsing attributes in process `syz.2.945'. [ 173.202503][ T9221] team0: Port device team_slave_0 added [ 173.250531][ T9221] team0: Port device team_slave_1 added [ 173.432658][ T9473] SET target dimension over the limit! [ 173.438393][ T9221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.438410][ T9221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.438448][ T9221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.440367][ T9221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.496836][ T9484] netlink: 'syz.3.949': attribute type 1 has an invalid length. [ 173.509188][ T9221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.512764][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 173.538108][ T9221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.563130][ T9478] wg0: entered promiscuous mode [ 173.590464][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.949'. [ 173.733887][ T5841] Bluetooth: hci2: command tx timeout [ 174.057156][ T9221] hsr_slave_0: entered promiscuous mode [ 174.093686][ T9221] hsr_slave_1: entered promiscuous mode [ 174.102730][ T9506] netlink: 'syz.0.955': attribute type 2 has an invalid length. [ 174.121843][ T9221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.163646][ T9221] Cannot create hsr debugfs directory [ 174.208246][ T9506] : entered promiscuous mode [ 174.770124][ T9542] netlink: 'syz.3.962': attribute type 10 has an invalid length. [ 175.126317][ T9542] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.158651][ T9542] bond0: (slave team0): Enslaving as an active interface with an up link [ 175.210935][ T9546] netlink: 20 bytes leftover after parsing attributes in process `syz.3.962'. [ 175.267051][ T5841] Bluetooth: hci4: link tx timeout [ 175.272419][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 175.285953][ T9555] ip6gre0 speed is unknown, defaulting to 1000 [ 175.364330][ T9555] ip6gre0 speed is unknown, defaulting to 1000 [ 175.398106][ T30] audit: type=1800 audit(1751196946.497:3): pid=9563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.969" name="memory.events" dev="tmpfs" ino=1121 res=0 errno=0 [ 175.437607][ T30] audit: type=1804 audit(1751196946.497:4): pid=9563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.969" name="/newroot/218/memory.events" dev="tmpfs" ino=1121 res=1 errno=0 [ 175.470244][ T9555] ip6gre0 speed is unknown, defaulting to 1000 [ 175.998405][ T9584] netlink: 'syz.2.972': attribute type 64 has an invalid length. [ 176.006693][ T9555] infiniband syz0: set active [ 176.008017][ T980] ip6gre0 speed is unknown, defaulting to 1000 [ 176.023964][ T9555] infiniband syz0: added ip6gre0 [ 176.032168][ T9555] syz0: rxe_create_cq: returned err = -12 [ 176.037685][ T9584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.972'. [ 176.041588][ T9555] infiniband syz0: Couldn't create ib_mad CQ [ 176.054849][ T9555] infiniband syz0: Couldn't open port 1 [ 176.269777][ T9555] RDS/IB: syz0: added [ 176.282878][ T9555] smc: adding ib device syz0 with port count 1 [ 176.323680][ T9555] smc: ib device syz0 port 1 has pnetid [ 176.336709][ T9221] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.366757][ T24] ip6gre0 speed is unknown, defaulting to 1000 [ 176.390377][ T9221] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.441848][ T9555] ip6gre0 speed is unknown, defaulting to 1000 [ 176.455607][ T9221] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.503080][ T9221] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.808515][ T9221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.916396][ T9221] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.940622][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.947957][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.981979][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.989272][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.106612][ T9626] netlink: 132 bytes leftover after parsing attributes in process `syz.4.979'. [ 177.145181][ T9626] netlink: 132 bytes leftover after parsing attributes in process `syz.4.979'. [ 177.334720][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 177.481163][ T9555] ip6gre0 speed is unknown, defaulting to 1000 [ 177.759445][ T9221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.932410][ T9651] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 178.024419][ T9660] netlink: 'syz.2.985': attribute type 1 has an invalid length. [ 178.035955][ T9655] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 178.191624][ T9221] veth0_vlan: entered promiscuous mode [ 178.199801][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 178.222508][ T9660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.985'. [ 178.341947][ T9221] veth1_vlan: entered promiscuous mode [ 178.521652][ T9221] veth0_macvtap: entered promiscuous mode [ 178.572157][ T9221] veth1_macvtap: entered promiscuous mode [ 178.602417][ T9555] ip6gre0 speed is unknown, defaulting to 1000 [ 178.649041][ T9221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.710116][ T9221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.825921][ T9221] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.869963][ T9221] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.892365][ T9221] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.911486][ T9221] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.330391][ T9715] openvswitch: netlink: EtherType 0 is less than min 600 [ 179.383889][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 179.413058][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.452670][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.565660][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.580324][ T9555] ip6gre0 speed is unknown, defaulting to 1000 [ 179.600680][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.058733][ T9740] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1003'. [ 180.461297][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.522714][ T9555] ip6gre0 speed is unknown, defaulting to 1000 [ 180.621656][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.745377][ T9759] netlink: 'syz.2.1007': attribute type 10 has an invalid length. [ 180.792551][ T9759] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1007'. [ 180.918368][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.948243][ T9765] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1010'. [ 180.991030][ T9759] batadv0: entered promiscuous mode [ 181.004832][ T9759] batadv0: entered allmulticast mode [ 181.031362][ T9759] bridge0: port 4(batadv0) entered blocking state [ 181.073701][ T9759] bridge0: port 4(batadv0) entered disabled state [ 181.223699][ T9759] bridge0: port 4(batadv0) entered blocking state [ 181.230400][ T9759] bridge0: port 4(batadv0) entered forwarding state [ 181.264439][ T3400] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 181.274236][ T3400] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 181.678706][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.922893][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.934255][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.942153][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.953844][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.968515][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 182.019014][ T9833] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1014'. [ 182.180140][ T9830] ip6gre0 speed is unknown, defaulting to 1000 [ 182.290714][ T9839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1015'. [ 182.347489][ T9839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1015'. [ 182.418151][ T37] bridge_slave_1: left allmulticast mode [ 182.432681][ T9850] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1016'. [ 182.454543][ T37] bridge_slave_1: left promiscuous mode [ 182.454823][ T9846] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1018'. [ 182.483570][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.558662][ T9846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1018'. [ 182.604837][ T9846] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1018'. [ 182.619267][ T9846] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1018'. [ 182.673950][ T37] bridge_slave_0: left allmulticast mode [ 182.679683][ T37] bridge_slave_0: left promiscuous mode [ 182.730589][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.340197][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.357916][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.369055][ T37] bond0 (unregistering): Released all slaves [ 183.708283][ T9893] netlink: 'syz.3.1024': attribute type 10 has an invalid length. [ 183.848486][ T9893] bond0: (slave team0): Releasing backup interface [ 183.883792][ T9893] batman_adv: batadv0: Adding interface: team0 [ 183.921869][ T9893] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 183.955976][ T9893] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 184.053638][ T5841] Bluetooth: hci2: command tx timeout [ 184.568243][ T9936] SET target dimension over the limit! [ 185.019103][ T37] hsr_slave_0: left promiscuous mode [ 185.025724][ T37] hsr_slave_1: left promiscuous mode [ 185.044263][ T9950] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 185.054417][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.061874][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.084287][ T9950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.116792][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.135685][ T9953] Cannot find del_set index 128 as target [ 185.141618][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.217353][ T37] veth1_macvtap: left promiscuous mode [ 185.240851][ T37] veth0_macvtap: left promiscuous mode [ 185.260487][ T37] veth1_vlan: left promiscuous mode [ 185.276596][ T37] veth0_vlan: left promiscuous mode [ 185.978207][ T37] team0 (unregistering): Port device team_slave_1 removed [ 186.011037][ T37] team0 (unregistering): Port device team_slave_0 removed [ 186.133534][ T5841] Bluetooth: hci2: command tx timeout [ 186.337087][ T9944] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 186.404398][ T9830] chnl_net:caif_netlink_parms(): no params data found [ 186.678670][ T9995] __nla_validate_parse: 6 callbacks suppressed [ 186.678688][ T9995] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1047'. [ 186.719451][ T9989] netlink: 'syz.4.1045': attribute type 8 has an invalid length. [ 186.961356][T10006] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1048'. [ 187.087024][ T9830] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.114406][ T9830] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.131249][ T9830] bridge_slave_0: entered allmulticast mode [ 187.149613][ T9830] bridge_slave_0: entered promiscuous mode [ 187.184455][ T9830] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.203719][T10012] sctp: [Deprecated]: syz.0.1049 (pid 10012) Use of int in max_burst socket option deprecated. [ 187.203719][T10012] Use struct sctp_assoc_value instead [ 187.219896][ T9830] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.261049][ T9830] bridge_slave_1: entered allmulticast mode [ 187.286538][ T9830] bridge_slave_1: entered promiscuous mode [ 187.345828][T10019] xt_l2tp: v2 tid > 0xffff: 150994944 [ 187.393003][T10017] raw_sendmsg: syz.4.1050 forgot to set AF_INET. Fix it! [ 187.498926][ T9830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.526164][ T9830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.816901][ T9830] team0: Port device team_slave_0 added [ 187.833062][T10040] netlink: 'syz.4.1054': attribute type 1 has an invalid length. [ 187.856666][ T9830] team0: Port device team_slave_1 added [ 187.889209][T10042] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1056'. [ 187.928905][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1056'. [ 188.078964][ T9830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.110045][ T9830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.173704][T10053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1059'. [ 188.214312][ T9830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.216882][ T5841] Bluetooth: hci2: command tx timeout [ 188.289377][T10058] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1060'. [ 188.354333][ T9830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.394160][ T9830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.471654][ T9830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.571503][T10069] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 188.987159][ T9830] hsr_slave_0: entered promiscuous mode [ 188.999481][ T9830] hsr_slave_1: entered promiscuous mode [ 189.038702][ T9830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.074771][ T9830] Cannot create hsr debugfs directory [ 190.263938][T10143] syz.3.1078: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 190.303920][ T5841] Bluetooth: hci2: command tx timeout [ 190.370648][T10143] CPU: 1 UID: 0 PID: 10143 Comm: syz.3.1078 Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 190.370674][T10143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.370691][T10143] Call Trace: [ 190.370699][T10143] [ 190.370707][T10143] dump_stack_lvl+0x189/0x250 [ 190.370753][T10143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.370781][T10143] ? __pfx__printk+0x10/0x10 [ 190.370802][T10143] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 190.370822][T10143] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 190.370852][T10143] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 190.370874][T10143] warn_alloc+0x214/0x310 [ 190.370901][T10143] ? __pfx_warn_alloc+0x10/0x10 [ 190.370931][T10143] ? __get_vm_area_node+0x28f/0x300 [ 190.370950][T10143] ? packet_set_ring+0x6f4/0x2380 [ 190.370978][T10143] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 190.371027][T10143] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.371049][T10143] ? alloc_pages_mpol+0x3cd/0x4a0 [ 190.371070][T10143] ? packet_set_ring+0x6f4/0x2380 [ 190.371093][T10143] vzalloc_noprof+0xb2/0xf0 [ 190.371112][T10143] ? packet_set_ring+0x6f4/0x2380 [ 190.371136][T10143] packet_set_ring+0x6f4/0x2380 [ 190.371182][T10143] ? __pfx_packet_set_ring+0x10/0x10 [ 190.371225][T10143] ? _copy_from_user+0x94/0xb0 [ 190.371247][T10143] packet_setsockopt+0xc5a/0x12c0 [ 190.371273][T10143] ? __pfx_packet_setsockopt+0x10/0x10 [ 190.371294][T10143] ? futex_wake+0x4b2/0x560 [ 190.371347][T10143] ? aa_sk_perm+0x81e/0x950 [ 190.371374][T10143] ? __pfx_aa_sk_perm+0x10/0x10 [ 190.371393][T10143] ? __lock_acquire+0xab9/0xd20 [ 190.371425][T10143] ? aa_sock_opt_perm+0x74/0x110 [ 190.371451][T10143] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 190.371475][T10143] ? __pfx_packet_setsockopt+0x10/0x10 [ 190.371501][T10143] do_sock_setsockopt+0x25a/0x3e0 [ 190.371527][T10143] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 190.371554][T10143] ? __fget_files+0x2a/0x420 [ 190.371584][T10143] __x64_sys_setsockopt+0x18b/0x220 [ 190.371615][T10143] do_syscall_64+0xfa/0x3b0 [ 190.371643][T10143] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.371670][T10143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.371689][T10143] ? clear_bhb_loop+0x60/0xb0 [ 190.371712][T10143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.371730][T10143] RIP: 0033:0x7fbb4af8e929 [ 190.371752][T10143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.371768][T10143] RSP: 002b:00007fbb4bd4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.371788][T10143] RAX: ffffffffffffffda RBX: 00007fbb4b1b5fa0 RCX: 00007fbb4af8e929 [ 190.371801][T10143] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000005 [ 190.371812][T10143] RBP: 00007fbb4b010b39 R08: 000000000000001c R09: 0000000000000000 [ 190.371824][T10143] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 190.371835][T10143] R13: 0000000000000000 R14: 00007fbb4b1b5fa0 R15: 00007ffed708cca8 [ 190.371871][T10143] [ 190.371882][T10143] Mem-Info: [ 190.676550][T10143] active_anon:5734 inactive_anon:0 isolated_anon:0 [ 190.676550][T10143] active_file:1203 inactive_file:39865 isolated_file:0 [ 190.676550][T10143] unevictable:768 dirty:56 writeback:0 [ 190.676550][T10143] slab_reclaimable:10276 slab_unreclaimable:102427 [ 190.676550][T10143] mapped:29292 shmem:1372 pagetables:1253 [ 190.676550][T10143] sec_pagetables:0 bounce:0 [ 190.676550][T10143] kernel_misc_reclaimable:0 [ 190.676550][T10143] free:1327335 free_pcp:17515 free_cma:0 [ 190.727337][T10143] Node 0 active_anon:22916kB inactive_anon:0kB active_file:4812kB inactive_file:159260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117132kB dirty:244kB writeback:0kB shmem:3944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12904kB pagetables:4992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 190.769620][T10143] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 190.817934][T10143] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.858195][T10143] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 190.881447][T10143] Node 0 DMA32 free:1400524kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22588kB inactive_anon:0kB active_file:4812kB inactive_file:157428kB unevictable:1536kB writepending:240kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:45536kB local_pcp:28352kB free_cma:0kB [ 190.924953][T10143] lowmem_reserve[]: 0 0 1 1 1 [ 190.929746][T10143] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 191.058277][T10168] netlink: 'syz.0.1083': attribute type 1 has an invalid length. [ 191.073403][T10143] lowmem_reserve[]: 0 0 0 0 0 [ 191.078205][T10143] Node 1 Normal free:3896800kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21696kB local_pcp:13856kB free_cma:0kB [ 191.149480][T10173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1085'. [ 191.217575][T10143] lowmem_reserve[]: 0 0 0 0 0 [ 191.240951][T10143] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 191.283991][T10143] Node 0 DMA32: 622*4kB (UM) 268*8kB (UME) 40*16kB (UME) 88*32kB (UM) 12*64kB (UM) 17*128kB (UM) 10*256kB (UME) 17*512kB (UME) 12*1024kB (UME) 9*2048kB (M) 329*4096kB (UM) = 1400600kB [ 191.345345][T10143] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 191.376286][T10143] Node 1 Normal: 216*4kB (UE) 52*8kB (UME) 40*16kB (UME) 81*32kB (UME) 33*64kB (UME) 6*128kB (UME) 3*256kB (ME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3896800kB [ 191.383100][T10185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1087'. [ 191.413866][T10143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.448018][T10181] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1086'. [ 191.464055][T10143] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 191.482652][T10143] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.509444][T10143] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 191.520718][T10143] 42435 total pagecache pages [ 191.525672][T10143] 0 pages in swap cache [ 191.529846][T10143] Free swap = 124996kB [ 191.537139][T10143] Total swap = 124996kB [ 191.541418][T10143] 2097051 pages RAM [ 191.545301][T10143] 0 pages HighMem/MovableOnly [ 191.553380][T10143] 424694 pages reserved [ 191.557573][T10143] 0 pages cma reserved [ 191.708084][ T9830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 191.774394][T10198] netlink: 212196 bytes leftover after parsing attributes in process `syz.2.1090'. [ 191.804363][ T9830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.881417][ T9830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 191.931195][ T9830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 192.062106][T10207] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 192.099678][T10212] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1094'. [ 192.140947][T10212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.278047][T10219] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1095'. [ 192.307725][T10226] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.316589][T10226] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.325695][T10226] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.335006][T10226] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.675973][T10219] team0: Port device bond0 removed [ 192.692155][T10219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.735972][T10219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.762750][T10219] bond0 (unregistering): Released all slaves [ 193.107006][ T9830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.198203][ T9830] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.228787][ T9788] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.235981][ T9788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.332525][ T9788] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.339799][ T9788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.146597][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.152949][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.381687][T10314] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 194.414248][T10314] bridge0: entered allmulticast mode [ 194.572400][ T9830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.601950][T10322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1116'. [ 194.626680][T10322] sctp: [Deprecated]: syz.3.1116 (pid 10322) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.626680][T10322] Use struct sctp_sack_info instead [ 194.801997][ T9830] veth0_vlan: entered promiscuous mode [ 194.835616][ T9830] veth1_vlan: entered promiscuous mode [ 195.071381][T10327] syzkaller0: entered promiscuous mode [ 195.093226][T10327] syzkaller0: entered allmulticast mode [ 196.325260][T10341] syz.2.1121 (10341) used greatest stack depth: 15224 bytes left [ 196.465062][ T9830] veth0_macvtap: entered promiscuous mode [ 196.498825][ T9830] veth1_macvtap: entered promiscuous mode [ 196.601853][ T9830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.655847][ T9830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.696600][ T9830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.736775][T10364] netlink: 'syz.3.1129': attribute type 1 has an invalid length. [ 196.738839][ T9830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.769112][T10364] netlink: 'syz.3.1129': attribute type 1 has an invalid length. [ 196.776864][ T9830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.795920][ T9830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.177565][ T9799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.212891][ T9799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.318665][ T9788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.347440][ T9788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.427383][T10392] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1140'. [ 197.526434][T10397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.645319][T10402] team0: Device gtp0 is of different type [ 197.942113][ T9802] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.010112][T10412] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1146'. [ 198.086820][ T9802] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.220332][ T9802] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.314932][ T9802] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.540148][ T9802] bridge_slave_1: left allmulticast mode [ 198.549924][ T9802] bridge_slave_1: left promiscuous mode [ 198.562466][ T9802] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.579051][ T9802] bridge_slave_0: left allmulticast mode [ 198.585300][ T9802] bridge_slave_0: left promiscuous mode [ 198.591191][ T9802] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.833133][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1149'. [ 198.899532][T10429] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1149'. [ 199.100638][T10437] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 199.220535][ T9802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.246868][ T9802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.271428][ T9802] bond0 (unregistering): Released all slaves [ 199.281970][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.291352][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.299475][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.311053][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'. [ 199.321047][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.330498][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.705380][T10440] ip6gre0 speed is unknown, defaulting to 1000 [ 200.432257][T10487] netlink: 'syz.2.1161': attribute type 1 has an invalid length. [ 200.560301][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1161'. [ 200.789121][T10501] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20000 [ 200.899183][T10503] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1164'. [ 201.023721][T10509] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1166'. [ 201.273128][T10520] erspan0: entered allmulticast mode [ 201.288982][T10522] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1168'. [ 201.314040][T10522] bridge_slave_0: default FDB implementation only supports local addresses [ 201.412193][ T9802] hsr_slave_0: left promiscuous mode [ 201.415802][ T5841] Bluetooth: hci2: command tx timeout [ 201.447488][ T9802] hsr_slave_1: left promiscuous mode [ 201.479349][ T9802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.520324][ T9802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.536135][ T9802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.547385][ T9802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.629612][ T9802] veth1_macvtap: left promiscuous mode [ 201.651985][ T9802] veth0_macvtap: left promiscuous mode [ 201.668628][ T9802] veth1_vlan: left promiscuous mode [ 201.680118][T10538] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 201.683471][ T9802] veth0_vlan: left promiscuous mode [ 202.395773][ T9802] team0 (unregistering): Port device team_slave_1 removed [ 202.444241][ T9802] team0 (unregistering): Port device team_slave_0 removed [ 203.446490][T10440] chnl_net:caif_netlink_parms(): no params data found [ 203.494508][ T5841] Bluetooth: hci2: command tx timeout [ 203.571003][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'. [ 203.580158][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1186'. [ 203.604146][T10592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1186'. [ 203.645921][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1187'. [ 203.680988][T10598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1188'. [ 203.732290][T10598] netlink: 'syz.3.1188': attribute type 7 has an invalid length. [ 203.783670][T10598] netlink: 'syz.3.1188': attribute type 8 has an invalid length. [ 203.791467][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1188'. [ 204.191375][T10440] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.225159][T10440] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.232513][T10440] bridge_slave_0: entered allmulticast mode [ 204.247575][T10440] bridge_slave_0: entered promiscuous mode [ 204.276179][T10440] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.296133][T10440] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.320019][T10440] bridge_slave_1: entered allmulticast mode [ 204.342242][T10440] bridge_slave_1: entered promiscuous mode [ 204.632008][T10440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.661568][T10440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.809782][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'. [ 204.822051][T10648] erspan0: entered promiscuous mode [ 204.857325][T10440] team0: Port device team_slave_0 added [ 204.885431][T10440] team0: Port device team_slave_1 added [ 205.095763][T10440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.102788][T10440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.241072][T10440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.271350][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1202'. [ 205.319375][T10668] tipc: Enabling of bearer rejected, failed to enable media [ 205.347672][T10440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.352035][T10675] netlink: 212 bytes leftover after parsing attributes in process `syz.3.1204'. [ 205.363313][T10440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.443181][T10440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.576812][ T5834] Bluetooth: hci2: command tx timeout [ 205.768539][T10440] hsr_slave_0: entered promiscuous mode [ 205.804524][T10440] hsr_slave_1: entered promiscuous mode [ 205.810867][T10440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.859115][T10440] Cannot create hsr debugfs directory [ 205.909724][T10705] netlink: 'syz.2.1210': attribute type 18 has an invalid length. [ 206.329772][T10716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 206.411512][T10716] netlink: 'syz.3.1213': attribute type 1 has an invalid length. [ 206.443407][T10716] netlink: 'syz.3.1213': attribute type 2 has an invalid length. [ 206.464431][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 206.470507][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 206.988756][T10741] pim6reg: entered allmulticast mode [ 206.999081][T10741] pim6reg: left allmulticast mode [ 207.444002][T10768] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 207.654115][ T5832] Bluetooth: hci2: command tx timeout [ 207.962620][T10440] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 208.041653][T10440] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 208.142312][T10440] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 208.226828][T10804] sctp: [Deprecated]: syz.3.1233 (pid 10804) Use of int in max_burst socket option. [ 208.226828][T10804] Use struct sctp_assoc_value instead [ 209.038019][T10804] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 210.260698][T10802] tipc: New replicast peer: 0.0.0.0 [ 210.266557][T10802] tipc: Enabled bearer , priority 10 [ 210.275208][T10809] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 210.288922][T10440] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.303373][ T5832] Bluetooth: hci2: command 0x0401 tx timeout [ 210.740902][T10872] openvswitch: netlink: IP tunnel dst address not specified [ 210.770016][T10876] __nla_validate_parse: 3 callbacks suppressed [ 210.770033][T10876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1241'. [ 210.770455][T10440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.847199][T10440] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.878946][ T9792] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.886153][ T9792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.971405][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.978649][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.349382][T10892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.377227][T10895] openvswitch: netlink: Missing key (keys=40, expected=100) [ 211.838322][T10915] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1248'. [ 211.988215][T10440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.194188][T10440] veth0_vlan: entered promiscuous mode [ 212.258595][T10440] veth1_vlan: entered promiscuous mode [ 212.278691][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1250'. [ 212.453803][T10440] veth0_macvtap: entered promiscuous mode [ 212.476364][T10440] veth1_macvtap: entered promiscuous mode [ 212.521505][T10440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.567097][T10440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.620513][T10440] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.654069][T10440] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.672108][T10440] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.674270][T10945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1254'. [ 212.715267][T10440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.741485][T10946] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1252'. [ 212.792031][T10934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1252'. [ 213.087543][ T9788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.116764][ T9788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.207170][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.217259][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.861143][T10987] netlink: 'syz.0.1267': attribute type 18 has an invalid length. [ 214.051664][ T9788] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.325442][ T9788] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.583649][ T9788] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.712884][ T9788] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.980916][ T9788] bridge_slave_1: left allmulticast mode [ 214.987601][ T9788] bridge_slave_1: left promiscuous mode [ 214.994194][ T9788] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.004830][ T9788] bridge_slave_0: left allmulticast mode [ 215.011616][ T9788] bridge_slave_0: left promiscuous mode [ 215.055164][ T9788] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.099674][T11024] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 215.505100][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.513881][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.521941][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.530711][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.540299][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.879082][ T9788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.889795][ T9788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.902305][ T9788] bond0 (unregistering): Released all slaves [ 216.029440][T11042] ip6gre0 speed is unknown, defaulting to 1000 [ 216.164968][T11047] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1277'. [ 216.630310][T11069] netlink: 'syz.4.1282': attribute type 7 has an invalid length. [ 217.205622][T11095] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1289'. [ 217.435232][T11105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'. [ 217.570903][T11113] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1296'. [ 217.583395][ T5832] Bluetooth: hci2: command tx timeout [ 217.788231][ T9788] hsr_slave_0: left promiscuous mode [ 217.837063][ T9788] hsr_slave_1: left promiscuous mode [ 217.843081][ T9788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.851245][ T9788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.860400][ T9788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.868609][ T9788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.888101][ T9788] veth1_macvtap: left promiscuous mode [ 217.893909][ T9788] veth0_macvtap: left promiscuous mode [ 217.899480][ T9788] veth1_vlan: left promiscuous mode [ 217.906299][ T9788] veth0_vlan: left promiscuous mode [ 218.170448][T11132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1301'. [ 219.003005][ T9788] team0 (unregistering): Port device team_slave_1 removed [ 219.044046][ T9788] team0 (unregistering): Port device team_slave_0 removed [ 219.428015][T11140] tipc: Started in network mode [ 219.442936][T11140] tipc: Node identity , cluster identity 4711 [ 219.653709][ T5832] Bluetooth: hci2: command tx timeout [ 219.765904][T11156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1306'. [ 219.818997][T11165] netlink: 'syz.2.1310': attribute type 4 has an invalid length. [ 219.951728][T11042] chnl_net:caif_netlink_parms(): no params data found [ 220.469899][T11197] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1316'. [ 220.631689][T11042] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.694112][T11042] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.701370][T11042] bridge_slave_0: entered allmulticast mode [ 220.729333][T11042] bridge_slave_0: entered promiscuous mode [ 220.760114][T11042] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.800922][T11042] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.828761][T11042] bridge_slave_1: entered allmulticast mode [ 220.868816][T11042] bridge_slave_1: entered promiscuous mode [ 221.101785][T11236] netlink: 'syz.0.1322': attribute type 1 has an invalid length. [ 221.150873][T11042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.193406][T11223] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1322'. [ 221.239983][T11245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1324'. [ 221.381370][T11251] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1326'. [ 221.412720][T11042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.733791][ T5832] Bluetooth: hci2: command tx timeout [ 221.750327][T11268] netlink: 'syz.3.1330': attribute type 10 has an invalid length. [ 221.779088][T11042] team0: Port device team_slave_0 added [ 221.817728][T11042] team0: Port device team_slave_1 added [ 221.866179][T11265] syzkaller1: entered promiscuous mode [ 221.871720][T11265] syzkaller1: entered allmulticast mode [ 222.057386][T11278] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1331'. [ 222.091661][T11042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.105897][T11042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.186634][T11042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.233506][T11042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.269343][T11285] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.1334'. [ 222.282376][T11042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.320616][T11042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.324700][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 222.351001][T11291] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20000 [ 222.466583][T11042] hsr_slave_0: entered promiscuous mode [ 222.490926][T11042] hsr_slave_1: entered promiscuous mode [ 222.500738][T11042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.520326][T11042] Cannot create hsr debugfs directory [ 222.618116][T11301] netlink: 'syz.0.1337': attribute type 1 has an invalid length. [ 222.631394][T11301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1337'. [ 222.786873][T11310] netlink: 'syz.4.1339': attribute type 10 has an invalid length. [ 222.824739][T11310] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1339'. [ 222.870991][T11310] batadv0: entered promiscuous mode [ 222.883149][T11310] batadv0: entered allmulticast mode [ 222.894337][T11310] bridge0: port 3(batadv0) entered blocking state [ 222.905004][T11310] bridge0: port 3(batadv0) entered disabled state [ 222.931060][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1340'. [ 223.267470][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'. [ 223.505789][ T37] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 223.515646][ T37] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 223.815542][ T5832] Bluetooth: hci2: command tx timeout [ 223.980178][T11358] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave [ 224.029491][T11358] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0) [ 224.844053][T11404] netlink: 'syz.0.1363': attribute type 58 has an invalid length. [ 224.900913][T11409] xt_hashlimit: overflow, try lower: 4294967295/0 [ 225.115189][T11419] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 225.226418][T11042] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 225.340642][T11042] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 225.407708][T11042] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 225.480700][T11042] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 225.758583][T11042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.819429][T11042] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.829805][T11447] netlink: 'syz.4.1376': attribute type 10 has an invalid length. [ 225.860064][T11447] dummy0: entered promiscuous mode [ 225.884272][T11447] bridge0: port 4(dummy0) entered blocking state [ 225.890823][T11447] bridge0: port 4(dummy0) entered disabled state [ 225.915405][T11447] dummy0: entered allmulticast mode [ 225.933923][T11448] netlink: 'syz.3.1375': attribute type 12 has an invalid length. [ 225.953464][T11448] netlink: 'syz.3.1375': attribute type 29 has an invalid length. [ 226.011395][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.018621][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.090428][ T9802] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.097636][ T9802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.255748][T11467] netlink: 'syz.0.1379': attribute type 11 has an invalid length. [ 226.370480][T11478] __nla_validate_parse: 30 callbacks suppressed [ 226.370498][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 226.394082][T11478] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1381'. [ 226.776133][T11492] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 227.104745][T11512] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1387'. [ 227.208031][T11042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.395219][T11042] veth0_vlan: entered promiscuous mode [ 227.415998][T11042] veth1_vlan: entered promiscuous mode [ 227.532530][T11042] veth0_macvtap: entered promiscuous mode [ 227.581582][T11042] veth1_macvtap: entered promiscuous mode [ 227.639331][T11042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.699132][T11042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.719374][T11042] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.760721][T11042] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.782952][T11042] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.800398][T11042] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.141001][ T9806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.179069][ T9806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.311167][ T9788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.364679][ T9788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.674426][T11573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1404'. [ 228.817494][T11583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1406'. [ 229.129813][ T9788] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.288428][ T9788] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.533170][ T9788] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.798013][ T9788] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.931700][ T9788] bridge_slave_1: left allmulticast mode [ 229.938232][ T9788] bridge_slave_1: left promiscuous mode [ 229.945147][ T9788] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.956856][ T9788] bridge_slave_0: left allmulticast mode [ 229.962509][ T9788] bridge_slave_0: left promiscuous mode [ 229.968656][ T9788] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.710902][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.720811][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.729333][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.738345][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.752298][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.982308][T11641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1419'. [ 230.996378][ T9788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.011584][ T9788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.022513][ T9788] bond0 (unregistering): Released all slaves [ 231.142137][T11635] ip6gre0 speed is unknown, defaulting to 1000 [ 231.153585][T11648] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1421'. [ 231.396141][T11663] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1424'. [ 231.483564][T11664] nbd3: detected capacity change from 0 to 63 [ 231.497173][ T5832] block nbd3: Receive control failed (result -104) [ 231.767418][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1429'. [ 231.812144][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 232.412599][T11707] openvswitch: netlink: Missing key (keys=40, expected=100) [ 232.858080][ T5832] Bluetooth: hci2: command tx timeout [ 232.890627][ T9788] hsr_slave_0: left promiscuous mode [ 232.923867][ T9788] hsr_slave_1: left promiscuous mode [ 232.929918][ T9788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.947792][ T9788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.994768][ T9788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.002224][ T9788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.108246][ T9788] veth1_macvtap: left promiscuous mode [ 233.151354][ T9788] veth0_macvtap: left promiscuous mode [ 233.159568][ T9788] veth1_vlan: left promiscuous mode [ 233.179513][ T9788] veth0_vlan: left promiscuous mode [ 233.224070][ C0] af_packet: tpacket_rcv: packet too big, clamped from 12 to 4294967272. macoff=96 [ 233.677357][ T9788] team0 (unregistering): Port device team_slave_1 removed [ 233.714209][ T9788] team0 (unregistering): Port device team_slave_0 removed [ 234.094393][T11736] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.267298][ T30] audit: type=1800 audit(1751197005.367:5): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1447" name="bpf-map" dev="anon_inodefs" ino=23 res=0 errno=0 [ 234.477060][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1448'. [ 234.502259][T11635] chnl_net:caif_netlink_parms(): no params data found [ 234.558413][T11768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1448'. [ 234.922055][T11788] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 234.938000][ T5832] Bluetooth: hci2: command tx timeout [ 234.960722][T11635] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.970300][T11635] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.978263][T11635] bridge_slave_0: entered allmulticast mode [ 234.985852][T11635] bridge_slave_0: entered promiscuous mode [ 235.000670][T11635] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.007906][T11635] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.015490][T11635] bridge_slave_1: entered allmulticast mode [ 235.027544][T11635] bridge_slave_1: entered promiscuous mode [ 235.186962][T11635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.238008][T11635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.256482][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1456'. [ 235.479289][T11816] netlink: 'syz.4.1457': attribute type 1 has an invalid length. [ 235.519877][T11635] team0: Port device team_slave_0 added [ 235.578131][T11635] team0: Port device team_slave_1 added [ 235.827786][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1459'. [ 235.844177][T11635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.887284][T11635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.915407][T11635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.997951][T11635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.023527][T11635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.123318][T11635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.322624][T11851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1467'. [ 236.498211][T11635] hsr_slave_0: entered promiscuous mode [ 236.535775][T11635] hsr_slave_1: entered promiscuous mode [ 236.542187][T11635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.581314][T11635] Cannot create hsr debugfs directory [ 236.732611][T11866] Cannot find add_set index 0 as target [ 236.859897][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1472'. [ 236.871491][T11874] openvswitch: netlink: Unknown key attributes 2 [ 237.014087][ T5832] Bluetooth: hci2: command tx timeout [ 237.311047][T11886] netlink: 'syz.3.1475': attribute type 1 has an invalid length. [ 237.325835][T11892] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1476'. [ 237.338150][T11892] nbd: illegal input index -8454144 [ 237.364744][T11896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1475'. [ 237.474764][T11886] 8021q: adding VLAN 0 to HW filter on device bond10 [ 237.492280][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1476'. [ 237.764982][T11919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1481'. [ 237.776300][T11921] SET target dimension over the limit! [ 238.622638][T11950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.833096][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 238.855169][T11635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.880185][T11963] netlink: 'syz.0.1496': attribute type 30 has an invalid length. [ 238.891914][T11635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.978784][T11635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 239.017799][T11963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 239.058602][T11635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 239.088162][T11963] netlink: 'syz.0.1496': attribute type 30 has an invalid length. [ 239.103329][ T5832] Bluetooth: hci2: command tx timeout [ 239.504089][T11993] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1502'. [ 239.514809][T11992] 8021q: VLANs not supported on ip_vti0 [ 239.530140][T11993] dvmrp1: entered allmulticast mode [ 239.583119][T11635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.667915][T11635] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.718380][ T9792] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.725586][ T9792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.791419][ T9792] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.798617][ T9792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.916862][T11635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.965820][T12009] netlink: 'syz.2.1508': attribute type 29 has an invalid length. [ 240.001774][T12009] netlink: 'syz.2.1508': attribute type 29 has an invalid length. [ 240.254452][T12027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1512'. [ 240.312853][T12027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1512'. [ 240.496637][T11635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.700162][T11635] veth0_vlan: entered promiscuous mode [ 240.883849][T12057] batadv_slave_1: entered promiscuous mode [ 240.930462][T11635] veth1_vlan: entered promiscuous mode [ 241.022135][T12061] pimreg: entered allmulticast mode [ 241.040138][T12063] xfrm1: entered promiscuous mode [ 241.050960][T12063] xfrm1: entered allmulticast mode [ 241.066153][T11635] veth0_macvtap: entered promiscuous mode [ 241.096742][T12056] batadv_slave_1: left promiscuous mode [ 241.150959][T11635] veth1_macvtap: entered promiscuous mode [ 241.203467][T11635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.242840][T11635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.280608][T11635] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.304839][T11635] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.329668][T11635] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.351211][T11635] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.605756][T12138] xfrm0: entered promiscuous mode [ 241.620067][T12138] xfrm0: entered allmulticast mode [ 241.668930][T12130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.704120][T12130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.806155][T12132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.839814][T12132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.778432][T12130] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.976472][T12130] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.239627][T12130] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.451755][T12130] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.588292][T12130] bridge_slave_1: left allmulticast mode [ 243.595064][T12130] bridge_slave_1: left promiscuous mode [ 243.601424][T12130] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.610986][T12130] bridge_slave_0: left allmulticast mode [ 243.617040][T12130] bridge_slave_0: left promiscuous mode [ 243.622750][T12130] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.216569][T12130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.251822][T12130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.278673][T12130] bond0 (unregistering): Released all slaves [ 244.460066][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.469902][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.484225][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.492735][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.510105][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.796358][T12224] ip6gre0 speed is unknown, defaulting to 1000 [ 244.910915][T12247] __nla_validate_parse: 3 callbacks suppressed [ 244.910934][T12247] netlink: 808 bytes leftover after parsing attributes in process `syz.3.1560'. [ 244.952526][T12247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1560'. [ 245.001733][T12247] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1560'. [ 245.037906][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1561'. [ 245.114167][T12253] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 245.121834][T12253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.170554][T12258] netlink: 'syz.3.1563': attribute type 39 has an invalid length. [ 245.347123][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1565'. [ 245.960890][T12285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1571'. [ 245.977240][T12288] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1572'. [ 246.068774][T12130] hsr_slave_0: left promiscuous mode [ 246.090807][T12130] hsr_slave_1: left promiscuous mode [ 246.099798][T12130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.107746][T12130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.127351][T12130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.140208][T12130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.210055][T12130] veth1_macvtap: left promiscuous mode [ 246.218336][T12130] veth0_macvtap: left promiscuous mode [ 246.224270][T12130] veth1_vlan: left promiscuous mode [ 246.229760][T12130] veth0_vlan: left promiscuous mode [ 246.295830][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 246.623846][ T5832] Bluetooth: hci2: command tx timeout [ 246.667973][T12130] team0 (unregistering): Port device team_slave_1 removed [ 246.706146][T12130] team0 (unregistering): Port device team_slave_0 removed [ 247.429746][T12322] xt_hashlimit: size too large, truncated to 1048576 [ 247.614889][T12330] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 247.639979][T12224] chnl_net:caif_netlink_parms(): no params data found [ 247.771437][T12342] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 247.784008][T12342] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1586'. [ 247.793081][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1586'. [ 248.234323][T12224] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.243568][T12224] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.250797][T12224] bridge_slave_0: entered allmulticast mode [ 248.258700][T12224] bridge_slave_0: entered promiscuous mode [ 248.284589][T12224] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.301986][T12224] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.318103][T12224] bridge_slave_1: entered allmulticast mode [ 248.346397][T12224] bridge_slave_1: entered promiscuous mode [ 248.476495][T12224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.562138][T12224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.696570][ T5832] Bluetooth: hci2: command tx timeout [ 248.712826][T12224] team0: Port device team_slave_0 added [ 248.731883][T12224] team0: Port device team_slave_1 added [ 248.884189][T12224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.891209][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.973296][T12224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.007306][T12224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.035547][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.090408][T12224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.280824][T12224] hsr_slave_0: entered promiscuous mode [ 249.298210][T12224] hsr_slave_1: entered promiscuous mode [ 249.307455][T12224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.315221][T12224] Cannot create hsr debugfs directory [ 249.363032][T12405] netlink: 'syz.2.1608': attribute type 2 has an invalid length. [ 250.051737][T12442] __nla_validate_parse: 7 callbacks suppressed [ 250.051756][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'. [ 250.086440][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805736bc00: rx timeout, send abort [ 250.090299][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'. [ 250.096932][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805632fc00: rx timeout, send abort [ 250.113280][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805632fc00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 250.139032][T12440] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1618'. [ 250.160719][T12440] hsr_slave_0: left promiscuous mode [ 250.170629][T12440] hsr_slave_1: left promiscuous mode [ 250.361655][T12451] netlink: 'syz.2.1622': attribute type 18 has an invalid length. [ 250.419729][T12451] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.429563][T12451] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.439304][T12451] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.448621][T12451] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.510202][T12224] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 250.529878][T12224] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 250.578472][T12224] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 250.595676][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805736bc00: abort rx timeout. Force session deactivation [ 250.611163][T12224] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 250.770894][T12470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.779393][ T5832] Bluetooth: hci2: command tx timeout [ 250.856670][T12224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.942238][T12224] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.987639][ T9799] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.994859][ T9799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.017036][ T9799] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.024242][ T9799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.379337][T12492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.637462][T12224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.668977][T12508] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 251.714154][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'. [ 251.744223][T12224] veth0_vlan: entered promiscuous mode [ 251.801350][T12224] veth1_vlan: entered promiscuous mode [ 251.882668][T12224] veth0_macvtap: entered promiscuous mode [ 251.902026][T12224] veth1_macvtap: entered promiscuous mode [ 251.970739][T12224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.043089][T12224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.109286][T12224] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.127659][T12224] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.157683][T12533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1644'. [ 252.163594][T12224] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.181657][T12224] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.373053][T12129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.400529][T12129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.500181][T12130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.544537][T12130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.710521][T12520] infiniband syz2: set active [ 252.724524][T12520] infiniband syz2: added veth1_vlan [ 252.743062][T12520] syz2: rxe_create_cq: returned err = -12 [ 252.762102][T12520] infiniband syz2: Couldn't create ib_mad CQ [ 252.811180][T12555] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 252.821875][T12520] infiniband syz2: Couldn't open port 1 [ 252.936784][T12520] RDS/IB: syz2: added [ 252.945139][T12520] smc: adding ib device syz2 with port count 1 [ 252.975142][T12520] smc: ib device syz2 port 1 has pnetid [ 253.141935][T12568] netlink: 'syz.4.1653': attribute type 11 has an invalid length. [ 253.150768][T12568] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1653'. [ 253.228266][T12573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.243398][T12572] sctp: [Deprecated]: syz.2.1652 (pid 12572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.243398][T12572] Use struct sctp_sack_info instead [ 253.284695][T12572] netlink: 'syz.2.1652': attribute type 1 has an invalid length. [ 253.329470][T12572] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.609266][T12577] bond3: (slave geneve3): making interface the new active one [ 253.619806][T12577] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 253.661787][T12572] bond3: entered promiscuous mode [ 253.681293][T12572] geneve3: entered promiscuous mode [ 253.881526][T12595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1657'. [ 253.906589][T12128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.923689][T12595] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1657'. [ 253.979273][T12592] ------------[ cut here ]------------ [ 253.985004][T12592] WARNING: CPU: 0 PID: 12592 at ./include/net/mac80211.h:7748 _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 253.995908][T12592] Modules linked in: [ 254.000016][T12592] CPU: 0 UID: 0 PID: 12592 Comm: syz.0.1657 Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 254.013107][T12592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.023490][T12592] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 254.029975][T12592] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 60 53 e5 f6 b8 04 00 00 00 eb 31 e8 54 53 e5 f6 eb 28 e8 4d 53 e5 f6 90 <0f> 0b 90 eb 1d e8 42 53 e5 f6 b8 02 00 00 00 eb 13 e8 36 53 e5 f6 [ 254.050404][T12592] RSP: 0018:ffffc90003da6f48 EFLAGS: 00010293 [ 254.057262][T12592] RAX: ffffffff8adafb23 RBX: ffff8880280ac000 RCX: ffff888024af0000 [ 254.065979][T12592] RDX: 0000000000000000 RSI: ffffffff8f78b220 RDI: 0000000000000007 [ 254.075485][T12592] RBP: 0000000000000000 R08: ffff888024af0000 R09: 0000000000000007 [ 254.084167][T12592] R10: 000000000000000d R11: 0000000000000000 R12: 0000000000000000 [ 254.092170][T12592] R13: 0000000000000007 R14: ffff8880280ac180 R15: 1ffff11005015830 [ 254.100725][T12592] FS: 00007f8841df66c0(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 254.109999][T12592] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.117547][T12592] CR2: 00007fa6c7b7e2d8 CR3: 0000000068eae000 CR4: 00000000003526f0 [ 254.125695][T12592] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 254.133750][T12592] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 254.141762][T12592] Call Trace: [ 254.145714][T12592] [ 254.148685][T12592] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 254.154760][T12592] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 254.160448][T12592] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 254.167032][T12592] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 254.172696][T12592] ? ieee80211_sta_init_nss+0x8dd/0xbe0 [ 254.179170][T12592] ? ieee80211_get_link_sband+0x335/0x3e0 [ 254.185015][T12592] sta_link_apply_parameters+0xbb8/0xec0 [ 254.190720][T12592] sta_apply_parameters+0x944/0x15b0 [ 254.196112][T12592] ieee80211_add_station+0x424/0x6a0 [ 254.201496][T12592] rdev_add_station+0x105/0x290 [ 254.207063][T12592] nl80211_new_station+0x1723/0x1b40 [ 254.212412][T12592] ? __pfx_nl80211_new_station+0x10/0x10 [ 254.218495][T12592] ? netdev_run_todo+0xe1d/0xea0 [ 254.223583][T12592] ? nl80211_pre_doit+0x4f1/0x930 [ 254.228664][T12592] genl_family_rcv_msg_doit+0x215/0x300 [ 254.234910][T12592] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 254.241039][T12592] ? bpf_lsm_capable+0x9/0x20 [ 254.245853][T12592] ? security_capable+0x7e/0x2e0 [ 254.250859][T12592] genl_rcv_msg+0x60e/0x790 [ 254.255471][T12592] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.260542][T12592] ? ref_tracker_free+0x63a/0x7d0 [ 254.266246][T12592] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 254.271660][T12592] ? __pfx_nl80211_new_station+0x10/0x10 [ 254.277676][T12592] ? __pfx_nl80211_post_doit+0x10/0x10 [ 254.283272][T12592] ? __pfx_ref_tracker_free+0x10/0x10 [ 254.288706][T12592] netlink_rcv_skb+0x205/0x470 [ 254.294388][T12592] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.299455][T12592] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.304840][T12592] ? down_read+0x1ad/0x2e0 [ 254.309295][T12592] genl_rcv+0x28/0x40 [ 254.313359][T12592] netlink_unicast+0x758/0x8d0 [ 254.318211][T12592] netlink_sendmsg+0x805/0xb30 [ 254.323029][T12592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.328995][T12592] ? aa_sock_msg_perm+0x94/0x160 [ 254.334067][T12592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.339386][T12592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.344731][T12592] __sock_sendmsg+0x219/0x270 [ 254.349450][T12592] ____sys_sendmsg+0x505/0x830 [ 254.354928][T12592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.360252][T12592] ? import_iovec+0x74/0xa0 [ 254.364831][T12592] ___sys_sendmsg+0x21f/0x2a0 [ 254.369536][T12592] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.374954][T12592] ? __fget_files+0x2a/0x420 [ 254.379797][T12592] ? __fget_files+0x3a0/0x420 [ 254.385067][T12592] __x64_sys_sendmsg+0x19b/0x260 [ 254.390051][T12592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.395656][T12592] ? rcu_is_watching+0x15/0xb0 [ 254.400460][T12592] ? do_syscall_64+0xbe/0x3b0 [ 254.405231][T12592] do_syscall_64+0xfa/0x3b0 [ 254.409768][T12592] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.415602][T12592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.421693][T12592] ? clear_bhb_loop+0x60/0xb0 [ 254.426452][T12592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.432367][T12592] RIP: 0033:0x7f8843f8e929 [ 254.436870][T12592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.457251][T12592] RSP: 002b:00007f8841df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.465762][T12592] RAX: ffffffffffffffda RBX: 00007f88441b6080 RCX: 00007f8843f8e929 [ 254.473820][T12592] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000b [ 254.482095][T12592] RBP: 00007f8844010b39 R08: 0000000000000000 R09: 0000000000000000 [ 254.490709][T12592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.498754][T12592] R13: 0000000000000000 R14: 00007f88441b6080 R15: 00007ffc0b404438 [ 254.506800][T12592] [ 254.509849][T12592] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 254.517142][T12592] CPU: 0 UID: 0 PID: 12592 Comm: syz.0.1657 Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 254.529329][T12592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.539386][T12592] Call Trace: [ 254.542665][T12592] [ 254.545626][T12592] dump_stack_lvl+0x99/0x250 [ 254.550229][T12592] ? __asan_memcpy+0x40/0x70 [ 254.554826][T12592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.560052][T12592] ? __pfx__printk+0x10/0x10 [ 254.564659][T12592] panic+0x2db/0x790 [ 254.568578][T12592] ? __pfx_panic+0x10/0x10 [ 254.573008][T12592] ? show_trace_log_lvl+0x4fb/0x550 [ 254.578238][T12592] __warn+0x31b/0x4b0 [ 254.582229][T12592] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 254.588057][T12592] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 254.593895][T12592] report_bug+0x2be/0x4f0 [ 254.598267][T12592] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 254.604110][T12592] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 254.609929][T12592] ? _ieee80211_sta_cur_vht_bw+0x526/0x6e0 [ 254.615745][T12592] handle_bug+0x84/0x160 [ 254.619994][T12592] exc_invalid_op+0x1a/0x50 [ 254.624517][T12592] asm_exc_invalid_op+0x1a/0x20 [ 254.629388][T12592] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 254.635815][T12592] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 60 53 e5 f6 b8 04 00 00 00 eb 31 e8 54 53 e5 f6 eb 28 e8 4d 53 e5 f6 90 <0f> 0b 90 eb 1d e8 42 53 e5 f6 b8 02 00 00 00 eb 13 e8 36 53 e5 f6 [ 254.655428][T12592] RSP: 0018:ffffc90003da6f48 EFLAGS: 00010293 [ 254.661515][T12592] RAX: ffffffff8adafb23 RBX: ffff8880280ac000 RCX: ffff888024af0000 [ 254.669497][T12592] RDX: 0000000000000000 RSI: ffffffff8f78b220 RDI: 0000000000000007 [ 254.677470][T12592] RBP: 0000000000000000 R08: ffff888024af0000 R09: 0000000000000007 [ 254.685448][T12592] R10: 000000000000000d R11: 0000000000000000 R12: 0000000000000000 [ 254.693452][T12592] R13: 0000000000000007 R14: ffff8880280ac180 R15: 1ffff11005015830 [ 254.701452][T12592] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 254.707286][T12592] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 254.713110][T12592] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 254.719113][T12592] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 254.724864][T12592] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 254.731380][T12592] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 254.737034][T12592] ? ieee80211_sta_init_nss+0x8dd/0xbe0 [ 254.742597][T12592] ? ieee80211_get_link_sband+0x335/0x3e0 [ 254.748341][T12592] sta_link_apply_parameters+0xbb8/0xec0 [ 254.754005][T12592] sta_apply_parameters+0x944/0x15b0 [ 254.759318][T12592] ieee80211_add_station+0x424/0x6a0 [ 254.764620][T12592] rdev_add_station+0x105/0x290 [ 254.769475][T12592] nl80211_new_station+0x1723/0x1b40 [ 254.774784][T12592] ? __pfx_nl80211_new_station+0x10/0x10 [ 254.780431][T12592] ? netdev_run_todo+0xe1d/0xea0 [ 254.785401][T12592] ? nl80211_pre_doit+0x4f1/0x930 [ 254.790494][T12592] genl_family_rcv_msg_doit+0x215/0x300 [ 254.796061][T12592] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 254.802176][T12592] ? bpf_lsm_capable+0x9/0x20 [ 254.806867][T12592] ? security_capable+0x7e/0x2e0 [ 254.811824][T12592] genl_rcv_msg+0x60e/0x790 [ 254.816343][T12592] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.821372][T12592] ? ref_tracker_free+0x63a/0x7d0 [ 254.826415][T12592] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 254.831795][T12592] ? __pfx_nl80211_new_station+0x10/0x10 [ 254.837439][T12592] ? __pfx_nl80211_post_doit+0x10/0x10 [ 254.842921][T12592] ? __pfx_ref_tracker_free+0x10/0x10 [ 254.848314][T12592] netlink_rcv_skb+0x205/0x470 [ 254.853180][T12592] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.858228][T12592] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.863554][T12592] ? down_read+0x1ad/0x2e0 [ 254.867994][T12592] genl_rcv+0x28/0x40 [ 254.871998][T12592] netlink_unicast+0x758/0x8d0 [ 254.876775][T12592] netlink_sendmsg+0x805/0xb30 [ 254.881552][T12592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.886847][T12592] ? aa_sock_msg_perm+0x94/0x160 [ 254.891796][T12592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.897097][T12592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.902395][T12592] __sock_sendmsg+0x219/0x270 [ 254.907112][T12592] ____sys_sendmsg+0x505/0x830 [ 254.911940][T12592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.917244][T12592] ? import_iovec+0x74/0xa0 [ 254.921755][T12592] ___sys_sendmsg+0x21f/0x2a0 [ 254.926439][T12592] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.931670][T12592] ? __fget_files+0x2a/0x420 [ 254.936265][T12592] ? __fget_files+0x3a0/0x420 [ 254.940952][T12592] __x64_sys_sendmsg+0x19b/0x260 [ 254.945898][T12592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.951377][T12592] ? rcu_is_watching+0x15/0xb0 [ 254.956160][T12592] ? do_syscall_64+0xbe/0x3b0 [ 254.960847][T12592] do_syscall_64+0xfa/0x3b0 [ 254.965374][T12592] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.970582][T12592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.976669][T12592] ? clear_bhb_loop+0x60/0xb0 [ 254.981374][T12592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.987267][T12592] RIP: 0033:0x7f8843f8e929 [ 254.991730][T12592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.011373][T12592] RSP: 002b:00007f8841df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.019895][T12592] RAX: ffffffffffffffda RBX: 00007f88441b6080 RCX: 00007f8843f8e929 [ 255.027893][T12592] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 000000000000000b [ 255.035868][T12592] RBP: 00007f8844010b39 R08: 0000000000000000 R09: 0000000000000000 [ 255.043863][T12592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.051850][T12592] R13: 0000000000000000 R14: 00007f88441b6080 R15: 00007ffc0b404438 [ 255.059839][T12592] [ 255.063276][T12592] Kernel Offset: disabled [ 255.067611][T12592] Rebooting in 86400 seconds..