last executing test programs: 2.038488483s ago: executing program 2 (id=1947): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@empty, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x6}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) close(r1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000002c0)=0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x3ff, @private2, 0x80000000}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@deltclass={0x74, 0x29, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {0x3, 0xd}, {0x5, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x1f2e}]}}, @TCA_RATE={0x6, 0x5, {0x59, 0xa4}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x98, 0x10}}, @tclass_kind_options=@c_mq={0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x400c0c0) 1.687992445s ago: executing program 2 (id=1953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0xfe}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) (async) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c068c0a7d2eaebc5cea1f81510ff6091475aeec600831", 0x1b}, {0x0}], 0x2}, 0x9fc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl(r2, 0x8b2b, &(0x7f0000000040)) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r3, @ANYBLOB="040046000a003400020202020202000008002600a01400"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.686415151s ago: executing program 1 (id=1954): r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x9, @loopback}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000000)=0xe13, 0x5a) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1.686079949s ago: executing program 1 (id=1955): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) (async) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="16a643794ed4e30c36435d080c2113a818502e98edc1ddbf4aad3de67f7ded5b53ce68885440d8cd617a985d72ef3502e0e0f73e42d46be90e4996ad8b44a6165213d6dc5c9cfaf66cb7c861ba2275b1b429f1aef0cf1ccfc35589061058", 0x5e) (async) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3165ae89103abdf4}, 0x24044004) recvfrom$rose(r3, &(0x7f0000000140)=""/50, 0x32, 0x1, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) sendmsg$FOU_CMD_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048080}, 0x40000000) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000440)={0x0, 0x1, 0x3}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001580)={r6, "f2cd632d5ca9be3f3cb564bd06d3762b"}) (async) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) (async) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}}}, 0x10, 0x0}, 0x14) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r9, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r10, &(0x7f00000000c0), 0x10) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001c00028004000100140003800c"], 0x48}}, 0x0) 1.660588787s ago: executing program 3 (id=1957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x7, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x78b, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x81, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0xd, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc5, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0x8, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x8, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x2}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x8, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0x10000, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0x2, 0x4022, 0x4}, {0x4, 0x7, 0x7fffffff, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x1ff, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x0, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x3}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae47, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x3de, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x401, 0x4, 0xffffffff, 0x80}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x5}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a}, {0x80000001, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1000, 0x8, 0x6, 0x1}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0x0, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x2, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x8, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x1, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x3, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x6}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x200, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x4, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x0, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x0, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5, 0x3}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x8, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x8, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x8, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x7, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x5, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x9, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5, 0x2}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.598702823s ago: executing program 1 (id=1958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$inet(0x2b, 0x801, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000), 0x4) listen(r2, 0x0) syz_emit_ethernet(0x1a6, &(0x7f00000004c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x1e, 0x4, 0x0, 0x5, 0x198, 0x65, 0x0, 0x2, 0x6, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0x1b, 0x69, [@loopback, @private=0xa010101, @local, @remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0x9c, 0x1, 0x7, [{@remote, 0xfffffff9}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x9}, {@rand_addr=0x64010100, 0x8}, {@private=0xa010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x4}, {@multicast1, 0xd}, {@broadcast, 0xc3}]}]}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x3, 0x0, 0x3, {[@generic={0xfe, 0x9, "f3ba5d113ce91e"}, @timestamp={0x8, 0xa, 0x9, 0xd}, @exp_fastopen={0xfe, 0x10, 0xf989, "03ba6c1b3aa2d6654d6ea883"}, @exp_fastopen={0xfe, 0x7, 0xf989, "80dc2f"}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0xa, "c91b09891c0bb680"}, @mptcp=@add_addr={0x1e, 0xf, 0x0, 0xf, 0x9, @rand_addr=0x64010101, 0x8, "10741f1a19"}]}}, {"53b9cb83a53f31ffd128edf66c897b0e5d48afe1484537d0393dff259e7f8fa043caf8f09dc8da4ade8de2a71ee718ca4e60aef90fb6a0ef458ee006afc4e4a6f8c803d7406dce233a6c5a44167f6f27e45e78b809abf73e0376e515657764c335d35989b24956881ebbb7810242825333df5f74edf28456ee370eff502063df246e16c555c82b70766be768ce6e2b66b853dd2a43de6431ce4104e1e3b61114a6dbee203153c2307770add7f47fd6d02440e92243e8cb0e88796ec9617ab14e"}}}}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000000, 0x0, 0xff, 0x1, 0xfffc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x20) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r5) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg(r7, &(0x7f0000003040)={&(0x7f0000001a00)=@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, 0x80, 0x0}, 0x0) bind$tipc(r6, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x3}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x1, 0x2, 0x5, 0x100, @void}, "2a97db22"}}}}}}, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES8=r3], 0x30}}, 0xc000) socket(0x18, 0x80000, 0x3) bind$tipc(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310d26bd7000ffdbdf252500000008000300", @ANYRES32=r9, @ANYBLOB="0a00060015ae2137238e000014006e80050002000300000008000700010000000a0034000101010101010000080035003b6d2671080026"], 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) 1.595999091s ago: executing program 0 (id=1959): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002200f2ff090001007770616e3100"], 0x20}}, 0x0) 1.567163033s ago: executing program 3 (id=1961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000004) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @multicast2}, &(0x7f0000000140)=0xc) (async) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000180)="cf436228c4cdbcf88d5821eadb98ff43395e0dfc68fc60b0e282e8a906aecdcefd5788a8520dd8f226369c71730f93f3a3a7eaf6d792d7125304df7a43346d9847bc376bb716f416fc223d4189ad1e72749a480fb171d038cd79535f75586d770f05ca93576510fbf4e90a0bab91054743b6fb70d27e35f806fc717b9c5827b6d2b13a9007a62b54ba3a81cb3428d4e47a3832b3d0241acbcb189f02d13354a56a7ab71b9399e4684efabd2e36d8be4a516f78846aa2ff6e2de203e768eb9d4e97f2495b253a54a68ce14905d7086c6db4f5dba4c1ed643446858c2d16d77aa028c0d58d0ab9d70ab21b3c5facf79116688d83a21eb3b02b3e4992c3390d6f55") getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000280)=""/207, 0xcf) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="a10345af89e21edd427ea0282c1688411419c01a954521735bce1cc4009e50b494a84818961f4f30572d30542e3edeef9124969b13629d963444ea4d7fa60950cfbb53d98e08f1b7a8f6b1de0282c3e4c7c19bd0e1ff8840cfa66ce2c1f5baccc7203435e682bd7d0d1622851fecf62d0ac1b1901d", 0x75, 0x20000800, &(0x7f0000000400)={0xa, 0x4e21, 0x33, @loopback, 0x9}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x4c80, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000480)=0x80000001) (async) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f00000004c0)={r1}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000500)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async, rerun: 32) write$tun(r2, &(0x7f0000000540)={@val={0x0, 0x88f8}, @val={0x2, 0x3, 0x1, 0x7, 0x0, 0x100}, @ipv4=@udp={{0x14, 0x4, 0x1, 0x0, 0xbf, 0x67, 0x0, 0x4b, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xc}, {[@timestamp={0x44, 0x18, 0xb1, 0x0, 0x4, [0xd4, 0x80000000, 0x4, 0x1, 0x3]}, @lsrr={0x83, 0xf, 0x90, [@loopback, @remote, @loopback]}, @timestamp={0x44, 0x14, 0x40, 0x0, 0x6, [0x1, 0xffff, 0xfffffffb, 0x6]}]}}, {0x4e24, 0x4e22, 0x6f, 0x0, @gue={{0x2, 0x0, 0x0, 0x10, 0x0, @val=0x80}, "8cc9d907b50e6e65d5e44aae200cc04c403d4b4710fa54391a51e317c809ec8b32f4fd41e549d24a11beff83402845e0a9ed4391651d8c7bc5d4922d9d82c476871a5e43456aca414adc4505fde641e26b99f27dd7ed5cb17317c691793c35"}}}}, 0xcd) (async, rerun: 32) socket$kcm(0x29, 0x2, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000640)=0xfff, &(0x7f0000000680)=0x4) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000740)={@in6={{0xa, 0x4e20, 0x7ff, @remote, 0x7}}, 0x0, 0x0, 0x2f, 0x0, "c9e73269b099878475a9f7fb5c9befbe3c2ece00a98582a2edbc9c8d37401d22df24974f44a019027f5cfa04e67f3b685cd50fa06e8e469a169688729e19023b6732a70c490f99fbf870356ed5df460e"}, 0xd8) (async) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) read$alg(r5, &(0x7f0000000840)=""/255, 0xff) ioctl$FITHAW(r1, 0xc0045878) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000940)=""/116, &(0x7f00000009c0)=0x74) (async, rerun: 32) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000a00)="3a65034e5396accdd321e5f0ff8b56e1edae7f91dcc9f19789cbfbb8054dae2ca750e699acf54ced913279321e2ff953096e462bf68ecd", 0x37) (async, rerun: 32) pipe(&(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) getsockopt$inet6_int(r7, 0x29, 0x12, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_int(r6, 0x0, 0x17, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) 1.342255384s ago: executing program 4 (id=1962): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040880}, 0x8001) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4100}, 0x8000) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r4, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4004000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x8, @media='udp\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40015}, 0x800) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r5) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0xb0, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x54, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7d}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8001}, 0x200c004) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000c80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x104, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0xd0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x104}, 0x1, 0x0, 0x0, 0x4008810}, 0x8012) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d40)={0x184, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c1384a67eb686e8a5b91cb07f6cf5f66a4316e21a533bf9d32e8d2c32f862691"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x130, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6408c45f44ce484bcaa71b804601e07d"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "851a6aefded23858702dbf87c6b9cda64efeca8c489cddb4b6582fbda52ee225"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3856b29a2ac363361e22b7764fdaaa02fdc2dbe8bc802d2c42d4ed006065cbac"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0253349fbfc4e2455952ebb2880d2f6c"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x184}, 0x1, 0x0, 0x0, 0x40814}, 0x4000040) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000fc0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, r6, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000000) (async, rerun: 32) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000010c0)={0x7, 0xd, 0x200, 0x4d3dbe57, 0x3, 0x8000, 0x6, 0x2, 0x0}, &(0x7f0000001100)=0x20) (rerun: 32) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001140)={r11, 0x3}, &(0x7f0000001180)=0x8) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000001200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x60, r1, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc000}, 0x4000044) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r13, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x5c, 0x5, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 1.34058676s ago: executing program 3 (id=1963): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x4e4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x12}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "9399ad934aebfef7dcd4276ec51ae2d396ad491e1060d80f8ee3fb"}}, @TIPC_NLA_NODE_ID={0xab, 0x3, "999cb5d1b9f9caee15fd1e778f63f10aad6f030257e871842c05725d5ffe6fb213b660d4e34c8d9e20ed46f3d76c0533aad66c005d6f452b31c123270dcec80a1d13b927341381a49103a8f3796b30b5bbecb40ae7b1043cb0a6a7df89aefdb19522127d0aaaa682f131c35d2dc14b541cbf899a515741f893a07bc6af81746a7293ffda3a9f0ca83c8edd857c6e5c128324e9aee3f64761a3528e5f5855361b5942f5c4a9c4bd"}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "7ca7e26e7c32d8c176b1aaee5b91082e564dfb277fe32d9c354bebca22dc166b"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x77, 0x3, "216e52cf7a2f15227afe0c18bb27b62baf2cbf8db2c588ac1a99e953aa071d1fff5808f8d00d220126462fb6432dd08a39ffa5c8b4d1605485955aab354b9b2f26e3d2daca4fee0d55cf3226a8b93f7b9c012b579dfbf41a6284cf693db1b3b2713e97331e637d823a3f2dd66e36c18ff65fee"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "a769dd8c915fa8c1508c6108bf36aac51b045f7e"}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdbb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9e32}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5c61}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1e88}]}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x16}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @remote, 0xcc}}}}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff38fe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffffffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3d87}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbcdc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x38}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_1\x00'}}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "f06956f971fec328fe88df53c83cbe08838b5b6201e2845148fd7b4c6c"}}]}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000005c0)=0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/net\x00') r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@cgroup=r2, 0xf, 0x1, 0x2, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9160, 0x6}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4004) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, r5, 0x20a, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x4045) openat$cgroup_type(r2, &(0x7f0000000a80), 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000ac0)={0x0, r0}, 0x8) r6 = openat$cgroup_int(r3, &(0x7f0000000b00)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000b40)=0x3, 0x12) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000bc0), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x100, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4) syz_open_procfs$namespace(r1, &(0x7f0000000cc0)='ns/pid\x00') r8 = openat$cgroup(r2, &(0x7f0000000d00)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r8, 0x80189439, &(0x7f0000000d40)) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x5, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000dc0)='syzkaller\x00', 0x8, 0x71, &(0x7f0000000e00)=""/113, 0x41100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000ec0)={0x4, 0x2, 0x7, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000f00)=[{0x3, 0x1, 0x8, 0xa}, {0x1, 0x4, 0x6, 0xe}, {0x1, 0x5, 0x7, 0x3}, {0x4, 0x1, 0x6, 0x5}], 0x10, 0xc089, @void, @value}, 0x94) writev(r9, &(0x7f0000002300)=[{&(0x7f0000001000)="4129b484c57bd021685ce13f4c9f1b7fb3c367f47f269bb6dbd46f79aa8c245fa8424bad46d814a70a6c76f8a43be487", 0x30}, {&(0x7f0000001040)="d8eb40e149f10e8b51c305f20dbb943d2232f85d340fdca7c2ebd3f1fdfd68e9bf7e6c986879d2852066fcc9fa7499159424a54478c918f07af4702a2649488c31d17e50b35aabfe9d7f8c238cf0b447af4712c8769921529c965cc5d9608b91ea30134b93fbb42db96c7f744bd32b266c00e3db938ad25ca6b1162795229b25e1807f6f6c5c9f186c5148fbb855069cbfb89c5754f83b74451b090d422a2a5cf2ff01142bd5f232f105447f28ef0c03eedb4b34d7c3690e32a51ae38dcfc23079c2141e61c3431ccd6142c8702c25f31de8b666fd1f93f14a459be9b9e57b91452d0a61cdfbc92df804080e0d9dbe78b937cfefa08042e976c4c5b6d84c910b2d72b18152388d83ce8e8582e572479bc1965b292a37edc6c8d8d0e09b183390e5517a75581dc560fa6a2c724746b42a5f774b162386b5763a12023c67617e85345d47e84a67c0f4ef00f0b869d349ba05a52b5f16729325d19fbe4018fce49ded2c1ee3b4805bf130094f777f36d64b709417d677e0ad24f16510b299c139d067eb7a1e6d7eefc949bb28e7defda94f8074f82bfdf9fac374edb64241a6f406e374aacecc6e7653ba089d5456d1fa0c907172763df69e6773be36830f6ccfd990f68674ff4490409f17ab382c643d62b4ae0e7bd5198e706d356e484da9764bea50f2b1318ce2605d9966b11cf52554b2fdb0a79ba498fb7268c78643053ac38b40729450948821359011ce76b67e35c6105cf1697599e6bf2eb1fe7164fc0993c4a1b28bce8e817f74c20121c5ccb75561219bdeb4fe04ac9986ab250bada9a9851301f1f7f62f21c73662e5a9ad2bcb0d72eef3b7ddb9992be578200db022a64687745024fee4e9d691ccfcac3a06cfe58952f291271ddd04fa4d74e81f95c9dd2c804f4a65ce8bed2e0b2733d6cdf40c30f2e7856f69bdbae64e30278adb20fec4ab85a9f7984300104232f6eda34ef63c2168edc112ea16cd77b4e262e43da4bd0571f12457d3f33282563b923bda73d119fed2a036f1b63e405ac88a1fe3331e7bd77531fbc1b531269e5346350386a847a96c01277b67a7a9dc46521854b311db7c8ed78a01b6e8ef764f08289fd7754a57baa2bbc74f749f9e39e7f8f8da2fbeb5ac91664701f7222b975819f1492b9fd21fbfd9c71a5e7ce79d5611e560c2ee96a8e2f609b5a89349e48367e17974b38234e16cf3e67d0eae77b5db9d7d8ec427803aac471eadcbeb68a972b8026fb2ac3debc6bdbab62de42f3c1f57495be16fb8f122870976419429127e0d15f3500705c0a0e08e2a966ca5b90b2b3cf57b59a87a5f6aae724f217ae18f814b5dda1d19cec9370141283f1694dbcf6cdaf1a2c3def11b398d4dad8a2dd279547a34e51f1615bce4a6cb438f0cfa2654923e97ee9beaf2199e1c3d04170a94db5f1b74d239a6e878f773cd925a2aa9ae5474b620c0bc3019bbfd7ad653e389c6294ed21af54b483739f85b4529991f254c748ee8fa42d27287a004dc9b9ba7075604d7441dff9cb64a45cba1e24269e4fb5d2cb57f1d732dcc7a710cf2090f95075e932fa4545fd03bec9983a80ea7530ec5470b5516fd05b5f3c52dac7bebfa6ef839c166f9daf91d1f30e7713d365ab4fa813bbf6b3b7fbbd8f2b1e7928179e53a966ebd9ebc0db59c4c41d2bc042017e547fd34e26717f010401ad085189d2be8323761138a4f27935dd29d88d508c0aeff1bfeb79fc9cd3dd5791d64c059bfcd82cae0bbf516870235cd20f7afa6d4ca7e4aeea103ebefcdff1a5d010657467ac4075759a4d867cf43c7df38095886e4c46c6a7ca6f8bb2a69ba35a820e6d0bd617733aad3fe906fe0dcbb908746cb9b3ff772c93e7ab99034ee80030df03f4b472f1fecf810b2e2688efb7ecec5822d7a093fdfb4cedde89811d6e5c9112ba5c92dddfb841ad6a8c1c42446bd207183ec6bb9a50b48bfb13ca1ac47e61d9d667feac61c6571a4532cac25a4561ab824a5cb27aefbd21c48b68801638762f9871a401486859afba27649c2ccf343687be27865c65364a1fe80cfa8b33679d49919296a28c8e5269f87f5f56e02a66153696de3a932381a12fb0744558a44bb6decebe2bb7156f7b26d129975ae1c3b2f8574ec68c56c581b2c484c2d0ca3f6dbd03feace2f2e815b72b825883efcd2a0223e66c1071728894a255760836633a4fe9335a27ee721fa41fe950515fbd7728040694fe4614b3efa0eae34e5017bb0bb550c2eade446fc1f40e8a7579f2fd739e3191106972df0e680998f592ee1f700b3af2857ac41aa7af23b80941e86e2c58aea0d144017507e14a7ae0ce76f449ee1b601dc45411bf7653bcb6d32922c4e7a2d988fed12a92fc747cdabac1f9068c2cac4644517e7ea99cb6b4782bf253c995e87b452146daf6853d262faa2fbab86cdc4968f513b8229de5007453f1ca46f3f682e7ed8ebcc3371e169719f9b14d067bea34f574afa6d457baf3f3f3ca8ab561e3a2d2eea6354a41aee9356d19d4212a8767a08a55cfe04504e23883ed9052252e51f3ec276433d3e2569e504d88451f0112eaa865ce7ad2c69441533c0fc4ad56b4c24f6745e62565fd4c85a3c61fc5f656b64800b1a055edbbaccfafba9f6101a9cb145167d42effe9e19f3de913cbeea6e6671b8c5b8a2e8e013a5636a30562113d7ab64b09b5c6664dbe75af835bd0ba5b0f82d3aa52ef5d882ae3b11aaf47c95d57509776848bcac7dd95b6d6625a941cf7b372b4616922eda9a9aa8a17f92412eb0f9c17e957d732889531994e3a18bfbd631d3ae10f2d47e8e67652cd90d56418ddd2f71c46da4abbf066b8ba5dad3d10597f2d8c8fc229544663c7e6291bf970ed3fcd0ccdda9c6597dbd32dcb836d0a4342621985e560f394a0209650d1878897505b23bca22bda267442eeb370bbec5b76bb13fe587bd4f72bb2d83292b41a68ea13c377125b1011fa3b7bc2c63fe91080dd410739a034dce28c9c1cbbd8690c857481201d1969d3ae678263e9cf824fd3c0580ecd03f3c31445244d512f8b0960f263b091c851138990dae3d420e18aafab6b0573ed65b27c348191f56e3aa06dc6e8b3070883e04484058d9c292f5b6f21ec0e7eb83b7bd747f6cbdd631b5fbd1bba0447325db4e4ad0f92cd4eba9a3354112b30355ed133d27a823b9dc7aead982bbf761181d701d66081f4e7238f218fbdef7ffd0f93933031a92ec7c01cddfbf84751bb3fe063100e3a8a8a682a79f67184f9dce03f3db45e62fcda37f0d87f883920052babf18c7a0f55e53fbb25356b981093e6211a7ac5c6910f68bf9294c1bb18422d11fd97ad0d381763b13d31cec76b16159ac76c1f2e95a4d62e6ad27c2a3c96ca190e0d1403bd362e38ecda896368a106fa25c385d467d5e6e673b7a2bead1d517c08335647380995498443b907f1e4f450d836f79fa623882770c511585209812bd2322ad8483d6efc50c3a4945fd6b84e7fb585af48b07a973f8e21d5f01de6148fa3369db2348ea7bb373a380581989467ea0f10c048050593e92a8768eebafe648fb324ed4b109b4900877937a10542e1b12e39ef5c37baf5b60b78a75d92c679f59ac5c6167b42c13f552b250b64da6a8b19324d659a0432635e58b7726211d87bee6722aa3d553bb97eb57118fb91febf2d4f636eb312a2318c45e2cc945cd9d4c87303a158e7ed1f1493d46c8890d9d3c0c906b904a38e49ffa963d0bde17de527a28b9ff818907458519b302b7a49a46df58b45cd7e9400973b8f32c77b4d0477069044216da197b5fb2a72047d3ee075e8fb52627f5d57cadb5311f6ee9c53f9bdcf9f4418f4b1dc4b0896e663b87e5ee6b0b139f470d1e3c1bdb9aa56a5f2197f6edaf05e57978ceed9e3d0fa69b3f087cd3d4dff9a2ef7cc006695223532cde331b1c2b4b10efeae74dea13732e621a89317fb8e5221b38e71cb8159d6e73eca530eb7a6ece1c48a20e2c96a1e60c17838e176385e7b33ac5d72b049776a1de68107ffcd58539e8e9e1653a5f4430e2a04fa48eafd5768e4d702fffd786f41123696ede4925020fc42f260279d1b7df73ac3be36d3e556764f144cfba0e80e4b436ed37ea9ffcee976441feba5cc58147cc390c08828ad8856c6dc2cf6b3a3b3eacb00f2b40fa8a7cf7563e1e602db08060903b3f27342ce4d5783f204ebfdae006f03afa12c1f35e168bcce4aab829f6295cdaeeb70ec18e1d2bfe470dc721c2ceeea26cefa354c62b4b3c02a3bd6714555b164160a462a0c3b5fe93dbffb28815276c2334326f9b0f4c77d692cc27406c9d93379d26750a8060a73796dce79d602144c4206c613652a0a010f6c96877add95e7250ec7b4981707491d450e73bcb789316f98b3492df6071823867aee2e961d93b672eb076d4914b835a777eb65258581eb74c0a095ec55d1be9699206e7e51e3aaadd8d849d5b8da2d37e1441db6068f6639007b71b3eea786ca2a5bb0dd7305e1f858865be865f85784338aceaa28cc8a06ee2ea14268daec24031722addda33440458b6463d24db6be85deb96ee0f0d31707272ac5e86dd5c5a4f457051291f990c583169f5a2ab3724e1e2f6abe6e2333c277491d4cf998eed20d51fa6d8e375625c48f3a3ff0d4a14276c576b3630bcc05709c10a89ed9a3a8f67af3c1d429fe2e8a0bb7e353d152ea82135ad2ddf5461d6fe78e69b2e1c8448f2b1ff6852e35c883cd0f80b00328dc05527b3bfd7ea1fda1a8791160fd0dcccba0faa713506754c3afc3183c4af169ac9fe14ade92a5115fd60e7047ae57500b0350b3e7b3af03426c27362cc8ed60fc3f26153ed56f27f9bb134fc74afea01a2583ee650aa9d56dee21fd6601a4a0ab63a0aacb697086e69cbf8e6a4b55be487507851613f2fbb521914fd13a3d3649ae10827003654c887dd48b7f5924a5b0a27795c4d6298d563b77c18955d410f8632a73cc81b88a4bc7267afff70b96cad1b03b4686c0cc294e154a43bd3ca2bcd852ed118ddffdf549f31c1603afa9587fd93aa5d64e8a42c82002ad7ac741a9558ea3730049240ff2b8763dff53f25d27e109be4ed15f0f329772ea9f63d4616e1536b58f63723b3880cfaafbe99a215b03ef4207c4dbf9dd08524f20e8365e2e27ccea66875115c8674071690d7570667924c4a0f9f5c955d081e9a57cd1360d17acf5fe89b2686c663845895f64dbc9d50d3a4d9d23c000c25c6d0c49625cd1bec55dfdcdf30353f54a10fc8c82cf417134514e4487f42fa167b411b331137e0a99708ae49381a18762fe77d35da4b7f0043d2ddc3d966e26aea8a73a78c376a8f70bfdd6a4ff0a2a1f4843703fc1c5d63065c4ea4ee6243d2ec2842a9655750a8cb54d64ff6d7ba6e02667c043c56aa6062161d35b62591c30c2d4898e62b760ca0dbcdd75b518a09de8731fcba8ae7810ad03c5cc4a9f4ce329b04d6221c7d64f2cf21148a81c8f810bc97161366bcb937e1ba52801656871a44c3e506fa80e76eb0e0d35780a75973be2d9dea151e00be6e885016ccdabcb11d4539f88cb49571a0ace69ed47cf9363a1f9fbfc46039ccb2bc70d7f67ed263b6e6554c756f5c27bec3b3ecc391223496ad905135788d215b55281a2d67c218512562922b08c5fd6f66f945e029ff9161b61ce347421f24d1f9e26ffa8d7a43bebd8cf9ccacd3ed99c45d5f8a9bdede9a75754ae57651df1b5d3349320f78020ecf42b936260a1a9d64bc0db95b2976a2832630b6d0a10a0b8392a20fecb882a53ae09f1e5fd261986ae6bc", 0x1000}, {&(0x7f0000002040)="b89f78a4a20da5d2590374a23a12cea39f3cc84083ed32234a2659e0183610a4cda35571843e1f31cd5fdce4a96bd56c34e387c2e399958ed214e19aa61f4818e8553f586d038d2b", 0x48}, {&(0x7f00000020c0)="8400da81d2312033473343005630c200c95041543e9ca75d6a0b769c4f7a5eb69cd9c84baba32c7866b5a118cc91c2eadf24600379812250886bfcb3647ca30b8351bd49b6154319137234b246348ad16684a0a16fd9a9287d69fabe540f0d0fc28fa3e8489ae82ec97db5c1117e0d6c1f69365d12d2d9b50b48961d7f77c76b015e6baf61afa3309a4265d1cc30bcfa8e698886b188cad7fb", 0x99}, {&(0x7f0000002180)="6c1ffee6e3ff08d0d66a92d5945d105f67aab854bbacba861ca0ffdb152b1e1ea2a43f5c434c9efe59d22c4604dc0d9d1592376dc393dcb4c228d73fc45de051388098ca47435c09fdcc", 0x4a}, {&(0x7f0000002200)="c8d4e6eb85a3aed2bc64dad8d3b0e8c3198ef9f7a4ef4997c038e3544630ed2684e3102e0712a9f4d68ae46059621cedd21bc50a276d1fc572451086daa17d7f8689db8f1f9b73401ea1c05c673a438bcc725a4fad4c156bf67be71dbe44075782ebe421155d776304f817bc7442e00429913571b4bcdbe7335f5d538d1ee2200a1e8f30f5bcf3ae970b9d1f82b988ee8edeef8ec43a7e4415e709c1c9b92f0180b8f2443e3b7b58c5f08ee4f85d3482d0baf3f32886e414bbd1", 0xba}, {&(0x7f00000022c0)="ae2d6a", 0x3}], 0x7) r10 = syz_genetlink_get_family_id$gtp(&(0x7f00000023c0), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x24, r10, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x80840}, 0x1) syz_open_procfs$namespace(0x0, &(0x7f00000024c0)='ns/mnt\x00') r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000002500)={0x0, 0x6, 0x0, 0x6, 0x200}, &(0x7f0000002540)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000002580)={r12, 0x8}, 0x8) openat$cgroup_ro(r2, &(0x7f00000025c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) pipe(&(0x7f0000002600)={0xffffffffffffffff}) sendmsg$WG_CMD_SET_DEVICE(r13, &(0x7f0000002740)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)={0x44, r7, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.340365916s ago: executing program 0 (id=1964): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002780)=[{{&(0x7f0000000fc0)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x863c}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000001000)="c0fc56c561296a", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000014c0)="591a", 0x2}], 0x1}}], 0x2, 0x20040060) socket$nl_generic(0x10, 0x3, 0x10) 1.272462319s ago: executing program 1 (id=1965): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000006c0), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x12, r2, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4, 0x18}}]}, 0x34}, 0x1, 0x7a00}, 0x0) (async) sendmmsg$sock(r0, &(0x7f00000002c0)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x7, 0x12) (async) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) (async) recvmsg$unix(r1, &(0x7f00000006c0)={&(0x7f0000000240), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/190, 0xbe}, {&(0x7f0000000400)=""/240, 0xf0}, {&(0x7f0000000500)=""/2, 0x2}, {&(0x7f0000000540)=""/124, 0x7c}], 0x4, &(0x7f0000000800)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x2000) (async) recvmsg$can_raw(r7, &(0x7f0000000200)={&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/62, 0x3e}, {&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f0000000100)=""/107, 0x6b}], 0x3, &(0x7f00000001c0)=""/14, 0xe}, 0x40000020) 1.262736457s ago: executing program 3 (id=1966): r0 = accept$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @null}, [@rose, @rose, @default, @bcast, @remote, @netrom, @default, @bcast]}, &(0x7f0000000140)=0x48) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004f"], 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01040000f5ffffffffff2000000009001f00706879310000000005002000050000000c0005"], 0x34}}, 0x840) 1.18302187s ago: executing program 0 (id=1967): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r3, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x2) accept4(r3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004d00)=ANY=[@ANYBLOB="500000001000110029ad7000fe5b000000000000", @ANYRES32=r2, @ANYBLOB="60c00000282d000030001280110001006272696467655f736c617665000000001800058005001d0000000000040018000500070004000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000005}, 0x40) 1.182681897s ago: executing program 4 (id=1968): syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)="d85b", 0x2}], 0x1}, 0x4040001) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @bcast, @netrom={'nr', 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r4, 0x3}, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x7d, &(0x7f0000000080)={r7}, 0x8) (async) r8 = socket$netlink(0x10, 0x3, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000122f01"], 0x18}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={r7, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, &(0x7f0000000180)=0x10) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c561284606080ffe0064ebc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0xab}], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000009c0)) (async) sendmsg$inet6(r11, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000290000772c5a010000000000000000002800000000000000290000000500000000020201000000000000000000000000000000000000000018"], 0x58}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtclass={0x34, 0x28, 0x4, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xfff1, 0x2}, {0x7, 0xe}, {0x6, 0xffe0}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000008c0)={'vcan0\x00'}) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000740)}, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 1.117976541s ago: executing program 3 (id=1969): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x9c, r0, 0x4}, 0x38) syz_emit_ethernet(0xb9, &(0x7f0000000000)={@local, @remote, @void, {@llc={0x4, {@llc={0x0, 0x1, "e6", "d666ae805fc48fe7a253eadf79778428860d9492318b5d890b05d3ee590556c3e62ccbaac590504ae2df7be37a65305ee750337debd5023905325e6c0cd0c17ab1ece13676cf025f8ca46fdc85cde3047de3b4639f2c456610d3409ec11f63eb56675b028e2338dc228de4884cbe2a4a09529be980e8a8f5b20d2ac2072d76f181787d5696c88627a87092382fd0b6f797425d99c637cf5a96f869b650aab78250a66d271bede5b3"}}}}}, 0x0) 1.00496525s ago: executing program 3 (id=1970): pipe(&(0x7f0000000e00)) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x5, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x7, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) recvmsg(r2, &(0x7f0000000200)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/97, 0x61}, {&(0x7f00000009c0)=""/222, 0xde}, {&(0x7f0000000ac0)=""/233, 0xe9}, {&(0x7f0000000bc0)=""/86, 0x56}, {&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f0000000c40)=""/188, 0xbc}], 0x6, &(0x7f0000000d80)=""/86, 0x56}, 0x40000000) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="75d9292937a28195efc28d00", @ANYRES16=r8, @ANYBLOB="010028bd7000fcdbdf25020000000800090002000000"], 0x1c}}, 0x40) 934.737152ms ago: executing program 4 (id=1971): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) connect$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x20) (async) connect$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x20) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0xc3072, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000080), &(0x7f00000000c0)=r6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r7, &(0x7f0000000800)="468ea009", 0x0}, 0x20) connect$netlink(r4, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) (async) connect$netlink(r4, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, r10, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x1, 0xb, 0x5}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x29c}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9ffffd}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x58, r10, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) (async) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x58, r10, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 934.258435ms ago: executing program 0 (id=1972): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), r3) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket(0x1d, 0x2, 0x6) setsockopt$llc_int(r7, 0x6a, 0x6, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockname$packet(r0, &(0x7f00000001c0), &(0x7f0000000400)=0x14) ioctl$TUNSETIFINDEX(r8, 0x400454da, 0x0) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x810, r11, 0xcb7e9000) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x34, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r10, {0xd, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 906.62866ms ago: executing program 2 (id=1973): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) 793.87649ms ago: executing program 4 (id=1974): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000063019500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000cc0)={0xffffffffffffffff, r0}) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000cc0)={0xffffffffffffffff, r0}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "ffffffffffffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", "dd959210", "00f700"}, 0x28) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)="6e37cf", 0x3}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() (async) r6 = gettid() sendmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r6}}}], 0x20}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB='\b\x00*\x00', @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32=r8, @ANYBLOB="15000400030000e00a0100000325175362eb4cf204000000"], 0x44}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) r11 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, &(0x7f0000000b80)=ANY=[@ANYRESOCT=r2, @ANYRES32=0xffffffffffffffff, @ANYRES32=r3], 0x90) r13 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r14 = socket$kcm(0x10, 0x2, 0x0) r15 = getpid() sendmsg$unix(r14, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYRESDEC=r12, @ANYRES8=r7, @ANYRES32=r13, @ANYRES16=r2], 0x30, 0x8040}, 0x20004080) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000880)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) sendmsg$unix(r1, &(0x7f0000000a00)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000700), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="1000000000000000010000000100000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="7f000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r9, @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x4000}, 0x2000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000c80)=@framed={{}, [@exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000c80)=@framed={{}, [@exit]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 654.805611ms ago: executing program 0 (id=1975): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r1, 0x0, 0xd, 0x0, &(0x7f0000000080)) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@loopback, @rand_addr=0x64010100}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000380)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 525.307977ms ago: executing program 2 (id=1976): getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xffff, 0xac7, 0x4, 0x194, 0x357d}, &(0x7f00000000c0)=0x14) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xffff, 0xac7, 0x4, 0x194, 0x357d}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={r1, 0x90, "ac92cf00f6f39e9f6f1906e749d0574121b5c0214a37a2b00addd09402e20811b7ef7ff44a49b7b33ab821cc53a6aa4a8f8a2138a1ab48ab0f9ca0dc8a427f326570d2456a5a793dca1cda2a2535d808d7ed0f896df3cfb41a68f3390451c67fb922ebb1bf9d6e384f6c18676bd4cce407da8177bd33be8e856d6ae242dd9954adf2814e592bfdd4a0e55ab4a62427ca"}, &(0x7f00000001c0)=0x98) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x8, r0}, 0x18) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x20, &(0x7f0000000280)=@raw=[@call={0x85, 0x0, 0x0, 0xb0}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @generic={0x2, 0x4, 0x7, 0x3, 0x5}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f0000000380)='GPL\x00', 0x0, 0x3, &(0x7f00000003c0)=""/3, 0x41100, 0x20, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000440)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r6, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x20, &(0x7f0000000280)=@raw=[@call={0x85, 0x0, 0x0, 0xb0}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @generic={0x2, 0x4, 0x7, 0x3, 0x5}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f0000000380)='GPL\x00', 0x0, 0x3, &(0x7f00000003c0)=""/3, 0x41100, 0x20, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000440)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r6, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000600)={r1, 0xe}, &(0x7f0000000640)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='mm_vmscan_kswapd_wake\x00', r4, 0x0, 0x38b}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='mm_vmscan_kswapd_wake\x00', r4, 0x0, 0x38b}, 0x18) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x50, r3, 0xbb072000) socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000700)={0x7, {0x0, 0x1, 0x7fff, 0x10001, 0x7}}) socket$inet_udplite(0x2, 0x2, 0x88) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000740), 0x4) (async) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000740), 0x4) r9 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000780)={'netpci0\x00', {0x2, 0x4e21, @multicast1}}) recvmmsg(r9, &(0x7f0000003ac0)=[{{&(0x7f00000007c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000840)=""/125, 0x7d}], 0x1, &(0x7f0000000900)=""/202, 0xca}, 0x8}, {{&(0x7f0000000a00)=@phonet, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000a80)=""/181, 0xb5}, {&(0x7f0000000b40)=""/184, 0xb8}, {&(0x7f0000000c00)=""/124, 0x7c}, {&(0x7f0000000c80)=""/28, 0x1c}, {&(0x7f0000000cc0)=""/189, 0xbd}, {&(0x7f0000000d80)=""/226, 0xe2}, {&(0x7f0000000e80)=""/57, 0x39}, {&(0x7f0000000ec0)}, {&(0x7f0000000f00)=""/120, 0x78}], 0x9}, 0x8b3ad91}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001040)}, {&(0x7f0000001080)=""/232, 0xe8}, {&(0x7f0000001180)=""/151, 0x97}, {&(0x7f0000001240)=""/231, 0xe7}, {&(0x7f0000001340)=""/36, 0x24}, {&(0x7f0000001380)=""/49, 0x31}, {&(0x7f00000013c0)=""/248, 0xf8}, {&(0x7f00000014c0)=""/137, 0x89}, {&(0x7f0000001580)=""/15, 0xf}], 0x9, &(0x7f0000001680)}, 0xffffff99}, {{&(0x7f00000016c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001740)=""/62, 0x3e}], 0x1, &(0x7f00000017c0)=""/169, 0xa9}, 0x7f}, {{&(0x7f0000001880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001900)=""/162, 0xa2}, {&(0x7f00000019c0)=""/85, 0x55}, {&(0x7f0000001a40)=""/126, 0x7e}, {&(0x7f0000001ac0)=""/155, 0x9b}, {&(0x7f0000001b80)=""/229, 0xe5}], 0x5}, 0x308b}, {{&(0x7f0000001d00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001d80)}], 0x1}, 0x5}, {{&(0x7f0000001e00)=@rc, 0x80, &(0x7f0000002200)=[{&(0x7f0000001e80)=""/82, 0x52}, {&(0x7f0000001f00)=""/205, 0xcd}, {&(0x7f0000002000)=""/85, 0x55}, {&(0x7f0000002080)=""/249, 0xf9}, {&(0x7f0000002180)=""/73, 0x49}], 0x5, &(0x7f0000002280)=""/61, 0x3d}, 0x7}, {{&(0x7f00000022c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000003980)=[{&(0x7f0000002340)=""/203, 0xcb}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/52, 0x34}, {&(0x7f0000003480)=""/143, 0x8f}, {&(0x7f0000003540)=""/234, 0xea}, {&(0x7f0000003640)=""/152, 0x98}, {&(0x7f0000003700)=""/195, 0xc3}, {&(0x7f0000003800)=""/187, 0xbb}, {&(0x7f00000038c0)=""/179, 0xb3}], 0x9, &(0x7f0000003a40)=""/107, 0x6b}, 0x4}], 0x8, 0x2021, &(0x7f0000003cc0)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000004e80)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000004f00)={0x8, 0x13, &(0x7f0000003d00)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa}, @ldst={0x3, 0x1, 0x3, 0x0, 0xb, 0x51334860bf9ccb0d}, @generic={0x7, 0x4, 0x9, 0x3, 0xf}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}], &(0x7f0000003dc0)='GPL\x00', 0xe5, 0x1000, &(0x7f0000003e00)=""/4096, 0x41000, 0x40, '\x00', 0x0, @fallback=0x19, r5, 0x8, &(0x7f0000004e00)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000004e40)={0x1, 0xc, 0x6, 0xffffffff}, 0x10, r11, r7, 0x3, 0x0, &(0x7f0000004ec0)=[{0x5, 0x5, 0x8, 0x1}, {0x0, 0x4, 0x10, 0xb}, {0x2, 0x3, 0xf, 0xb}], 0x10, 0x4, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000004fc0)={'hsr0\x00', @multicast}) getsockopt$inet6_mreq(r0, 0x29, 0x6f9c7df9bef164a8, &(0x7f0000005000)={@remote}, &(0x7f0000005040)=0x14) (async) getsockopt$inet6_mreq(r0, 0x29, 0x6f9c7df9bef164a8, &(0x7f0000005000)={@remote}, &(0x7f0000005040)=0x14) setsockopt$MRT6_TABLE(r4, 0x29, 0xcf, &(0x7f0000005080)=0xfc, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000050c0)={'vxcan0\x00', 0x0}) bind$xdp(r10, &(0x7f0000005100)={0x2c, 0x8, r12, 0x1e, r4}, 0x10) write$cgroup_subtree(r4, &(0x7f0000005140)={[{0x2d, 'rdma'}, {0x2b, 'blkio'}]}, 0xd) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000005180)={r2, 0x5, 0x3, 0x4, 0x7, 0x9}, &(0x7f00000051c0)=0x14) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000005180)={r2, 0x5, 0x3, 0x4, 0x7, 0x9}, &(0x7f00000051c0)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000005200)={r13, @in6={{0xa, 0x4e24, 0x573e, @mcast1, 0x80000001}}, 0x9b, 0xffff}, 0x90) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x10010, r10, 0x0) 458.165847ms ago: executing program 4 (id=1977): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000000c0)=0x2) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 341.66554ms ago: executing program 2 (id=1978): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @loopback, @loopback}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x230, 0x238, 0x238, 0x230, 0x238, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'batadv_slave_1\x00', 'pimreg0\x00', {0xff}, {}, 0x62, 0x6, 0x2, 0x10}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xffffffff, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'wg2\x00', 'veth1\x00', {}, {}, 0x84}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x200, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @loopback, @loopback}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet6(0xa, 0x3, 0x8000000003c) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x230, 0x238, 0x238, 0x230, 0x238, 0x3, 0x0, {[{{@ipv6={@empty, @local, [0x0, 0xff000000, 0xff000000, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'batadv_slave_1\x00', 'pimreg0\x00', {0xff}, {}, 0x62, 0x6, 0x2, 0x10}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xffffffff, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'wg2\x00', 'veth1\x00', {}, {}, 0x84}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x200, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) (async) 335.922368ms ago: executing program 1 (id=1979): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x3}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000000380)="3418", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, 0x0, &(0x7f00000002c0)=""/26}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r7, 0x0, 0x40004000) sendmsg$nl_route_sched_retired(r7, 0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f00000000c0)=0x200000, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0x20000034) 283.174718ms ago: executing program 4 (id=1980): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xfe, &(0x7f0000000000), &(0x7f0000000240)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x0, 0x3, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000040)) (async) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="00000800000000000000140000004500ffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="840000009078fffc0a03000007d58838068b0000"], 0x42) (async) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="00000800000000000000140000004500ffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="840000009078fffc0a03000007d58838068b0000"], 0x42) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 135.856218ms ago: executing program 2 (id=1981): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x1, 0x1000, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x77f, 0x40, 0x81, 0x9}}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001840)={0xffffffffffffffff, 0x0, 0x0, 0x39ca8789921a5cd7}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000101cb23f800626f6e6400000000040002800a000100aaaaaaaaaabb0000"], 0x40}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth1_to_batadv\x00', &(0x7f0000000140)=@ethtool_flash={0x33, 0x3ff, './file0\x00'}}) 59.138896ms ago: executing program 1 (id=1982): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) socket(0x28, 0x0, 0x28) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 0s ago: executing program 0 (id=1983): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000280)="4d0c39fb232bfae62f05f8888c2078afb86432a2fd610b7a04555d761ade2995c097f8adc888f4def4e5875dcd38e269b49138e4782f3f91ebe46a34c436d620c3dbc56b1e960336c56d4120b946b6fe5a0c86a157024506ca9b9b24449aef21b0a1b0423b20646979af2c2c5c7d527b34569d874489a54c8f354b88d01a38784bb3a1d00e9055c5910d6b94d844ff6281b6e3b59c752894") r4 = socket(0x1f, 0x5, 0x6) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0xc, 0x7}, {}, {0xfff3, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r8, 0x1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 70.654347][ T5827] cgroup: Unknown subsys name 'net' [ 70.786553][ T5827] cgroup: Unknown subsys name 'cpuset' [ 70.795082][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.437728][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.444461][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.173482][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.689723][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.698193][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.705800][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.705805][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.720959][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.728847][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.729802][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.736854][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.753208][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.760994][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.027670][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 76.086709][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 76.139488][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.147070][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.154476][ T5837] bridge_slave_0: entered allmulticast mode [ 76.161461][ T5837] bridge_slave_0: entered promiscuous mode [ 76.185196][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.192480][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.199623][ T5837] bridge_slave_1: entered allmulticast mode [ 76.206852][ T5837] bridge_slave_1: entered promiscuous mode [ 76.259441][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.283628][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.293302][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.300774][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.309084][ T5838] bridge_slave_0: entered allmulticast mode [ 76.316495][ T5838] bridge_slave_0: entered promiscuous mode [ 76.345148][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.352307][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.374173][ T5838] bridge_slave_1: entered allmulticast mode [ 76.394641][ T5838] bridge_slave_1: entered promiscuous mode [ 76.405164][ T5837] team0: Port device team_slave_0 added [ 76.439355][ T5837] team0: Port device team_slave_1 added [ 76.600656][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.635437][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.665009][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.671985][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.733956][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.800482][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.809736][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.817561][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.825574][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.834758][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.858681][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.870566][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.897953][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.905820][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.906516][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.910108][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.931057][ T5838] team0: Port device team_slave_0 added [ 76.938415][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.939365][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.949412][ T5838] team0: Port device team_slave_1 added [ 76.959411][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.960563][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.967110][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.985161][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.997386][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.075098][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.082063][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.109478][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.141378][ T5837] hsr_slave_0: entered promiscuous mode [ 77.148283][ T5837] hsr_slave_1: entered promiscuous mode [ 77.155747][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.163056][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.189344][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.395743][ T5838] hsr_slave_0: entered promiscuous mode [ 77.401942][ T5838] hsr_slave_1: entered promiscuous mode [ 77.409167][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.416993][ T5838] Cannot create hsr debugfs directory [ 77.753206][ T5842] Bluetooth: hci0: command tx timeout [ 77.833278][ T5842] Bluetooth: hci1: command tx timeout [ 77.863377][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 77.875995][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.901144][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.918839][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.941387][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.978937][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 77.989875][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 78.131075][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.138409][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.146218][ T5860] bridge_slave_0: entered allmulticast mode [ 78.154937][ T5860] bridge_slave_0: entered promiscuous mode [ 78.166214][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.173375][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.180741][ T5860] bridge_slave_1: entered allmulticast mode [ 78.188461][ T5860] bridge_slave_1: entered promiscuous mode [ 78.195967][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.246490][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.278992][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.288274][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.314444][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.321805][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.329371][ T5864] bridge_slave_0: entered allmulticast mode [ 78.337723][ T5864] bridge_slave_0: entered promiscuous mode [ 78.348470][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.357881][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.381767][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.389495][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.397577][ T5864] bridge_slave_1: entered allmulticast mode [ 78.404899][ T5864] bridge_slave_1: entered promiscuous mode [ 78.461309][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.468833][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.476363][ T5862] bridge_slave_0: entered allmulticast mode [ 78.485176][ T5862] bridge_slave_0: entered promiscuous mode [ 78.508643][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.523556][ T5860] team0: Port device team_slave_0 added [ 78.531635][ T5860] team0: Port device team_slave_1 added [ 78.540138][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.547653][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.556475][ T5862] bridge_slave_1: entered allmulticast mode [ 78.565302][ T5862] bridge_slave_1: entered promiscuous mode [ 78.574354][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.650844][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.659207][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.685435][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.729559][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.736660][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.763199][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.777563][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.790036][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.830517][ T5864] team0: Port device team_slave_0 added [ 78.838110][ T5864] team0: Port device team_slave_1 added [ 78.859412][ T5862] team0: Port device team_slave_0 added [ 78.873038][ T5842] Bluetooth: hci2: command tx timeout [ 78.899220][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.906550][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.933347][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.947012][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.955877][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.982041][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.995298][ T5862] team0: Port device team_slave_1 added [ 79.032744][ T5842] Bluetooth: hci4: command tx timeout [ 79.032750][ T5846] Bluetooth: hci3: command tx timeout [ 79.051304][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.058335][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.084468][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.124527][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.131493][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.159529][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.188091][ T5860] hsr_slave_0: entered promiscuous mode [ 79.194905][ T5860] hsr_slave_1: entered promiscuous mode [ 79.201816][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.209531][ T5860] Cannot create hsr debugfs directory [ 79.255713][ T5864] hsr_slave_0: entered promiscuous mode [ 79.261958][ T5864] hsr_slave_1: entered promiscuous mode [ 79.268688][ T5864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.277334][ T5864] Cannot create hsr debugfs directory [ 79.389437][ T5862] hsr_slave_0: entered promiscuous mode [ 79.396641][ T5862] hsr_slave_1: entered promiscuous mode [ 79.404084][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.411652][ T5862] Cannot create hsr debugfs directory [ 79.578758][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.754395][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.788536][ T5864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.799798][ T5864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.811327][ T5864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.827516][ T5864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.834640][ T5846] Bluetooth: hci0: command tx timeout [ 79.847351][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.865446][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.872708][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.886381][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.893498][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.913250][ T5846] Bluetooth: hci1: command tx timeout [ 79.965469][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.996608][ T3437] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.003773][ T3437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.017223][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.028132][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.050923][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.065486][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.072694][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.094697][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.195780][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.208524][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.232269][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.248515][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.433892][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.544237][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.565464][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.586705][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.593878][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.634819][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.650419][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.657787][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.686801][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.713299][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.720796][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.762186][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.773505][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.780606][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.837335][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.926136][ T5837] veth0_vlan: entered promiscuous mode [ 80.954065][ T5846] Bluetooth: hci2: command tx timeout [ 80.969386][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.993731][ T5837] veth1_vlan: entered promiscuous mode [ 81.017989][ T5838] veth0_vlan: entered promiscuous mode [ 81.034598][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.041740][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.105261][ T5838] veth1_vlan: entered promiscuous mode [ 81.115417][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.122589][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.130231][ T5846] Bluetooth: hci4: command tx timeout [ 81.132569][ T5842] Bluetooth: hci3: command tx timeout [ 81.188642][ T5838] veth0_macvtap: entered promiscuous mode [ 81.227444][ T5838] veth1_macvtap: entered promiscuous mode [ 81.296938][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.320231][ T5837] veth0_macvtap: entered promiscuous mode [ 81.335294][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.350905][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.365558][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.374690][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.384234][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.393318][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.414537][ T5837] veth1_macvtap: entered promiscuous mode [ 81.474739][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.489592][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.506267][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.519778][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.576642][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.590886][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.610651][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.627500][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.637324][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.651087][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.659981][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.850315][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.876666][ T5860] veth0_vlan: entered promiscuous mode [ 81.912922][ T5842] Bluetooth: hci0: command tx timeout [ 81.938029][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.962391][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.992649][ T5842] Bluetooth: hci1: command tx timeout [ 82.011624][ T5860] veth1_vlan: entered promiscuous mode [ 82.130627][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.154007][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.189528][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.212474][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.222273][ T5862] veth0_vlan: entered promiscuous mode [ 82.259670][ T5860] veth0_macvtap: entered promiscuous mode [ 82.270914][ T5860] veth1_macvtap: entered promiscuous mode [ 82.296507][ T5862] veth1_vlan: entered promiscuous mode [ 82.317485][ T5864] veth0_vlan: entered promiscuous mode [ 82.332011][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.346147][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.353552][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.367463][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.378749][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.389927][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.404741][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.418860][ T5864] veth1_vlan: entered promiscuous mode [ 82.424602][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.465231][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.492565][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.530795][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.551923][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.568138][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.594091][ T5860] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.608053][ T5860] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.628822][ T5860] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.639536][ T5860] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.787796][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 82.805181][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 82.843639][ T5862] veth0_macvtap: entered promiscuous mode [ 82.858861][ T5864] veth0_macvtap: entered promiscuous mode [ 82.946942][ T5864] veth1_macvtap: entered promiscuous mode [ 82.963783][ T5862] veth1_macvtap: entered promiscuous mode [ 82.994978][ T5935] team_slave_0: entered promiscuous mode [ 83.000706][ T5935] team_slave_1: entered promiscuous mode [ 83.008091][ T5935] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 83.015589][ T5935] team0: Device macvtap1 is already an upper device of the team interface [ 83.027346][ T5935] team_slave_0: left promiscuous mode [ 83.032902][ T5935] team_slave_1: left promiscuous mode [ 83.042512][ T5842] Bluetooth: hci2: command tx timeout [ 83.160311][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.183383][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'. [ 83.188673][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.211720][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.222191][ T5842] Bluetooth: hci3: command tx timeout [ 83.222234][ T5842] Bluetooth: hci4: command tx timeout [ 83.235684][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 83.249057][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.262551][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.283748][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.307190][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.319211][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.330473][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.382753][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.396511][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.407655][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.418563][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.428780][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.451749][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.464926][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.478977][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.490477][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.500797][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.515082][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.525383][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.537849][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.549393][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.564562][ T5955] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 83.575152][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.587572][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.597718][ T5951] warning: `syz.1.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.637234][ T5864] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.649200][ T5864] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.660268][ T5864] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.677859][ T5864] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.706260][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.720087][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.725452][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.745492][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.757608][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.768813][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.779596][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.791490][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.801722][ T5862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.813151][ T5862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.825241][ T5958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13'. [ 83.835616][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.873636][ T5960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.905158][ T5862] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.915271][ T5862] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.926135][ T5862] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.938460][ T5963] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET) [ 83.944912][ T5862] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.991625][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 84.000476][ T5846] Bluetooth: hci0: command tx timeout [ 84.027945][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.073061][ T5846] Bluetooth: hci1: command tx timeout [ 84.081326][ T5957] bridge_slave_0 (unregistering): left allmulticast mode [ 84.102898][ T5957] bridge_slave_0 (unregistering): left promiscuous mode [ 84.110063][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.146215][ T5963] syzkaller1: entered promiscuous mode [ 84.151835][ T5963] syzkaller1: entered allmulticast mode [ 84.295150][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.318372][ T5971] netlink: 596 bytes leftover after parsing attributes in process `syz.1.15'. [ 84.321620][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.398160][ T5978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'. [ 84.474748][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.519880][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.626673][ T5986] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.657695][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.697471][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.701975][ T5991] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 84.744303][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 84.761638][ T5991] raw_sendmsg: syz.1.18 forgot to set AF_INET. Fix it! [ 84.805676][ T5992] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.837592][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.870284][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.015492][ T6003] nbd: couldn't find a device at index 8960 [ 85.124076][ T5846] Bluetooth: hci2: command tx timeout [ 85.273408][ T5846] Bluetooth: hci4: command tx timeout [ 85.279236][ T5842] Bluetooth: hci3: command tx timeout [ 85.347711][ T6017] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 85.410424][ T6027] netlink: 'syz.3.26': attribute type 7 has an invalid length. [ 85.425006][ T6027] netlink: 'syz.3.26': attribute type 7 has an invalid length. [ 85.456502][ T6017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23'. [ 85.834912][ T6049] netlink: 'syz.1.31': attribute type 13 has an invalid length. [ 85.889514][ T6049] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 85.977312][ T6055] Zero length message leads to an empty skb [ 86.107126][ T6062] tipc: Failed to obtain node identity [ 86.116248][ T6062] tipc: Enabling of bearer rejected, failed to enable media [ 86.800846][ T975] cfg80211: failed to load regulatory.db [ 86.809353][ T6088] xt_CT: No such helper "pptp" [ 87.874147][ T6134] netlink: 'syz.4.56': attribute type 1 has an invalid length. [ 87.921010][ T6134] ip6erspan0: entered promiscuous mode [ 88.087758][ T6146] __nla_validate_parse: 8 callbacks suppressed [ 88.087777][ T6146] netlink: 192 bytes leftover after parsing attributes in process `syz.2.59'. [ 88.327453][ T6161] IPVS: set_ctl: invalid protocol: 135 172.20.20.23:20002 [ 88.348721][ T6161] netlink: 16 bytes leftover after parsing attributes in process `syz.2.64'. [ 88.364254][ T6163] openvswitch: netlink: Multiple metadata blocks provided [ 88.631803][ T6178] netlink: 44 bytes leftover after parsing attributes in process `syz.2.67'. [ 88.664092][ T6179] syzkaller1: entered promiscuous mode [ 88.671138][ T6179] syzkaller1: entered allmulticast mode [ 88.710817][ T6181] netlink: 'syz.3.69': attribute type 33 has an invalid length. [ 88.878243][ T6188] x_tables: duplicate underflow at hook 3 [ 89.056998][ T6198] x_tables: duplicate underflow at hook 1 [ 89.281086][ T6209] netlink: 96 bytes leftover after parsing attributes in process `syz.2.77'. [ 89.460336][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.79'. [ 89.642571][ T6223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.82'. [ 89.691367][ T6188] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 89.928524][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 90.009175][ T6237] netlink: 252 bytes leftover after parsing attributes in process `syz.4.87'. [ 90.603333][ T6270] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 90.866853][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 90.890250][ T6282] netlink: 'syz.4.93': attribute type 5 has an invalid length. [ 90.936919][ T6282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.93'. [ 90.955087][ T5846] Bluetooth: hci1: command 0x0401 tx timeout [ 91.075125][ T6289] vlan2: entered promiscuous mode [ 91.080685][ T6289] bridge0: entered promiscuous mode [ 91.327364][ T6304] veth1_macvtap: left promiscuous mode [ 91.362009][ T6304] macsec0: entered allmulticast mode [ 91.513201][ T6304] veth1_macvtap: entered promiscuous mode [ 91.519051][ T6304] veth1_macvtap: entered allmulticast mode [ 91.543346][ T6304] macsec0: left allmulticast mode [ 91.580746][ T6304] veth1_macvtap: left allmulticast mode [ 92.085742][ T6335] Bluetooth: MGMT ver 1.23 [ 92.191722][ T6339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.326991][ T6337] bond1: entered promiscuous mode [ 92.368562][ T6337] bond1: entered allmulticast mode [ 92.631735][ T6361] sctp: [Deprecated]: syz.2.110 (pid 6361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.631735][ T6361] Use struct sctp_sack_info instead [ 92.884213][ T6371] netlink: 'syz.3.113': attribute type 11 has an invalid length. [ 92.902672][ T6371] netlink: 'syz.3.113': attribute type 4 has an invalid length. [ 93.493952][ T6395] netlink: 'syz.1.118': attribute type 1 has an invalid length. [ 93.826271][ T6404] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.158562][ T6426] xt_nat: multiple ranges no longer supported [ 94.257908][ T6431] syz.0.127 (6431) used greatest stack depth: 19512 bytes left [ 94.575392][ T6453] netlink: 'syz.4.133': attribute type 9 has an invalid length. [ 94.585809][ T6453] netlink: 'syz.4.133': attribute type 6 has an invalid length. [ 94.697592][ T6458] netlink: 'syz.1.134': attribute type 5 has an invalid length. [ 94.979027][ T6470] __nla_validate_parse: 5 callbacks suppressed [ 94.979046][ T6470] netlink: 168 bytes leftover after parsing attributes in process `syz.3.138'. [ 95.094246][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'. [ 96.221917][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 96.315003][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 96.755914][ T6535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.863341][ T6535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.114993][ T6550] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20002 [ 97.142230][ T6550] : renamed from veth1_to_bridge (while UP) [ 97.198844][ T6555] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20002 [ 97.495437][ T6576] netlink: 64 bytes leftover after parsing attributes in process `syz.1.161'. [ 97.644516][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 97.748737][ T6592] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 97.788530][ T6597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.219640][ T6622] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.229967][ T6619] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 98.266625][ T6624] batadv_slave_1: entered promiscuous mode [ 98.517115][ T6617] batadv_slave_1: left promiscuous mode [ 98.621677][ T6639] syzkaller1: entered promiscuous mode [ 98.644531][ T6639] syzkaller1: entered allmulticast mode [ 98.772028][ T6659] netlink: zone id is out of range [ 98.777294][ T6659] netlink: del zone limit has 4 unknown bytes [ 98.790101][ T6655] netlink: 'syz.4.179': attribute type 29 has an invalid length. [ 98.815185][ T6661] netlink: 'syz.4.179': attribute type 29 has an invalid length. [ 99.069376][ T6672] delete_channel: no stack [ 99.173795][ T6669] team0: Port device team_slave_0 removed [ 99.292588][ T6674] tipc: Started in network mode [ 99.303447][ T6674] tipc: Node identity ffffa848, cluster identity 4711 [ 99.310250][ T6674] tipc: Node number set to 4294944840 [ 99.361885][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 100.238369][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 100.271459][ T6732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'. [ 100.321656][ T6734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'. [ 101.108644][ T6732] xfrm1: entered promiscuous mode [ 101.119439][ T6732] xfrm1: entered allmulticast mode [ 101.280343][ T6752] netlink: 'syz.1.198': attribute type 1 has an invalid length. [ 101.301305][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 101.361224][ T6757] netlink: 'syz.3.197': attribute type 4 has an invalid length. [ 101.751828][ T6784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.204'. [ 101.773896][ T6783] netlink: 44 bytes leftover after parsing attributes in process `syz.2.205'. [ 101.792626][ T30] audit: type=1800 audit(1745400713.015:2): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.203" name="memory.events" dev="tmpfs" ino=245 res=0 errno=0 [ 101.820414][ T6783] netlink: 43 bytes leftover after parsing attributes in process `syz.2.205'. [ 101.839616][ T6783] netlink: 'syz.2.205': attribute type 5 has an invalid length. [ 101.869827][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 101.872217][ T6783] netlink: 43 bytes leftover after parsing attributes in process `syz.2.205'. [ 101.905122][ T6780] IPv6: sit1: Disabled Multicast RS [ 101.931872][ T6780] sit1: entered allmulticast mode [ 101.939476][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 102.045488][ T6783] netlink: 'syz.2.205': attribute type 3 has an invalid length. [ 102.242231][ T6800] bridge_slave_0: left allmulticast mode [ 102.266948][ T6808] openvswitch: netlink: Actions may not be safe on all matching packets [ 102.276864][ T6800] bridge_slave_0: left promiscuous mode [ 102.287117][ T6800] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.321576][ T6800] bridge_slave_1: left allmulticast mode [ 102.341325][ T6799] x_tables: duplicate underflow at hook 2 [ 102.342420][ T6800] bridge_slave_1: left promiscuous mode [ 102.399528][ C0] vcan0: j1939_tp_txtimer: 0xffff888024cba400: tx aborted with unknown reason: -2 [ 102.405882][ T6800] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.409890][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888012537000: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 102.435277][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024cba400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 102.499073][ T6800] bond0: (slave bond_slave_0): Releasing backup interface [ 102.584848][ T6800] bond0: (slave bond_slave_1): Releasing backup interface [ 102.656503][ T6800] team0: Port device team_slave_0 removed [ 102.685520][ T6800] team0: Port device team_slave_1 removed [ 102.710910][ T6800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.731504][ T6800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.848515][ T6800] syz.2.210 (6800) used greatest stack depth: 19256 bytes left [ 103.707818][ T6887] netlink: 'syz.4.230': attribute type 10 has an invalid length. [ 103.833335][ T6887] team0: Port device geneve0 added [ 104.141456][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.149662][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.212842][ T6919] netlink: 'syz.4.239': attribute type 10 has an invalid length. [ 104.221253][ T6919] veth0_vlan: entered allmulticast mode [ 104.311350][ T6919] veth0_vlan: left promiscuous mode [ 104.358713][ T6919] veth0_vlan: entered promiscuous mode [ 104.415017][ T6919] team0: Device veth0_vlan failed to register rx_handler [ 104.620228][ T6919] syz.4.239 (6919) used greatest stack depth: 19192 bytes left [ 104.899246][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.086737][ T6950] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 105.259299][ T6979] veth1_to_hsr: entered promiscuous mode [ 105.323516][ T6979] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 105.419535][ T6985] netlink: 'syz.1.258': attribute type 4 has an invalid length. [ 105.455300][ T6977] veth1_to_hsr: left promiscuous mode [ 105.568242][ T5888] IPVS: starting estimator thread 0... [ 105.593797][ T6991] Driver unsupported XDP return value 0 on prog (id 103) dev N/A, expect packet loss! [ 105.614384][ T6998] __nla_validate_parse: 12 callbacks suppressed [ 105.614401][ T6998] netlink: 64 bytes leftover after parsing attributes in process `syz.1.263'. [ 105.629851][ T6998] netlink: 64 bytes leftover after parsing attributes in process `syz.1.263'. [ 105.672629][ T6994] IPVS: using max 28 ests per chain, 67200 per kthread [ 105.745947][ T7004] netlink: 188 bytes leftover after parsing attributes in process `syz.0.265'. [ 105.832802][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 105.884629][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 105.942809][ T7013] ip6t_srh: unknown srh match flags 536B [ 105.962502][ T7017] netlink: 24 bytes leftover after parsing attributes in process `syz.2.266'. [ 106.303551][ T7044] netlink: 'syz.0.274': attribute type 16 has an invalid length. [ 106.311316][ T7044] netlink: 'syz.0.274': attribute type 17 has an invalid length. [ 106.324249][ T7046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.276'. [ 106.345282][ T7049] netlink: 32 bytes leftover after parsing attributes in process `syz.1.278'. [ 106.391273][ T7047] vlan2: entered promiscuous mode [ 106.394256][ T7050] IPVS: ip_vs_edit_dest(): server weight less than zero [ 106.404343][ T7047] bridge0: entered promiscuous mode [ 106.409731][ T7047] vlan2: entered allmulticast mode [ 106.415241][ T5888] IPVS: starting estimator thread 0... [ 106.420780][ T7047] bridge0: entered allmulticast mode [ 106.502458][ T7051] IPVS: using max 29 ests per chain, 69600 per kthread [ 106.517319][ T7054] x_tables: unsorted underflow at hook 4 [ 106.546894][ T7055] x_tables: unsorted underflow at hook 4 [ 106.610486][ T7054] netlink: 'syz.3.279': attribute type 7 has an invalid length. [ 106.951874][ T7077] xt_hashlimit: max too large, truncated to 1048576 [ 107.263562][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 107.334319][ T7092] vlan3: entered promiscuous mode [ 107.339621][ T7092] vlan3: entered allmulticast mode [ 107.386514][ T7092] hsr_slave_1: entered allmulticast mode [ 107.553720][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 107.576361][ T7102] IPVS: Unknown mcast interface: rose0 [ 107.770365][ T7125] netlink: 'syz.4.300': attribute type 15 has an invalid length. [ 107.890644][ T7134] netlink: 'syz.2.303': attribute type 12 has an invalid length. [ 108.075816][ T7144] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 108.489720][ T7160] syz_tun: entered promiscuous mode [ 108.536447][ T7160] syz_tun: left promiscuous mode [ 109.175307][ T7200] netlink: 'syz.0.326': attribute type 1 has an invalid length. [ 109.203977][ T7200] netlink: 'syz.0.326': attribute type 1 has an invalid length. [ 109.458545][ T7220] Bluetooth: MGMT ver 1.23 [ 109.907117][ T7248] vlan2: entered promiscuous mode [ 109.915604][ T7248] macvtap0: entered promiscuous mode [ 109.927959][ T7248] vlan2: entered allmulticast mode [ 109.937646][ T7248] macvtap0: entered allmulticast mode [ 109.948959][ T7248] veth0_macvtap: entered allmulticast mode [ 110.556662][ T7289] trusted_key: syz.3.348 sent an empty control message without MSG_MORE. [ 111.174431][ T7325] netlink: 'syz.1.355': attribute type 10 has an invalid length. [ 111.212280][ T7325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.265690][ T7332] __nla_validate_parse: 4 callbacks suppressed [ 111.265710][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 111.303859][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 111.343202][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 111.415682][ T7343] netlink: 'syz.3.360': attribute type 4 has an invalid length. [ 111.583301][ T7349] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.823710][ T7358] netlink: 'syz.4.365': attribute type 1 has an invalid length. [ 111.831863][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 111.855383][ T7366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.366'. [ 111.873529][ T7358] netlink: 112 bytes leftover after parsing attributes in process `syz.4.365'. [ 112.260068][ T7392] netlink: 'syz.0.374': attribute type 1 has an invalid length. [ 112.298267][ T7392] netlink: 224 bytes leftover after parsing attributes in process `syz.0.374'. [ 112.428118][ T7395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.373'. [ 112.591287][ T7411] netlink: 416 bytes leftover after parsing attributes in process `syz.4.379'. [ 112.654567][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 112.928900][ T7433] netlink: zone id is out of range [ 112.952445][ T7433] netlink: zone id is out of range [ 112.957600][ T7433] netlink: zone id is out of range [ 113.008552][ T7433] netlink: zone id is out of range [ 113.025009][ T7433] netlink: zone id is out of range [ 113.043635][ T7433] netlink: zone id is out of range [ 113.063379][ T7433] netlink: zone id is out of range [ 113.092492][ T7433] netlink: zone id is out of range [ 113.097753][ T7433] netlink: zone id is out of range [ 113.114668][ T7433] netlink: zone id is out of range [ 113.363703][ T7458] netlink: 'syz.4.391': attribute type 1 has an invalid length. [ 113.371392][ T7458] netlink: 'syz.4.391': attribute type 2 has an invalid length. [ 113.413681][ T7458] netlink: 'syz.4.391': attribute type 1 has an invalid length. [ 113.421366][ T7458] netlink: 'syz.4.391': attribute type 2 has an invalid length. [ 113.606071][ T7470] dvmrp0: entered allmulticast mode [ 114.364631][ T7521] netlink: 'syz.0.406': attribute type 21 has an invalid length. [ 114.688577][ T7542] netlink: 'syz.0.411': attribute type 10 has an invalid length. [ 114.843142][ T7542] team0: Port device geneve0 added [ 115.145589][ T7572] vlan2: entered promiscuous mode [ 115.150839][ T7572] vlan2: entered allmulticast mode [ 115.177523][ T7572] hsr_slave_1: entered allmulticast mode [ 115.615806][ T7603] Cannot find del_set index 65531 as target [ 115.639208][ T7597] delete_channel: no stack [ 116.319465][ T7648] team0: Mode changed to "roundrobin" [ 116.531611][ T7660] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 116.579765][ T7661] __nla_validate_parse: 16 callbacks suppressed [ 116.579781][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 116.646835][ T7673] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 117.005482][ T7695] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.118618][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 117.167888][ T7707] validate_nla: 2 callbacks suppressed [ 117.167906][ T7707] netlink: 'syz.1.446': attribute type 1 has an invalid length. [ 117.434046][ T7707] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.450498][ T7721] sctp: [Deprecated]: syz.4.450 (pid 7721) Use of int in max_burst socket option. [ 117.450498][ T7721] Use struct sctp_assoc_value instead [ 117.781612][ T7741] netlink: 36 bytes leftover after parsing attributes in process `syz.4.453'. [ 118.113560][ T7759] syzkaller1: entered allmulticast mode [ 118.170972][ T7759] netlink: 13 bytes leftover after parsing attributes in process `syz.1.459'. [ 118.714246][ T7787] batadv0: entered allmulticast mode [ 118.739740][ T7787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.467'. [ 118.822879][ T7787] netlink: 'syz.4.467': attribute type 2 has an invalid length. [ 118.862945][ T7787] netlink: 'syz.4.467': attribute type 6 has an invalid length. [ 119.106354][ T7799] dvmrp1: entered allmulticast mode [ 119.273422][ T7811] syzkaller1: entered promiscuous mode [ 119.278956][ T7811] syzkaller1: entered allmulticast mode [ 119.355340][ T7811] syzkaller1: left promiscuous mode [ 119.360598][ T7811] syzkaller1: left allmulticast mode [ 119.684913][ T7839] netlink: 'syz.4.480': attribute type 16 has an invalid length. [ 119.699775][ T7839] netlink: 'syz.4.480': attribute type 17 has an invalid length. [ 119.911509][ T7838] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 120.188308][ T7868] sctp: [Deprecated]: syz.4.487 (pid 7868) Use of int in max_burst socket option. [ 120.188308][ T7868] Use struct sctp_assoc_value instead [ 120.288629][ T7873] netlink: 'syz.4.487': attribute type 39 has an invalid length. [ 120.738284][ T7884] netlink: 'syz.4.487': attribute type 10 has an invalid length. [ 120.804033][ T7885] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 120.939838][ T7903] netlink: 36 bytes leftover after parsing attributes in process `syz.2.493'. [ 121.124586][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'. [ 121.209272][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.494'. [ 121.615461][ T7941] sctp: [Deprecated]: syz.0.502 (pid 7941) Use of int in max_burst socket option. [ 121.615461][ T7941] Use struct sctp_assoc_value instead [ 121.632491][ T7940] net_ratelimit: 3 callbacks suppressed [ 121.632508][ T7940] openvswitch: netlink: Flow key attr not present in new flow. [ 121.698961][ T7946] netlink: 36 bytes leftover after parsing attributes in process `syz.1.503'. [ 121.732765][ T7948] netlink: 16 bytes leftover after parsing attributes in process `syz.4.505'. [ 122.040324][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'. [ 122.064261][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.510'. [ 122.326925][ T7982] netlink: 'syz.2.513': attribute type 1 has an invalid length. [ 122.414473][ T7982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.471745][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'. [ 122.553989][ T7992] bond1: (slave ip6gretap1): making interface the new active one [ 122.620405][ T7992] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 122.724233][ T8006] netlink: 80 bytes leftover after parsing attributes in process `syz.1.516'. [ 122.983588][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 123.015147][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.520'. [ 123.054063][ T8022] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 123.091032][ T8022] netlink: 10 bytes leftover after parsing attributes in process `syz.3.520'. [ 123.132925][ T8022] block nbd0: Unsupported socket: shutdown callout must be supported. [ 123.433729][ T8055] dccp_invalid_packet: pskb_may_pull failed [ 123.717687][ T8070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.531'. [ 124.406189][ T8104] x_tables: duplicate entry at hook 1 [ 124.662782][ T8118] dvmrp0: entered allmulticast mode [ 124.819508][ T8127] netlink: 'syz.2.548': attribute type 1 has an invalid length. [ 124.856859][ T8127] bond2: entered promiscuous mode [ 124.862575][ T8127] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.007507][ T8140] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 125.105983][ T8137] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 125.598019][ T8176] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 125.631313][ T8176] IPVS: set_ctl: invalid protocol: 168 127.0.0.1:20002 [ 125.642718][ T8178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.690311][ T8182] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 125.699906][ T8181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.768127][ T8178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.127682][ T8201] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 127.619083][ T8248] __nla_validate_parse: 5 callbacks suppressed [ 127.619100][ T8248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.577'. [ 127.793688][ T8261] xt_l2tp: v2 tid > 0xffff: 150994944 [ 127.800268][ T8260] netlink: 72 bytes leftover after parsing attributes in process `syz.1.579'. [ 128.057456][ T8271] delete_channel: no stack [ 128.342674][ T8294] netlink: 20 bytes leftover after parsing attributes in process `syz.0.589'. [ 128.418971][ T8301] pim6reg527: entered allmulticast mode [ 128.458628][ T8294] netlink: 40 bytes leftover after parsing attributes in process `syz.0.589'. [ 128.659379][ T8314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'. [ 128.936587][ T8326] tipc: Enabled bearer , priority 10 [ 128.990371][ T8326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.596'. [ 129.411318][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'. [ 129.481647][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 129.524234][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.603'. [ 129.651747][ T8362] vlan4: entered allmulticast mode [ 129.657705][ T8362] bond0: entered allmulticast mode [ 129.674390][ T8362] bond_slave_0: entered allmulticast mode [ 129.680266][ T8362] bond_slave_1: entered allmulticast mode [ 129.689238][ T8362] bond0: (slave vlan4): Opening slave failed [ 130.533897][ T8397] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.671606][ T8397] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.840608][ T8397] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.877686][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.617'. [ 130.965891][ T8397] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.077366][ T8414] xt_HMARK: spi-set and port-set can't be combined [ 131.128648][ T8416] netlink: 'syz.1.619': attribute type 11 has an invalid length. [ 131.140875][ T8397] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.149653][ T8416] netlink: 'syz.1.619': attribute type 11 has an invalid length. [ 131.268414][ T8397] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.410062][ T8397] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.450984][ T8397] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.466861][ T8423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.758068][ T8447] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 132.329730][ T8489] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 132.665544][ T8498] __nla_validate_parse: 8 callbacks suppressed [ 132.665562][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 132.687561][ T8502] netlink: 'syz.0.645': attribute type 2 has an invalid length. [ 132.692024][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.642'. [ 132.713448][ T8498] netlink: 'syz.4.642': attribute type 14 has an invalid length. [ 132.721681][ T8498] netlink: 'syz.4.642': attribute type 13 has an invalid length. [ 132.786840][ T8507] bond0: entered promiscuous mode [ 132.791917][ T8507] bond_slave_0: entered promiscuous mode [ 132.807904][ T8507] bond_slave_1: entered promiscuous mode [ 132.827247][ T8507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.868643][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.648'. [ 132.883734][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.900727][ T8511] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 133.791764][ T8560] netlink: 9 bytes leftover after parsing attributes in process `syz.0.666'. [ 133.842658][ T8560] ï‰Oܼ: renamed from hsr0 (while UP) [ 133.882126][ T8560] ï‰Oܼ: entered promiscuous mode [ 133.889287][ T8560] A link change request failed with some changes committed already. Interface ï‰Oܼ may have been left with an inconsistent configuration, please check. [ 133.989089][ T8569] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 134.035832][ T8569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.669'. [ 134.051244][ T8573] netlink: 4256 bytes leftover after parsing attributes in process `syz.4.671'. [ 134.071839][ T8569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.669'. [ 134.225899][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 134.226521][ T8578] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 134.557503][ T8594] delete_channel: no stack [ 134.708092][ T8603] sctp: [Deprecated]: syz.4.681 (pid 8603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 134.708092][ T8603] Use struct sctp_sack_info instead [ 134.827256][ T8605] Cannot find add_set index 4 as target [ 135.054660][ T5842] Bluetooth: hci4: link tx timeout [ 135.060027][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 135.413358][ T8643] nbd: must specify a size in bytes for the device [ 135.435734][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 135.442616][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.498813][ T8643] netlink: 16 bytes leftover after parsing attributes in process `syz.2.690'. [ 135.541038][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 136.010473][ T8669] xt_CT: No such helper "snmp" [ 136.056800][ T8682] tipc: Started in network mode [ 136.078966][ T8682] tipc: Node identity ffffa848, cluster identity 4711 [ 136.087039][ T8673] xt_CT: No such helper "pptp" [ 136.124046][ T8682] tipc: Node number set to 4294944840 [ 136.466120][ T8692] netlink: 'syz.0.704': attribute type 1 has an invalid length. [ 136.749989][ T8705] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 136.941238][ T8713] syzkaller0: entered promiscuous mode [ 136.953078][ T8713] syzkaller0: entered allmulticast mode [ 137.113478][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 137.264546][ T8731] sctp: [Deprecated]: syz.2.717 (pid 8731) Use of int in maxseg socket option. [ 137.264546][ T8731] Use struct sctp_assoc_value instead [ 137.773449][ T8766] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 137.800149][ T8766] ip6t_rpfilter: unknown options [ 137.938994][ T8774] __nla_validate_parse: 10 callbacks suppressed [ 137.939010][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'. [ 138.052617][ T8776] netlink: 'syz.4.733': attribute type 11 has an invalid length. [ 138.061054][ T8776] netlink: 224 bytes leftover after parsing attributes in process `syz.4.733'. [ 138.219716][ T8784] tipc: Enabling of bearer rejected, failed to enable media [ 138.239869][ T8786] tipc: Started in network mode [ 138.250622][ T8786] tipc: Node identity ffffa848, cluster identity 4711 [ 138.260334][ T8780] netlink: 14 bytes leftover after parsing attributes in process `syz.2.735'. [ 138.280827][ T8786] tipc: Node number set to 4294944840 [ 138.319173][ T8784] xt_CT: No such helper "pptp" [ 138.617752][ T8815] x_tables: duplicate underflow at hook 2 [ 138.675800][ T8780] bond0 (unregistering): Released all slaves [ 138.702504][ T8790] tipc: Enabling of bearer rejected, failed to enable media [ 138.926033][ T5840] udevd[5840]: failed to send result of seq 12643 to main daemon: Connection refused [ 138.979383][ T8828] netlink: 40 bytes leftover after parsing attributes in process `syz.2.747'. [ 138.989351][ T8829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 139.159545][ T8836] netlink: 68 bytes leftover after parsing attributes in process `syz.0.750'. [ 139.487459][ T8858] netlink: 'syz.0.756': attribute type 2 has an invalid length. [ 139.693792][ T8872] netlink: 100 bytes leftover after parsing attributes in process `syz.1.761'. [ 139.696032][ T8870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'. [ 139.805832][ T8878] delete_channel: no stack [ 139.898671][ T8883] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 139.905343][ T8883] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 139.962622][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 139.983619][ T8893] netlink: 'syz.0.764': attribute type 10 has an invalid length. [ 139.991453][ T8893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.764'. [ 140.171274][ T8904] syzkaller0: entered allmulticast mode [ 140.241623][ T8908] netlink: 'syz.3.775': attribute type 10 has an invalid length. [ 140.251478][ T8908] bridge0: port 3(team0) entered blocking state [ 140.284726][ T8908] bridge0: port 3(team0) entered disabled state [ 140.291183][ T8908] team0: entered allmulticast mode [ 140.299924][ T8908] team_slave_1: entered allmulticast mode [ 140.310983][ T8908] team0: entered promiscuous mode [ 140.319460][ T8908] team_slave_1: entered promiscuous mode [ 141.031840][ T8961] team0: left allmulticast mode [ 141.044264][ T8961] team_slave_1: left allmulticast mode [ 141.050012][ T8961] bridge0: port 3(team0) entered disabled state [ 141.079076][ T8961] bridge_slave_0: left allmulticast mode [ 141.102899][ T8961] bridge_slave_0: left promiscuous mode [ 141.115272][ T8961] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.151429][ T8961] bridge_slave_1: left allmulticast mode [ 141.180364][ T8961] bridge_slave_1: left promiscuous mode [ 141.210184][ T8961] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.234011][ T8961] bond0: (slave bond_slave_0): Releasing backup interface [ 141.257867][ T8961] bond0: (slave bond_slave_1): Releasing backup interface [ 141.278604][ T8961] team_slave_1: left promiscuous mode [ 141.306397][ T8961] team0: Port device team_slave_1 removed [ 141.323495][ T8961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.331216][ T8961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.344913][ T8961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.358154][ T8961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.524242][ T8989] netlink: 'syz.1.798': attribute type 1 has an invalid length. [ 141.535403][ T8989] netlink: 'syz.1.798': attribute type 2 has an invalid length. [ 141.555226][ T8989] unsupported nlmsg_type 40 [ 141.901189][ T9011] netem: incorrect gi model size [ 141.915625][ T9011] netem: change failed [ 141.939248][ T9008] x_tables: duplicate underflow at hook 1 [ 142.071162][ T9023] netlink: 'syz.4.808': attribute type 1 has an invalid length. [ 142.269397][ T30] audit: type=1800 audit(1745400753.495:3): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.811" name="blkio.bfq.io_wait_time" dev="tmpfs" ino=916 res=0 errno=0 [ 142.887424][ T9064] tap0: tun_chr_ioctl cmd 2148553947 [ 143.090281][ T9088] __nla_validate_parse: 10 callbacks suppressed [ 143.090301][ T9088] netlink: 696 bytes leftover after parsing attributes in process `syz.2.828'. [ 143.207742][ T9096] ipvlan0: entered promiscuous mode [ 143.231379][ T9096] ipvlan0: entered allmulticast mode [ 143.272258][ T9096] veth0_vlan: entered allmulticast mode [ 143.358777][ T9104] netlink: 'syz.3.833': attribute type 11 has an invalid length. [ 143.412078][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'. [ 143.451504][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.835'. [ 143.538118][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.837'. [ 143.594434][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.837'. [ 143.775755][ T9127] netlink: 'syz.4.841': attribute type 39 has an invalid length. [ 143.794381][ T9128] netlink: 256 bytes leftover after parsing attributes in process `syz.3.842'. [ 143.824747][ T9130] xt_ipcomp: unknown flags B [ 143.837138][ T9133] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 143.882738][ T9134] xt_ipcomp: unknown flags B [ 144.021296][ T9141] dvmrp0: entered allmulticast mode [ 144.075384][ T9144] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 144.208772][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 144.221122][ T9158] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 144.229743][ T9158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.383349][ T9168] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 144.464199][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.857'. [ 144.654335][ T9194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.861'. [ 144.995821][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.867'. [ 145.014701][ T9214] netlink: 'syz.3.868': attribute type 1 has an invalid length. [ 145.038106][ T9214] netlink: 'syz.3.868': attribute type 1 has an invalid length. [ 145.168323][ T9221] netlink: 'syz.2.871': attribute type 10 has an invalid length. [ 145.177459][ T9225] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 145.200936][ T9223] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 145.217713][ T9224] tipc: Started in network mode [ 145.222747][ T9224] tipc: Node identity d229188d5ac5, cluster identity 4711 [ 145.231120][ T9224] tipc: Enabled bearer , priority 0 [ 145.242879][ T9225] netlink: 'syz.0.872': attribute type 23 has an invalid length. [ 145.244137][ T9221] dummy0: entered promiscuous mode [ 145.257859][ T9221] bridge0: port 1(dummy0) entered blocking state [ 145.268418][ T9221] bridge0: port 1(dummy0) entered disabled state [ 145.275225][ T9221] dummy0: entered allmulticast mode [ 145.283354][ T9221] dummy0: left allmulticast mode [ 145.288860][ T9221] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 145.322192][ T9233] syzkaller0: entered promiscuous mode [ 145.339721][ T9233] syzkaller0: entered allmulticast mode [ 145.382944][ T9224] tipc: Resetting bearer [ 145.414168][ T9222] tipc: Resetting bearer [ 145.469508][ T9222] tipc: Disabling bearer [ 145.843985][ T9261] netlink: 'syz.1.880': attribute type 1 has an invalid length. [ 145.910775][ T9261] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.921683][ T9269] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 145.942054][ T9269] erspan0: entered promiscuous mode [ 145.963144][ T9269] erspan0: left promiscuous mode [ 146.302279][ T9286] sctp: [Deprecated]: syz.1.886 (pid 9286) Use of int in maxseg socket option. [ 146.302279][ T9286] Use struct sctp_assoc_value instead [ 146.476289][ T10] IPVS: starting estimator thread 0... [ 146.562605][ T9306] IPVS: using max 29 ests per chain, 69600 per kthread [ 146.688501][ T9317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.777207][ T9327] bridge_slave_0: left allmulticast mode [ 146.797011][ T9327] bridge_slave_0: left promiscuous mode [ 146.823298][ T9327] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.866820][ T9327] bridge_slave_1: left allmulticast mode [ 146.892606][ T9327] bridge_slave_1: left promiscuous mode [ 146.907751][ T9327] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.943222][ T9327] bond0: (slave bond_slave_0): Releasing backup interface [ 147.014638][ T9327] bond0: (slave bond_slave_1): Releasing backup interface [ 147.108001][ T9327] team0: Port device team_slave_0 removed [ 147.133428][ T9327] team0: Port device team_slave_1 removed [ 147.148899][ T9327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.157389][ T9327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.166712][ T9327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.175027][ T9327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.204360][ T9327] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.214789][ T9327] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.230762][ T9327] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.274497][ T9327] team0: Port device geneve0 removed [ 147.288453][ T9330] team0: Mode changed to "roundrobin" [ 147.526989][ T9368] netlink: 'syz.4.901': attribute type 12 has an invalid length. [ 147.646451][ T9368] pimreg: entered allmulticast mode [ 147.675384][ T9368] dvmrp0: left allmulticast mode [ 147.680463][ T9368] batadv0: left allmulticast mode [ 147.722840][ T9368] pimreg: left allmulticast mode [ 147.798863][ T9390] netlink: 'syz.0.908': attribute type 2 has an invalid length. [ 148.033474][ T9402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.220668][ T9414] lo: entered promiscuous mode [ 148.284957][ T9414] tunl0: entered promiscuous mode [ 148.321325][ T9414] gre0: entered promiscuous mode [ 148.363828][ T9431] __nla_validate_parse: 11 callbacks suppressed [ 148.363845][ T9431] netlink: 9 bytes leftover after parsing attributes in process `syz.0.915'. [ 148.448055][ T9414] gretap0: entered promiscuous mode [ 148.478122][ T9443] netlink: 5 bytes leftover after parsing attributes in process `syz.0.915'. [ 148.495076][ T30] audit: type=1800 audit(1745400759.725:4): pid=9436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.920" name="cgroup.controllers" dev="tmpfs" ino=1024 res=0 errno=0 [ 148.539248][ T9414] erspan0: entered promiscuous mode [ 148.595130][ T9414] ip_vti0: entered promiscuous mode [ 148.675773][ T9443] 0ªî{X¹¦: renamed from gretap0 [ 148.694377][ T9443] 0ªî{X¹¦: left promiscuous mode [ 148.699684][ T9443] 0ªî{X¹¦: entered allmulticast mode [ 148.711952][ T9443] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 148.751514][ T9445] tipc: Enabled bearer , priority 0 [ 149.062761][ T24] IPVS: starting estimator thread 0... [ 149.079660][ T9482] delete_channel: no stack [ 149.100126][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 149.114675][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.925'. [ 149.163156][ T9479] IPVS: using max 31 ests per chain, 74400 per kthread [ 149.320388][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 149.419404][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 149.451353][ T9505] netlink: 312 bytes leftover after parsing attributes in process `syz.2.934'. [ 149.699899][ T9523] openvswitch: netlink: ct_state flags 20202000 unsupported [ 149.733370][ T9524] openvswitch: netlink: ct_state flags 20202000 unsupported [ 149.827484][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'. [ 149.858400][ T9532] netlink: 5 bytes leftover after parsing attributes in process `syz.2.941'. [ 149.904092][ T9532] 0ªÃøÂFNð¡: renamed from bond_slave_0 [ 149.941113][ T9532] 0ªÃøÂFNð¡: entered allmulticast mode [ 149.955571][ T9539] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 150.401780][ T9576] netlink: 'syz.4.952': attribute type 4 has an invalid length. [ 150.416965][ T9574] syzkaller1: entered promiscuous mode [ 150.442576][ T9574] syzkaller1: entered allmulticast mode [ 150.443662][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'. [ 150.712083][ T9599] netlink: 'syz.2.959': attribute type 1 has an invalid length. [ 150.927765][ T9600] bond0: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 151.063996][ T9623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.226372][ T9630] x_tables: duplicate underflow at hook 1 [ 152.101715][ T9693] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 152.249587][ T9648] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 152.393773][ T9710] ipt_REJECT: TCP_RESET invalid for non-tcp [ 152.670671][ T9729] netlink: 'syz.2.990': attribute type 12 has an invalid length. [ 153.067388][ T9754] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 153.232925][ T9764] tipc: Enabled bearer , priority 10 [ 153.251827][ T9764] wireguard: wg1: Could not create IPv4 socket [ 153.260810][ T9766] openvswitch: netlink: Flow key attr not present in new flow. [ 153.443803][ T5888] IPVS: starting estimator thread 0... [ 153.552526][ T9784] IPVS: using max 34 ests per chain, 81600 per kthread [ 153.634824][ T9794] netlink: 'syz.3.1012': attribute type 4 has an invalid length. [ 153.653853][ T9794] __nla_validate_parse: 20 callbacks suppressed [ 153.653868][ T9794] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1012'. [ 153.711827][ T9794] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 153.751378][ T9801] veth0: entered promiscuous mode [ 153.827497][ T9801] veth0: left promiscuous mode [ 153.979520][ T9819] sctp: [Deprecated]: syz.0.1021 (pid 9819) Use of int in maxseg socket option. [ 153.979520][ T9819] Use struct sctp_assoc_value instead [ 154.015183][ T9814] can: request_module (can-proto-0) failed. [ 154.353608][ T5887] tipc: Node number set to 2297174157 [ 154.574747][ T9868] xt_l2tp: v2 tid > 0xffff: 150994944 [ 154.733147][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1038'. [ 154.746620][ T9873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1037'. [ 154.899943][ T9883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1041'. [ 154.914393][ T9883] netlink: 'syz.2.1041': attribute type 7 has an invalid length. [ 154.927018][ T9883] netlink: 'syz.2.1041': attribute type 8 has an invalid length. [ 154.936269][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'. [ 155.023472][ T9892] netlink: 'syz.4.1044': attribute type 1 has an invalid length. [ 155.066434][ T9892] netlink: 'syz.4.1044': attribute type 1 has an invalid length. [ 155.092239][ T9892] netlink: 'syz.4.1044': attribute type 1 has an invalid length. [ 155.121773][ T9892] netlink: 'syz.4.1044': attribute type 2 has an invalid length. [ 155.156856][ T9892] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1044'. [ 155.356144][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1048'. [ 155.706055][ T9933] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 155.753895][ T9937] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1056'. [ 155.764560][ T9937] batman_adv: batadv0: Adding interface: dummy0 [ 155.771424][ T9937] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.802963][ T9937] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 155.924945][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1061'. [ 155.939354][ T9956] netlink: 'syz.4.1060': attribute type 1 has an invalid length. [ 156.277389][ T9985] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 156.426782][ T9996] veth0: entered promiscuous mode [ 156.440019][ T9996] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1075'. [ 156.468387][ T9993] batadv1: entered allmulticast mode [ 156.511309][ T9995] veth0: left promiscuous mode [ 156.627651][T10011] netlink: 'syz.1.1078': attribute type 7 has an invalid length. [ 156.785897][T10024] veth0: entered promiscuous mode [ 156.848745][T10024] geneve2: entered promiscuous mode [ 156.858443][T10024] geneve2: entered allmulticast mode [ 156.945800][T10030] sctp: [Deprecated]: syz.4.1085 (pid 10030) Use of int in maxseg socket option. [ 156.945800][T10030] Use struct sctp_assoc_value instead [ 156.978034][T10022] veth0: left promiscuous mode [ 157.440835][T10068] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 157.753719][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 158.035714][T10120] ip6t_srh: unknown srh match flags 536B [ 158.457390][T10145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.466358][T10145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.474850][T10145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.492743][T10145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.729973][T10172] dummy0: entered promiscuous mode [ 158.749003][T10172] vlan0: entered promiscuous mode [ 158.765874][T10173] __nla_validate_parse: 9 callbacks suppressed [ 158.765889][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 158.783001][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'. [ 158.872195][T10178] 8021q: VLANs not supported on lo [ 159.033824][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1132'. [ 159.055271][T10191] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 159.071438][T10191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.366186][T10217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.602696][T10247] xt_ipcomp: unknown flags B [ 159.778032][T10267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.808013][T10255] xt_CT: No such helper "snmp" [ 159.970812][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'. [ 159.998025][ T30] audit: type=1107 audit(1745400771.225:5): pid=10276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 160.266939][T10300] [H: renamed from veth0_vlan (while UP) [ 160.383056][T10306] netlink: 808 bytes leftover after parsing attributes in process `syz.3.1164'. [ 160.401145][T10306] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 160.404417][T10303] netlink: 'syz.0.1159': attribute type 11 has an invalid length. [ 160.410875][T10308] netlink: 808 bytes leftover after parsing attributes in process `syz.3.1164'. [ 160.426243][T10309] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 160.463364][T10303] netlink: 'syz.0.1159': attribute type 11 has an invalid length. [ 160.497234][T10303] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1159'. [ 160.780018][T10327] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1169'. [ 160.910983][T10336] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1173'. [ 160.921473][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1173'. [ 160.953244][T10338] tap0: tun_chr_ioctl cmd 1074025677 [ 160.967044][T10338] tap0: linktype set to 65534 [ 160.984993][T10338] tap0: tun_chr_ioctl cmd 1074025673 [ 160.998394][T10341] tap0: tun_chr_ioctl cmd 1074025677 [ 161.018827][T10341] tap0: linktype set to 65534 [ 161.135160][T10348] netlink: 'syz.2.1175': attribute type 16 has an invalid length. [ 161.144978][T10348] netlink: 'syz.2.1175': attribute type 17 has an invalid length. [ 161.456985][T10323] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 161.658657][T10369] syz.1.1182 (10369) used obsolete PPPIOCDETACH ioctl [ 162.041033][T10386] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 162.218574][T10400] netem: change failed [ 162.255980][T10402] netlink: 'syz.1.1191': attribute type 1 has an invalid length. [ 162.334713][T10404] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 162.352629][ T3515] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 162.364136][T10402] 8021q: adding VLAN 0 to HW filter on device bond5 [ 162.493495][ T3515] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 162.720286][T10415] xfrm1: entered allmulticast mode [ 163.118972][T10439] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 163.264929][T10442] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 163.339245][T10444] bond2: entered promiscuous mode [ 163.364571][T10444] bond2: entered allmulticast mode [ 163.375002][T10444] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.716972][T10444] bond2 (unregistering): Released all slaves [ 163.965139][T10450] __nla_validate_parse: 11 callbacks suppressed [ 163.965157][T10450] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1206'. [ 164.054752][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'. [ 164.115017][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'. [ 164.232424][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 164.548006][T10481] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1216'. [ 164.564009][T10481] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1216'. [ 164.821972][T10290] Set syz1 is full, maxelem 65536 reached [ 164.933477][T10490] netlink: 'syz.0.1219': attribute type 6 has an invalid length. [ 164.978885][T10492] netlink: 'syz.1.1221': attribute type 1 has an invalid length. [ 164.988575][T10492] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1221'. [ 165.101027][T10504] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1225'. [ 165.105182][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 165.138954][T10501] macsec0: entered promiscuous mode [ 165.218344][T10508] mac80211_hwsim hwsim8 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 165.272464][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 165.333338][T10515] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1230'. [ 165.379100][T10520] netlink: 'syz.0.1228': attribute type 10 has an invalid length. [ 165.398831][T10520] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1228'. [ 165.607109][T10536] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 165.616899][T10536] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 165.891493][ T3515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.901343][ T3515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.067470][T10573] bond2: entered promiscuous mode [ 166.073691][T10573] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.086249][T10576] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 2, id = 0 [ 166.312563][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 166.439193][T10596] xt_limit: Overflow, try lower: 0/0 [ 166.742609][T10614] netlink: 'syz.4.1262': attribute type 14 has an invalid length. [ 166.824063][T10620] netlink: 'syz.4.1266': attribute type 1 has an invalid length. [ 167.096006][T10645] netlink: 'syz.1.1272': attribute type 39 has an invalid length. [ 167.213715][T10653] netlink: 'syz.0.1276': attribute type 1 has an invalid length. [ 167.235487][T10652] Cannot find del_set index 3 as target [ 167.352440][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 167.798471][T10685] erspan0: left promiscuous mode [ 167.923036][ T13] wlan0: Trigger new scan to find an IBSS to join [ 168.198581][T10706] IPVS: length: 121 != 24 [ 168.215502][T10706] IPVS: length: 121 != 24 [ 168.238183][T10711] ï‰Oܼ: renamed from hsr0 (while UP) [ 168.276237][T10711] ï‰Oܼ: entered promiscuous mode [ 168.281654][T10711] A link change request failed with some changes committed already. Interface ï‰Oܼ may have been left with an inconsistent configuration, please check. [ 168.298168][T10714] netlink: 'syz.4.1295': attribute type 21 has an invalid length. [ 168.316873][T10714] netlink: 'syz.4.1295': attribute type 1 has an invalid length. [ 168.392467][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 168.976203][T10757] __nla_validate_parse: 22 callbacks suppressed [ 168.976217][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'. [ 169.085458][T10763] veth0: entered promiscuous mode [ 169.092676][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 169.103045][T10762] veth0: left promiscuous mode [ 169.195335][T10772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1313'. [ 169.204698][T10772] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1313'. [ 169.369737][T10779] xt_CT: No such helper "pptp" [ 169.432499][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 169.977508][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1330'. [ 170.207235][T10836] SET target dimension over the limit! [ 170.215076][T10835] netlink: 'syz.0.1336': attribute type 4 has an invalid length. [ 170.299335][T10847] 8021q: VLANs not supported on ip_vti0 [ 170.358732][T10850] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.472385][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 170.488279][T10865] netlink: 'syz.4.1346': attribute type 1 has an invalid length. [ 170.559446][T10865] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.610029][T10873] bond2: (slave gretap1): making interface the new active one [ 170.636829][T10873] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 170.780424][T10883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.810102][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1353'. [ 170.852884][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1353'. [ 170.918524][T10883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1351'. [ 171.138692][T10912] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1359'. [ 171.192670][T10912] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1359'. [ 171.512552][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 171.572007][T10947] SET target dimension over the limit! [ 171.615521][T10951] gre2: entered promiscuous mode [ 171.621618][T10951] gre2: entered allmulticast mode [ 171.716782][T10958] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 171.878682][T10973] xt_hashlimit: size too large, truncated to 1048576 [ 171.920128][T10975] can: request_module (can-proto-0) failed. [ 171.942259][T10976] vxcan1: tx address claim with dlc 0 [ 171.991737][T10988] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 172.193988][T11004] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.203351][T11004] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.212060][T11004] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.470387][T11020] tipc: Enabling of bearer rejected, media not registered [ 172.552518][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 172.725817][T11044] netlink: 'syz.0.1395': attribute type 4 has an invalid length. [ 172.772206][T11042] netlink: 'syz.1.1396': attribute type 7 has an invalid length. [ 172.781575][T11042] netlink: 'syz.1.1396': attribute type 8 has an invalid length. [ 172.872776][ T62] wlan0: Trigger new scan to find an IBSS to join [ 172.924299][T11049] netlink: 'syz.3.1400': attribute type 21 has an invalid length. [ 172.932233][T11049] netlink: 'syz.3.1400': attribute type 4 has an invalid length. [ 172.947836][T11049] netlink: 'syz.3.1400': attribute type 5 has an invalid length. [ 173.097867][T11064] netlink: 'syz.1.1407': attribute type 4 has an invalid length. [ 173.464196][T11092] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 173.489172][T11092] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 173.505849][T11092] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 173.515792][T11092] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 173.529224][T11093] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 173.592523][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 173.776343][ T3515] wlan0: Creating new IBSS network, BSSID 6e:01:b0:6c:d8:f5 [ 174.282095][T11124] __nla_validate_parse: 47 callbacks suppressed [ 174.282114][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'. [ 174.315449][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1425'. [ 174.632574][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 174.984827][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1439'. [ 175.108058][T11175] bond0: entered promiscuous mode [ 175.141738][T11175] batadv0: entered promiscuous mode [ 175.154273][T11175] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 175.198972][T11175] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 175.209593][T11175] bond0: left promiscuous mode [ 175.216719][T11175] batadv0: left promiscuous mode [ 175.277699][T11180] vxcan1 speed is unknown, defaulting to 1000 [ 175.278019][T11181] netlink: 'syz.3.1442': attribute type 7 has an invalid length. [ 175.307082][T11180] vxcan1 speed is unknown, defaulting to 1000 [ 175.340411][T11180] vxcan1 speed is unknown, defaulting to 1000 [ 175.473918][T11192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.585312][T11180] infiniband syz2: set active [ 175.590336][T11180] infiniband syz2: added vxcan1 [ 175.597369][ T975] vxcan1 speed is unknown, defaulting to 1000 [ 175.668147][T11180] RDS/IB: syz2: added [ 175.672483][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 175.672908][T11180] smc: adding ib device syz2 with port count 1 [ 175.685746][T11180] smc: ib device syz2 port 1 has pnetid [ 175.719294][T11204] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 175.750956][ T975] vxcan1 speed is unknown, defaulting to 1000 [ 175.764967][T11209] netlink: 'syz.4.1452': attribute type 1 has an invalid length. [ 175.787963][T11180] vxcan1 speed is unknown, defaulting to 1000 [ 175.791096][T11206] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 175.812514][T11209] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1452'. [ 175.835506][T11212] ü: renamed from bridge_slave_0 (while UP) [ 175.872873][T11212] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1453'. [ 176.000106][T11219] tipc: Can't bind to reserved service type 3 [ 176.081166][T11221] netlink: 'syz.3.1457': attribute type 28 has an invalid length. [ 176.114437][T11221] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1457'. [ 176.125992][T11180] vxcan1 speed is unknown, defaulting to 1000 [ 176.348966][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1459'. [ 176.440485][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1460'. [ 176.457859][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1460'. [ 176.520638][T11180] vxcan1 speed is unknown, defaulting to 1000 [ 176.712416][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 176.885880][T11257] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1468'. [ 177.202137][T11180] vxcan1 speed is unknown, defaulting to 1000 [ 177.309163][T11281] tipc: New replicast peer: 255.255.255.255 [ 177.327802][T11281] tipc: Enabled bearer , priority 10 [ 177.351285][T11281] geneve1: entered promiscuous mode [ 177.357278][T11281] geneve1: entered allmulticast mode [ 177.556694][T11296] tipc: Bearer : already 2 bearers with priority 10 [ 177.566574][T11296] tipc: Bearer : trying with adjusted priority [ 177.574673][T11296] tipc: Enabling of bearer rejected, failed to enable media [ 177.687112][T11180] vxcan1 speed is unknown, defaulting to 1000 [ 177.752491][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 177.978941][T11319] Can't find ip_set type [ 178.197118][T11331] bridge_slave_0: default FDB implementation only supports local addresses [ 178.679760][T11365] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 178.792394][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 178.815293][T11371] bond3: entered promiscuous mode [ 178.820424][T11371] bond3: entered allmulticast mode [ 178.888646][T11374] xfrm1: entered allmulticast mode [ 178.945374][T11377] vxcan1 speed is unknown, defaulting to 1000 [ 179.434649][T11402] __nla_validate_parse: 11 callbacks suppressed [ 179.434667][T11402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1508'. [ 179.832514][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 180.041191][T11435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1520'. [ 180.075572][T11435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1520'. [ 180.121829][T11441] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 180.463810][T11457] validate_nla: 1 callbacks suppressed [ 180.463828][T11457] netlink: 'syz.1.1524': attribute type 4 has an invalid length. [ 180.736448][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1530'. [ 180.872426][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 181.089969][T11495] netlink: 'syz.1.1537': attribute type 3 has an invalid length. [ 181.205504][T11502] bond0: entered promiscuous mode [ 181.215409][T11502] batadv0: entered promiscuous mode [ 181.221593][T11502] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 181.236557][T11502] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 181.244324][T11502] bond0: left promiscuous mode [ 181.249590][T11502] batadv0: left promiscuous mode [ 181.271080][T11499] x_tables: ip6_tables: udp match: only valid for protocol 17 [ 181.335092][T11504] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1541'. [ 181.449535][T11511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1544'. [ 181.701937][T11536] netlink: 'syz.2.1550': attribute type 32 has an invalid length. [ 181.834951][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1552'. [ 181.912441][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 181.929487][T11550] netlink: 'syz.2.1556': attribute type 9 has an invalid length. [ 181.937318][T11551] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 181.938130][T11551] macsec1: entered allmulticast mode [ 181.946794][T11548] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1555'. [ 181.950016][T11551] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 181.969067][T11551] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 181.980657][T11551] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 181.999558][T11548] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1555'. [ 182.560368][T11596] bridge2: entered promiscuous mode [ 182.611051][T11596] bridge2: entered allmulticast mode [ 182.634100][T11603] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.1570'. [ 182.639345][T11605] syz.4.1571: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 182.659652][T11603] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 182.671417][T11605] CPU: 1 UID: 0 PID: 11605 Comm: syz.4.1571 Not tainted 6.15.0-rc2-syzkaller-00279-g491ef1117c56 #0 PREEMPT(full) [ 182.671442][T11605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.671457][T11605] Call Trace: [ 182.671464][T11605] [ 182.671472][T11605] dump_stack_lvl+0x241/0x360 [ 182.671505][T11605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.671529][T11605] ? __pfx__printk+0x10/0x10 [ 182.671552][T11605] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 182.671573][T11605] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 182.671592][T11605] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 182.671614][T11605] warn_alloc+0x27c/0x410 [ 182.671639][T11605] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 182.671661][T11605] ? __pfx_warn_alloc+0x10/0x10 [ 182.671684][T11605] ? kasan_save_track+0x3f/0x80 [ 182.671706][T11605] ? __kasan_kmalloc+0x9d/0xb0 [ 182.671730][T11605] ? xsk_setsockopt+0x449/0x840 [ 182.671753][T11605] ? do_sock_setsockopt+0x3b1/0x710 [ 182.671775][T11605] ? __x64_sys_setsockopt+0x187/0x210 [ 182.671797][T11605] ? do_syscall_64+0xf3/0x210 [ 182.671814][T11605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.671848][T11605] __vmalloc_node_range_noprof+0x128/0x1390 [ 182.671902][T11605] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 182.671927][T11605] ? __kasan_kmalloc+0x9d/0xb0 [ 182.671957][T11605] vmalloc_user_noprof+0x74/0x80 [ 182.671977][T11605] ? xskq_create+0xb6/0x170 [ 182.671991][T11605] xskq_create+0xb6/0x170 [ 182.672009][T11605] xsk_init_queue+0xa1/0x100 [ 182.672036][T11605] xsk_setsockopt+0x449/0x840 [ 182.672062][T11605] ? __pfx_xsk_setsockopt+0x10/0x10 [ 182.672086][T11605] ? __pfx_aa_sk_perm+0x10/0x10 [ 182.672106][T11605] ? __lock_acquire+0xad5/0xd80 [ 182.672131][T11605] ? aa_sock_opt_perm+0x79/0x120 [ 182.672157][T11605] ? __pfx_xsk_setsockopt+0x10/0x10 [ 182.672179][T11605] do_sock_setsockopt+0x3b1/0x710 [ 182.672210][T11605] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 182.672232][T11605] ? __fget_files+0x2a/0x420 [ 182.672250][T11605] ? __fget_files+0x39d/0x420 [ 182.672265][T11605] ? __fget_files+0x2a/0x420 [ 182.672292][T11605] __x64_sys_setsockopt+0x187/0x210 [ 182.672320][T11605] do_syscall_64+0xf3/0x210 [ 182.672336][T11605] ? clear_bhb_loop+0x45/0xa0 [ 182.672357][T11605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.672372][T11605] RIP: 0033:0x7f6a59b8e169 [ 182.672387][T11605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.672400][T11605] RSP: 002b:00007f6a5a910038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 182.672417][T11605] RAX: ffffffffffffffda RBX: 00007f6a59db5fa0 RCX: 00007f6a59b8e169 [ 182.672430][T11605] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 182.672439][T11605] RBP: 00007f6a59c10a68 R08: 0000000000000004 R09: 0000000000000000 [ 182.672449][T11605] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.672459][T11605] R13: 0000000000000000 R14: 00007f6a59db5fa0 R15: 00007ffd6cfa8de8 [ 182.672486][T11605] [ 182.952366][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 182.997534][T11610] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 183.023856][T11605] Mem-Info: [ 183.027017][T11605] active_anon:4054 inactive_anon:0 isolated_anon:0 [ 183.027017][T11605] active_file:1492 inactive_file:38348 isolated_file:0 [ 183.027017][T11605] unevictable:768 dirty:116 writeback:0 [ 183.027017][T11605] slab_reclaimable:10832 slab_unreclaimable:106559 [ 183.027017][T11605] mapped:28415 shmem:1413 pagetables:808 [ 183.027017][T11605] sec_pagetables:0 bounce:0 [ 183.027017][T11605] kernel_misc_reclaimable:0 [ 183.027017][T11605] free:1337164 free_pcp:532 free_cma:0 [ 183.162697][T11605] Node 0 active_anon:16316kB inactive_anon:0kB active_file:5968kB inactive_file:153316kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113660kB dirty:460kB writeback:0kB shmem:4116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11400kB pagetables:3032kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 183.197955][T11605] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 183.238529][T11605] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.266233][T11605] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 183.272078][T11605] Node 0 DMA32 free:1427532kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:16508kB inactive_anon:0kB active_file:5968kB inactive_file:153224kB unevictable:1536kB writepending:460kB present:3129332kB managed:2547268kB mlocked:0kB bounce:0kB free_pcp:1088kB local_pcp:1024kB free_cma:0kB [ 183.312425][T11605] lowmem_reserve[]: 0 0 0 0 0 [ 183.317184][T11605] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 183.350581][T11605] lowmem_reserve[]: 0 0 0 0 0 [ 183.355735][T11605] Node 1 Normal free:3907124kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.425290][T11605] lowmem_reserve[]: 0 0 0 0 0 [ 183.430211][T11605] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 183.444654][T11605] Node 0 DMA32: 2*4kB (UE) 136*8kB (ME) 107*16kB (UME) 104*32kB (UME) 62*64kB (UME) 29*128kB (M) 21*256kB (UM) 12*512kB (UME) 4*1024kB (M) 6*2048kB (UM) 338*4096kB (UM) = 1426168kB [ 183.503784][T11605] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 183.529390][T11605] Node 1 Normal: 237*4kB (UME) 36*8kB (UME) 30*16kB (UME) 228*32kB (UME) 108*64kB (UME) 36*128kB (UM) 12*256kB (UME) 9*512kB (UME) 4*1024kB (UME) 4*2048kB (UE) 944*4096kB (M) = 3907124kB [ 183.538338][T11634] netlink: 'syz.1.1581': attribute type 10 has an invalid length. [ 183.553614][T11605] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.570639][T11605] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.580521][T11605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.595350][T11605] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.606695][T11605] 41253 total pagecache pages [ 183.611471][T11605] 0 pages in swap cache [ 183.619541][T11605] Free swap = 124996kB [ 183.624480][T11634] veth0_macvtap: left promiscuous mode [ 183.631695][T11605] Total swap = 124996kB [ 183.639113][T11605] 2097051 pages RAM [ 183.644945][T11605] 0 pages HighMem/MovableOnly [ 183.649915][T11605] 428576 pages reserved [ 183.657722][T11605] 0 pages cma reserved [ 183.786042][T11651] veth0: entered promiscuous mode [ 183.831494][T11651] geneve1: entered promiscuous mode [ 183.842073][T11651] geneve1: entered allmulticast mode [ 183.897010][T11650] veth0: left promiscuous mode [ 183.948338][T11660] netlink: 'syz.3.1588': attribute type 14 has an invalid length. [ 183.992515][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 184.206611][T11676] netlink: 'syz.3.1595': attribute type 1 has an invalid length. [ 184.218387][T11676] netlink: 'syz.3.1595': attribute type 3 has an invalid length. [ 184.226654][T11678] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 184.475694][T11693] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 184.507795][T11702] __nla_validate_parse: 10 callbacks suppressed [ 184.507815][T11702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1604'. [ 184.546457][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1600'. [ 184.609042][T11708] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 184.613847][T11703] vlan3: entered allmulticast mode [ 184.646864][T11703] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 184.875277][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1612'. [ 184.933636][T11732] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1612'. [ 185.032458][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 185.064686][T11741] netlink: 'syz.0.1617': attribute type 1 has an invalid length. [ 185.093711][T11741] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 185.205300][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1624'. [ 185.232256][T11756] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 185.241314][T11756] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 185.259677][T11757] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1623'. [ 185.314194][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1622'. [ 185.335457][T11758] xt_CT: No such helper "snmp" [ 185.380728][T11765] bond3: entered promiscuous mode [ 185.390030][T11765] bond3: entered allmulticast mode [ 185.398667][T11765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.552147][T11765] bond3 (unregistering): Released all slaves [ 185.641630][T11767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1626'. [ 185.782249][T11790] netlink: 'syz.3.1629': attribute type 11 has an invalid length. [ 185.821751][T11788] netlink: 'syz.0.1631': attribute type 10 has an invalid length. [ 185.947210][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1634'. [ 185.957687][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1634'. [ 186.072499][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 186.143755][T11810] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 186.196257][T11810] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 186.229698][ T5842] block nbd0: Receive control failed (result -32) [ 187.112377][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 187.138709][T11881] netlink: 'syz.2.1661': attribute type 2 has an invalid length. [ 187.238604][T11890] ip6gre1: entered allmulticast mode [ 187.472606][T11911] netlink: 'syz.0.1668': attribute type 1 has an invalid length. [ 187.566628][T11911] 8021q: adding VLAN 0 to HW filter on device bond5 [ 188.113651][T11963] x_tables: duplicate entry at hook 2 [ 188.132854][T11965] netlink: 'syz.4.1684': attribute type 1 has an invalid length. [ 188.152539][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 188.249733][T11965] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.317238][T11965] vlan0: entered allmulticast mode [ 188.329887][T11965] bond3: entered allmulticast mode [ 188.367182][T11984] netlink: 'syz.0.1691': attribute type 1 has an invalid length. [ 188.534287][T11987] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20003 [ 188.544437][ T30] audit: type=1800 audit(1745400799.775:6): pid=11990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1693" name=D6 dev="tmpfs" ino=1797 res=0 errno=0 [ 188.700646][T11999] xt_l2tp: wrong L2TP version: 0 [ 188.733848][T11999] lo: entered allmulticast mode [ 188.752053][T12004] xt_l2tp: wrong L2TP version: 0 [ 188.827725][T12007] tap0: tun_chr_ioctl cmd 2148553947 [ 189.023287][T12023] openvswitch: netlink: Missing key (keys=40, expected=100) [ 189.193404][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 189.223218][T12036] netlink: 'syz.0.1706': attribute type 15 has an invalid length. [ 189.871218][T12080] netlink: 'syz.2.1725': attribute type 1 has an invalid length. [ 189.879595][T12080] __nla_validate_parse: 21 callbacks suppressed [ 189.879608][T12080] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1725'. [ 190.088873][T12094] xt_addrtype: ipv6 does not support BROADCAST matching [ 190.158286][T12093] xt_CT: No such helper "snmp" [ 190.232562][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 190.568248][T12123] Bluetooth: MGMT ver 1.23 [ 190.975554][T12149] x_tables: duplicate underflow at hook 3 [ 191.081138][T12160] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 191.120151][T12158] netlink: 'syz.1.1748': attribute type 4 has an invalid length. [ 191.272493][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 191.289417][T12175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1752'. [ 191.306560][T12175] netlink: 'syz.0.1752': attribute type 7 has an invalid length. [ 191.343195][T12175] netlink: 'syz.0.1752': attribute type 8 has an invalid length. [ 191.361965][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1752'. [ 191.425009][T12188] netlink: 'syz.0.1752': attribute type 11 has an invalid length. [ 191.437091][T12188] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1752'. [ 191.586915][T12192] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.595776][T12192] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.604997][T12192] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.614142][T12192] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.663195][T12198] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 192.167479][T12230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1768'. [ 192.184900][T12227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1768'. [ 192.311372][T12247] vxcan1 speed is unknown, defaulting to 1000 [ 192.317671][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 192.549753][T12260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1777'. [ 193.097357][T12280] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1783'. [ 193.106936][T12280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.352480][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 193.429238][T12299] xt_hashlimit: size too large, truncated to 1048576 [ 193.589597][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1790'. [ 194.104563][T12334] netlink: 'syz.0.1797': attribute type 12 has an invalid length. [ 194.218104][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1800'. [ 194.320201][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.392386][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 194.411431][T12352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.290129][T12422] netlink: 'syz.0.1825': attribute type 23 has an invalid length. [ 195.305416][T12418] __nla_validate_parse: 1 callbacks suppressed [ 195.305433][T12418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1825'. [ 195.393820][T12427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1828'. [ 195.409109][T12427] gtp0: entered promiscuous mode [ 195.415001][T12427] gtp0: entered allmulticast mode [ 195.432396][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 195.518815][T12434] veth9: entered promiscuous mode [ 195.555724][T12437] bridge0: port 3(macsec0) entered blocking state [ 195.563591][T12437] bridge0: port 3(macsec0) entered disabled state [ 195.576774][T12437] macsec0: entered allmulticast mode [ 195.582094][T12437] veth1_macvtap: entered allmulticast mode [ 195.596938][T12437] macsec0: entered promiscuous mode [ 195.603492][T12437] bridge0: port 3(macsec0) entered blocking state [ 195.610748][T12437] bridge0: port 3(macsec0) entered forwarding state [ 195.681588][T12443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1833'. [ 195.691041][T12443] openvswitch: netlink: nsh attr 0 has unexpected len 32764 expected 0 [ 195.700143][T12443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.787823][ T62] tipc: Subscription rejected, illegal request [ 195.813584][T12451] RDS: rds_bind could not find a transport for ::ffff:10.1.0.255, load rds_tcp or rds_rdma? [ 196.071447][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1844'. [ 196.086692][T12474] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1844'. [ 196.097390][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1844'. [ 196.220297][T12483] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1847'. [ 196.320821][T12492] geneve1: entered promiscuous mode [ 196.355324][T12492] netlink: 'syz.0.1847': attribute type 1 has an invalid length. [ 196.377655][T12492] netlink: 'syz.0.1847': attribute type 1 has an invalid length. [ 196.472381][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 196.500060][T12507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1853'. [ 196.628648][T12516] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1856'. [ 196.664887][T12519] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1857'. [ 196.676445][T12519] bridge_slave_1: entered allmulticast mode [ 196.958767][T12540] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 197.082012][T12547] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.261653][T12550] bond4: entered promiscuous mode [ 197.269217][T12550] bond4: entered allmulticast mode [ 197.298451][T12550] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.355854][T12545] batadv0: entered promiscuous mode [ 197.382564][T12545] macsec2: entered promiscuous mode [ 197.395060][T12545] macsec2: entered allmulticast mode [ 197.413575][T12565] netlink: 'syz.2.1869': attribute type 1 has an invalid length. [ 197.414110][T12545] batadv0: entered allmulticast mode [ 197.468242][T12565] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.493649][T12564] bond5: (slave gretap1): making interface the new active one [ 197.501736][T12564] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 197.512521][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 197.946383][T12603] netlink: zone id is out of range [ 197.961881][T12603] netlink: zone id is out of range [ 197.983492][T12603] netlink: zone id is out of range [ 197.997070][T12603] netlink: zone id is out of range [ 198.143503][T12616] netlink: 'syz.1.1886': attribute type 10 has an invalid length. [ 198.165838][T12616] bridge0: entered allmulticast mode [ 198.369402][T12625] tc_dump_action: action bad kind [ 198.498580][T12639] netlink: 'syz.2.1894': attribute type 1 has an invalid length. [ 198.595939][T12643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.633314][T12643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.726188][T12646] veth3: entered promiscuous mode [ 199.121036][T12676] netlink: 'syz.3.1907': attribute type 1 has an invalid length. [ 199.132207][T12676] netlink: 'syz.3.1907': attribute type 2 has an invalid length. [ 199.592497][ C0] net_ratelimit: 1 callbacks suppressed [ 199.592516][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 200.632485][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 200.821231][T12718] netlink: 'syz.3.1918': attribute type 1 has an invalid length. [ 200.854323][T12721] __nla_validate_parse: 10 callbacks suppressed [ 200.854340][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'. [ 200.947694][T12727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1923'. [ 200.993377][T12732] ªªªªªª: renamed from vlan0 (while UP) [ 201.097733][T12734] SET target dimension over the limit! [ 201.134617][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1927'. [ 201.230076][T12757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1929'. [ 201.337957][T12765] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1932'. [ 201.349097][T12765] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 201.504373][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'. [ 201.524987][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 201.531802][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 201.540353][ T55] Bluetooth: hci1: command 0x0401 tx timeout [ 201.672390][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 201.820299][T12803] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 201.842057][T12803] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1944'. [ 201.862480][T12803] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1944'. [ 201.877819][T12803] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1944'. [ 201.955415][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1946'. [ 202.004212][T12813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.064688][T12813] team0: Unable to change to the same mode the team is in [ 202.712389][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 203.018801][T12892] netlink: 'syz.3.1970': attribute type 11 has an invalid length. [ 203.133940][T12892] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.157501][T12892] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.209251][T12895] netlink: 'syz.2.1973': attribute type 16 has an invalid length. [ 203.220288][T12895] netlink: 'syz.2.1973': attribute type 17 has an invalid length. [ 203.321451][T12895] dummy0: left promiscuous mode [ 203.333193][T12895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.390168][T12892] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.432845][T12892] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.556035][T12892] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.586332][T12892] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.594992][ T5846] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 203.742196][T12919] xt_CT: No such helper "pptp" [ 203.752417][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 203.825864][T12892] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.859225][T12892] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.865959][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 203.903593][ T12] ------------[ cut here ]------------ [ 203.909106][ T12] WARNING: CPU: 1 PID: 12 at net/mac80211/scan.c:1213 ieee80211_request_ibss_scan+0x735/0x7c0 [ 203.922631][ T12] Modules linked in: [ 203.926783][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc2-syzkaller-00279-g491ef1117c56 #0 PREEMPT(full) [ 203.939184][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.949712][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 203.956411][ T12] RIP: 0010:ieee80211_request_ibss_scan+0x735/0x7c0 [ 203.963454][ T12] Code: e8 00 6d 2b f6 eb 05 e8 f9 6c 2b f6 b8 ea ff ff ff e9 f0 f9 ff ff e8 ea 6c 2b f6 90 0f 0b 90 e9 b0 f9 ff ff e8 dc 6c 2b f6 90 <0f> 0b 90 eb dd 48 c7 c1 60 14 60 90 80 e1 07 80 c1 03 38 c1 0f 8c [ 203.983435][ T12] RSP: 0018:ffffc90000117880 EFLAGS: 00010293 [ 203.989532][ T12] RAX: ffffffff8b974de4 RBX: 0000000000000000 RCX: ffff88801ceeda00 [ 203.998183][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.006311][ T12] RBP: ffffc90000117ac0 R08: ffffffff8b974bfe R09: 1ffff92000022ec0 [ 204.014372][ T12] R10: dffffc0000000000 R11: fffff52000022ec1 R12: 0000000000000006 [ 204.022452][ T12] R13: 0000000000000c80 R14: dffffc0000000000 R15: ffff888028ab8e80 [ 204.030439][ T12] FS: 0000000000000000(0000) GS:ffff88812509a000(0000) knlGS:0000000000000000 [ 204.039420][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.046214][ T12] CR2: 000055556116c808 CR3: 0000000069728000 CR4: 00000000003526f0 [ 204.054241][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 204.062226][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 204.070299][ T12] Call Trace: [ 204.073913][ T12] [ 204.076870][ T12] ieee80211_ibss_work+0xe2b/0x14e0 [ 204.082207][ T12] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 204.089248][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 204.094537][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 204.100887][ T12] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 204.106591][ T12] ? kcov_remote_stop+0x78/0x6f0 [ 204.111552][ T12] ? skb_dequeue+0x113/0x150 [ 204.116197][ T12] ? ieee80211_iface_work+0xde4/0x1100 [ 204.121693][ T12] ? ieee80211_iface_work+0x1050/0x1100 [ 204.127283][ T12] cfg80211_wiphy_work+0x2f0/0x490 [ 204.132438][ T12] ? process_scheduled_works+0x9cb/0x18e0 [ 204.138168][ T12] process_scheduled_works+0xac3/0x18e0 [ 204.143789][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 204.149801][ T12] ? assign_work+0x367/0x3d0 [ 204.156376][ T12] worker_thread+0x870/0xd50 [ 204.161011][ T12] ? __kthread_parkme+0x1a8/0x200 [ 204.166107][ T12] ? __pfx_worker_thread+0x10/0x10 [ 204.171234][ T12] kthread+0x7b7/0x940 [ 204.175658][ T12] ? __pfx_worker_thread+0x10/0x10 [ 204.180821][ T12] ? __pfx_kthread+0x10/0x10 [ 204.185485][ T12] ? __pfx_kthread+0x10/0x10 [ 204.190093][ T12] ? __pfx_kthread+0x10/0x10 [ 204.194770][ T12] ? __pfx_kthread+0x10/0x10 [ 204.199374][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 204.204647][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 204.209861][ T12] ? __pfx_kthread+0x10/0x10 [ 204.214526][ T12] ret_from_fork+0x4b/0x80 [ 204.218959][ T12] ? __pfx_kthread+0x10/0x10 [ 204.223630][ T12] ret_from_fork_asm+0x1a/0x30 [ 204.228424][ T12] [ 204.231471][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 204.238757][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc2-syzkaller-00279-g491ef1117c56 #0 PREEMPT(full) [ 204.250743][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 204.260810][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 204.267079][ T12] Call Trace: [ 204.270369][ T12] [ 204.273312][ T12] dump_stack_lvl+0x241/0x360 [ 204.278015][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.283239][ T12] ? __pfx__printk+0x10/0x10 [ 204.287853][ T12] ? vscnprintf+0x5d/0x90 [ 204.292207][ T12] panic+0x349/0x880 [ 204.296125][ T12] ? __warn+0x174/0x4d0 [ 204.300304][ T12] ? __pfx_panic+0x10/0x10 [ 204.304742][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 204.309682][ T12] __warn+0x344/0x4d0 [ 204.313671][ T12] ? ieee80211_request_ibss_scan+0x735/0x7c0 [ 204.319675][ T12] report_bug+0x2b3/0x500 [ 204.324018][ T12] ? ieee80211_request_ibss_scan+0x735/0x7c0 [ 204.329994][ T12] ? ieee80211_request_ibss_scan+0x735/0x7c0 [ 204.335969][ T12] ? ieee80211_request_ibss_scan+0x737/0x7c0 [ 204.341941][ T12] handle_bug+0x89/0x170 [ 204.346183][ T12] exc_invalid_op+0x1a/0x50 [ 204.350692][ T12] asm_exc_invalid_op+0x1a/0x20 [ 204.355536][ T12] RIP: 0010:ieee80211_request_ibss_scan+0x735/0x7c0 [ 204.362117][ T12] Code: e8 00 6d 2b f6 eb 05 e8 f9 6c 2b f6 b8 ea ff ff ff e9 f0 f9 ff ff e8 ea 6c 2b f6 90 0f 0b 90 e9 b0 f9 ff ff e8 dc 6c 2b f6 90 <0f> 0b 90 eb dd 48 c7 c1 60 14 60 90 80 e1 07 80 c1 03 38 c1 0f 8c [ 204.381718][ T12] RSP: 0018:ffffc90000117880 EFLAGS: 00010293 [ 204.387781][ T12] RAX: ffffffff8b974de4 RBX: 0000000000000000 RCX: ffff88801ceeda00 [ 204.395743][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.403702][ T12] RBP: ffffc90000117ac0 R08: ffffffff8b974bfe R09: 1ffff92000022ec0 [ 204.411666][ T12] R10: dffffc0000000000 R11: fffff52000022ec1 R12: 0000000000000006 [ 204.419633][ T12] R13: 0000000000000c80 R14: dffffc0000000000 R15: ffff888028ab8e80 [ 204.427603][ T12] ? ieee80211_request_ibss_scan+0x54e/0x7c0 [ 204.433576][ T12] ? ieee80211_request_ibss_scan+0x734/0x7c0 [ 204.439562][ T12] ieee80211_ibss_work+0xe2b/0x14e0 [ 204.444757][ T12] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 204.450643][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 204.455832][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 204.462155][ T12] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 204.467785][ T12] ? kcov_remote_stop+0x78/0x6f0 [ 204.472716][ T12] ? skb_dequeue+0x113/0x150 [ 204.477298][ T12] ? ieee80211_iface_work+0xde4/0x1100 [ 204.482758][ T12] ? ieee80211_iface_work+0x1050/0x1100 [ 204.488303][ T12] cfg80211_wiphy_work+0x2f0/0x490 [ 204.493410][ T12] ? process_scheduled_works+0x9cb/0x18e0 [ 204.499128][ T12] process_scheduled_works+0xac3/0x18e0 [ 204.504774][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 204.510804][ T12] ? assign_work+0x367/0x3d0 [ 204.515401][ T12] worker_thread+0x870/0xd50 [ 204.519999][ T12] ? __kthread_parkme+0x1a8/0x200 [ 204.525016][ T12] ? __pfx_worker_thread+0x10/0x10 [ 204.530121][ T12] kthread+0x7b7/0x940 [ 204.534185][ T12] ? __pfx_worker_thread+0x10/0x10 [ 204.539292][ T12] ? __pfx_kthread+0x10/0x10 [ 204.543872][ T12] ? __pfx_kthread+0x10/0x10 [ 204.548455][ T12] ? __pfx_kthread+0x10/0x10 [ 204.553056][ T12] ? __pfx_kthread+0x10/0x10 [ 204.557764][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 204.562974][ T12] ? lockdep_hardirqs_on+0x9d/0x150 [ 204.568166][ T12] ? __pfx_kthread+0x10/0x10 [ 204.572748][ T12] ret_from_fork+0x4b/0x80 [ 204.577158][ T12] ? __pfx_kthread+0x10/0x10 [ 204.581740][ T12] ret_from_fork_asm+0x1a/0x30 [ 204.586514][ T12] [ 204.589660][ T12] Kernel Offset: disabled [ 204.593976][ T12] Rebooting in 86400 seconds..