last executing test programs: 2.653032616s ago: executing program 2 (id=516): socketpair$unix(0x1, 0x8, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r0, 0x0) accept4(r1, &(0x7f0000000240)=@nl, &(0x7f0000000040)=0x80, 0x800) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) r3 = socket(0x18, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x28}, 0x4000) 1.866583487s ago: executing program 4 (id=523): unshare(0x20000400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}}, 0x0) unshare(0x20a00) 1.736765658s ago: executing program 2 (id=525): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}], 0x20}}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x29, 0x1, 0x3, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x503, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40085}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x8) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000080)) 1.679651795s ago: executing program 4 (id=526): syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x1d, &(0x7f0000000680)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet(0x2, 0x0, 0xffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x2c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x40, 0x0, 0x0, @uid=r9}, @nested={0xb, 0x40, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x2c}], 0x1}, 0x4048000) connect$inet6(r7, &(0x7f0000000f80)={0xa, 0x4e22, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', r5, 0x29, 0x8, 0x4, 0xfffffff7, 0x22, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x4cd8d8f43462ae22, 0xffff, 0x24300}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r10, 0x1, 0x5, &(0x7f0000000100)=""/67, &(0x7f0000000200)=0x43) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r11, 0x10c, 0x0, &(0x7f0000000000)=0x8a, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@deltaction={0x44, 0x31, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400009}}, {0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) 1.632424347s ago: executing program 2 (id=528): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="24aafa2cbcbf647ac508e14a15b391f45bfd9495b59171ad39130fbaa6e3d8ea89820346354d", 0x26}], 0x1}, 0x11) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254", 0x6}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000640)="dbd266", 0x3}, {&(0x7f0000000400)="8a", 0x1}, {&(0x7f00000002c0)="2d89ff2ade", 0x5}], 0x5}, 0xfffffff2}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f0000000540)="f2e6", 0x2}, {&(0x7f0000002e40)="c4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="ef", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964d", 0x3}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000680)="da3d", 0x2}], 0x7}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)='N', 0x1}, {&(0x7f0000000340)="e4", 0x1}, {0x0}], 0x3}}], 0x4, 0x4000801) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 1.551534349s ago: executing program 0 (id=529): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1.37535233s ago: executing program 4 (id=531): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe30}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.331515096s ago: executing program 2 (id=532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="70000000020103010000000000000500020000024c000d8024000380060002004e200000060001004e236183b3589af87ff974edef1d4d8b0000ffff02004e210000060002004e20000008000201000000bb140003800600029510220000060002004e24000008000200ac1414aa08080740000000ff0800034000000002"], 0x70}, 0x1, 0x0, 0x0, 0x4000014}, 0x8040810) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x400000009, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x8000003, 0xffffffff}]}]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x30, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc8, r4, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4048890}, 0xc4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x3, 0x0, 0x23, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r5) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r9, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006200100002800c0021000000000000040000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdf250100000008000700e0000001080002000500000008000800001e01010c0001006e6c3830323131"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x8000, @private2, 0x4}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3}, @in6={0xa, 0x4e23, 0xd, @loopback, 0x37e}, @in={0x2, 0x4e24, @multicast1}], 0x74) 1.297035014s ago: executing program 4 (id=533): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x20, 0x8, &(0x7f0000005c00)=ANY=[@ANYRES16=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x200, 0x0, 0x0, 0x40f00, 0x2a, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x80}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x2120c0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r2, 0x0, 0x0) write$ppp(r2, &(0x7f0000000200)="bc72", 0x2) 1.283625009s ago: executing program 0 (id=534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.152779233s ago: executing program 4 (id=536): socketpair$unix(0x1, 0x8, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r0, 0x0) accept4(r1, &(0x7f0000000240)=@nl, &(0x7f0000000040)=0x80, 0x800) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) r3 = socket(0x18, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x28}, 0x4000) 1.099658975s ago: executing program 3 (id=537): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "aee000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 1.087381113s ago: executing program 0 (id=538): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r2) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x100}}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x6819130f3aa8b09c}, 0x40000) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa15000000000086dd6000cd0400103aff20010000000000000000000000000001ff020000000000000000000000000001860090780000000000000000a16f72d4a02c1f6abf79c4aa9cbe57f700000000"], 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000280)={@none, 0x7}) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xe}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xa}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x48}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x86}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x4}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xfffe}]}, 0x64}, 0x1, 0x0, 0x0, 0x200008c1}, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r5, 0x891a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x40, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a79c32ffb9fbee54"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7937f2e177f96e257b6f6afa9a2839ef"}]}]}, 0x40}}, 0x4000840) setsockopt$inet6_int(r8, 0x29, 0x11, &(0x7f0000000100)=0x401, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="080005000600000008001780040007"], 0x2c}}, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r13 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r13) r14 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2c, r14, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x40030000000000}, 0x20004080) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0x78, r14, 0x10, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'gre0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r14, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044090}, 0x4000020) sendmsg$DEVLINK_CMD_TRAP_SET(r13, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001800)={0x224, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x3}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000000}, 0x44010) 1.086594341s ago: executing program 2 (id=539): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x13, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x14, 0x8, "c0fcf6d9196971c598b1b24ccc32cbdc"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_NAT_DST={0x4}]}, 0x3c}}, 0x0) (async) sendto$inet(r2, &(0x7f0000000440)="09268a927f1f6588b967481241ba7860fce1ac1f0b457d1a32faf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b563fdbded465f19550a8fbf6c49e681a7511bf746bec66ba5336b08102bcff8824f67699ed42b44004ad2b530194ae5319ae772b083268db608b1970b848a5b57f99c93f5b7fe654efc714714dbb2b2e4a34df5332286e383fea81ed707c1ab2bd143eda710ac0438ff38145299b5c3c2a0b02be9a5907bacff8c67331193c3494d34f90362b1b57baa20d87af1cd881d7cb61f067ee6bd30ed9f107f8ed78dfb87cdf9bc26f9139c6183588444aa603ff2a87601a2d9e351a3a5d6d3c75ec76ce1fa7eedbdfff7f6bcd3ff163f8d1f1eb536a0e77dde81cc8732e39ba523183b65f6aaab92298a3f3696104fb4b31be52c96406407b4c814d2451b7d5b191e31f715cdb9eb9ee68313d83f4ad0c798ff7a9a4826eeee1e2bd4eaa33a1562196b4160dec9054694ce3906e4afa6c18a4df81ed0dacb5d31d98f63733b35c54f14ee6b93f131a27de72891ecc5380fee63ee2327fbf091114b6b20ab95570a1142745eaa202c25d50bd", 0x1b5, 0x20008811, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) (async) r6 = socket(0x10, 0x2, 0xfffffffd) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) (async) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, 0x0, 0x0) (async) sendto$inet(r0, &(0x7f0000000040)="784607e0c8abfc2dbf71c7804b1fa187fe740fc1f9b098d4875d79d6960869e087afe00b68b03448d4810e522a283f819c162a12b690ffb2aa0b73d5e7b69c9ed33706d949a9ac1010fd612b7369f5576436", 0x52, 0x24008894, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4f20, 0x7, @local, 0x2}, 0x1c) getsockopt(r7, 0x31, 0x3, &(0x7f0000000300)=""/145, &(0x7f0000000400)=0x91) (async) socket$netlink(0x10, 0x3, 0x9) 980.925781ms ago: executing program 1 (id=540): ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa000000000000711027000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)={0x124, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x104, 0x2, "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"}]}]]}, 0x124}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x1b, r4, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r3, &(0x7f0000000100)={0x11, 0x4, r4}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 907.985282ms ago: executing program 3 (id=541): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000740)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305, 0x7e15}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1c}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x9}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x460900, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x22020600) unshare(0x22020400) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000000000000080000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000500)="8325d25aff04a41b6bd11515502bc32621dc022ebde00d4f410e3c9e510bf6e54b883e3844a5c445566677c73f6b27b49010de1f33105a41add248fa56320e825a1d96fa25bd3b0f76d975c2d7a9d18ee1c9a63c91175be09a531015350c270f8c9ddd63cd2ac2c2963f4dcd681bfa1ef6ea495873b3f34a7330f00cc0e5bcfb80cfa51f212e7bab0b064dc79a3f43353009e1c40640b3b2b6a6abe23231ec215eb483d8cb", &(0x7f00000005c0)=""/237, 0x4}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x9, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@generic={0x9, 0x4, 0x4, 0x7, 0x20}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa928, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000001c0)=r7) 803.436383ms ago: executing program 1 (id=542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x8, 0x301, 0x0, 0x0, {0xf, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x8010) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffff, 0x0, 0x0, 0x2}, {@in6=@mcast2, 0x0, 0x32}, @in=@empty, {}, {0x0, 0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2c, &(0x7f0000000000)=0x208000, 0x4) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x9, 0xffffffff, 0xf}) 662.199889ms ago: executing program 1 (id=543): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="24aafa2cbcbf647ac508e14a15b391f45bfd9495b59171ad39130fbaa6e3d8ea89820346354d", 0x26}], 0x1}, 0x11) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254", 0x6}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000640)="dbd266", 0x3}, {&(0x7f0000000400)="8a", 0x1}, {&(0x7f00000002c0)="2d89ff2ade", 0x5}], 0x5}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f0000000540)="f2e6", 0x2}, {&(0x7f0000002e40)="c4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="ef", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964d", 0x3}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000680)="da3d", 0x2}], 0x7}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)='N', 0x1}, {&(0x7f0000000340)="e4", 0x1}, {0x0}], 0x3}}], 0x4, 0x4000801) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 600.056713ms ago: executing program 3 (id=544): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 532.095303ms ago: executing program 3 (id=545): bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 500.479194ms ago: executing program 0 (id=546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@ipmr_delroute={0x4c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x3, 0x0, 0x11, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x0, 0x15, 0x6}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_MULTIPATH={0xc}]}, 0x4c}}, 0x0) (async, rerun: 32) r4 = epoll_create1(0x0) (async, rerun: 32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0xa0000001}) (async, rerun: 64) unshare(0x20000400) (rerun: 64) ppoll(&(0x7f0000000200)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x3) (async, rerun: 64) sendto$inet6(r2, &(0x7f0000000300)="6fd80d68984d1910024cdbcfc135be85922310e29879cd91e879735ecceefac9f83da05fc7bf63c9de6ba1b895b38d813fe65e86abfb7bf9dd6ab374144775db4d203ff66cf88a5928b37a712ab09be1451e8c977acef5b1e05f33606f9128c01efcedfd501a161e171cf0fbf8128f8fc618af9acfad3e14a4d93e0fef8a9db18b796263f19cb89e638dd5b0c4bd5200c9b6ccae9a83ab984f5ef4f99cbf6cc9401fd74b5caa4f48bf7d85a71150aae418", 0xb1, 0x801, &(0x7f0000000240)={0xa, 0x4e24, 0x18000, @remote, 0x81}, 0x1c) (rerun: 64) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x64, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10927b0c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39d1e921}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x686d2124}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50996518}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4959ba66}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3baaf14e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044040}, 0x88) pipe(&(0x7f0000000280)={0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000003c0)={0x0, 0x1, 0x5, 0x2, @vifc_lcl_ifindex, @empty}, 0x10) 420.079729ms ago: executing program 1 (id=547): socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback=0x7f004000}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 397.899097ms ago: executing program 0 (id=548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 389.290543ms ago: executing program 3 (id=549): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x6202}}, [], {{0x4, 0x1, 0xb, 0x1, 0x9, 0x10}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socketpair(0x26, 0x800, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) recvmmsg(r6, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) r9 = socket(0x28, 0x1, 0x0) connect$packet(r9, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) tee(r8, r4, 0x5, 0x8) close(r5) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r10, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r10, &(0x7f00000001c0), 0x0}, 0x20) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040)=0xfdc, &(0x7f00000002c0)=0x4) sendmsg$inet(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[], 0xf}, 0x0) recvmsg$unix(r2, &(0x7f0000000ac0)={&(0x7f0000000580), 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/153, 0x99}, {&(0x7f0000000700)=""/2, 0x2}, {&(0x7f0000000740)=""/110, 0x6e}, {&(0x7f0000000800)=""/84, 0x54}, {&(0x7f0000000880)=""/124, 0x7c}, {&(0x7f0000000900)=""/15, 0xf}, {&(0x7f0000000940)=""/51, 0x33}, {&(0x7f0000000980)=""/33, 0x21}, {&(0x7f00000009c0)=""/200, 0xc8}, {&(0x7f0000000b40)=""/82, 0x52}], 0xa}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c80)={r0, 0xffffffffffffff77, &(0x7f0000000340)}, 0x26) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000cc0)={0x14, r3, 0x200, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040104}, 0x0) 315.95688ms ago: executing program 1 (id=550): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xe0000000, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 259.720428ms ago: executing program 0 (id=551): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="780000000b0601020000000000000000030000000900020073797a300000000005000100070000004c0008800c00078007001a00242e0000100007800900130073797a3100000000100007800c001b4000000000000000100c00078008000a400000ffff100007800c000a8008000140ac1414aa040008"], 0x78}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0500000004000000080000000a000040000000000af983024c390ec9460548a1643b5e7fdc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="001800"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a3200000000140004800800024000000000080001400000"], 0xd8}}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@delqdisc={0x34, 0x25, 0x200, 0x2070bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xd, 0xe}, {0x3, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000011) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x20, {0x0, 0x0, 0x0, r7, {0xfff1, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x9, 0x8}}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}]}}]}, 0x50}}, 0x44050) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r6, &(0x7f0000000280)=@abs, 0x6e) 185.74433ms ago: executing program 1 (id=552): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x60480) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x24e580, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) splice(r2, 0x0, r1, 0x0, 0x100000001, 0x2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x2, "03e3"}, &(0x7f0000000180)=0xa) close(r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000000)={0x6, 0x6, 0x3, 0x4}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x80, 0x84}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, {}, {0x8000, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x70bd2b, 0x0, 0x2, 0x0, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) 169.7341ms ago: executing program 4 (id=553): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4040014}, 0x4004040) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x4e24, @broadcast}, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) accept4$bt_l2cap(r1, 0x0, &(0x7f0000000340), 0x800) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x7ba7f841b88ce30}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) r8 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r8, 0x10d, 0xba, &(0x7f0000000000), &(0x7f0000000240)=0x4) bind$unix(r7, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x240000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) 51.87943ms ago: executing program 2 (id=554): r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x80108907, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x3, 0x40000004, 0x0, 0xffffffffffffffff, 0x47, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x90, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5c, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0x6c, 0x8}}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x6, 0x0, {0xd0, 0x5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x389, 0x2, 0x68}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x20000000}]}, 0x90}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r8, @ANYBLOB="05001300000000000a00060008021100000100000600100080050000060012000036f360"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r9 = epoll_create1(0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000008c0)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000000)) r11 = socket$packet(0x11, 0x2, 0x300) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r12, 0x114, 0xa, &(0x7f0000000000), 0x4) syz_80211_join_ibss(&(0x7f00000001c0)='wlan0\x00', &(0x7f0000000200)=@default_ap_ssid, 0x6, 0x0) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r11, 0x107, 0x16, &(0x7f0000000280)={0x0, 0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000041408002abd0800010002000000080019fed513822b0100020000000800010001000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 3 (id=555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c000100", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. [ 74.305737][ T5821] cgroup: Unknown subsys name 'net' [ 74.434589][ T5821] cgroup: Unknown subsys name 'cpuset' [ 74.442872][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.993495][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.778409][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.786933][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.795262][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.803764][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.812242][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.819574][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.819899][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.834693][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.843221][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.845080][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.851786][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.860652][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.867375][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.873602][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.880041][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.886979][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.900941][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.908614][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.916724][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.925897][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.929534][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.935231][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.947387][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.948831][ T5149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.962014][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.962049][ T5852] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.969729][ T5149] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.977484][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.984126][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.001647][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.429535][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 80.527357][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 80.540495][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 80.678881][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 80.730884][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.738895][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.746770][ T5832] bridge_slave_0: entered allmulticast mode [ 80.754000][ T5832] bridge_slave_0: entered promiscuous mode [ 80.795416][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.802728][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.809913][ T5832] bridge_slave_1: entered allmulticast mode [ 80.816955][ T5832] bridge_slave_1: entered promiscuous mode [ 80.857405][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.864631][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.872078][ T5833] bridge_slave_0: entered allmulticast mode [ 80.878876][ T5833] bridge_slave_0: entered promiscuous mode [ 80.886718][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 80.909056][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.916654][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.923992][ T5837] bridge_slave_0: entered allmulticast mode [ 80.931242][ T5837] bridge_slave_0: entered promiscuous mode [ 80.938346][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.945638][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.952907][ T5833] bridge_slave_1: entered allmulticast mode [ 80.959574][ T5833] bridge_slave_1: entered promiscuous mode [ 80.978518][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.992904][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.018270][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.025630][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.033060][ T5837] bridge_slave_1: entered allmulticast mode [ 81.040018][ T5837] bridge_slave_1: entered promiscuous mode [ 81.081612][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.088899][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.097142][ T5831] bridge_slave_0: entered allmulticast mode [ 81.104138][ T5831] bridge_slave_0: entered promiscuous mode [ 81.112996][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.120102][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.127470][ T5831] bridge_slave_1: entered allmulticast mode [ 81.134405][ T5831] bridge_slave_1: entered promiscuous mode [ 81.178786][ T5832] team0: Port device team_slave_0 added [ 81.226411][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.241657][ T5832] team0: Port device team_slave_1 added [ 81.249153][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.288320][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.300012][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.328545][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.338814][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.346634][ T5840] bridge_slave_0: entered allmulticast mode [ 81.354090][ T5840] bridge_slave_0: entered promiscuous mode [ 81.364762][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.377526][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.407808][ T5833] team0: Port device team_slave_0 added [ 81.417239][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.424493][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.431820][ T5840] bridge_slave_1: entered allmulticast mode [ 81.438558][ T5840] bridge_slave_1: entered promiscuous mode [ 81.483293][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.490455][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.517173][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.530445][ T5833] team0: Port device team_slave_1 added [ 81.556524][ T5837] team0: Port device team_slave_0 added [ 81.569647][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.576776][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.602946][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.643136][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.655476][ T5831] team0: Port device team_slave_0 added [ 81.664255][ T5831] team0: Port device team_slave_1 added [ 81.671612][ T5837] team0: Port device team_slave_1 added [ 81.690294][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.697284][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.723877][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.736983][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.772119][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.779110][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.805763][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.833175][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.840339][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.866739][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.880976][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.887956][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.914212][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.941320][ T5840] team0: Port device team_slave_0 added [ 81.947788][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.956363][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.982758][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.012205][ T5832] hsr_slave_0: entered promiscuous mode [ 82.018593][ T5832] hsr_slave_1: entered promiscuous mode [ 82.028498][ T5840] team0: Port device team_slave_1 added [ 82.031863][ T55] Bluetooth: hci4: command tx timeout [ 82.039928][ T55] Bluetooth: hci1: command tx timeout [ 82.040281][ T5848] Bluetooth: hci0: command tx timeout [ 82.045835][ T55] Bluetooth: hci3: command tx timeout [ 82.066191][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.073565][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.099784][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.116396][ T55] Bluetooth: hci2: command tx timeout [ 82.169831][ T5837] hsr_slave_0: entered promiscuous mode [ 82.176229][ T5837] hsr_slave_1: entered promiscuous mode [ 82.183180][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.191534][ T5837] Cannot create hsr debugfs directory [ 82.202573][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.209542][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.235729][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.249804][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.256990][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.283184][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.320030][ T5833] hsr_slave_0: entered promiscuous mode [ 82.326423][ T5833] hsr_slave_1: entered promiscuous mode [ 82.332931][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.340580][ T5833] Cannot create hsr debugfs directory [ 82.405130][ T5840] hsr_slave_0: entered promiscuous mode [ 82.415509][ T5840] hsr_slave_1: entered promiscuous mode [ 82.421873][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.429444][ T5840] Cannot create hsr debugfs directory [ 82.439590][ T5831] hsr_slave_0: entered promiscuous mode [ 82.445953][ T5831] hsr_slave_1: entered promiscuous mode [ 82.452113][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.459694][ T5831] Cannot create hsr debugfs directory [ 82.843368][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.872520][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.888754][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.906574][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.918407][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.931780][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.943747][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.974609][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.015994][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.043576][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.054610][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.065120][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.134604][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.147561][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.175312][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.188350][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.274737][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.310051][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.321983][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.336529][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.392785][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.422250][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.451048][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.485572][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.509288][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.516686][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.532119][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.549541][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.564120][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.571294][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.583778][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.612969][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.620086][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.649195][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.656360][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.666991][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.674154][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.716158][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.747741][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.754991][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.777669][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.784934][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.807981][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.828333][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.862860][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.870039][ T3526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.928271][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.941332][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.003594][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.059860][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.067069][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.111961][ T55] Bluetooth: hci3: command tx timeout [ 84.120897][ T55] Bluetooth: hci0: command tx timeout [ 84.126387][ T55] Bluetooth: hci1: command tx timeout [ 84.132234][ T5852] Bluetooth: hci4: command tx timeout [ 84.147254][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.154444][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.193320][ T5848] Bluetooth: hci2: command tx timeout [ 84.207046][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.282726][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.478133][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.523741][ T5832] veth0_vlan: entered promiscuous mode [ 84.586792][ T5832] veth1_vlan: entered promiscuous mode [ 84.615115][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.647146][ T5837] veth0_vlan: entered promiscuous mode [ 84.718394][ T5837] veth1_vlan: entered promiscuous mode [ 84.755544][ T5832] veth0_macvtap: entered promiscuous mode [ 84.777093][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.794876][ T5840] veth0_vlan: entered promiscuous mode [ 84.802685][ T5832] veth1_macvtap: entered promiscuous mode [ 84.825819][ T5840] veth1_vlan: entered promiscuous mode [ 84.868712][ T5837] veth0_macvtap: entered promiscuous mode [ 84.878686][ T5837] veth1_macvtap: entered promiscuous mode [ 84.905780][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.943931][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.965143][ T5833] veth0_vlan: entered promiscuous mode [ 84.983626][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.995891][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.007650][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.018470][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.028985][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.038154][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.048816][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.061741][ T5840] veth0_macvtap: entered promiscuous mode [ 85.079290][ T5833] veth1_vlan: entered promiscuous mode [ 85.093892][ T5840] veth1_macvtap: entered promiscuous mode [ 85.103285][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.113942][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.125327][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.138310][ T5831] veth0_vlan: entered promiscuous mode [ 85.156336][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.167415][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.176583][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.186616][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.217242][ T5831] veth1_vlan: entered promiscuous mode [ 85.245989][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.259019][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.269457][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.280107][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.292004][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.335876][ T5833] veth0_macvtap: entered promiscuous mode [ 85.361734][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.376832][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.386827][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.398193][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.409976][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.453711][ T5833] veth1_macvtap: entered promiscuous mode [ 85.475746][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.485814][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.494621][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.503891][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.523206][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.542698][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.566790][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.575102][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.592253][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.604443][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.616332][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.626930][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.637423][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.648352][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.659922][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.685223][ T5831] veth0_macvtap: entered promiscuous mode [ 85.709576][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.718916][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.740117][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.740421][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.759073][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.770563][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.780538][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.791714][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.802894][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.814398][ T5831] veth1_macvtap: entered promiscuous mode [ 85.842878][ T5833] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.856319][ T5833] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.866608][ T5833] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.875735][ T5833] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.935120][ T197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.966167][ T197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.966922][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.986551][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.996937][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.008951][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.018974][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.029554][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.039610][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.051535][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.065416][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.089832][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.093580][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.109074][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.126653][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.138396][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.148765][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.160931][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.171161][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.182510][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.191362][ T5848] Bluetooth: hci1: command tx timeout [ 86.194681][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.197910][ T5848] Bluetooth: hci4: command tx timeout [ 86.215682][ T55] Bluetooth: hci0: command tx timeout [ 86.220407][ T5852] Bluetooth: hci3: command tx timeout [ 86.232578][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.243912][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.271307][ T5852] Bluetooth: hci2: command tx timeout [ 86.273432][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.286185][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.295821][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.304959][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.385365][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.400954][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.453066][ T5920] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 86.506890][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.525393][ T5920] syzkaller1: entered promiscuous mode [ 86.530202][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.542557][ T5920] syzkaller1: entered allmulticast mode [ 86.554508][ T5923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.606778][ T5924] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 86.627585][ T5924] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 86.799357][ T197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.827308][ T197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.913544][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.939345][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.116728][ T5942] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 87.138145][ T5937] bridge_slave_0: left allmulticast mode [ 87.147338][ T5937] bridge_slave_0: left promiscuous mode [ 87.162774][ T5939] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7'. [ 87.177208][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.251266][ T5937] bridge_slave_1: left allmulticast mode [ 87.273166][ T5937] bridge_slave_1: left promiscuous mode [ 87.288479][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.334948][ T5937] bond0: (slave bond_slave_0): Releasing backup interface [ 87.367921][ T5937] bond0: (slave bond_slave_1): Releasing backup interface [ 87.431868][ T5937] team0: Port device team_slave_0 removed [ 87.442739][ T5937] team0: Port device team_slave_1 removed [ 87.449659][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.457574][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.467378][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.475730][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.515463][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.567673][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.719064][ T5955] Zero length message leads to an empty skb [ 88.073924][ T5964] Illegal XDP return value 4294967274 on prog (id 3) dev N/A, expect packet loss! [ 88.101634][ T5967] lo speed is unknown, defaulting to 1000 [ 88.148197][ T5967] lo speed is unknown, defaulting to 1000 [ 88.166996][ T5969] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.185437][ T5970] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.272201][ T5839] Bluetooth: hci0: command tx timeout [ 88.272393][ T5848] Bluetooth: hci1: command tx timeout [ 88.277654][ T5839] Bluetooth: hci3: command tx timeout [ 88.277728][ T5852] Bluetooth: hci4: command tx timeout [ 88.343640][ T5967] lo speed is unknown, defaulting to 1000 [ 88.352936][ T5852] Bluetooth: hci2: command tx timeout [ 88.408340][ T5967] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 88.467418][ T5967] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 88.649966][ T5967] lo speed is unknown, defaulting to 1000 [ 88.650401][ T975] lo speed is unknown, defaulting to 1000 [ 88.694218][ T5967] lo speed is unknown, defaulting to 1000 [ 88.719629][ T5967] lo speed is unknown, defaulting to 1000 [ 88.753342][ T5967] lo speed is unknown, defaulting to 1000 [ 88.778287][ T5967] lo speed is unknown, defaulting to 1000 [ 88.957134][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'. [ 89.172802][ T5985] batman_adv: batadv0: Adding interface: dummy0 [ 89.179110][ T5985] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.249640][ T5985] batman_adv: batadv0: Interface activated: dummy0 [ 89.287591][ T5989] batadv0: mtu less than device minimum [ 89.297332][ T5989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.310377][ T5989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.323085][ T5989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.335769][ T5989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.348454][ T5989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.361131][ T5989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.373913][ T5989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.386612][ T5989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.399365][ T5989] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 89.591833][ T6000] warning: `syz.3.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.663872][ T6005] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23'. [ 90.399404][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 90.506136][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.32'. [ 90.537167][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'. [ 90.909996][ T6047] syzkaller0: entered promiscuous mode [ 90.929616][ T6047] syzkaller0: entered allmulticast mode [ 91.057618][ T6057] netlink: 32 bytes leftover after parsing attributes in process `syz.3.41'. [ 91.790976][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.48'. [ 91.888910][ T6081] netlink: 16 bytes leftover after parsing attributes in process `syz.2.47'. [ 92.198889][ T47] cfg80211: failed to load regulatory.db [ 93.415938][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 93.666116][ T6126] netlink: 152 bytes leftover after parsing attributes in process `syz.3.50'. [ 93.697573][ T6126] netlink: 'syz.3.50': attribute type 1 has an invalid length. [ 93.768371][ T6126] block nbd3: not configured, cannot reconfigure [ 94.088584][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.301801][ T6141] bridge_slave_1 (unregistering): left allmulticast mode [ 94.326137][ T6141] bridge_slave_1 (unregistering): left promiscuous mode [ 94.340461][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.001201][ T6174] netlink: 36 bytes leftover after parsing attributes in process `syz.1.65'. [ 95.016393][ T6168] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.163200][ T6171] syzkaller0: entered promiscuous mode [ 95.175715][ T6171] syzkaller0: entered allmulticast mode [ 95.417606][ T6168] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.718129][ T6183] netlink: 'syz.1.68': attribute type 13 has an invalid length. [ 97.726266][ T6183] netlink: 'syz.1.68': attribute type 3 has an invalid length. [ 97.752799][ T6168] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.777145][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 97.862853][ T6168] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.938879][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'. [ 98.017116][ T6209] netlink: 36 bytes leftover after parsing attributes in process `syz.0.74'. [ 98.174245][ T6168] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.244185][ T6168] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.294128][ T6217] xt_hashlimit: size too large, truncated to 1048576 [ 98.319237][ T6168] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.385749][ T6168] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.651847][ T6239] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:0 [ 98.818685][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 98.848315][ T6246] hsr0: entered promiscuous mode [ 98.877875][ T6246] hsr0: entered allmulticast mode [ 98.912328][ T6246] hsr_slave_0: entered allmulticast mode [ 98.948770][ T6246] hsr_slave_1: entered allmulticast mode [ 99.049133][ T6239] lo speed is unknown, defaulting to 1000 [ 99.093000][ T6252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.84'. [ 99.149894][ T6254] sock: sock_timestamping_bind_phc: sock not bind to device [ 99.179888][ T6252] netlink: 'syz.2.84': attribute type 1 has an invalid length. [ 99.210567][ T6252] netlink: 224 bytes leftover after parsing attributes in process `syz.2.84'. [ 99.289911][ T6254] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.382728][ T6264] xt_l2tp: invalid flags combination: 4 [ 99.743730][ T6270] netlink: 'syz.2.90': attribute type 32 has an invalid length. [ 99.763796][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.90'. [ 100.163595][ T6285] x_tables: duplicate underflow at hook 2 [ 100.203600][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'. [ 100.259854][ T6291] team_slave_0: entered promiscuous mode [ 100.265894][ T6291] team_slave_1: entered promiscuous mode [ 100.317637][ T6291] macvtap0: entered promiscuous mode [ 100.323500][ T6291] team0: entered promiscuous mode [ 100.329373][ T6291] macvtap0: entered allmulticast mode [ 100.337194][ T6291] team0: entered allmulticast mode [ 100.342976][ T6291] team_slave_0: entered allmulticast mode [ 100.349245][ T6291] team_slave_1: entered allmulticast mode [ 100.359410][ T6291] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 100.400853][ T6294] team0: left allmulticast mode [ 100.405789][ T6294] team_slave_0: left allmulticast mode [ 100.425105][ T6294] team_slave_1: left allmulticast mode [ 100.460551][ T6294] team0: left promiscuous mode [ 100.481466][ T6294] team_slave_0: left promiscuous mode [ 100.487257][ T6294] team_slave_1: left promiscuous mode [ 100.873651][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 100.914309][ T6311] netlink: 56 bytes leftover after parsing attributes in process `syz.1.104'. [ 101.437891][ T6335] syzkaller0: entered promiscuous mode [ 101.490974][ T6335] syzkaller0: entered allmulticast mode [ 103.067576][ T6345] bridge1: entered promiscuous mode [ 103.090294][ T6345] bridge1: entered allmulticast mode [ 103.099850][ T6345] team0: Port device bridge1 added [ 103.373070][ T6373] __nla_validate_parse: 3 callbacks suppressed [ 103.373094][ T6373] netlink: 32 bytes leftover after parsing attributes in process `syz.0.120'. [ 103.409849][ T6377] set match dimension is over the limit! [ 103.509762][ T6377] pim6reg: entered allmulticast mode [ 103.772814][ T6396] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.868691][ T6396] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.967900][ T6396] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.985634][ T6407] Bluetooth: MGMT ver 1.23 [ 104.106319][ T6406] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 104.124366][ T6396] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.256076][ T6417] ieee802154 phy1 wpan1: encryption failed: -22 [ 104.296381][ T6396] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.359418][ T6396] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.492308][ T6396] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.550095][ T6396] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.060881][ T6430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.135'. [ 105.197909][ T6436] netlink: 'syz.0.138': attribute type 1 has an invalid length. [ 105.419930][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 105.433539][ T6444] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.461272][ T6445] netlink: 'syz.3.142': attribute type 3 has an invalid length. [ 105.480481][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 105.512781][ T6445] 8021q: VLANs not supported on lo [ 105.545748][ T6448] dummy0: entered promiscuous mode [ 105.560837][ T6448] macvtap1: entered promiscuous mode [ 105.577767][ T6448] macvtap1: entered allmulticast mode [ 105.593129][ T6448] dummy0: entered allmulticast mode [ 105.604602][ T6445] netlink: 152 bytes leftover after parsing attributes in process `syz.3.142'. [ 105.639568][ T6445] netlink: 'syz.3.142': attribute type 1 has an invalid length. [ 105.648312][ T6453] dummy0: left allmulticast mode [ 105.666836][ T6453] dummy0: left promiscuous mode [ 105.935381][ T6461] lo speed is unknown, defaulting to 1000 [ 105.950956][ T5852] Bluetooth: hci0: command 0x0401 tx timeout [ 105.958107][ T5848] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 106.064042][ T6468] netlink: 32 bytes leftover after parsing attributes in process `syz.1.150'. [ 106.225872][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.152'. [ 106.285025][ T6477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.649441][ T6493] netlink: 558 bytes leftover after parsing attributes in process `syz.1.156'. [ 106.794201][ T6502] xt_TPROXY: Can be used only with -p tcp or -p udp [ 107.076390][ T6511] lo speed is unknown, defaulting to 1000 [ 107.489865][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'. [ 107.525186][ T6525] macvlan0: entered promiscuous mode [ 107.545752][ T6525] ipvlan0: entered promiscuous mode [ 107.568389][ T6525] ipvlan0: left promiscuous mode [ 107.617527][ T6525] macvlan0: left promiscuous mode [ 107.660622][ T6529] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 107.686743][ T6529] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 107.710816][ T6529] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 108.040301][ T5848] Bluetooth: hci0: command 0x0401 tx timeout [ 108.130915][ T6540] Cannot find del_set index 4 as target [ 108.358250][ T6544] netlink: 'syz.1.168': attribute type 25 has an invalid length. [ 108.400390][ T6544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.168'. [ 108.585504][ T6564] SET target dimension over the limit! [ 108.920346][ T5848] Bluetooth: hci4: command tx timeout [ 109.032416][ T6571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.174'. [ 109.127585][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 109.838007][ T6591] netlink: 20 bytes leftover after parsing attributes in process `syz.3.181'. [ 109.889883][ T6591] nbd: socks must be embedded in a SOCK_ITEM attr [ 109.998022][ T6603] bridge_slave_0: left allmulticast mode [ 110.021745][ T6603] bridge_slave_0: left promiscuous mode [ 110.028482][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.039906][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 110.081650][ T6607] netlink: 1280 bytes leftover after parsing attributes in process `syz.2.185'. [ 110.119920][ T6603] bridge_slave_1: left allmulticast mode [ 110.163799][ T6603] bridge_slave_1: left promiscuous mode [ 110.195762][ T6607] net_ratelimit: 10 callbacks suppressed [ 110.195782][ T6607] openvswitch: netlink: Flow actions attr not present in new flow. [ 110.210569][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.236343][ T6613] netlink: 32 bytes leftover after parsing attributes in process `syz.3.187'. [ 110.345966][ T6603] bond0: (slave bond_slave_0): Releasing backup interface [ 110.397669][ T6603] bond0: (slave bond_slave_1): Releasing backup interface [ 110.473346][ T6603] team0: Port device team_slave_0 removed [ 110.492249][ T6622] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 110.532051][ T6603] team0: Port device team_slave_1 removed [ 110.546531][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.558536][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.571053][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.588233][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.643292][ T6603] team0: Port device bridge1 removed [ 110.749603][ T6607] lo speed is unknown, defaulting to 1000 [ 110.988505][ T6631] FAULT_INJECTION: forcing a failure. [ 110.988505][ T6631] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.012050][ T6631] CPU: 1 UID: 0 PID: 6631 Comm: syz.1.191 Not tainted 6.14.0-rc1-syzkaller-00348-g4079918ae720 #0 [ 111.012080][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 111.012097][ T6631] Call Trace: [ 111.012105][ T6631] [ 111.012114][ T6631] dump_stack_lvl+0x241/0x360 [ 111.012151][ T6631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.012174][ T6631] ? __pfx__printk+0x10/0x10 [ 111.012207][ T6631] ? rcu_is_watching+0x15/0xb0 [ 111.012228][ T6631] ? __pfx_lock_release+0x10/0x10 [ 111.012254][ T6631] ? __alloc_frozen_pages_noprof+0x350/0x710 [ 111.012294][ T6631] should_fail_ex+0x40a/0x550 [ 111.012323][ T6631] _copy_from_iter+0x1e9/0x1c20 [ 111.012369][ T6631] ? alloc_pages_mpol+0x4bd/0x660 [ 111.012396][ T6631] ? __pfx__copy_from_iter+0x10/0x10 [ 111.012428][ T6631] ? tun_get_user+0x850/0x45e0 [ 111.012464][ T6631] ? set_page_refcounted+0xa1/0x1e0 [ 111.012487][ T6631] ? alloc_pages_noprof+0x136/0x190 [ 111.012506][ T6631] ? page_copy_sane+0x46/0x260 [ 111.012539][ T6631] copy_page_from_iter+0x7a/0x100 [ 111.012574][ T6631] tun_get_user+0x1f1d/0x45e0 [ 111.012610][ T6631] ? tun_get_user+0x850/0x45e0 [ 111.012659][ T6631] ? __pfx_tun_get_user+0x10/0x10 [ 111.012708][ T6631] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 111.012735][ T6631] ? tun_get+0x1e/0x2f0 [ 111.012766][ T6631] ? __pfx_lock_release+0x10/0x10 [ 111.012808][ T6631] ? tun_get+0x1e/0x2f0 [ 111.012838][ T6631] ? tun_get+0x27d/0x2f0 [ 111.012869][ T6631] tun_chr_write_iter+0x10d/0x1f0 [ 111.012903][ T6631] vfs_write+0xacf/0xd10 [ 111.012935][ T6631] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 111.012968][ T6631] ? __pfx_vfs_write+0x10/0x10 [ 111.012993][ T6631] ? do_sys_openat2+0x17a/0x1d0 [ 111.013019][ T6631] ? __fget_files+0x2a/0x410 [ 111.013045][ T6631] ? __fget_files+0x2a/0x410 [ 111.013076][ T6631] ksys_write+0x18f/0x2b0 [ 111.013105][ T6631] ? __pfx_ksys_write+0x10/0x10 [ 111.013134][ T6631] ? do_syscall_64+0x100/0x230 [ 111.013166][ T6631] ? do_syscall_64+0xb6/0x230 [ 111.013198][ T6631] do_syscall_64+0xf3/0x230 [ 111.013226][ T6631] ? clear_bhb_loop+0x35/0x90 [ 111.013259][ T6631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.013287][ T6631] RIP: 0033:0x7fa315d8b89f [ 111.013312][ T6631] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 111.013328][ T6631] RSP: 002b:00007fa313bf6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 111.013358][ T6631] RAX: ffffffffffffffda RBX: 00007fa315fa5fa0 RCX: 00007fa315d8b89f [ 111.013374][ T6631] RDX: 000000000000006e RSI: 0000400000000340 RDI: 00000000000000c8 [ 111.013387][ T6631] RBP: 00007fa313bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 111.013399][ T6631] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 111.013411][ T6631] R13: 0000000000000000 R14: 00007fa315fa5fa0 R15: 00007fff08ca4538 [ 111.013441][ T6631] [ 111.339304][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'. [ 111.393787][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'. [ 111.495156][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 111.639722][ T6643] netlink: 'syz.4.195': attribute type 14 has an invalid length. [ 111.739593][ T6643] netlink: 'syz.4.195': attribute type 13 has an invalid length. [ 111.807326][ T6643] netlink: 'syz.4.195': attribute type 14 has an invalid length. [ 111.860738][ T6643] netlink: 'syz.4.195': attribute type 13 has an invalid length. [ 111.892643][ T6643] netlink: 'syz.4.195': attribute type 14 has an invalid length. [ 111.921528][ T6643] netlink: 'syz.4.195': attribute type 13 has an invalid length. [ 111.964725][ T6643] netlink: 'syz.4.195': attribute type 14 has an invalid length. [ 112.030431][ T6643] netlink: 'syz.4.195': attribute type 13 has an invalid length. [ 112.038806][ T6643] netlink: 'syz.4.195': attribute type 14 has an invalid length. [ 112.142099][ T6658] IPVS: set_ctl: invalid protocol: 44 172.30.0.2:20003 [ 112.160619][ T6643] netlink: 'syz.4.195': attribute type 13 has an invalid length. [ 112.497327][ T6670] netlink: 'syz.0.203': attribute type 11 has an invalid length. [ 112.894275][ T6678] syzkaller0: entered allmulticast mode [ 113.049309][ T6689] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20002 [ 114.113359][ T6706] __nla_validate_parse: 67 callbacks suppressed [ 114.113382][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 115.384428][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 115.403421][ T6706] batadv1: entered promiscuous mode [ 115.408927][ T6701] lo speed is unknown, defaulting to 1000 [ 115.790907][ T6717] syz.4.214: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 115.830356][ T6717] CPU: 0 UID: 0 PID: 6717 Comm: syz.4.214 Not tainted 6.14.0-rc1-syzkaller-00348-g4079918ae720 #0 [ 115.830389][ T6717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 115.830403][ T6717] Call Trace: [ 115.830411][ T6717] [ 115.830420][ T6717] dump_stack_lvl+0x241/0x360 [ 115.830454][ T6717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.830478][ T6717] ? __pfx__printk+0x10/0x10 [ 115.830519][ T6717] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 115.830545][ T6717] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 115.830572][ T6717] warn_alloc+0x278/0x410 [ 115.830605][ T6717] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 115.830636][ T6717] ? __pfx_warn_alloc+0x10/0x10 [ 115.830667][ T6717] ? kasan_save_track+0x3f/0x80 [ 115.830695][ T6717] ? __kasan_kmalloc+0x98/0xb0 [ 115.830728][ T6717] ? xsk_setsockopt+0x4ea/0x950 [ 115.830749][ T6717] ? do_sock_setsockopt+0x3af/0x720 [ 115.830780][ T6717] ? __x64_sys_setsockopt+0x1ee/0x280 [ 115.830812][ T6717] ? do_syscall_64+0xf3/0x230 [ 115.830849][ T6717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.830891][ T6717] __vmalloc_node_range_noprof+0x126/0x1380 [ 115.830952][ T6717] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 115.830987][ T6717] ? __kasan_kmalloc+0x98/0xb0 [ 115.831025][ T6717] vmalloc_user_noprof+0x74/0x80 [ 115.831054][ T6717] ? xskq_create+0xb6/0x170 [ 115.831078][ T6717] xskq_create+0xb6/0x170 [ 115.831104][ T6717] xsk_init_queue+0xa1/0x100 [ 115.831132][ T6717] xsk_setsockopt+0x4ea/0x950 [ 115.831158][ T6717] ? __pfx_xsk_setsockopt+0x10/0x10 [ 115.831181][ T6717] ? __pfx_aa_sk_perm+0x10/0x10 [ 115.831214][ T6717] ? aa_sock_opt_perm+0x79/0x120 [ 115.831248][ T6717] ? __pfx_xsk_setsockopt+0x10/0x10 [ 115.831270][ T6717] do_sock_setsockopt+0x3af/0x720 [ 115.831308][ T6717] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 115.831346][ T6717] ? __fget_files+0x395/0x410 [ 115.831368][ T6717] ? __fget_files+0x2a/0x410 [ 115.831401][ T6717] __x64_sys_setsockopt+0x1ee/0x280 [ 115.831442][ T6717] do_syscall_64+0xf3/0x230 [ 115.831472][ T6717] ? clear_bhb_loop+0x35/0x90 [ 115.831506][ T6717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.831536][ T6717] RIP: 0033:0x7f41c018cde9 [ 115.831556][ T6717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.831573][ T6717] RSP: 002b:00007f41c1057038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 115.831596][ T6717] RAX: ffffffffffffffda RBX: 00007f41c03a5fa0 RCX: 00007f41c018cde9 [ 115.831612][ T6717] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 115.831624][ T6717] RBP: 00007f41c020e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 115.831638][ T6717] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.831651][ T6717] R13: 0000000000000000 R14: 00007f41c03a5fa0 R15: 00007ffff6471798 [ 115.831684][ T6717] [ 115.831692][ T6717] Mem-Info: [ 116.139076][ T6725] openvswitch: netlink: Actions may not be safe on all matching packets [ 116.212161][ T6717] active_anon:8696 inactive_anon:0 isolated_anon:0 [ 116.212161][ T6717] active_file:1326 inactive_file:38309 isolated_file:0 [ 116.212161][ T6717] unevictable:768 dirty:89 writeback:0 [ 116.212161][ T6717] slab_reclaimable:9869 slab_unreclaimable:97175 [ 116.212161][ T6717] mapped:28593 shmem:1433 pagetables:835 [ 116.212161][ T6717] sec_pagetables:0 bounce:0 [ 116.212161][ T6717] kernel_misc_reclaimable:0 [ 116.212161][ T6717] free:1341438 free_pcp:270 free_cma:0 [ 116.314737][ T6717] Node 0 active_anon:34784kB inactive_anon:0kB active_file:5304kB inactive_file:153164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114372kB dirty:352kB writeback:0kB shmem:4196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10772kB pagetables:3340kB sec_pagetables:0kB all_unreclaimable? no [ 116.449497][ T6717] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 116.471830][ T6733] sctp: [Deprecated]: syz.1.218 (pid 6733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.471830][ T6733] Use struct sctp_sack_info instead [ 116.555617][ T6717] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.617120][ T6730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.637123][ T6717] lowmem_reserve[]: 0 2491 2491 0 0 [ 116.674368][ T6717] Node 0 DMA32 free:1445012kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:35244kB inactive_anon:0kB active_file:5304kB inactive_file:152600kB unevictable:1536kB writepending:352kB present:3129332kB managed:2551076kB mlocked:0kB bounce:0kB free_pcp:1780kB local_pcp:1780kB free_cma:0kB [ 116.767976][ T6717] lowmem_reserve[]: 0 0 0 0 0 [ 116.777483][ T6717] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:564kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 116.834984][ T6717] lowmem_reserve[]: 0 0 0 0 0 [ 116.845376][ T6717] Node 1 Normal free:3904088kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.899267][ T6730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.906212][ T6717] lowmem_reserve[]: 0 0 0 0 0 [ 116.944888][ T6743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.222'. [ 116.945872][ T6717] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 117.020228][ T6717] Node 0 DMA32: 675*4kB (UME) 304*8kB (UME) 166*16kB (UME) 919*32kB (UME) 1653*64kB (UME) 410*128kB (UME) 101*256kB (UM) 27*512kB (UME) 10*1024kB (UM) 6*2048kB (UM) 294*4096kB (UM) = 1461900kB [ 117.040378][ T6717] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 117.071717][ T6717] Node 1 Normal: 244*4kB (UME) 51*8kB (UME) 37*16kB (UME) 197*32kB (UME) 78*64kB (UME) 35*128kB (UME) 17*256kB (UME) 10*512kB (UM) 4*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3904088kB [ 117.120771][ T6717] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.136916][ T6717] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.147937][ T6717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 117.179151][ T6717] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 117.190946][ T6717] 41069 total pagecache pages [ 117.195756][ T6717] 0 pages in swap cache [ 117.200070][ T6717] Free swap = 124996kB [ 117.207769][ T6717] Total swap = 124996kB [ 117.212895][ T6717] 2097051 pages RAM [ 117.217028][ T6717] 0 pages HighMem/MovableOnly [ 117.232167][ T6717] 427496 pages reserved [ 117.236507][ T6717] 0 pages cma reserved [ 117.292532][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 117.339830][ T6730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.404656][ T6749] tc_dump_action: action bad kind [ 117.411195][ T6751] batman_adv: batadv0: Adding interface: dummy0 [ 117.431622][ T6751] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.487810][ T6751] batman_adv: batadv0: Interface activated: dummy0 [ 117.527394][ T6755] batadv0: mtu less than device minimum [ 117.538161][ T6755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.550947][ T6755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.563657][ T6755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.576342][ T6755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.589054][ T6755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.601793][ T6755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.614532][ T6755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.627227][ T6755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.689740][ T6730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.868337][ T6730] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.917563][ T6730] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.958754][ T6730] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.999383][ T6772] validate_nla: 58 callbacks suppressed [ 117.999401][ T6772] netlink: 'syz.2.231': attribute type 21 has an invalid length. [ 118.117454][ T6730] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.397963][ T6790] netlink: 'syz.0.236': attribute type 11 has an invalid length. [ 118.406265][ T6788] lo speed is unknown, defaulting to 1000 [ 118.859543][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'. [ 118.934201][ T6808] tipc: Started in network mode [ 118.939399][ T6808] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 118.958543][ T6808] tipc: Enabled bearer , priority 10 [ 118.991428][ T6812] batman_adv: batadv0: Adding interface: dummy0 [ 119.013934][ T6812] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.079787][ T6812] batman_adv: batadv0: Interface activated: dummy0 [ 119.105153][ T6823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.242'. [ 119.207815][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 119.220343][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.259758][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 119.306789][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.331812][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 119.343442][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.354943][ T6823] dummy0: entered promiscuous mode [ 119.362129][ T6823] dummy0: left promiscuous mode [ 119.674589][ T6837] xt_addrtype: ipv6 does not support BROADCAST matching [ 120.080821][ T5913] tipc: Node number set to 10005162 [ 120.207086][ T6864] netlink: 256 bytes leftover after parsing attributes in process `syz.4.257'. [ 120.218245][ T6864] unsupported nlmsg_type 40 [ 120.247794][ T6866] netlink: 'syz.1.256': attribute type 12 has an invalid length. [ 120.392863][ T6869] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 120.437386][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 120.439616][ T6874] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 120.470470][ T6874] netlink: 44 bytes leftover after parsing attributes in process `syz.4.259'. [ 120.471170][ T6869] netlink: 'syz.3.258': attribute type 10 has an invalid length. [ 120.504237][ T6869] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 120.539970][ T6869] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 120.570368][ T6876] netlink: 'syz.1.256': attribute type 2 has an invalid length. [ 120.687007][ T6876] Tq€!7: entered promiscuous mode [ 121.005585][ T6890] Cannot find set identified by id 0 to match [ 121.034088][ T6887] lo speed is unknown, defaulting to 1000 [ 121.129974][ T6886] lo speed is unknown, defaulting to 1000 [ 121.710258][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 121.732886][ T6915] netlink: 17 bytes leftover after parsing attributes in process `syz.0.266'. [ 122.291457][ T6931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.270'. [ 122.328301][ T6931] netlink: 'syz.3.270': attribute type 7 has an invalid length. [ 122.357435][ T6931] netlink: 'syz.3.270': attribute type 8 has an invalid length. [ 122.391108][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 122.592921][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 123.056211][ T6963] syzkaller0: entered promiscuous mode [ 123.063162][ T6963] syzkaller0: entered allmulticast mode [ 123.705290][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 125.449693][ T6965] syzkaller0: entered promiscuous mode [ 125.455346][ T6965] syzkaller0: entered allmulticast mode [ 125.715761][ T6996] netlink: 40 bytes leftover after parsing attributes in process `syz.2.282'. [ 125.846105][ T7001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.283'. [ 126.419150][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 127.589027][ T7001] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 127.715647][ T7018] tipc: Started in network mode [ 127.734495][ T7018] tipc: Node identity b218f9704332, cluster identity 4711 [ 127.764349][ T7018] tipc: Enabled bearer , priority 0 [ 127.791329][ T7023] dummy0: entered promiscuous mode [ 127.796655][ T7023] macvtap2: entered promiscuous mode [ 127.840620][ T7023] macvtap2: entered allmulticast mode [ 127.846077][ T7023] dummy0: entered allmulticast mode [ 127.912448][ T7026] dummy0: left allmulticast mode [ 127.927889][ T7026] dummy0: left promiscuous mode [ 127.936184][ T7040] sctp: [Deprecated]: syz.4.292 (pid 7040) Use of int in max_burst socket option. [ 127.936184][ T7040] Use struct sctp_assoc_value instead [ 128.091738][ T7017] tipc: Disabling bearer [ 128.156832][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'. [ 128.285071][ T7057] Cannot find set identified by id 0 to match [ 128.478423][ T7066] lo speed is unknown, defaulting to 1000 [ 128.486179][ T7067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.297'. [ 128.548015][ T7067] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 128.570988][ T7074] netlink: 44 bytes leftover after parsing attributes in process `syz.3.301'. [ 128.622757][ T7068] lo speed is unknown, defaulting to 1000 [ 128.667747][ T7076] can: request_module (can-proto-4) failed. [ 129.145333][ T7091] netlink: 4120 bytes leftover after parsing attributes in process `syz.3.304'. [ 129.486697][ T7104] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 129.516068][ T7104] netlink: 104 bytes leftover after parsing attributes in process `syz.0.308'. [ 129.546904][ T7104] netlink: 'syz.0.308': attribute type 1 has an invalid length. [ 129.579366][ T7113] netlink: 28 bytes leftover after parsing attributes in process `syz.2.310'. [ 129.604267][ T7108] netlink: 208 bytes leftover after parsing attributes in process `syz.4.309'. [ 129.863487][ T7118] lo speed is unknown, defaulting to 1000 [ 129.948307][ T7119] netlink: 'syz.2.311': attribute type 10 has an invalid length. [ 130.002118][ T7119] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 130.650882][ T7145] Cannot find set identified by id 0 to match [ 130.758467][ T7148] __nla_validate_parse: 5 callbacks suppressed [ 130.758487][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.321'. [ 130.783367][ T7148] bond_slave_0: entered promiscuous mode [ 130.789425][ T7148] bond_slave_1: entered promiscuous mode [ 130.792797][ T7152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.322'. [ 130.805957][ T7148] macvlan2: entered promiscuous mode [ 130.813759][ T7148] bond0: entered promiscuous mode [ 130.822129][ T7148] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.169583][ T7159] syz.2.324 (7159) used greatest stack depth: 18232 bytes left [ 131.365199][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'. [ 131.565339][ T7187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.334'. [ 132.160024][ T7211] lo speed is unknown, defaulting to 1000 [ 132.205319][ T7212] syzkaller1: entered promiscuous mode [ 132.426226][ T7231] x_tables: duplicate underflow at hook 1 [ 132.438480][ T7230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.443869][ T7231] x_tables: duplicate underflow at hook 2 [ 132.456596][ T5841] IPVS: starting estimator thread 0... [ 132.552061][ T7232] IPVS: using max 18 ests per chain, 43200 per kthread [ 132.649304][ T7234] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.769945][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.347'. [ 132.812045][ T7234] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.974779][ T7234] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.153882][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.181541][ T7256] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 133.264690][ T7260] trusted_key: syz.0.351 sent an empty control message without MSG_MORE. [ 133.319095][ T7234] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.446236][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.354'. [ 133.458426][ T7266] xt_hashlimit: size too large, truncated to 1048576 [ 133.477294][ T7267] net_ratelimit: 34 callbacks suppressed [ 133.477314][ T7267] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:01:00:08:06 [ 133.495705][ T7266] syz.0.354: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 133.523911][ T7266] CPU: 0 UID: 0 PID: 7266 Comm: syz.0.354 Not tainted 6.14.0-rc1-syzkaller-00348-g4079918ae720 #0 [ 133.523941][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 133.523953][ T7266] Call Trace: [ 133.523960][ T7266] [ 133.523968][ T7266] dump_stack_lvl+0x241/0x360 [ 133.524000][ T7266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.524023][ T7266] ? __pfx__printk+0x10/0x10 [ 133.524062][ T7266] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 133.524087][ T7266] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 133.524114][ T7266] warn_alloc+0x278/0x410 [ 133.524148][ T7266] ? __pfx_warn_alloc+0x10/0x10 [ 133.524184][ T7266] ? htable_create+0x102/0x880 [ 133.524205][ T7266] ? __get_vm_area_node+0x1c8/0x2d0 [ 133.524239][ T7266] ? __get_vm_area_node+0x25c/0x2d0 [ 133.524272][ T7266] __vmalloc_node_range_noprof+0x62f/0x1380 [ 133.524331][ T7266] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 133.524370][ T7266] ? htable_create+0x102/0x880 [ 133.524392][ T7266] vmalloc_noprof+0x79/0x90 [ 133.524419][ T7266] ? htable_create+0x102/0x880 [ 133.524442][ T7266] htable_create+0x102/0x880 [ 133.524471][ T7266] hashlimit_mt_check_common+0x710/0xa40 [ 133.524502][ T7266] hashlimit_mt_check_v1+0x2ea/0x540 [ 133.524527][ T7266] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 133.524546][ T7266] ? trace_contention_end+0x3c/0x120 [ 133.524572][ T7266] ? cpus_read_unlock+0xa6/0x140 [ 133.524600][ T7266] ? __mutex_unlock_slowpath+0x227/0x800 [ 133.524636][ T7266] xt_check_match+0x368/0xa40 [ 133.524672][ T7266] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.524704][ T7266] ? __pfx_xt_check_match+0x10/0x10 [ 133.524752][ T7266] ? xt_find_match+0x1d3/0x210 [ 133.524793][ T7266] translate_table+0x1671/0x2330 [ 133.524847][ T7266] ? __pfx_translate_table+0x10/0x10 [ 133.524872][ T7266] ? __might_fault+0xaa/0x120 [ 133.524899][ T7266] ? __pfx_lock_release+0x10/0x10 [ 133.524934][ T7266] ? __virt_addr_valid+0x183/0x530 [ 133.524971][ T7266] ? __might_fault+0xc6/0x120 [ 133.525022][ T7266] ? copy_from_sockptr_offset+0x6b/0xb0 [ 133.525050][ T7266] do_ip6t_set_ctl+0xe4c/0x1270 [ 133.525080][ T7266] ? nf_setsockopt+0x240/0x2c0 [ 133.525100][ T7266] ? aa_label_sk_perm+0x4f3/0x6c0 [ 133.525127][ T7266] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 133.525153][ T7266] ? rcu_is_watching+0x15/0xb0 [ 133.525174][ T7266] ? trace_contention_end+0x3c/0x120 [ 133.525206][ T7266] ? __mutex_unlock_slowpath+0x227/0x800 [ 133.525255][ T7266] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.525304][ T7266] nf_setsockopt+0x295/0x2c0 [ 133.525334][ T7266] rawv6_setsockopt+0x327/0x740 [ 133.525363][ T7266] ? __pfx_aa_sk_perm+0x10/0x10 [ 133.525389][ T7266] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 133.525418][ T7266] ? __pfx_lock_acquire+0x10/0x10 [ 133.525444][ T7266] ? aa_sock_opt_perm+0x79/0x120 [ 133.525473][ T7266] ? sock_common_setsockopt+0x37/0xc0 [ 133.525504][ T7266] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 133.525531][ T7266] do_sock_setsockopt+0x3af/0x720 [ 133.525570][ T7266] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 133.525608][ T7266] ? __fget_files+0x395/0x410 [ 133.525629][ T7266] ? __fget_files+0x2a/0x410 [ 133.525661][ T7266] __x64_sys_setsockopt+0x1ee/0x280 [ 133.525702][ T7266] do_syscall_64+0xf3/0x230 [ 133.525731][ T7266] ? clear_bhb_loop+0x35/0x90 [ 133.525765][ T7266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.525793][ T7266] RIP: 0033:0x7f5cd678cde9 [ 133.525811][ T7266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.525828][ T7266] RSP: 002b:00007f5cd758d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 133.525850][ T7266] RAX: ffffffffffffffda RBX: 00007f5cd69a5fa0 RCX: 00007f5cd678cde9 [ 133.525866][ T7266] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 133.525878][ T7266] RBP: 00007f5cd680e2a0 R08: 00000000000004c0 R09: 0000000000000000 [ 133.525891][ T7266] R10: 00004000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 133.525904][ T7266] R13: 0000000000000000 R14: 00007f5cd69a5fa0 R15: 00007ffd31537f68 [ 133.525935][ T7266] [ 133.526022][ T7266] Mem-Info: [ 133.956007][ T7266] active_anon:4897 inactive_anon:0 isolated_anon:0 [ 133.956007][ T7266] active_file:1431 inactive_file:38315 isolated_file:0 [ 133.956007][ T7266] unevictable:768 dirty:338 writeback:0 [ 133.956007][ T7266] slab_reclaimable:9876 slab_unreclaimable:99179 [ 133.956007][ T7266] mapped:28772 shmem:1458 pagetables:898 [ 133.956007][ T7266] sec_pagetables:0 bounce:0 [ 133.956007][ T7266] kernel_misc_reclaimable:0 [ 133.956007][ T7266] free:1339950 free_pcp:349 free_cma:0 [ 134.061722][ T7266] Node 0 active_anon:19588kB inactive_anon:0kB active_file:5724kB inactive_file:153188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115188kB dirty:1348kB writeback:0kB shmem:4296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10824kB pagetables:3592kB sec_pagetables:0kB all_unreclaimable? no [ 134.111479][ T7266] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 134.166605][ T7266] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.196163][ T7266] lowmem_reserve[]: 0 2491 2491 0 0 [ 134.201678][ T7266] Node 0 DMA32 free:1440792kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:19492kB inactive_anon:0kB active_file:5724kB inactive_file:152624kB unevictable:1536kB writepending:1348kB present:3129332kB managed:2551076kB mlocked:0kB bounce:0kB free_pcp:1640kB local_pcp:1544kB free_cma:0kB [ 134.232414][ T7266] lowmem_reserve[]: 0 0 0 0 0 [ 134.238435][ T7266] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:564kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 134.265616][ T7266] lowmem_reserve[]: 0 0 0 0 0 [ 134.271513][ T7266] Node 1 Normal free:3904088kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.301913][ T7266] lowmem_reserve[]: 0 0 0 0 0 [ 134.307191][ T7266] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 134.307644][ T7234] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.333518][ T7266] Node 0 DMA32: 9*4kB (UM) 109*8kB (ME) 120*16kB (UME) 251*32kB (UME) 1472*64kB (UME) 494*128kB (UME) 131*256kB (UM) 32*512kB (UME) 9*1024kB (UM) 4*2048kB (M) 294*4096kB (UM) = 1439852kB [ 134.363044][ T7234] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.380421][ T7266] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 134.428354][ T7234] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.442949][ T7266] Node 1 Normal: 244*4kB (UME) 51*8kB (UME) 37*16kB (UME) 197*32kB (UME) 78*64kB (UME) 35*128kB (UME) 17*256kB (UME) 10*512kB (UM) 4*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3904088kB [ 134.506584][ T7266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.528714][ T7234] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.569333][ T7266] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.626616][ T7266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.665926][ T7266] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.740356][ T7266] 41690 total pagecache pages [ 134.745122][ T7266] 0 pages in swap cache [ 134.749323][ T7266] Free swap = 124996kB [ 134.795614][ T7266] Total swap = 124996kB [ 134.818298][ T7266] 2097051 pages RAM [ 134.832895][ T7266] 0 pages HighMem/MovableOnly [ 134.848270][ T7266] 427496 pages reserved [ 134.867779][ T7266] 0 pages cma reserved [ 135.163079][ T7305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.365'. [ 135.204773][ T7305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.365'. [ 135.526037][ T7323] netlink: 'syz.3.371': attribute type 12 has an invalid length. [ 135.547790][ T7323] netlink: 248 bytes leftover after parsing attributes in process `syz.3.371'. [ 135.950863][ T7335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.376'. [ 136.010794][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'. [ 136.086904][ T7338] netlink: 'syz.1.377': attribute type 2 has an invalid length. [ 136.100567][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'. [ 136.367652][ T7351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.383'. [ 136.427880][ T7349] lo speed is unknown, defaulting to 1000 [ 136.438130][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 136.466360][ T7353] dummy0: entered promiscuous mode [ 136.476710][ T7353] macvtap1: entered promiscuous mode [ 136.486844][ T7353] macvtap1: entered allmulticast mode [ 136.497976][ T7353] dummy0: entered allmulticast mode [ 136.556835][ T7360] dummy0: left allmulticast mode [ 136.577476][ T7360] dummy0: left promiscuous mode [ 136.655800][ T7359] lo speed is unknown, defaulting to 1000 [ 136.797391][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.389'. [ 137.134637][ T7373] lo speed is unknown, defaulting to 1000 [ 137.433689][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.388'. [ 138.096626][ T7403] netlink: 'syz.1.396': attribute type 7 has an invalid length. [ 138.125095][ T7403] netlink: 'syz.1.396': attribute type 8 has an invalid length. [ 138.150863][ T7403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.396'. [ 138.203442][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 138.555765][ T7415] lo speed is unknown, defaulting to 1000 [ 138.561384][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 139.032802][ T7446] netlink: 'syz.1.409': attribute type 4 has an invalid length. [ 140.114557][ T7471] vlan2: entered promiscuous mode [ 140.127369][ T7471] hsr0: entered promiscuous mode [ 140.139151][ T7471] hsr0: left promiscuous mode [ 140.220979][ T7476] lo speed is unknown, defaulting to 1000 [ 140.453521][ T7488] lo speed is unknown, defaulting to 1000 [ 140.708606][ T7505] netlink: 'syz.2.423': attribute type 1 has an invalid length. [ 140.824116][ T7505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.945414][ T7505] bond3: (slave ip6erspan0): making interface the new active one [ 140.964509][ T7505] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 141.092285][ T7512] bond3: (slave veth3): Enslaving as an active interface with a down link [ 141.152207][ T7515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.170062][ T7515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.223461][ T7515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.244557][ T7515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.428680][ T7528] __nla_validate_parse: 6 callbacks suppressed [ 141.428704][ T7528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.425'. [ 141.641032][ T7491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.420'. [ 142.358439][ T7557] netlink: 'syz.1.431': attribute type 4 has an invalid length. [ 142.428616][ T7550] netlink: 'syz.1.431': attribute type 4 has an invalid length. [ 142.527131][ T7560] bridge_slave_0: left allmulticast mode [ 142.558461][ T7560] bridge_slave_0: left promiscuous mode [ 142.565602][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.589852][ T7560] bond0: (slave bond_slave_0): Releasing backup interface [ 142.614893][ T7560] bond0: (slave bond_slave_1): Releasing backup interface [ 142.649396][ T7560] team0: Port device team_slave_0 removed [ 142.679552][ T7560] team0: Port device team_slave_1 removed [ 142.703024][ T7560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.718038][ T7560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.777562][ T7560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.796592][ T7560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.845348][ T7572] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 142.859983][ T7560] bond0: (slave wlan1): Releasing backup interface [ 142.927141][ T7577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 142.937838][ T7577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.948514][ T7577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 142.958715][ T7577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.975007][ T7577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 142.985451][ T7577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.169170][ T7587] Cannot find set identified by id 0 to match [ 143.176009][ T7588] SET target dimension over the limit! [ 143.286289][ T7591] netlink: 40 bytes leftover after parsing attributes in process `syz.4.441'. [ 143.428032][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 143.443456][ T7594] dummy0: entered promiscuous mode [ 143.449386][ T7594] macvtap1: entered promiscuous mode [ 143.455124][ T7594] macvtap1: entered allmulticast mode [ 143.464228][ T7594] dummy0: entered allmulticast mode [ 143.561959][ T7598] netlink: 'syz.3.445': attribute type 3 has an invalid length. [ 143.658349][ T7602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.446'. [ 143.741259][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'. [ 143.754342][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.447'. [ 143.875099][ T7610] netlink: 'syz.3.450': attribute type 1 has an invalid length. [ 143.886384][ T7610] netlink: 'syz.3.450': attribute type 4 has an invalid length. [ 143.928477][ T7610] netlink: 188 bytes leftover after parsing attributes in process `syz.3.450'. [ 143.980444][ T7610] NCSI netlink: No device for ifindex 0 [ 144.272907][ T7620] lo speed is unknown, defaulting to 1000 [ 144.478718][ T7641] netlink: 16 bytes leftover after parsing attributes in process `syz.3.460'. [ 144.704634][ T7652] netlink: 'syz.4.464': attribute type 2 has an invalid length. [ 144.947492][ T7664] netlink: 256 bytes leftover after parsing attributes in process `syz.2.466'. [ 145.004285][ T7666] SET target dimension over the limit! [ 145.134486][ T7668] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 145.155968][ T7668] syzkaller1: Linktype set failed because interface is up [ 145.170892][ T8] syzkaller1: tun_net_xmit 90 [ 145.561406][ T7688] sit0: entered allmulticast mode [ 145.595669][ T7688] netlink: 'syz.4.476': attribute type 1 has an invalid length. [ 147.212625][ T7747] Unknown options in mask 1f4 [ 147.232556][ T7749] SET target dimension over the limit! [ 147.270701][ T7750] __nla_validate_parse: 2 callbacks suppressed [ 147.270723][ T7750] netlink: 256 bytes leftover after parsing attributes in process `syz.3.495'. [ 147.347641][ T7751] lo speed is unknown, defaulting to 1000 [ 147.635124][ T7763] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.817977][ T7763] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.865241][ T7766] lo speed is unknown, defaulting to 1000 [ 147.957103][ T7763] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.077688][ T7763] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.127684][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 148.137354][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 148.172603][ T7775] lo speed is unknown, defaulting to 1000 [ 148.426373][ T7763] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.698837][ T7796] FAULT_INJECTION: forcing a failure. [ 148.698837][ T7796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.723053][ T7796] CPU: 1 UID: 0 PID: 7796 Comm: syz.4.506 Not tainted 6.14.0-rc1-syzkaller-00348-g4079918ae720 #0 [ 148.723080][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 148.723091][ T7796] Call Trace: [ 148.723098][ T7796] [ 148.723106][ T7796] dump_stack_lvl+0x241/0x360 [ 148.723133][ T7796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.723152][ T7796] ? __pfx__printk+0x10/0x10 [ 148.723179][ T7796] ? rcu_is_watching+0x15/0xb0 [ 148.723197][ T7796] ? __pfx_lock_release+0x10/0x10 [ 148.723220][ T7796] ? __alloc_frozen_pages_noprof+0x350/0x710 [ 148.723254][ T7796] should_fail_ex+0x40a/0x550 [ 148.723278][ T7796] _copy_from_iter+0x1e9/0x1c20 [ 148.723311][ T7796] ? alloc_pages_mpol+0x4bd/0x660 [ 148.723333][ T7796] ? __pfx__copy_from_iter+0x10/0x10 [ 148.723359][ T7796] ? tun_get_user+0x850/0x45e0 [ 148.723390][ T7796] ? set_page_refcounted+0xa1/0x1e0 [ 148.723409][ T7796] ? alloc_pages_noprof+0x136/0x190 [ 148.723425][ T7796] ? page_copy_sane+0x46/0x260 [ 148.723454][ T7796] copy_page_from_iter+0x7a/0x100 [ 148.723483][ T7796] tun_get_user+0x1f1d/0x45e0 [ 148.723513][ T7796] ? tun_get_user+0x850/0x45e0 [ 148.723554][ T7796] ? __pfx_tun_get_user+0x10/0x10 [ 148.723603][ T7796] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 148.723630][ T7796] ? tun_get+0x1e/0x2f0 [ 148.723660][ T7796] ? __pfx_lock_release+0x10/0x10 [ 148.723706][ T7796] ? tun_get+0x1e/0x2f0 [ 148.723734][ T7796] ? tun_get+0x27d/0x2f0 [ 148.723765][ T7796] tun_chr_write_iter+0x10d/0x1f0 [ 148.723800][ T7796] vfs_write+0xacf/0xd10 [ 148.723840][ T7796] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 148.723873][ T7796] ? __pfx_vfs_write+0x10/0x10 [ 148.723897][ T7796] ? do_sys_openat2+0x17a/0x1d0 [ 148.723923][ T7796] ? __fget_files+0x2a/0x410 [ 148.723947][ T7796] ? __fget_files+0x2a/0x410 [ 148.723977][ T7796] ksys_write+0x18f/0x2b0 [ 148.724005][ T7796] ? __pfx_ksys_write+0x10/0x10 [ 148.724032][ T7796] ? do_syscall_64+0x100/0x230 [ 148.724063][ T7796] ? do_syscall_64+0xb6/0x230 [ 148.724095][ T7796] do_syscall_64+0xf3/0x230 [ 148.724124][ T7796] ? clear_bhb_loop+0x35/0x90 [ 148.724157][ T7796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.724184][ T7796] RIP: 0033:0x7f41c018b89f [ 148.724203][ T7796] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 148.724220][ T7796] RSP: 002b:00007f41c1057000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 148.724242][ T7796] RAX: ffffffffffffffda RBX: 00007f41c03a5fa0 RCX: 00007f41c018b89f [ 148.724255][ T7796] RDX: 0000000000000036 RSI: 0000400000000240 RDI: 00000000000000c8 [ 148.724267][ T7796] RBP: 00007f41c1057090 R08: 0000000000000000 R09: 0000000000000000 [ 148.724280][ T7796] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 148.724292][ T7796] R13: 0000000000000000 R14: 00007f41c03a5fa0 R15: 00007ffff6471798 [ 148.724322][ T7796] [ 149.107299][ T7763] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.125254][ T7763] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.207456][ T7763] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.217294][ T7838] netlink: 'syz.4.519': attribute type 1 has an invalid length. [ 150.244300][ T7838] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.263599][ T7838] bond1: (slave ip6gretap1): making interface the new active one [ 150.272488][ T7838] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.281325][ T7838] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.289201][ T7838] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 150.304611][ T60] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.330598][ T5915] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.470737][ T197] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.773362][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.527'. [ 150.788163][ T7863] netlink: 'syz.1.527': attribute type 1 has an invalid length. [ 150.886289][ T7865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.529'. [ 151.005580][ T7873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.532'. [ 151.072008][ T1213] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.371279][ T3433] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.407290][ T7897] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 19996 - 0 [ 151.418784][ T7897] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 19996 - 0 [ 151.434926][ T7897] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 19996 - 0 [ 151.446783][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.541'. [ 151.464938][ T7897] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 19996 - 0 [ 151.480448][ T7897] geneve2: entered allmulticast mode [ 151.550759][ T3526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.579916][ T3526] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.681561][ T7911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.544'. [ 151.806778][ T7917] netlink: 48 bytes leftover after parsing attributes in process `syz.0.546'. [ 152.097143][ T7931] lo speed is unknown, defaulting to 1000 [ 152.351841][ T8] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 152.397786][ T7940] ------------[ cut here ]------------ [ 152.401294][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 152.403775][ T7940] WARNING: CPU: 0 PID: 7940 at ./include/net/mac80211.h:7060 minstrel_ht_update_caps+0x44a/0x17e0 [ 152.423305][ T7940] Modules linked in: [ 152.427258][ T7940] CPU: 0 UID: 0 PID: 7940 Comm: syz.2.554 Not tainted 6.14.0-rc1-syzkaller-00348-g4079918ae720 #0 [ 152.438045][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 152.445036][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 152.448282][ T7940] RIP: 0010:minstrel_ht_update_caps+0x44a/0x17e0 [ 152.463602][ T7940] Code: da e8 0a 9e 98 f9 e9 24 ff ff ff e8 a0 fb 36 f6 eb 17 e8 99 fb 36 f6 eb 14 e8 92 fb 36 f6 49 c1 fd 38 eb 0c e8 87 fb 36 f6 90 <0f> 0b 90 45 31 ed 49 bf 00 00 00 00 00 fc ff df 48 8b 3c 24 4c 8b [ 152.483420][ T7940] RSP: 0018:ffffc9000b646ef8 EFLAGS: 00010287 [ 152.489555][ T7940] RAX: ffffffff8b886299 RBX: 000000000000000c RCX: 0000000000080000 [ 152.497734][ T7940] RDX: ffffc9000ca59000 RSI: 00000000000003c5 RDI: 00000000000003c6 [ 152.505884][ T7940] RBP: 0000000000000000 R08: ffffffff8b8861b5 R09: 0000000000000000 [ 152.514052][ T7940] R10: ffff88805a0d0008 R11: ffffed100b41a549 R12: 1ffff110023f361c [ 152.522188][ T7940] R13: 0b00000000000000 R14: ffff888011f9b0e0 R15: 0100000000000000 [ 152.530361][ T7940] FS: 00007f9ddf4836c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 152.539339][ T7940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.546179][ T7940] CR2: 0000400000001080 CR3: 000000005685a000 CR4: 00000000003526f0 [ 152.554326][ T7940] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.562489][ T7940] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.570646][ T7940] Call Trace: [ 152.573967][ T7940] [ 152.576938][ T7940] ? __warn+0x165/0x4d0 [ 152.581283][ T7940] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 152.587068][ T7940] ? report_bug+0x2b3/0x500 [ 152.591770][ T7940] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 152.597573][ T7940] ? handle_bug+0x60/0x90 [ 152.602107][ T7940] ? exc_invalid_op+0x1a/0x50 [ 152.606846][ T7940] ? asm_exc_invalid_op+0x1a/0x20 [ 152.612085][ T7940] ? minstrel_ht_update_caps+0x365/0x17e0 [ 152.617855][ T7940] ? minstrel_ht_update_caps+0x449/0x17e0 [ 152.623714][ T7940] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 152.629497][ T7940] ? minstrel_ht_update_caps+0x449/0x17e0 [ 152.635353][ T7940] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 152.640858][ T7940] ? rate_control_rate_init+0x347/0x680 [ 152.646463][ T7940] ? __pfx_minstrel_ht_rate_init+0x10/0x10 [ 152.652399][ T7940] rate_control_rate_init+0x3d8/0x680 [ 152.657833][ T7940] ? rate_control_rate_init+0x135/0x680 [ 152.663542][ T7940] rate_control_rate_init_all_links+0xfc/0x190 [ 152.669769][ T7940] sta_apply_auth_flags+0x1b6/0x410 [ 152.675111][ T7940] sta_apply_parameters+0xe23/0x1550 [ 152.680538][ T7940] ieee80211_add_station+0x3da/0x630 [ 152.685885][ T7940] rdev_add_station+0x11b/0x2b0 [ 152.690868][ T7940] nl80211_new_station+0x1d53/0x2550 [ 152.696231][ T7940] ? __pfx_nl80211_new_station+0x10/0x10 [ 152.702026][ T7940] ? netdev_run_todo+0xeac/0xf30 [ 152.707071][ T7940] genl_rcv_msg+0xb14/0xec0 [ 152.711727][ T7940] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.716843][ T7940] ? __pfx_lock_acquire+0x10/0x10 [ 152.722015][ T7940] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 152.727440][ T7940] ? __pfx_nl80211_new_station+0x10/0x10 [ 152.733226][ T7940] ? __pfx_nl80211_post_doit+0x10/0x10 [ 152.738748][ T7940] ? __pfx___might_resched+0x10/0x10 [ 152.744183][ T7940] netlink_rcv_skb+0x1e3/0x430 [ 152.748995][ T7940] ? __pfx_genl_rcv_msg+0x10/0x10 [ 152.754167][ T7940] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.759517][ T7940] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 152.765122][ T7940] genl_rcv+0x28/0x40 [ 152.769153][ T7940] netlink_unicast+0x7f6/0x990 [ 152.774084][ T7940] ? __pfx_netlink_unicast+0x10/0x10 [ 152.779429][ T7940] ? __virt_addr_valid+0x45f/0x530 [ 152.784693][ T7940] ? __phys_addr_symbol+0x2f/0x70 [ 152.789777][ T7940] ? __check_object_size+0x47a/0x730 [ 152.795198][ T7940] netlink_sendmsg+0x8e4/0xcb0 [ 152.800053][ T7940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.805493][ T7940] ? aa_sock_msg_perm+0x91/0x160 [ 152.810571][ T7940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.815900][ T7940] __sock_sendmsg+0x221/0x270 [ 152.820724][ T7940] ____sys_sendmsg+0x52a/0x7e0 [ 152.825546][ T7940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.830961][ T7940] ? __fget_files+0x2a/0x410 [ 152.835606][ T7940] ? __fget_files+0x2a/0x410 [ 152.840319][ T7940] __sys_sendmsg+0x269/0x350 [ 152.844960][ T7940] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.850232][ T7940] ? __pfx___schedule+0x10/0x10 [ 152.855147][ T7940] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.861603][ T7940] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.868015][ T7940] ? do_syscall_64+0xb6/0x230 [ 152.872827][ T7940] do_syscall_64+0xf3/0x230 [ 152.877384][ T7940] ? clear_bhb_loop+0x35/0x90 [ 152.882208][ T7940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.888156][ T7940] RIP: 0033:0x7f9dde58cde9 [ 152.892706][ T7940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.912474][ T7940] RSP: 002b:00007f9ddf483038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.921029][ T7940] RAX: ffffffffffffffda RBX: 00007f9dde7a5fa0 RCX: 00007f9dde58cde9 [ 152.929057][ T7940] RDX: 0000000000000000 RSI: 0000400000001080 RDI: 0000000000000009 [ 152.937208][ T7940] RBP: 00007f9dde60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 152.945320][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.953571][ T7940] R13: 0000000000000000 R14: 00007f9dde7a5fa0 R15: 00007fffc48afa88 [ 152.961700][ T7940] [ 152.964778][ T7940] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 152.972097][ T7940] CPU: 0 UID: 0 PID: 7940 Comm: syz.2.554 Not tainted 6.14.0-rc1-syzkaller-00348-g4079918ae720 #0 [ 152.982728][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 152.992845][ T7940] Call Trace: [ 152.996157][ T7940] [ 152.999128][ T7940] dump_stack_lvl+0x241/0x360 [ 153.003861][ T7940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.009101][ T7940] ? __pfx__printk+0x10/0x10 [ 153.013757][ T7940] ? vscnprintf+0x5d/0x90 [ 153.018131][ T7940] panic+0x349/0x880 [ 153.022093][ T7940] ? __warn+0x174/0x4d0 [ 153.026302][ T7940] ? __pfx_panic+0x10/0x10 [ 153.030768][ T7940] __warn+0x344/0x4d0 [ 153.034772][ T7940] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 153.040515][ T7940] report_bug+0x2b3/0x500 [ 153.044875][ T7940] ? minstrel_ht_update_caps+0x44a/0x17e0 [ 153.050616][ T7940] handle_bug+0x60/0x90 [ 153.054796][ T7940] exc_invalid_op+0x1a/0x50 [ 153.059331][ T7940] asm_exc_invalid_op+0x1a/0x20 [ 153.064200][ T7940] RIP: 0010:minstrel_ht_update_caps+0x44a/0x17e0 [ 153.070548][ T7940] Code: da e8 0a 9e 98 f9 e9 24 ff ff ff e8 a0 fb 36 f6 eb 17 e8 99 fb 36 f6 eb 14 e8 92 fb 36 f6 49 c1 fd 38 eb 0c e8 87 fb 36 f6 90 <0f> 0b 90 45 31 ed 49 bf 00 00 00 00 00 fc ff df 48 8b 3c 24 4c 8b [ 153.090261][ T7940] RSP: 0018:ffffc9000b646ef8 EFLAGS: 00010287 [ 153.096350][ T7940] RAX: ffffffff8b886299 RBX: 000000000000000c RCX: 0000000000080000 [ 153.104353][ T7940] RDX: ffffc9000ca59000 RSI: 00000000000003c5 RDI: 00000000000003c6 [ 153.112337][ T7940] RBP: 0000000000000000 R08: ffffffff8b8861b5 R09: 0000000000000000 [ 153.120411][ T7940] R10: ffff88805a0d0008 R11: ffffed100b41a549 R12: 1ffff110023f361c [ 153.128400][ T7940] R13: 0b00000000000000 R14: ffff888011f9b0e0 R15: 0100000000000000 [ 153.136398][ T7940] ? minstrel_ht_update_caps+0x365/0x17e0 [ 153.142138][ T7940] ? minstrel_ht_update_caps+0x449/0x17e0 [ 153.147902][ T7940] ? minstrel_ht_update_caps+0x449/0x17e0 [ 153.153644][ T7940] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 153.159058][ T7940] ? rate_control_rate_init+0x347/0x680 [ 153.164628][ T7940] ? __pfx_minstrel_ht_rate_init+0x10/0x10 [ 153.170456][ T7940] rate_control_rate_init+0x3d8/0x680 [ 153.175873][ T7940] ? rate_control_rate_init+0x135/0x680 [ 153.181444][ T7940] rate_control_rate_init_all_links+0xfc/0x190 [ 153.187646][ T7940] sta_apply_auth_flags+0x1b6/0x410 [ 153.192869][ T7940] sta_apply_parameters+0xe23/0x1550 [ 153.198188][ T7940] ieee80211_add_station+0x3da/0x630 [ 153.203503][ T7940] rdev_add_station+0x11b/0x2b0 [ 153.208377][ T7940] nl80211_new_station+0x1d53/0x2550 [ 153.213705][ T7940] ? __pfx_nl80211_new_station+0x10/0x10 [ 153.219364][ T7940] ? netdev_run_todo+0xeac/0xf30 [ 153.224354][ T7940] genl_rcv_msg+0xb14/0xec0 [ 153.228890][ T7940] ? __pfx_genl_rcv_msg+0x10/0x10 [ 153.233965][ T7940] ? __pfx_lock_acquire+0x10/0x10 [ 153.239036][ T7940] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 153.244431][ T7940] ? __pfx_nl80211_new_station+0x10/0x10 [ 153.250102][ T7940] ? __pfx_nl80211_post_doit+0x10/0x10 [ 153.255622][ T7940] ? __pfx___might_resched+0x10/0x10 [ 153.260946][ T7940] netlink_rcv_skb+0x1e3/0x430 [ 153.265736][ T7940] ? __pfx_genl_rcv_msg+0x10/0x10 [ 153.270788][ T7940] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.276101][ T7940] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 153.281594][ T7940] genl_rcv+0x28/0x40 [ 153.285680][ T7940] netlink_unicast+0x7f6/0x990 [ 153.290475][ T7940] ? __pfx_netlink_unicast+0x10/0x10 [ 153.295778][ T7940] ? __virt_addr_valid+0x45f/0x530 [ 153.300913][ T7940] ? __phys_addr_symbol+0x2f/0x70 [ 153.305957][ T7940] ? __check_object_size+0x47a/0x730 [ 153.311259][ T7940] netlink_sendmsg+0x8e4/0xcb0 [ 153.316155][ T7940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.321471][ T7940] ? aa_sock_msg_perm+0x91/0x160 [ 153.326444][ T7940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.331751][ T7940] __sock_sendmsg+0x221/0x270 [ 153.336467][ T7940] ____sys_sendmsg+0x52a/0x7e0 [ 153.341260][ T7940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.346575][ T7940] ? __fget_files+0x2a/0x410 [ 153.351184][ T7940] ? __fget_files+0x2a/0x410 [ 153.355795][ T7940] __sys_sendmsg+0x269/0x350 [ 153.360404][ T7940] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.365552][ T7940] ? __pfx___schedule+0x10/0x10 [ 153.370428][ T7940] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.376806][ T7940] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.383162][ T7940] ? do_syscall_64+0xb6/0x230 [ 153.387867][ T7940] do_syscall_64+0xf3/0x230 [ 153.392396][ T7940] ? clear_bhb_loop+0x35/0x90 [ 153.397096][ T7940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.403013][ T7940] RIP: 0033:0x7f9dde58cde9 [ 153.407441][ T7940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.427061][ T7940] RSP: 002b:00007f9ddf483038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.435500][ T7940] RAX: ffffffffffffffda RBX: 00007f9dde7a5fa0 RCX: 00007f9dde58cde9 [ 153.443502][ T7940] RDX: 0000000000000000 RSI: 0000400000001080 RDI: 0000000000000009 [ 153.451494][ T7940] RBP: 00007f9dde60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.459483][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.467475][ T7940] R13: 0000000000000000 R14: 00007f9dde7a5fa0 R15: 00007fffc48afa88 [ 153.475486][ T7940] [ 153.478830][ T7940] Kernel Offset: disabled [ 153.483234][ T7940] Rebooting in 86400 seconds..