last executing test programs: 2.038686707s ago: executing program 2 (id=2227): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x9}], 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0xfffc, 0x0, 0xa}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0xfffffffffffffffd, 0x0, 0x80, 0x0, 0x0, 0x80000000000002, 0x0, 0x10000000000000}, {}, {}, 0x70bd2c, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha1-neon)\x00'}}}]}, 0x13c}}, 0x4854) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvfrom(r3, 0x0, 0x0, 0x40, 0x0, 0x783e0a94) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed}, 0x8) bind$bt_sco(r1, &(0x7f0000000700)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160affffffff0000000000000200020073797a30000000000900010073797a300000000014000380080001400000020408000240000000001400000011000100007d03c4780000000000000a00000000"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@ipv6_getroute={0x0, 0x1a, 0x20, 0x70bd28, 0x25dfdbfe, {0xa, 0x90, 0x14, 0x9, 0xfc, 0x0, 0xff, 0x6, 0x100}, [@RTA_GATEWAY={0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x2c}}, @RTA_ENCAP={0x0, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0x0, 0x1, 0x692f}}]}, 0x17}}, 0x20004084) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}}, 0x20040000) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8983, &(0x7f00000002c0)={0x8, 'batadv0\x00', {'pim6reg1\x00'}, 0x6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x0, 0x5, 0x21, &(0x7f0000000040)="50f1086ab5", &(0x7f00000000c0)=""/33, 0xfffffff4, 0x0, 0xa6, 0xb, &(0x7f00000004c0)="b06338cf76a123dd1c393dd7b4270d68ef6e14ec95546b6ebfd339abb3daf54d289a98be1755f41fae05ed4694e9a3e6681a38a5756b81e3417203b8fb9ced852db59c12679542ec4e4aafac56d5fd67f607c90b676563516746c90a5f3ba87f0464737ec4c3ad4175988ed72e4cd5eae1df893e04d22f69c97acd727341181df970d87f4a0863a39ace7a762c35b55dcc709ebea6544851c50ae3459c3281c3ed1e7028701c", &(0x7f0000000100)="6f0472baa8da30ceaa9532", 0x2, 0x0, 0x80000001}, 0x50) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a00006000000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB="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"], 0xc4}}, 0x8044) 1.727745596s ago: executing program 1 (id=2233): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60cb653e00403a0100000000000000000000ffffac1414bbff020000000000000000000000000001040090780000000060a3000000003300ff0100000000000000000000000000010000000000004c00000000ffff0000000004000000000000000b0b79279cea458818bb05e13498dd"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000000010104000000000019000000020000001c00188008000340000000000800014000001a04080002408000000124000180696d018008000100e000ce455a4147a687c600010c0002800500010000a883c00e53d2771095b24f985b94e4000000"], 0x54}}, 0x20008820) 1.545081604s ago: executing program 1 (id=2236): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}}, 0x0) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000003780)=""/4097, 0x1001}], 0x2}, 0x4}], 0x1, 0x40010000, 0x0) (async) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000003"], 0x20}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x1, 0x70bd27, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.428280757s ago: executing program 1 (id=2238): r0 = socket(0x11, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x107, 0x14, 0x0, 0x20000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) getsockname(r0, &(0x7f0000000200)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_mreqn(r0, 0x0, 0x3, &(0x7f0000000000)={@loopback, @multicast1}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$netlink(r4, 0x10e, 0x0, &(0x7f0000000280)=""/265, &(0x7f0000000100)=0xfffffe20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000000d3000000000000000000"], 0x14}}, 0x0) 1.282287891s ago: executing program 3 (id=2241): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e1907", 0xc, 0x2f, 0x0, @remote, @mcast2, {[], {0x0, 0x22eb, 0xffffffffffffff00, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@perf_event={0xe5}}, 0x18) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0)={r5}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x880008}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4f}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10001, 0x4f}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xbbe9, 0x39}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0xe}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x3c, r12, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r13 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r10, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfce) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x88, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6006}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac0b]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac09, 0xfac12, 0x1b, 0xfac04, 0xfac01]}, @NL80211_ATTR_CONTROL_PORT={0x4}]]}, 0x88}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x28}]}]}, 0x44}}, 0x2000c000) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d01000000fffe8000000000000000000000000000bbff0200000000000000000000000000018800907810000000ff01000000000000000000000000000101b3b0c023154defac61efc053e5aa003557d5348ea5bab8d83894deb58261165ef82616ed62610091151f37cbb7bdb02649531e66eabc58815cc22e665871e4c0a9fc4fcedde39e632eb6ae4026ddfe"], 0x0) 1.252849745s ago: executing program 1 (id=2242): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0xed000000, 0x10, &(0x7f0000000200), 0x10}, 0x80) 1.13777409s ago: executing program 1 (id=2244): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x76, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0xa0, 0x0, 0x0, r1}, {0x9, 0x0, 0x100000001, 0xb0, 0x5, 0x12851897, 0x2, 0x7}, {0x4, 0x100000000, 0x101, 0x6}, 0xff, 0x200, 0x1, 0x1, 0x2, 0x1}, {{@in=@multicast2, 0x4d6, 0x32}, 0x2, @in=@broadcast, 0x3500, 0x4, 0x0, 0x3, 0x40, 0x8}}, 0xe8) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x6, @mcast1, 0x4}}, 0x24) 1.092800034s ago: executing program 2 (id=2246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008891}, 0x48845) r2 = socket$kcm(0x25, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x408c050) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008891}, 0x48845) (async) socket$kcm(0x25, 0x1, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x408c050) (async) 972.462286ms ago: executing program 0 (id=2247): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x0, 0xffff, 0x4, 0x100, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x0, 0xffff, 0x4, 0x100, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@type_tag={0x6, 0x0, 0x0, 0x12, 0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x8, 0x6}, {0x4, 0x1}, {0xa, 0x4}]}]}, {0x0, [0x61, 0x61, 0x61]}}, &(0x7f0000000140)=""/184, 0x4d, 0xb8, 0x1, 0x6}, 0x28) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@type_tag={0x6, 0x0, 0x0, 0x12, 0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x8, 0x6}, {0x4, 0x1}, {0xa, 0x4}]}]}, {0x0, [0x61, 0x61, 0x61]}}, &(0x7f0000000140)=""/184, 0x4d, 0xb8, 0x1, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x1, 0x10, 0x6, 0x41020, r0, 0x2, '\x00', r1, r2, 0x0, 0x1, 0x3}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x1, 0x10, 0x6, 0x41020, r0, 0x2, '\x00', r1, r2, 0x0, 0x1, 0x3}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x2, 0x0, r3, 0xc, '\x00', 0x0, r2, 0x0, 0x4, 0x1}, 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0x0, 0x3}, 0x6) close(r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r7, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x62}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r7, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x62}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r9 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip_vti0\x00', r1, 0x7840, 0x10, 0x9, 0x7fff, {{0x10, 0x4, 0x1, 0x38, 0x40, 0x68, 0x0, 0xf8, 0x29, 0x0, @loopback, @loopback, {[@generic={0x83, 0x5, "86804b"}, @end, @lsrr={0x83, 0x23, 0x88, [@multicast1, @multicast1, @rand_addr=0x64010100, @multicast2, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip_vti0\x00', r1, 0x7840, 0x10, 0x9, 0x7fff, {{0x10, 0x4, 0x1, 0x38, 0x40, 0x68, 0x0, 0xf8, 0x29, 0x0, @loopback, @loopback, {[@generic={0x83, 0x5, "86804b"}, @end, @lsrr={0x83, 0x23, 0x88, [@multicast1, @multicast1, @rand_addr=0x64010100, @multicast2, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0xa}, @multicast2]}, @noop]}}}}}) r11 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r9, &(0x7f00000005c0)={0x2c, 0x5, r10, 0x18, r11}, 0x10) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r11, 0x80089419, &(0x7f0000000600)) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r0}, 0x8) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x80000001, '\x00', r1, r2, 0x5, 0x5, 0x4}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) (async) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5}, 0x50) r15 = bpf$ITER_CREATE(0x21, &(0x7f0000000940), 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000980)='./file0\x00', 0x0, 0x8, r5}, 0x18) (async) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000980)='./file0\x00', 0x0, 0x8, r5}, 0x18) r17 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0xf, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x64e3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000006c0)='syzkaller\x00', 0x3, 0x90, &(0x7f0000000700)=""/144, 0x41000, 0x46, '\x00', r1, @fallback=0x1e, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x4, 0x0, 0x4, 0xce}, 0x10, 0x0, r12, 0x6, &(0x7f0000000a40)=[r13, r14, r15, r16, r17, r4, r0, r0], &(0x7f0000000a80)=[{0x4, 0x1, 0x7, 0x9}, {0x3, 0x3, 0x5}, {0x5, 0x5, 0xf}, {0x1, 0x4, 0xc, 0x9}, {0x1, 0x2, 0x2, 0x3}, {0x4, 0x1, 0x0, 0x8}], 0x10, 0x8}, 0x94) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r15, 0x84, 0x77, &(0x7f0000000bc0)={0x0, 0x3, 0x5, [0x3, 0x2, 0x1f, 0x0, 0x6]}, &(0x7f0000000c00)=0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x11, 0x8, 0x9, 0xfffffe00, 0x10004, r17, 0x6, '\x00', r10, r2, 0x3, 0x3, 0x0, 0x0, @void, @value, @value=r17}, 0x50) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, r7, 0x322, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20049010) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x34, r7, 0x322, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x11}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20049010) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, r2, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000010c0)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x2, 0x1c, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@generic={0x2, 0x2, 0x3, 0x9, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @alu={0x7, 0x0, 0x0, 0x9, 0x9, 0x18, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000f40)='GPL\x00', 0x7, 0xba, &(0x7f0000000f80)=""/186, 0x41100, 0x10, '\x00', r10, @fallback=0x6, r2, 0x8, &(0x7f0000001040)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001080)={0x5, 0xb, 0x33, 0x7}, 0x10, r18, r17, 0x0, &(0x7f0000001180)=[r13, r12, r3, 0xffffffffffffffff], 0x0, 0x10, 0xfffffffa}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x2, 0x1c, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@generic={0x2, 0x2, 0x3, 0x9, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @alu={0x7, 0x0, 0x0, 0x9, 0x9, 0x18, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000f40)='GPL\x00', 0x7, 0xba, &(0x7f0000000f80)=""/186, 0x41100, 0x10, '\x00', r10, @fallback=0x6, r2, 0x8, &(0x7f0000001040)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001080)={0x5, 0xb, 0x33, 0x7}, 0x10, r18, r17, 0x0, &(0x7f0000001180)=[r13, r12, r3, 0xffffffffffffffff], 0x0, 0x10, 0xfffffffa}, 0x94) 971.90759ms ago: executing program 1 (id=2248): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) (async) pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) (async) 951.528185ms ago: executing program 4 (id=2249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2340, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f00000001c0)={0x0, 0x1}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 896.944635ms ago: executing program 0 (id=2250): r0 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00', 0x9}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x11}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x8e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001e80)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095006e00000000006916000000000000bf67000000000000350604000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c88da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba751e4e174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000e90000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32a103393c7c166215dab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095031dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa175740395ef9e4a0dc5ad"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070200003900000000000000080009000d000000", 0x24) 868.992189ms ago: executing program 2 (id=2251): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGCHAN(r0, 0x80047437, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c000000000001907800000000ffffffff2a79c97800000000"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200029bd7000fcdbdf25190000000c000600000000000000000008000300", @ANYRES32=r3, @ANYBLOB="0c00060003000000030000000c00060003000000000000002b20640ba0220c000600030000000000", @ANYRES32=r4, @ANYBLOB="0c0006000100000001000000"], 0x60}, 0x1, 0x0, 0x0, 0x4008004}, 0x4040000) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB="0300000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x20040880) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket(0x21, 0x800, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f00000001c0), &(0x7f0000000300)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x5, 0xe, 0x0, &(0x7f0000000600)="0007000008000f0000feff000000", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x4}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0x8, 0xffe0}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x807f}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d800000019000100000212ba0d8105040a600000ff0f040b067c55a1bc0009007d0006000000000015000500fe808178a80035fd00e4ff3f0200000901ac040000d67f6f94007100a007a290457f0189b316277ce06b9e9dfc487d5d32bace8017cbec4c2ee5a71602b2a10c11ce1b14d600741f795025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fec114c5d46a769b4d4ccd40dd6e4ed01ddceb5a2b5ac3290f9eaef6288b97192309a00000e000000000000000000000000000000000000000000000000000ab628", 0xd8}], 0x1}, 0x40851) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 863.365646ms ago: executing program 3 (id=2252): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@empty=0xe0}]}, @ssrr={0x89, 0xb, 0xce, [@multicast2, @remote]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x1004001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0xf0ffff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x1}}, 0x1c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x7, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x98, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x98}, 0x1, 0x0, 0x0, 0x48000}, 0x1) 693.074148ms ago: executing program 0 (id=2253): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000009060300000000000000f4d836724500000a00000200000000000002000000005781b44e9d5d432cd5f8e187c8ed837e783137a026fc31ac509c81b4a604e0e1773dafdacc70fe0d06d50b4e2ea45c69ba4b1a913386f87632df94cb0cfdad931fcc17d025234d04c4c8f3298e2ca26011368a2809606032237e725c9f0a6516b8ec273365bc8963b74a2f8a74560bc940e018ad0f25a3a80721add6c288ad3b0d00000090c1b9737db2e4b4f6ce7756ed5859cab9ffea55dd60f90ff6dddf836982f829ee"], 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x1224, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1024, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x10001}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1cc, 0x3, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xf6, 0x2, "b528a7f879fe084e3d207ac976c02fd65a12ac40df3cca884c017f6681865f112b4fe6c0d26633472e89180e109361302e5ff748a93085e49ff389485528a1045100e800309868592f468f1c432dda749e89e9e29f32491246a00bfaee3500859ac1ceb4489e65b7b727bb99bdc0f4f871eb23933e45453142c9d58ae369b072ea6de2556df5dbe985af9109c27a34985776d40c82068c38eeabb9387d20a6b9b838bbf7df565407d798edfee557125aeb6fc80262dd2154edf5e3d69ab298e73eef99197bced35ef4fab5702ed84cdb375a22af2c418ea3451af21cd952b422961d8726105736e97d809953c2a5baa9a766"}}, {0xc0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xbb, 0x1, "ba34f6a464380f6cdab9db4ffc322ecc1952740806414318e486dd2acf466b7564fe37c97f957c0df1e5d281001fd8a078a8fc88b8019cdee4058732f6f20bf43c49b6341b0ea23e008e69f9d2757b0f03ab646fb782c14d029aae91b4a48a2fcc6fc6261eca1592a40586fa0160c82dcc45f5b48fbfc161469b9225ad248bd5448e2b60b730219801957deba16fd96c2e089ce207edab375fc50f4fbce52e86784244dc7e04a7fbbfaefc300d11c1a9a0a72bac3321c6"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x401}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x1224}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff880b991e6fb43e5045e28c05d14076000000e28000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000014001280090001007663616e000000000400028008000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x880) 692.310972ms ago: executing program 3 (id=2254): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0xfe}}, 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gre0\x00'}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'pimreg0\x00'}) r3 = getpid() r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = getpid() ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000180)=r5) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendto$inet(r0, &(0x7f0000000280)="56422e09dbc7ac614bdbfd6df8aafede4836d87ea7236ffa9eeaa4e831caca287ff9d087e1cfc835d0e5e69385a7f8986f78225f68840bb539fadacbd28c0ec954effb57a771e2535555fbbd559b963c6b732f9837dfcbfc28c9443bac194a1054b5d84841dbfa48c04d112070067ecc2c05d3b998c9156b4a24326cc234934b9824f8436b340b5dec41f5c7a6b349c140966048c20b0996bdb285e9bdd773e1a26301fc288881a03cfab1d0f0de605f6dc34d818ed28cd2", 0xb8, 0xc0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0) r6 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000000)={r6}) r7 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@RTM_NEWNSID={0x44, 0x58, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NETNSA_PID={0x8, 0x2, r3}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_FD={0x8, 0x3, r7}, @NETNSA_FD={0x8, 0x3, r7}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x44}}, 0x0) 663.481133ms ago: executing program 4 (id=2255): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x44044) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x44044) 496.67878ms ago: executing program 2 (id=2256): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x10000009}]}, 0x30}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000700fc000000080011000700000008000e00800000000800", @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWOBJ={0x38, 0x12, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x24, 0x4, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x50000000}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x2}]}}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3b67}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x4000000) (async) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f00000012c0)) 385.260717ms ago: executing program 3 (id=2257): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) 384.391748ms ago: executing program 4 (id=2258): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) (async) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x0, 0x100}}}}}}}, 0x0) (async) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$SIOCAX25ADDUID(r0, 0x89e1, 0x0) 339.973121ms ago: executing program 4 (id=2259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0xffe0}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x7, 0x3, 0x6, 0x400}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}], 0x38, 0x4014}, 0x2c0408d0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010800000000000000000000fffe0c000780050015000800000005000100060000002500020073797a300000000005000400000000000900020073797a300000000015000300686173683a69702c706f72742c6e657400000000"], 0x60}}, 0x0) 329.36867ms ago: executing program 0 (id=2260): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9a, 0x9a, 0x3, [@union={0xd, 0x3, 0x0, 0x5, 0x1, 0x7, [{0x10, 0x3, 0x4}, {0xf, 0x3, 0xfffff07f}, {0x1, 0x4, 0x57}]}, @var={0x5, 0x0, 0x0, 0xe, 0x4, 0x2}, @datasec={0xc, 0x1, 0x0, 0xf, 0x2, [{0x1, 0xffffffff, 0xdf1}], "ec35"}, @typedef={0xc}, @restrict={0x6, 0x0, 0x0, 0xb, 0x5}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @volatile={0x1, 0x0, 0x0, 0x9, 0x4}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x74, 0x5}]}, {0x0, [0x30]}}, &(0x7f00000001c0)=""/207, 0xb7, 0xcf, 0x1, 0x3, 0x10000}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r2}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x29, 0x4}}}]}, 0x24}}, 0x20008000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x122f, 0x6071fa89, 0x7ff, 0x20000, r4, 0xa, '\x00', r7, r1, 0x3, 0x1, 0x3, 0xe}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r9 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f0000000180)) 261.021447ms ago: executing program 3 (id=2261): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_dump={0x3e, 0x2, 0x5}}) close(r1) sendmmsg$alg(r1, &(0x7f0000002700)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="9aee4e10983f41b1ca991ee3830ecba74dc711256c085cc2afaa647c495afaecc16213c0746f693fce5671b72159d6a950021c98b659c93b7abbcb5939d654a5834a859921e185b55772e773a54c136c6b7309deaecb02823c1d27207c2a7a33", 0x60}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000100)="12df4bb7ae7f0b453b7a797d55154577c94795b05fd81b6c6f", 0x19}], 0x3, &(0x7f0000001300)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x68, 0x117, 0x2, 0x4d, "4d25c10cdfd4e5850699570c97a261eb199bca4c3d006793b26cefb25dbf4bc096d42888699fefec7568966a72b8a8535d940b3ccba11829dabfa2e8d9238af4c9fba8bb9015b942081c7ec8f4"}, @iv={0x88, 0x117, 0x2, 0x6e, "68de3612d466d68625e84e10e50e6c87ad0f60529a6dfb2cde93dd51d548945f08fc185238c04eaccd95efc094d5f104d8163e98f35395c53bf1cefcf30df21c7f35982f1cd70d66eac54dc00c6068f4d6c35f7c45f356e3784163a0f05e51a9a22ed57c864426f1267f8c274c77"}], 0x108, 0x4001000}, {0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000001440)="31b5e0d7d4ef5eedafe0b1fbefe7ffaa7ebf04d81d3c581a5489bcdfec00edb7de40eb19c9fd31d43ebcf689bc487a993e5a24d7e1cb075389da19652bfcfe6603cfaec0ccb3b2cc7571cad8a54b1b89293633e1c47ff96aa3d56e0db3cfb3954f44d7cca30395aefa46d676eada523f7708b89d2702cfacaa41e74ab986e6d23ef5fa1bd73bc5f4df6c65a83dca185082117d95089c067621c74a4fd6101de9afc706e907a8528c9122d937ddf8923a74486f4b4b2b6b770de62ae3a243ff0ebc0b9436dd5879f3b59a81fdee3cd66c06646ab52308097851112653c42b1d5a143dbc891d3719a335c9e539a51eebe6ce0b3e", 0xf3}, {&(0x7f00000001c0)="e130867eb13f805bdf5049d22bc72b8dd280a7cdee7aaddcbcda8f", 0x1b}, {&(0x7f0000001540)="5b0e7d2f5df6d174698c936d96c164dca51a44a1eeb39ce460fa22882ca20162b8092438d1101c16bb313c0175324868c67c587fa059d068d6f0c31ac16884a14fc4cbfecf21e65fd1f2f921866cb358bf207a8646f87be966cde293e107f257d7e93e1027789cecbb62a499d4286890b9947284d6e26f3836afeb5f038c4220dde41a9ad96473feff4a61bab26e2b195f55da07deb479b63e896edd34705ddb128f11f17c7d9842ce476a4be2c8a5035788f70c9036c1e9858b1c2298b1d490de99e98facf7a39d7cb730302074cc49ec36dd704ed7370e", 0xd8}, {&(0x7f0000000200)="2bc79cebcbe970d2879f62a77817f7f3", 0x10}, {&(0x7f0000000280)="143ac47b53a27e334b472f40efb5424dab4206c48125156d09e048a9d0cacdac3bdb718a2b543dc3e097c22a99f3", 0x2e}, {&(0x7f0000001640)="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", 0x1000}], 0x6, &(0x7f00000026c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x2, 0x40000) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 238.033406ms ago: executing program 2 (id=2262): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/167, 0xa7}], 0x1}, 0x40012062) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x1, 0x70fd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0xc000) (async) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x1, 0x70fd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0xc000) shutdown(r0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 143.789101ms ago: executing program 4 (id=2263): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@dellinkprop={0x28, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) 118.134032ms ago: executing program 3 (id=2264): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@can={{0x1, 0x1, 0x1}, 0x6, 0x4, 0x0, 0x0, "e735e423d84b392c"}, 0x10}, 0x1, 0x0, 0x0, 0x100440c0}, 0x800) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109, 0x18}, 0x20) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003a00007592bd7000ffdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008011}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x6, &(0x7f0000000340)=@raw=[@alu={0x7, 0x0, 0x5, 0x7, 0x4, 0xc, 0xfffffffffffffffc}, @tail_call], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104800000000000600000000dfff009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000) 114.152774ms ago: executing program 0 (id=2265): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfc, 0x0, 0xfe, 0x7}}, 0x1c}}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000fedbdf250a0000000500080001000000090007007701109318000000080037000000000004000b0014006e800400010004000100040001000400010011000700b413bc82f7849737f90f37f7e400000009000700294a050bac00000018006e800400010004000100040001000400010004000200"], 0x80}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r2, @ANYRESHEX=r2], 0x38}}, 0x0) 56.567454ms ago: executing program 2 (id=2266): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0xfffe, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)={0xc, {{0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}}}, 0x90) 557.374µs ago: executing program 0 (id=2267): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000140)=0x1, 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_crypto(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)=ANY=[@ANYBLOB="10006a88f17dc992461fa7c43f33b544f200001400010025bd7000fedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x4004010) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) 0s ago: executing program 4 (id=2268): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x18, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r4, 0xfffffffc}, &(0x7f0000000180)=0x8) sendmsg$kcm(r1, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)="8ca491bfede38f11a0212e6788fb", 0xe}], 0x1}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}}, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xe, 'wlan1\x00'}) kernel console output (not intermixed with test programs): netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.172309][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.215156][ T5864] veth0_vlan: entered promiscuous mode [ 83.260184][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.314861][ T5864] veth1_vlan: entered promiscuous mode [ 83.357021][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.363591][ T5877] veth0_vlan: entered promiscuous mode [ 83.364970][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.446727][ T5877] veth1_vlan: entered promiscuous mode [ 83.467525][ T5868] Bluetooth: hci2: command tx timeout [ 83.473182][ T5868] Bluetooth: hci1: command tx timeout [ 83.502529][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.516705][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.520328][ T5866] veth0_vlan: entered promiscuous mode [ 83.546719][ T5878] Bluetooth: hci3: command tx timeout [ 83.552151][ T5878] Bluetooth: hci4: command tx timeout [ 83.558263][ T5868] Bluetooth: hci0: command tx timeout [ 83.569175][ T5877] veth0_macvtap: entered promiscuous mode [ 83.581164][ T5866] veth1_vlan: entered promiscuous mode [ 83.592510][ T5864] veth0_macvtap: entered promiscuous mode [ 83.612067][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.617987][ T5877] veth1_macvtap: entered promiscuous mode [ 83.644226][ T5864] veth1_macvtap: entered promiscuous mode [ 83.699712][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 83.702217][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.731879][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 83.749500][ T5874] veth0_vlan: entered promiscuous mode [ 83.763833][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.806385][ T3494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.815713][ T3494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.852517][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.862952][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.875063][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.888434][ T5874] veth1_vlan: entered promiscuous mode [ 83.910252][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.941913][ T5866] veth0_macvtap: entered promiscuous mode [ 83.965545][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.002837][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.035416][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.061580][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.079375][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.089973][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.099786][ T5866] veth1_macvtap: entered promiscuous mode [ 84.182740][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.195054][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.209189][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.271681][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.308027][ T5874] veth0_macvtap: entered promiscuous mode [ 84.315634][ T3494] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.330041][ T3494] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.370337][ T3494] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.396664][ T3494] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.451247][ T6003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.483140][ T5874] veth1_macvtap: entered promiscuous mode [ 84.509772][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.542472][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.652083][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.697846][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.717000][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.744611][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.763111][ T6010] tipc: Started in network mode [ 84.768499][ T6010] tipc: Node identity cec366bbe4a2, cluster identity 4711 [ 84.776573][ T6010] tipc: Enabled bearer , priority 0 [ 84.803910][ T6010] syzkaller0: entered promiscuous mode [ 84.812615][ T6010] syzkaller0: entered allmulticast mode [ 84.830440][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 84.837020][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.850446][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.856178][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.879426][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.901771][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.995421][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.044164][ T6018] bond1: entered promiscuous mode [ 85.050866][ T6018] bond1: entered allmulticast mode [ 85.056981][ T6018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.078977][ T6016] tipc: Resetting bearer [ 85.092022][ T6009] tipc: Resetting bearer [ 85.118540][ T6009] tipc: Disabling bearer [ 85.175320][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.195504][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.293035][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.356232][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.444328][ T6030] warning: `syz.0.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.503260][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.525804][ T6030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15'. [ 85.527005][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.553196][ T5881] Bluetooth: hci2: command tx timeout [ 85.560125][ T5868] Bluetooth: hci1: command tx timeout [ 85.626365][ T5868] Bluetooth: hci4: command tx timeout [ 85.631830][ T5868] Bluetooth: hci0: command tx timeout [ 85.639482][ T5881] Bluetooth: hci3: command tx timeout [ 85.794184][ T6048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19'. [ 85.804979][ T6044] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 86.092476][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 86.111156][ T6060] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 86.139039][ T6060] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.152170][ T6060] netlink: 'syz.2.22': attribute type 12 has an invalid length. [ 86.182764][ T6060] netlink: 'syz.2.22': attribute type 29 has an invalid length. [ 86.244403][ T6060] netlink: 148 bytes leftover after parsing attributes in process `syz.2.22'. [ 86.281153][ T6060] netlink: 43 bytes leftover after parsing attributes in process `syz.2.22'. [ 86.311324][ T6063] netlink: 'syz.2.22': attribute type 12 has an invalid length. [ 86.330707][ T6070] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 86.340886][ T6063] netlink: 'syz.2.22': attribute type 29 has an invalid length. [ 86.362260][ T6063] Zero length message leads to an empty skb [ 86.366971][ T6065] vlan2: entered promiscuous mode [ 86.375314][ T6065] vlan2: entered allmulticast mode [ 86.384485][ T6065] hsr_slave_1: entered allmulticast mode [ 86.586171][ T6076] veth3: entered promiscuous mode [ 86.754322][ T120] cfg80211: failed to load regulatory.db [ 86.905832][ T6091] netlink: 'syz.4.31': attribute type 3 has an invalid length. [ 86.931511][ T6091] netlink: 'syz.4.31': attribute type 3 has an invalid length. [ 87.707852][ T5868] Bluetooth: hci4: command 0x0405 tx timeout [ 87.839536][ T6132] bridge0: port 3(batadv1) entered blocking state [ 87.850418][ T6132] bridge0: port 3(batadv1) entered disabled state [ 87.868558][ T6132] batadv1: entered allmulticast mode [ 87.893648][ T6132] batadv1: entered promiscuous mode [ 88.178436][ T6145] can: request_module (can-proto-3) failed. [ 88.195672][ T6157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.225482][ T6153] netlink: 'syz.4.51': attribute type 17 has an invalid length. [ 88.337880][ T49] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 88.347542][ T49] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 88.660120][ T6182] C: renamed from lo (while UP) [ 88.665390][ T5930] IPVS: starting estimator thread 0... [ 88.788314][ T6188] IPVS: using max 32 ests per chain, 76800 per kthread [ 89.020767][ T6208] __nla_validate_parse: 28 callbacks suppressed [ 89.020785][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.63'. [ 89.047839][ T6208] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 89.060842][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.63'. [ 89.070460][ T6208] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 89.245558][ T6219] netlink: 'syz.4.67': attribute type 11 has an invalid length. [ 89.269088][ T6219] netlink: 224 bytes leftover after parsing attributes in process `syz.4.67'. [ 89.374938][ T6222] bond0: entered promiscuous mode [ 89.441990][ T6222] bond_slave_0: entered promiscuous mode [ 89.449788][ T6222] bond_slave_1: entered promiscuous mode [ 89.480853][ T6222] batadv0: entered promiscuous mode [ 89.521915][ T6222] hsr1: entered allmulticast mode [ 89.541453][ T6222] bond0: entered allmulticast mode [ 89.571218][ T6222] bond_slave_0: entered allmulticast mode [ 89.583268][ T6222] bond_slave_1: entered allmulticast mode [ 89.595088][ T6222] batadv0: entered allmulticast mode [ 89.621803][ T6222] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 89.919252][ T6257] raw_sendmsg: syz.0.76 forgot to set AF_INET. Fix it! [ 90.041950][ T6260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.77'. [ 90.105496][ T6260] tipc: Started in network mode [ 90.137760][ T6260] tipc: Node identity 5ee8928a499a, cluster identity 4711 [ 90.145187][ T6260] tipc: Enabled bearer , priority 0 [ 90.153626][ T6260] syzkaller0: entered promiscuous mode [ 90.159461][ T6260] syzkaller0: entered allmulticast mode [ 90.210429][ T6260] tipc: Resetting bearer [ 90.220814][ T6272] sctp: [Deprecated]: syz.0.79 (pid 6272) Use of int in max_burst socket option. [ 90.220814][ T6272] Use struct sctp_assoc_value instead [ 90.269433][ T6259] tipc: Resetting bearer [ 90.375862][ T6259] tipc: Disabling bearer [ 90.413731][ T6280] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 90.418140][ T6279] netlink: 60 bytes leftover after parsing attributes in process `syz.2.82'. [ 90.459434][ T6280] netlink: 216 bytes leftover after parsing attributes in process `syz.1.81'. [ 90.512616][ T6276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.80'. [ 90.545708][ T6276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.80'. [ 90.717618][ T6299] IPVS: set_ctl: invalid protocol: 0 172.30.0.1:20000 [ 90.745322][ T6301] ipvlan2: entered promiscuous mode [ 90.773993][ T6298] netlink: 68 bytes leftover after parsing attributes in process `syz.2.85'. [ 90.818913][ T6301] bridge0: port 3(ipvlan2) entered blocking state [ 90.879509][ T6301] bridge0: port 3(ipvlan2) entered disabled state [ 90.944725][ T6301] ipvlan2: entered allmulticast mode [ 90.960808][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 90.992732][ T6301] bridge0: entered allmulticast mode [ 91.022797][ T6301] ipvlan2: left allmulticast mode [ 91.033303][ T6314] can: request_module (can-proto-4) failed. [ 91.034154][ T6301] bridge0: left allmulticast mode [ 91.138875][ T6309] tipc: Cannot configure node identity twice [ 91.447235][ T5930] IPVS: starting estimator thread 0... [ 91.551375][ T6340] IPVS: using max 38 ests per chain, 91200 per kthread [ 92.115963][ T6369] bond0: entered promiscuous mode [ 92.156195][ T6369] bond_slave_0: entered promiscuous mode [ 92.162090][ T6369] bond_slave_1: entered promiscuous mode [ 92.765358][ T6401] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 93.098334][ T6418] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.237413][ T6431] netlink: 'syz.4.115': attribute type 1 has an invalid length. [ 93.692841][ T6447] syz.4.120 uses obsolete (PF_INET,SOCK_PACKET) [ 93.784610][ T6443] openvswitch: netlink: EtherType 257 is less than min 600 [ 93.867395][ T5878] Bluetooth: hci4: command 0x0405 tx timeout [ 94.005655][ T6443] bridge_slave_0: left allmulticast mode [ 94.047120][ T6443] bridge_slave_0: left promiscuous mode [ 94.088412][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.152168][ T6443] bridge_slave_1: left allmulticast mode [ 94.158356][ T6443] bridge_slave_1: left promiscuous mode [ 94.171183][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.209199][ T6443] bond0: (slave bond_slave_0): Releasing backup interface [ 94.224748][ T6443] bond_slave_0: left promiscuous mode [ 94.234950][ T6443] bond_slave_0: left allmulticast mode [ 94.261942][ T6443] bond0: (slave bond_slave_1): Releasing backup interface [ 94.291854][ T6443] bond_slave_1: left promiscuous mode [ 94.297857][ T6443] bond_slave_1: left allmulticast mode [ 94.319546][ T6443] team0: Port device team_slave_0 removed [ 94.347682][ T6443] team0: Port device team_slave_1 removed [ 94.365404][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.381754][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.393339][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.410688][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.714450][ T6475] __nla_validate_parse: 5 callbacks suppressed [ 94.714467][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 94.913543][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 95.004247][ T6479] netlink: 'syz.3.129': attribute type 2 has an invalid length. [ 95.012786][ T6479] syz.3.129: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 95.053600][ T6485] veth0_: renamed from vlan0 (while UP) [ 95.075019][ T6479] CPU: 1 UID: 0 PID: 6479 Comm: syz.3.129 Not tainted 6.16.0-syzkaller-12091-g89886abd0734 #0 PREEMPT(full) [ 95.075044][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 95.075061][ T6479] Call Trace: [ 95.075070][ T6479] [ 95.075079][ T6479] dump_stack_lvl+0x189/0x250 [ 95.075109][ T6479] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 95.075136][ T6479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.075159][ T6479] ? __pfx__printk+0x10/0x10 [ 95.075184][ T6479] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 95.075205][ T6479] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 95.075235][ T6479] warn_alloc+0x214/0x310 [ 95.075263][ T6479] ? stack_depot_save_flags+0x41b/0x860 [ 95.075288][ T6479] ? __pfx_warn_alloc+0x10/0x10 [ 95.075316][ T6479] ? kasan_save_track+0x4f/0x80 [ 95.075339][ T6479] ? xskq_create+0x56/0x170 [ 95.075358][ T6479] ? xsk_init_queue+0xb0/0x110 [ 95.075376][ T6479] ? xsk_setsockopt+0x4dc/0x8d0 [ 95.075393][ T6479] ? do_sock_setsockopt+0x17c/0x1b0 [ 95.075415][ T6479] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 95.075438][ T6479] ? do_syscall_64+0xfa/0x3b0 [ 95.075460][ T6479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.075486][ T6479] __vmalloc_node_range_noprof+0x125/0x12f0 [ 95.075544][ T6479] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 95.075577][ T6479] ? __kasan_kmalloc+0x93/0xb0 [ 95.075604][ T6479] vmalloc_user_noprof+0xad/0xf0 [ 95.075628][ T6479] ? xskq_create+0xbf/0x170 [ 95.075650][ T6479] xskq_create+0xbf/0x170 [ 95.075674][ T6479] xsk_init_queue+0xb0/0x110 [ 95.075698][ T6479] xsk_setsockopt+0x4dc/0x8d0 [ 95.075720][ T6479] ? __pfx_xsk_setsockopt+0x10/0x10 [ 95.075746][ T6479] ? __pfx_aa_sk_perm+0x10/0x10 [ 95.075773][ T6479] ? aa_sock_opt_perm+0xff/0x1b0 [ 95.075802][ T6479] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 95.075821][ T6479] ? __pfx_xsk_setsockopt+0x10/0x10 [ 95.075843][ T6479] do_sock_setsockopt+0x17c/0x1b0 [ 95.075873][ T6479] __x64_sys_setsockopt+0x13f/0x1b0 [ 95.075900][ T6479] do_syscall_64+0xfa/0x3b0 [ 95.075920][ T6479] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.075940][ T6479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.075958][ T6479] ? clear_bhb_loop+0x60/0xb0 [ 95.075977][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.075993][ T6479] RIP: 0033:0x7fcd8fd8ebe9 [ 95.076018][ T6479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.076033][ T6479] RSP: 002b:00007fcd90bb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 95.076052][ T6479] RAX: ffffffffffffffda RBX: 00007fcd8ffb5fa0 RCX: 00007fcd8fd8ebe9 [ 95.076065][ T6479] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 95.076075][ T6479] RBP: 00007fcd8fe11e19 R08: 0000000000000004 R09: 0000000000000000 [ 95.076085][ T6479] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.076096][ T6479] R13: 00007fcd8ffb6038 R14: 00007fcd8ffb5fa0 R15: 00007ffd2ce5c298 [ 95.076124][ T6479] [ 95.380367][ T6479] Mem-Info: [ 95.383536][ T6479] active_anon:5252 inactive_anon:0 isolated_anon:0 [ 95.383536][ T6479] active_file:1136 inactive_file:39833 isolated_file:0 [ 95.383536][ T6479] unevictable:768 dirty:415 writeback:0 [ 95.383536][ T6479] slab_reclaimable:10363 slab_unreclaimable:96296 [ 95.383536][ T6479] mapped:29186 shmem:1359 pagetables:1166 [ 95.383536][ T6479] sec_pagetables:0 bounce:0 [ 95.383536][ T6479] kernel_misc_reclaimable:0 [ 95.383536][ T6479] free:1333059 free_pcp:16678 free_cma:0 [ 95.429805][ T6479] Node 0 active_anon:21008kB inactive_anon:0kB active_file:4544kB inactive_file:159128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116744kB dirty:1644kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12036kB pagetables:4528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 95.505333][ T6479] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 95.535650][ T6479] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.566991][ T6479] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 95.572850][ T6479] Node 0 DMA32 free:1427716kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21064kB inactive_anon:0kB active_file:4544kB inactive_file:157560kB unevictable:1536kB writepending:1640kB present:3129332kB managed:2557520kB mlocked:0kB bounce:0kB free_pcp:44492kB local_pcp:27088kB free_cma:0kB [ 95.606968][ T6479] lowmem_reserve[]: 0 0 1 1 1 [ 95.611912][ T6479] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 95.641924][ T6479] lowmem_reserve[]: 0 0 0 0 0 [ 95.646731][ T6479] Node 1 Normal free:3889136kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:16kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22176kB local_pcp:9248kB free_cma:0kB [ 95.680806][ T6479] lowmem_reserve[]: 0 0 0 0 0 [ 95.685574][ T6479] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 95.701330][ T6479] Node 0 DMA32: 867*4kB (UME) 205*8kB (UME) 48*16kB (UME) 67*32kB (UM) 21*64kB (UM) 8*128kB (UME) 4*256kB (UM) 6*512kB (UM) 4*1024kB (ME) 4*2048kB (UM) 342*4096kB (M) = 1427604kB [ 95.728548][ T6479] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 95.756579][ T6496] netlink: 'syz.0.134': attribute type 1 has an invalid length. [ 95.831114][ T6479] Node 1 Normal: 214*4kB (UE) 45*8kB (UME) 37*16kB (UME) 67*32kB (UME) 22*64kB (UME) 6*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3889136kB [ 95.865907][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 95.876302][ T6479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.901007][ T6479] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.910937][ T6479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.921907][ T6479] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.931499][ T6479] 42324 total pagecache pages [ 95.936604][ T6479] 0 pages in swap cache [ 95.940766][ T6479] Free swap = 124996kB [ 95.944921][ T6479] Total swap = 124996kB [ 95.949547][ T6479] 2097051 pages RAM [ 95.958194][ T6479] 0 pages HighMem/MovableOnly [ 95.964570][ T6479] 425645 pages reserved [ 96.014711][ T6479] 0 pages cma reserved [ 96.169850][ T6520] 8021q: VLANs not supported on tunl0 [ 96.519746][ T6543] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.147'. [ 96.812307][ T6556] tipc: Enabling of bearer rejected, failed to enable media [ 96.944512][ T6562] netlink: 68 bytes leftover after parsing attributes in process `syz.2.154'. [ 96.974081][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'. [ 97.049734][ T6565] netlink: 'syz.0.155': attribute type 7 has an invalid length. [ 97.145192][ T6565] : entered promiscuous mode [ 97.202741][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 97.463512][ T6578] trusted_key: syz.2.159 sent an empty control message without MSG_MORE. [ 97.517751][ T6578] netlink: 96 bytes leftover after parsing attributes in process `syz.2.159'. [ 97.560213][ T6578] 8021q: VLANs not supported on sit0 [ 97.729899][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 97.740772][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 98.714416][ T6643] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20002 [ 99.140103][ T6661] netlink: 'syz.2.185': attribute type 5 has an invalid length. [ 99.399826][ T6676] vlan0: entered promiscuous mode [ 99.440530][ T6676] team0: Port device vlan0 added [ 99.503060][ T6676] syz.2.189 (6676) used greatest stack depth: 19384 bytes left [ 99.690280][ T6692] netlink: 'syz.2.193': attribute type 24 has an invalid length. [ 99.814231][ T6692] netlink: 'syz.2.193': attribute type 33 has an invalid length. [ 99.841466][ T6695] IPVS: set_ctl: invalid protocol: 234 0.0.0.0:20003 [ 100.074801][ T6706] __nla_validate_parse: 11 callbacks suppressed [ 100.074816][ T6706] netlink: 11 bytes leftover after parsing attributes in process `syz.2.198'. [ 100.090734][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.3.197'. [ 100.404695][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 100.438723][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 100.448342][ T6719] netlink: 'syz.1.201': attribute type 15 has an invalid length. [ 100.484423][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 100.486146][ T2982] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.496111][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.201'. [ 100.531287][ T2982] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.553192][ T2982] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.557275][ T6719] netlink: 'syz.1.201': attribute type 15 has an invalid length. [ 100.596144][ T2982] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.757883][ T6726] tipc: Enabled bearer , priority 0 [ 100.781620][ T6726] syzkaller0: entered promiscuous mode [ 100.816403][ T6726] syzkaller0: entered allmulticast mode [ 100.865941][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 100.906893][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 100.939115][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.208'. [ 100.953602][ T6739] openvswitch: netlink: Flow key attr not present in new flow. [ 101.156487][ T6723] tipc: Resetting bearer [ 101.211268][ T6723] tipc: Disabling bearer [ 101.242748][ T6753] netlink: 'syz.0.212': attribute type 3 has an invalid length. [ 101.252937][ T6753] netlink: 'syz.0.212': attribute type 3 has an invalid length. [ 101.687993][ T6780] sctp: [Deprecated]: syz.2.220 (pid 6780) Use of int in maxseg socket option. [ 101.687993][ T6780] Use struct sctp_assoc_value instead [ 101.754036][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 101.958018][ T6793] v: renamed from dummy0 (while UP) [ 102.026956][ T6797] tipc: Enabled bearer , priority 0 [ 102.138072][ T6801] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 102.216450][ T6797] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 102.445283][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.552730][ T6812] bridge_slave_1 (unregistering): left allmulticast mode [ 102.578008][ T6812] bridge_slave_1 (unregistering): left promiscuous mode [ 102.622826][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.775259][ T6795] tipc: Disabling bearer [ 103.182419][ T6839] erspan0: entered promiscuous mode [ 103.200693][ T6839] gretap0: entered promiscuous mode [ 103.258034][ T6839] debugfs: 'hsr1' already exists in 'hsr' [ 103.271603][ T6839] Cannot create hsr debugfs directory [ 103.435683][ T6856] Bluetooth: MGMT ver 1.23 [ 104.045007][ T6891] netlink: 'syz.3.246': attribute type 1 has an invalid length. [ 104.121525][ T6891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.141915][ T6892] vlan2: entered promiscuous mode [ 104.150892][ T6892] bond1: entered promiscuous mode [ 104.157837][ T6892] vlan2: entered allmulticast mode [ 104.163061][ T6892] bond1: entered allmulticast mode [ 104.173144][ T6894] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 104.488502][ T6913] netlink: 'syz.0.250': attribute type 10 has an invalid length. [ 104.511136][ T6910] bridge1: entered promiscuous mode [ 104.547393][ T6910] bridge1: entered allmulticast mode [ 104.642690][ T6913] syz_tun: entered promiscuous mode [ 104.693021][ T6913] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 104.731546][ T6925] gtp0: entered promiscuous mode [ 104.795703][ T6925] gtp0: entered allmulticast mode [ 105.224622][ T6932] tipc: Started in network mode [ 105.231993][ T6932] tipc: Node identity 7eb51b980d34, cluster identity 4711 [ 105.246450][ T6932] tipc: Enabled bearer , priority 0 [ 105.469651][ T6952] bridge1: entered promiscuous mode [ 105.479828][ T6952] bridge1: entered allmulticast mode [ 105.603917][ T6937] tipc: Disabling bearer [ 105.829049][ T6986] __nla_validate_parse: 10 callbacks suppressed [ 105.829066][ T6986] netlink: 5 bytes leftover after parsing attributes in process `syz.4.267'. [ 105.882072][ T6986] 0{X: renamed from gretap0 (while UP) [ 105.926989][ T6986] 0{X: entered allmulticast mode [ 105.954672][ T6986] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 106.064616][ T6998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.272'. [ 106.114353][ T6998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.272'. [ 106.220482][ T6998] erspan0: entered promiscuous mode [ 106.260684][ T6998] erspan0: left promiscuous mode [ 106.598939][ T7024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.278'. [ 106.644138][ T7026] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 106.965995][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.283'. [ 107.012950][ T7036] syzkaller0: entered promiscuous mode [ 107.019439][ T7036] syzkaller0: entered allmulticast mode [ 107.097461][ T7049] tipc: Enabling of bearer rejected, failed to enable media [ 107.807189][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058905c00: rx timeout, send abort [ 107.816868][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058907800: rx timeout, send abort [ 107.825522][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058905c00: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 107.840182][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058907800: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 108.464879][ T7063] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 109.008495][ T7105] pim6reg: entered allmulticast mode [ 109.118798][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 109.426647][ T7131] netlink: 'syz.0.300': attribute type 3 has an invalid length. [ 109.492923][ T7131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.652163][ T7140] netlink: 40 bytes leftover after parsing attributes in process `syz.4.302'. [ 109.775994][ T7148] xfrm1: entered allmulticast mode [ 109.841958][ T7148] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 110.125421][ T7164] netlink: 'syz.0.307': attribute type 4 has an invalid length. [ 110.168130][ T7164] netlink: 'syz.0.307': attribute type 4 has an invalid length. [ 110.370065][ T7175] Driver unsupported XDP return value 0 on prog (id 114) dev N/A, expect packet loss! [ 110.664802][ T7188] netlink: 'syz.4.313': attribute type 21 has an invalid length. [ 110.701218][ T7188] netlink: 'syz.4.313': attribute type 1 has an invalid length. [ 111.103336][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 111.152249][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 111.354692][ T7220] netlink: 40 bytes leftover after parsing attributes in process `syz.4.324'. [ 111.424656][ T7220] netlink: 80 bytes leftover after parsing attributes in process `syz.4.324'. [ 111.595448][ T7232] netlink: zone id is out of range [ 111.768429][ T7245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 112.047990][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.335'. [ 112.108575][ T7265] C: renamed from lo (while UP) [ 112.179356][ T7266] team0: Device wireguard0 is of different type [ 112.232238][ T7271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.335'. [ 112.242184][ T7271] tipc: Invalid UDP bearer configuration [ 112.242248][ T7271] tipc: Enabling of bearer rejected, failed to enable media [ 112.269692][ T7283] GUP no longer grows the stack in syz.1.337 (7283): 200000003000-20000000a000 (200000001000) [ 112.296312][ T7283] CPU: 1 UID: 0 PID: 7283 Comm: syz.1.337 Not tainted 6.16.0-syzkaller-12091-g89886abd0734 #0 PREEMPT(full) [ 112.296344][ T7283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.296354][ T7283] Call Trace: [ 112.296365][ T7283] [ 112.296372][ T7283] dump_stack_lvl+0x189/0x250 [ 112.296400][ T7283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.296420][ T7283] ? __pfx__printk+0x10/0x10 [ 112.296440][ T7283] ? find_vma+0xe7/0x160 [ 112.296474][ T7283] __get_user_pages+0x24d0/0x2ce0 [ 112.296493][ T7283] ? __lock_acquire+0xab9/0xd20 [ 112.296539][ T7283] ? __gup_longterm_locked+0xc68/0x1660 [ 112.296564][ T7283] __gup_longterm_locked+0xde9/0x1660 [ 112.296598][ T7283] ? sanity_check_pinned_pages+0x123a/0x1300 [ 112.296625][ T7283] gup_fast_fallback+0x1e6a/0x2010 [ 112.296677][ T7283] ? __pfx_gup_fast_fallback+0x10/0x10 [ 112.296710][ T7283] ? pin_user_pages_fast+0x4d/0xb0 [ 112.296732][ T7283] iov_iter_extract_pages+0x35a/0x5e0 [ 112.296757][ T7283] extract_iter_to_sg+0xe46/0x24e0 [ 112.296795][ T7283] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 112.296833][ T7283] ? __asan_memset+0x22/0x50 [ 112.296854][ T7283] af_alg_get_rsgl+0x436/0x810 [ 112.296890][ T7283] aead_recvmsg+0x4cc/0x13f0 [ 112.296930][ T7283] ? __pfx_aead_recvmsg+0x10/0x10 [ 112.296954][ T7283] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 112.296978][ T7283] ? __pfx_aead_recvmsg+0x10/0x10 [ 112.297000][ T7283] sock_recvmsg_nosec+0x186/0x1c0 [ 112.297025][ T7283] ____sys_recvmsg+0x3aa/0x460 [ 112.297060][ T7283] ? __pfx_____sys_recvmsg+0x10/0x10 [ 112.297104][ T7283] ? import_iovec+0x74/0xa0 [ 112.297125][ T7283] ___sys_recvmsg+0x1b5/0x510 [ 112.297159][ T7283] ? __pfx____sys_recvmsg+0x10/0x10 [ 112.297218][ T7283] ? __might_fault+0xb0/0x130 [ 112.297246][ T7283] do_recvmmsg+0x307/0x770 [ 112.297279][ T7283] ? __pfx_do_recvmmsg+0x10/0x10 [ 112.297321][ T7283] ? count_memcg_event_mm+0x21/0x260 [ 112.297355][ T7283] ? count_memcg_event_mm+0x21/0x260 [ 112.297390][ T7283] __x64_sys_recvmmsg+0x190/0x240 [ 112.297419][ T7283] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 112.297450][ T7283] ? do_syscall_64+0xbe/0x3b0 [ 112.297478][ T7283] do_syscall_64+0xfa/0x3b0 [ 112.297499][ T7283] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.297520][ T7283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.297540][ T7283] ? clear_bhb_loop+0x60/0xb0 [ 112.297564][ T7283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.297583][ T7283] RIP: 0033:0x7fdb7e58ebe9 [ 112.297600][ T7283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.297616][ T7283] RSP: 002b:00007fdb7f447038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 112.297636][ T7283] RAX: ffffffffffffffda RBX: 00007fdb7e7b6180 RCX: 00007fdb7e58ebe9 [ 112.297650][ T7283] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008 [ 112.297662][ T7283] RBP: 00007fdb7e611e19 R08: 0000000000000000 R09: 0000000000000000 [ 112.297673][ T7283] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 112.297684][ T7283] R13: 00007fdb7e7b6218 R14: 00007fdb7e7b6180 R15: 00007fff9f236ee8 [ 112.297716][ T7283] [ 113.039139][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.343'. [ 113.521669][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.565743][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.601381][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.701200][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.729894][ T7326] netlink: 'syz.3.351': attribute type 4 has an invalid length. [ 113.750803][ T7328] Bluetooth: MGMT ver 1.23 [ 113.974071][ T7330] veth3: entered allmulticast mode [ 114.192576][ T7347] block nbd0: Unsupported socket: shutdown callout must be supported. [ 114.230576][ T7341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.357'. [ 114.246381][ T7346] netlink: 152 bytes leftover after parsing attributes in process `syz.4.359'. [ 114.427229][ T7357] openvswitch: netlink: Multiple metadata blocks provided [ 114.435026][ T7358] netlink: 'syz.3.364': attribute type 7 has an invalid length. [ 114.450113][ T7358] netlink: 'syz.3.364': attribute type 8 has an invalid length. [ 114.460429][ T7357] netlink: 'syz.0.363': attribute type 2 has an invalid length. [ 114.480840][ T7358] gretap0: entered promiscuous mode [ 114.487571][ T7358] batadv_slave_1: entered promiscuous mode [ 114.494500][ T7358] erspan0: entered promiscuous mode [ 114.505721][ T7358] debugfs: 'hsr1' already exists in 'hsr' [ 114.513009][ T7358] Cannot create hsr debugfs directory [ 114.858790][ T7346] tipc: Enabling of bearer rejected, failed to enable media [ 114.883371][ T7369] netlink: 'syz.2.367': attribute type 1 has an invalid length. [ 115.100911][ T7380] : entered promiscuous mode [ 115.610375][ T7408] bond2: entered promiscuous mode [ 115.651905][ T7408] bond2: entered allmulticast mode [ 115.657868][ T7408] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.786642][ T5878] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 115.793147][ T5868] Bluetooth: hci2: command 0x0401 tx timeout [ 116.214307][ T7441] netlink: 'syz.0.390': attribute type 14 has an invalid length. [ 116.244505][ T7441] __nla_validate_parse: 8 callbacks suppressed [ 116.244521][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'. [ 117.268929][ T59] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.291568][ T59] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.307397][ T59] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.356468][ T59] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.691445][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 117.716517][ T7469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.902139][ T7493] netlink: 40 bytes leftover after parsing attributes in process `syz.4.404'. [ 117.903349][ T7495] sctp: [Deprecated]: syz.1.405 (pid 7495) Use of int in max_burst socket option. [ 117.903349][ T7495] Use struct sctp_assoc_value instead [ 117.943244][ T7469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.969761][ T7469] batadv_slave_1 (unregistering): left promiscuous mode [ 118.189128][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 118.872840][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.4.404'. [ 119.034554][ T7532] netlink: 52 bytes leftover after parsing attributes in process `syz.0.414'. [ 119.066100][ T7532] netlink: 40 bytes leftover after parsing attributes in process `syz.0.414'. [ 119.198746][ T7534] netlink: 100 bytes leftover after parsing attributes in process `syz.3.415'. [ 119.365255][ T7544] team0: No ports can be present during mode change [ 119.453741][ T7550] netlink: 20 bytes leftover after parsing attributes in process `syz.2.419'. [ 119.586195][ T7553] netlink: 'syz.4.420': attribute type 1 has an invalid length. [ 119.632216][ T7553] netlink: 244 bytes leftover after parsing attributes in process `syz.4.420'. [ 120.088559][ T7570] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 120.279224][ T7593] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.482384][ T7600] netlink: 'syz.3.432': attribute type 1 has an invalid length. [ 120.520059][ T7606] netlink: 'syz.4.435': attribute type 1 has an invalid length. [ 120.548625][ T7600] bond2: entered promiscuous mode [ 120.554090][ T7600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.583936][ T7606] bond1 (unregistering): Released all slaves [ 120.650201][ T7600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.658048][ T7600] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 120.669118][ T7600] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 120.695505][ T7600] bond2: (slave wireguard0): making interface the new active one [ 120.733372][ T7600] wireguard0: entered promiscuous mode [ 120.741187][ T7600] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 120.761241][ T7606] ip6tnl1: entered promiscuous mode [ 120.786260][ T7606] ip6tnl1: entered allmulticast mode [ 121.090952][ T7634] hsr0 speed is unknown, defaulting to 1000 [ 121.119137][ T7634] hsr0 speed is unknown, defaulting to 1000 [ 121.170271][ T7634] hsr0 speed is unknown, defaulting to 1000 [ 121.197761][ T7634] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.224202][ T7634] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 121.326507][ T7634] hsr0 speed is unknown, defaulting to 1000 [ 121.335545][ T7634] hsr0 speed is unknown, defaulting to 1000 [ 121.351287][ T7634] hsr0 speed is unknown, defaulting to 1000 [ 121.360627][ T7634] hsr0 speed is unknown, defaulting to 1000 [ 121.392090][ T7634] hsr0 speed is unknown, defaulting to 1000 [ 121.420902][ T7634] hsr0 speed is unknown, defaulting to 1000 [ 121.512498][ T7651] __nla_validate_parse: 4 callbacks suppressed [ 121.512516][ T7651] netlink: 176 bytes leftover after parsing attributes in process `syz.3.445'. [ 121.545455][ T7651] netlink: 32 bytes leftover after parsing attributes in process `syz.3.445'. [ 121.757269][ T7660] netlink: 'syz.0.447': attribute type 12 has an invalid length. [ 121.836323][ T7677] tipc: Enabling of bearer rejected, failed to enable media [ 121.864175][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 122.044686][ T7730] netlink: 'syz.2.453': attribute type 4 has an invalid length. [ 122.721625][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 123.008888][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 123.062269][ T7776] netlink: 32 bytes leftover after parsing attributes in process `syz.2.464'. [ 123.084156][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 123.091476][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.465'. [ 123.189104][ T7779] netlink: 260 bytes leftover after parsing attributes in process `syz.0.462'. [ 123.361291][ T7754] bond0: option ad_select: unable to set because the bond device is up [ 123.644876][ T7799] IPv6: sit3: Disabled Multicast RS [ 123.679066][ T7801] tipc: Started in network mode [ 123.704080][ T7801] tipc: Node identity e204de4a78ec, cluster identity 3 [ 123.715421][ T7801] tipc: Enabled bearer , priority 0 [ 123.815175][ T7807] netlink: 191768 bytes leftover after parsing attributes in process `syz.2.472'. [ 123.925789][ T7801] syzkaller0: entered promiscuous mode [ 123.946605][ T7801] syzkaller0: entered allmulticast mode [ 123.967885][ T7801] tipc: Resetting bearer [ 124.011780][ T7800] tipc: Resetting bearer [ 124.224053][ T7829] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 124.738229][ T43] tipc: Node number set to 2598952522 [ 125.510316][ T7800] tipc: Disabling bearer [ 125.524159][ T7828] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 126.044850][ T7879] tipc: Started in network mode [ 126.131202][ T7879] tipc: Node identity 080211, cluster identity 4711 [ 126.161078][ T7887] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 126.166143][ T7879] tipc: Enabled bearer , priority 0 [ 126.243660][ T7881] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 126.266921][ T7881] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 126.281601][ T7876] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 126.301768][ T7876] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 126.492792][ T7890] bond2: (slave bridge3): making interface the new active one [ 126.503607][ T7890] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 126.629733][ T7685] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 126.632154][ T7910] __nla_validate_parse: 1 callbacks suppressed [ 126.632170][ T7910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.496'. [ 126.671738][ T7876] tipc: Resetting bearer [ 127.236116][ T6001] tipc: Node number set to 134353152 [ 127.749064][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 127.861367][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 127.913721][ T7964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.513'. [ 127.968352][ T7964] netlink: 128 bytes leftover after parsing attributes in process `syz.1.513'. [ 128.449155][ T7992] syzkaller0: entered promiscuous mode [ 128.464333][ T7992] syzkaller0: entered allmulticast mode [ 128.468422][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 129.713518][ T8000] vcan0: entered allmulticast mode [ 129.827943][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 129.929219][ T8026] IPVS: set_ctl: invalid protocol: 41 172.20.20.62:20001 [ 129.985723][ T8029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.085868][ T8043] lo speed is unknown, defaulting to 1000 [ 130.095157][ T8043] lo speed is unknown, defaulting to 1000 [ 130.112270][ T8043] lo speed is unknown, defaulting to 1000 [ 130.555572][ T8043] infiniband syz0: set active [ 130.562345][ T5951] lo speed is unknown, defaulting to 1000 [ 130.568776][ T8043] infiniband syz0: added lo [ 130.610188][ T8043] RDS/IB: syz0: added [ 130.615559][ T8043] smc: adding ib device syz0 with port count 1 [ 130.623400][ T8043] smc: ib device syz0 port 1 has pnetid [ 130.631123][ T5951] lo speed is unknown, defaulting to 1000 [ 130.638153][ T8043] lo speed is unknown, defaulting to 1000 [ 131.256970][ T8084] netlink: 'syz.3.541': attribute type 10 has an invalid length. [ 131.360322][ T8084] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.411542][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 131.444440][ T8084] bond0: (slave team0): Enslaving as an active interface with an up link [ 131.499275][ T8043] lo speed is unknown, defaulting to 1000 [ 131.762094][ T8111] netlink: 64 bytes leftover after parsing attributes in process `syz.3.547'. [ 132.042179][ T8107] bond3: entered promiscuous mode [ 132.047386][ T8107] bond3: entered allmulticast mode [ 132.053083][ T8107] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.089365][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.549'. [ 132.103619][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.549'. [ 132.129026][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 132.290021][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 132.314572][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.550'. [ 132.349804][ T8107] bond3 (unregistering): Released all slaves [ 132.392141][ T8043] lo speed is unknown, defaulting to 1000 [ 132.459556][ T8124] netlink: 'syz.1.553': attribute type 3 has an invalid length. [ 132.596801][ T8131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.648392][ T8131] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 132.683013][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 132.734465][ T8134] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !忿$ULDDw}zR3p(@ [ 132.834912][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.841538][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.912615][ T8141] openvswitch: netlink: IP tunnel TTL not specified. [ 132.963282][ T8141] netlink: 'syz.0.558': attribute type 9 has an invalid length. [ 132.971378][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 132.998805][ T8141] netlink: 'syz.0.558': attribute type 9 has an invalid length. [ 133.010879][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 133.388431][ T8043] lo speed is unknown, defaulting to 1000 [ 133.524785][ T8171] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.633475][ T8175] ieee802154 phy0 wpan0: encryption failed: -90 [ 134.394235][ T8043] lo speed is unknown, defaulting to 1000 [ 134.446532][ T8205] netlink: 'syz.3.575': attribute type 23 has an invalid length. [ 134.522884][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.577'. [ 135.318876][ T8242] bond1 (unregistering): Released all slaves [ 135.468440][ T8253] netlink: 'syz.0.590': attribute type 3 has an invalid length. [ 135.938226][ T8288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.924423][ T8328] can: request_module (can-proto-3) failed. [ 137.122920][ T8342] __nla_validate_parse: 10 callbacks suppressed [ 137.122938][ T8342] netlink: 120 bytes leftover after parsing attributes in process `syz.2.607'. [ 137.254339][ T8349] netlink: 184 bytes leftover after parsing attributes in process `syz.0.609'. [ 137.306309][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.610'. [ 137.665193][ T8368] tipc: Enabled bearer , priority 0 [ 137.689514][ T8368] syzkaller0: entered promiscuous mode [ 137.695042][ T8368] syzkaller0: entered allmulticast mode [ 137.787106][ T8368] tipc: Resetting bearer [ 137.811199][ T8366] tipc: Resetting bearer [ 137.900564][ T8366] tipc: Disabling bearer [ 138.054709][ T8380] netlink: 52 bytes leftover after parsing attributes in process `syz.4.618'. [ 138.367735][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 138.402308][ T5944] hid-generic 0005:046D:FFF9.0001: item fetching failed at offset 0/1 [ 138.427992][ T5944] hid-generic 0005:046D:FFF9.0001: probe with driver hid-generic failed with error -22 [ 139.466700][ T8438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.635'. [ 139.612685][ T30] audit: type=1804 audit(1755031255.359:2): pid=8443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.636" name="/newroot/140/cgroup.controllers" dev="tmpfs" ino=730 res=1 errno=0 [ 139.674918][ T8445] netlink: 'syz.4.631': attribute type 1 has an invalid length. [ 139.693059][ T30] audit: type=1800 audit(1755031255.389:3): pid=8443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.636" name="cgroup.controllers" dev="tmpfs" ino=730 res=0 errno=0 [ 139.704928][ T8445] netlink: 44 bytes leftover after parsing attributes in process `syz.4.631'. [ 140.076458][ T8428] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 140.223445][ T8486] netlink: 'syz.1.647': attribute type 15 has an invalid length. [ 140.264893][ T8473] hsr0 speed is unknown, defaulting to 1000 [ 140.273954][ T8486] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 140.332825][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'. [ 140.354219][ T8491] netlink: 52 bytes leftover after parsing attributes in process `syz.3.649'. [ 140.485154][ T8492] bond1: (slave bridge3): making interface the new active one [ 140.544270][ T8492] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 140.553853][ T8473] lo speed is unknown, defaulting to 1000 [ 140.564738][ T8483] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 140.572991][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.651'. [ 140.617542][ T8501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.774300][ T8507] netlink: 'syz.3.653': attribute type 1 has an invalid length. [ 140.783517][ T8507] netlink: 'syz.3.653': attribute type 33 has an invalid length. [ 140.792580][ T8504] dvmrp0: entered allmulticast mode [ 140.802820][ T8507] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 141.853902][ T8516] IPv6: addrconf: prefix option has invalid lifetime [ 142.061092][ T8525] batadv1: left allmulticast mode [ 142.106195][ T8525] batadv1: left promiscuous mode [ 142.112110][ T8525] bridge0: port 3(batadv1) entered disabled state [ 142.170583][ T8537] __nla_validate_parse: 5 callbacks suppressed [ 142.170600][ T8537] netlink: 72 bytes leftover after parsing attributes in process `syz.2.664'. [ 142.207272][ T8525] bridge_slave_1: left allmulticast mode [ 142.212965][ T8525] bridge_slave_1: left promiscuous mode [ 142.222884][ T8525] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.242248][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 142.267665][ T8525] bridge_slave_0: left allmulticast mode [ 142.273378][ T8525] bridge_slave_0: left promiscuous mode [ 142.286342][ T8525] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.418125][ T8535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.659'. [ 142.681614][ T8557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.785292][ T8569] netlink: 'syz.4.670': attribute type 2 has an invalid length. [ 142.812547][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.670'. [ 143.161053][ T8599] netlink: 1 bytes leftover after parsing attributes in process `syz.0.678'. [ 143.801042][ T8610] netlink: 40 bytes leftover after parsing attributes in process `syz.1.682'. [ 143.852138][ T8610] tipc: Enabled bearer , priority 0 [ 144.042956][ T8610] syzkaller0: entered promiscuous mode [ 144.051640][ T8624] netlink: 324 bytes leftover after parsing attributes in process `syz.2.687'. [ 144.060501][ T8610] syzkaller0: entered allmulticast mode [ 144.096721][ T8621] tipc: Resetting bearer [ 144.126505][ T8626] veth0: entered promiscuous mode [ 144.157111][ T8620] veth0: left promiscuous mode [ 144.211185][ T8609] tipc: Resetting bearer [ 144.297646][ T8634] netlink: 'syz.2.688': attribute type 21 has an invalid length. [ 144.631956][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'. [ 144.859746][ T8645] netlink: 9 bytes leftover after parsing attributes in process `syz.3.692'. [ 145.005055][ T8648] netlink: 5 bytes leftover after parsing attributes in process `syz.3.692'. [ 145.086168][ T5951] tipc: Node number set to 1937841048 [ 145.944677][ T8609] tipc: Disabling bearer [ 146.917984][ T8705] xt_policy: too many policy elements [ 146.975883][ T8709] batman_adv: batadv0: Adding interface: wlan1 [ 147.005147][ T8709] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.042836][ T8709] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 147.084277][ T8715] !: renamed from dummy0 (while UP) [ 147.514972][ T8738] __nla_validate_parse: 9 callbacks suppressed [ 147.514990][ T8738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.720'. [ 147.534871][ T8740] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.721'. [ 147.704851][ T8745] 8021q: VLANs not supported on ip6gre0 [ 147.855416][ T8754] netlink: zone id is out of range [ 147.866746][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.725'. [ 147.883078][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880580b0000: rx timeout, send abort [ 147.892376][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880580b0000: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 147.907636][ T8754] netlink: del zone limit has 4 unknown bytes [ 148.025967][ T8769] tipc: Enabling of bearer rejected, failed to enable media [ 148.230338][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 148.278905][ T8784] netlink: 5 bytes leftover after parsing attributes in process `syz.4.735'. [ 148.299850][ T8782] netlink: 60 bytes leftover after parsing attributes in process `syz.1.734'. [ 148.316974][ T8784] 1{X: renamed from 30{X (while UP) [ 148.382323][ T8784] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 148.392354][ T8793] netlink: 'syz.0.736': attribute type 21 has an invalid length. [ 148.421562][ T8793] netlink: 132 bytes leftover after parsing attributes in process `syz.0.736'. [ 148.421748][ T8787] netlink: 60 bytes leftover after parsing attributes in process `syz.1.734'. [ 148.501685][ T8798] IPVS: set_ctl: invalid protocol: 33991 172.20.20.170:20001 [ 148.620230][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.741'. [ 148.781947][ T8810] batadv1: entered allmulticast mode [ 148.836166][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 150.420475][ T8895] netlink: 'syz.0.767': attribute type 4 has an invalid length. [ 150.669046][ T6001] IPVS: starting estimator thread 0... [ 150.676895][ T8910] netlink: 'syz.3.772': attribute type 11 has an invalid length. [ 150.837150][ T8913] IPVS: using max 24 ests per chain, 57600 per kthread [ 150.867905][ T8922] tipc: Enabled bearer , priority 0 [ 150.898628][ T8915] syzkaller0: entered promiscuous mode [ 150.904139][ T8915] syzkaller0: entered allmulticast mode [ 150.950263][ T8915] tipc: Resetting bearer [ 151.493249][ T8911] tipc: Resetting bearer [ 151.514233][ T8911] tipc: Disabling bearer [ 152.225347][ T8980] veth3: entered allmulticast mode [ 152.519171][ T6001] syz_tun: tun_net_xmit 110 [ 152.524208][ T9000] bond0: (slave bond_slave_0): Releasing backup interface [ 152.572130][ T9000] bond0: (slave bond_slave_1): Releasing backup interface [ 152.613062][ T9006] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 152.642098][ T9006] __nla_validate_parse: 14 callbacks suppressed [ 152.642115][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'. [ 152.645621][ T9000] team0: Port device team_slave_0 removed [ 152.789260][ T9000] team0: Port device team_slave_1 removed [ 152.807874][ T9000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.851276][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 152.851658][ T9000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.913950][ T9000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.941890][ T9000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.961465][ T9025] netlink: 'syz.2.798': attribute type 16 has an invalid length. [ 152.970812][ T9025] netlink: 'syz.2.798': attribute type 3 has an invalid length. [ 152.981315][ T9000] bond1: (slave bridge3): Releasing active interface [ 152.986242][ T9025] netlink: 132 bytes leftover after parsing attributes in process `syz.2.798'. [ 152.999400][ T9026] netlink: 56 bytes leftover after parsing attributes in process `syz.4.797'. [ 153.062273][ T5960] hsr0 speed is unknown, defaulting to 1000 [ 153.144825][ T9031] netlink: 88 bytes leftover after parsing attributes in process `syz.2.799'. [ 153.229635][ T5944] syz_tun: tun_net_xmit 110 [ 153.562222][ T9057] netlink: 'syz.3.806': attribute type 1 has an invalid length. [ 153.596177][ T9057] netlink: 'syz.3.806': attribute type 4 has an invalid length. [ 153.612307][ T9057] netlink: 192 bytes leftover after parsing attributes in process `syz.3.806'. [ 153.891707][ T9073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.811'. [ 153.994122][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.813'. [ 153.994188][ T9082] netlink: 52 bytes leftover after parsing attributes in process `syz.0.812'. [ 154.045580][ T9082] gre1: entered promiscuous mode [ 154.052136][ T9082] gre1: entered allmulticast mode [ 154.073053][ T9079] tipc: Enabling of bearer rejected, failed to enable media [ 154.659007][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.822'. [ 154.767790][ T9124] netlink: 'syz.3.825': attribute type 14 has an invalid length. [ 155.158091][ T9138] netlink: 'syz.3.829': attribute type 10 has an invalid length. [ 155.280287][ T9138] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 155.613731][ T9169] geneve2: entered promiscuous mode [ 155.654860][ T9169] geneve2: entered allmulticast mode [ 156.035207][ T9201] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.494733][ T9228] netlink: 'syz.0.850': attribute type 10 has an invalid length. [ 156.647766][ T9233] openvswitch: netlink: Duplicate or invalid key (type 0). [ 156.655114][ T9233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.548705][ T9270] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3944. macoff=96 [ 157.713234][ T9278] __nla_validate_parse: 7 callbacks suppressed [ 157.713250][ T9278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.869'. [ 157.971597][ T9291] hsr0 speed is unknown, defaulting to 1000 [ 158.000085][ T9291] lo speed is unknown, defaulting to 1000 [ 158.317117][ T9313] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 158.369439][ T9320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.797159][ T9337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.886'. [ 158.920039][ T9345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.890'. [ 158.968510][ T9353] netlink: 'syz.4.891': attribute type 5 has an invalid length. [ 159.004180][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.889'. [ 159.204416][ T9367] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.895'. [ 159.225424][ T9351] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.333735][ T9359] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 159.345637][ T9360] netlink: 'syz.4.893': attribute type 29 has an invalid length. [ 159.355019][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.893'. [ 159.391834][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 159.539854][ T9382] IPv6: Can't replace route, no match found [ 159.608907][ T9357] delete_channel: no stack [ 160.063382][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.903'. [ 160.088331][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'. [ 160.267206][ T9413] netlink: 300 bytes leftover after parsing attributes in process `syz.3.906'. [ 160.496008][ T9424] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 160.534619][ T9417] 1{X: left allmulticast mode [ 160.717772][ T9430] netlink: 'syz.2.910': attribute type 1 has an invalid length. [ 160.746731][ T5868] Bluetooth: hci4: command 0x0405 tx timeout [ 161.771392][ T9417] hsr1: left allmulticast mode [ 161.781895][ T9417] bond0: left allmulticast mode [ 161.790650][ T9417] batadv0: left allmulticast mode [ 161.835028][ T9440] tipc: Enabled bearer , priority 0 [ 161.865706][ T9441] syzkaller0: entered promiscuous mode [ 161.891331][ T9441] syzkaller0: entered allmulticast mode [ 161.932583][ T9445] tipc: Resetting bearer [ 161.974008][ T7716] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.020898][ T7716] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.052201][ T9445] tipc: Resetting bearer [ 162.098703][ T9445] tipc: Disabling bearer [ 162.130689][ T7716] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.179509][ T7716] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.839613][ T9494] tipc: Cannot configure node identity twice [ 162.879904][ T9492] __nla_validate_parse: 4 callbacks suppressed [ 162.879921][ T9492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.922'. [ 162.896626][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'. [ 162.922450][ T9496] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 162.941398][ T9496] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 163.059935][ T9500] can: request_module (can-proto-5) failed. [ 163.256577][ T9513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.278115][ T9512] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 163.373213][ T9521] bond1: entered promiscuous mode [ 163.384788][ T9521] bond1: entered allmulticast mode [ 163.391016][ T9521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.522006][ T9532] tipc: Enabling of bearer rejected, failed to enable media [ 163.534449][ T9526] netlink: 36 bytes leftover after parsing attributes in process `syz.3.936'. [ 163.567439][ T9526] netlink: 36 bytes leftover after parsing attributes in process `syz.3.936'. [ 163.586933][ T9526] netlink: 36 bytes leftover after parsing attributes in process `syz.3.936'. [ 163.646640][ T9526] netlink: 36 bytes leftover after parsing attributes in process `syz.3.936'. [ 163.666901][ T9526] netlink: 36 bytes leftover after parsing attributes in process `syz.3.936'. [ 163.690221][ T9526] netlink: 36 bytes leftover after parsing attributes in process `syz.3.936'. [ 163.690756][ T9540] netlink: 'syz.4.938': attribute type 1 has an invalid length. [ 163.699792][ T9526] netlink: 36 bytes leftover after parsing attributes in process `syz.3.936'. [ 163.750773][ T9540] netlink: 172 bytes leftover after parsing attributes in process `syz.4.938'. [ 165.306336][ T9624] netlink: 'syz.1.960': attribute type 1 has an invalid length. [ 165.521655][ T9624] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.555593][ T9633] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 165.916903][ T9649] bridge_slave_0: left allmulticast mode [ 165.938063][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.952388][ T9662] netlink: 'syz.4.969': attribute type 2 has an invalid length. [ 165.965664][ T9649] bridge_slave_1: left allmulticast mode [ 165.972566][ T9649] bridge_slave_1: left promiscuous mode [ 165.975221][ T9665] netlink: 'syz.4.969': attribute type 2 has an invalid length. [ 165.980029][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.013082][ T9649] bond0: (slave bond_slave_0): Releasing backup interface [ 166.035520][ T9649] bond0: (slave bond_slave_1): Releasing backup interface [ 166.061153][ T9670] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 166.085195][ T9649] team0: Port device team_slave_0 removed [ 166.104852][ T9649] team0: Port device team_slave_1 removed [ 166.124605][ T9649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.134576][ T9649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.144239][ T9649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.158779][ T9649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.183453][ T9649] team0: Port device vlan0 removed [ 166.208418][ T5960] lo speed is unknown, defaulting to 1000 [ 166.473314][ T9666] hsr_slave_0 (unregistering): left promiscuous mode [ 166.491411][ T9667] team0: Mode changed to "activebackup" [ 166.514512][ T9694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.521842][ T9694] IPv6: NLM_F_CREATE should be set when creating new route [ 166.577783][ T9688] veth0: entered promiscuous mode [ 166.583779][ T9685] veth0: left promiscuous mode [ 166.795159][ T9700] syzkaller1: entered promiscuous mode [ 166.817622][ T9700] syzkaller1: entered allmulticast mode [ 166.872157][ T9700] ipvlan2: entered promiscuous mode [ 167.144872][ T9722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.171616][ T9712] netlink: 'syz.4.980': attribute type 16 has an invalid length. [ 167.190249][ T9712] netlink: 'syz.4.980': attribute type 17 has an invalid length. [ 167.237345][ T9715] netlink: 'syz.4.980': attribute type 1 has an invalid length. [ 167.313151][ T9712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.343480][ T9712] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.435780][ T9712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.489957][ T9743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.004764][ T9768] pimreg: entered allmulticast mode [ 168.404551][ T6001] hid-generic 0005:16BF:5505.0002: item fetching failed at offset 0/3 [ 168.421770][ T6001] hid-generic 0005:16BF:5505.0002: probe with driver hid-generic failed with error -22 [ 168.600641][ T9804] __nla_validate_parse: 83 callbacks suppressed [ 168.600660][ T9804] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1003'. [ 168.940446][ T9823] netlink: 'syz.2.1008': attribute type 1 has an invalid length. [ 169.023628][ T9825] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1008'. [ 169.284268][ T9839] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1013'. [ 169.382173][ T9851] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 169.713771][ T9866] tipc: Enabled bearer , priority 12 [ 170.015242][ T9885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1024'. [ 170.268091][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1025'. [ 170.829623][ T5951] tipc: Node number set to 393384586 [ 170.884158][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'. [ 170.944203][ T9915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1031'. [ 171.029464][ T9914] batman_adv: batadv0: Removing interface: wlan1 [ 171.052884][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1032'. [ 171.084978][ T9919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1032'. [ 171.130695][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1033'. [ 171.181499][ T9919] bridge0: port 1(vlan0) entered blocking state [ 171.201659][ T9919] bridge0: port 1(vlan0) entered disabled state [ 171.224513][ T9919] vlan0: entered allmulticast mode [ 171.242671][ T9919] bridge0: entered allmulticast mode [ 171.250941][ T9919] vlan0: left allmulticast mode [ 171.255825][ T9919] bridge0: left allmulticast mode [ 171.463309][ T9938] sctp: [Deprecated]: syz.2.1039 (pid 9938) Use of int in max_burst socket option. [ 171.463309][ T9938] Use struct sctp_assoc_value instead [ 171.534967][ T9941] sctp: [Deprecated]: syz.2.1039 (pid 9941) Use of int in max_burst socket option. [ 171.534967][ T9941] Use struct sctp_assoc_value instead [ 172.005187][ T9964] tipc: Enabled bearer , priority 10 [ 172.209771][ T9976] veth0: entered promiscuous mode [ 172.235499][ T9973] veth0: left promiscuous mode [ 172.421505][ T9986] bond0: entered promiscuous mode [ 172.435280][ T9986] bond0: left promiscuous mode [ 172.711996][T10005] netlink: 'syz.1.1061': attribute type 39 has an invalid length. [ 172.735429][T10007] unknown channel width for channel at 909000KHz? [ 172.823789][T10015] netlink: 'syz.4.1064': attribute type 1 has an invalid length. [ 172.871234][T10015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.937971][T10015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.959231][T10015] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 172.972438][T10015] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 173.073636][T10023] vlan0: entered allmulticast mode [ 173.084349][T10023] bond2: entered allmulticast mode [ 173.169654][T10019] syzkaller1: entered promiscuous mode [ 173.177660][T10019] syzkaller1: entered allmulticast mode [ 173.221431][T10028] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 173.277972][T10028] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 173.537618][T10042] syzkaller0: entered promiscuous mode [ 173.562067][T10042] syzkaller0: entered allmulticast mode [ 173.591218][T10043] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 173.625189][T10048] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 174.029911][ T6001] IPVS: starting estimator thread 0... [ 174.137947][T10073] IPVS: using max 28 ests per chain, 67200 per kthread [ 175.081860][T10124] __nla_validate_parse: 6 callbacks suppressed [ 175.081876][T10124] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1089'. [ 175.194484][T10126] netlink: 212388 bytes leftover after parsing attributes in process `syz.1.1090'. [ 175.224600][T10126] openvswitch: netlink: Message has 5 unknown bytes. [ 175.428130][T10138] netlink: 'syz.1.1095': attribute type 1 has an invalid length. [ 175.445379][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1094'. [ 175.489081][T10140] xfrm1: entered promiscuous mode [ 175.504383][T10140] xfrm1: entered allmulticast mode [ 175.525646][T10148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1094'. [ 176.214805][T10180] IPv6: sit1: Disabled Multicast RS [ 176.255041][T10180] sit1: entered allmulticast mode [ 176.484968][T10200] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.1111'. [ 176.812652][T10204] lo: entered allmulticast mode [ 176.833570][T10204] lo: left allmulticast mode [ 177.312560][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1125'. [ 177.349849][T10249] syz_tun: tun_net_xmit 42 [ 177.375708][T10244] hsr_slave_1 (unregistering): left promiscuous mode [ 177.421356][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1126'. [ 177.666003][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1131'. [ 177.764805][T10275] tipc: Enabled bearer , priority 0 [ 177.786925][T10275] syzkaller0: entered promiscuous mode [ 177.792443][T10275] syzkaller0: entered allmulticast mode [ 177.803735][T10277] tipc: Enabling of bearer rejected, already enabled [ 177.843731][T10277] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 177.852687][T10277] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 177.864117][T10277] tipc: Resetting bearer [ 177.878034][T10275] tipc: Resetting bearer [ 177.903663][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'. [ 177.927805][T10274] tipc: Resetting bearer [ 177.952292][T10274] tipc: Disabling bearer [ 178.004906][T10285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 178.215781][T10294] netlink: 'syz.0.1142': attribute type 11 has an invalid length. [ 178.230920][T10294] netlink: 'syz.0.1142': attribute type 11 has an invalid length. [ 178.428968][ C1] syz_tun: tun_net_xmit 42 [ 178.454181][ T7711] tipc: Resetting bearer [ 179.466216][ C1] syz_tun: tun_net_xmit 42 [ 179.679302][T10354] tipc: Enabled bearer , priority 0 [ 179.698458][T10354] syzkaller0: entered promiscuous mode [ 179.704002][T10354] syzkaller0: entered allmulticast mode [ 179.793705][T10354] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 179.929774][T10351] tipc: Resetting bearer [ 180.018425][T10351] tipc: Disabling bearer [ 180.030708][T10367] netlink: 'syz.0.1158': attribute type 62 has an invalid length. [ 180.324832][T10381] __nla_validate_parse: 2 callbacks suppressed [ 180.325352][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 180.468496][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1165'. [ 180.479003][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1165'. [ 180.827478][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 180.871857][T10408] netlink: 'syz.1.1173': attribute type 7 has an invalid length. [ 180.895095][T10408] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1173'. [ 181.041644][T10412] netlink: zone id is out of range [ 181.174525][T10428] veth1_to_bond: entered allmulticast mode [ 181.198225][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1178'. [ 181.285206][T10435] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1181'. [ 181.298221][T10437] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1181'. [ 181.347390][T10428] veth1_to_bond (unregistering): left allmulticast mode [ 181.557156][T10449] bond0: (slave team0): Releasing backup interface [ 181.584832][T10449] bridge_slave_0: left allmulticast mode [ 181.593364][T10449] bridge_slave_0: left promiscuous mode [ 181.612096][T10449] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.640989][T10449] bridge_slave_1: left allmulticast mode [ 181.659952][T10449] bridge_slave_1: left promiscuous mode [ 181.665798][T10449] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.695007][T10449] bond0: (slave bond_slave_0): Releasing backup interface [ 181.729178][T10449] bond0: (slave bond_slave_1): Releasing backup interface [ 181.758797][T10460] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.767266][T10449] team0: Port device team_slave_0 removed [ 181.783734][T10449] team0: Port device team_slave_1 removed [ 181.793724][T10449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.801837][T10449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.814636][T10449] bond0: (slave geneve1): Releasing backup interface [ 181.834709][T10449] bond2: (slave wireguard0): Releasing backup interface [ 181.843078][T10449] wireguard0: left promiscuous mode [ 181.853860][T10449] tipc: Resetting bearer [ 181.861415][T10438] syzkaller1: entered promiscuous mode [ 181.867584][T10438] syzkaller1: entered allmulticast mode [ 181.878149][T10457] team0: Mode changed to "activebackup" [ 182.074661][T10467] tipc: Enabling of bearer rejected, already enabled [ 182.115179][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1187'. [ 182.371132][ T7708] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 182.394284][ T7708] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.410585][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'. [ 182.435162][T10488] netlink: 'syz.2.1193': attribute type 21 has an invalid length. [ 182.453761][T10488] IPv6: NLM_F_CREATE should be specified when creating new route [ 182.809985][T10516] netlink: 'syz.2.1201': attribute type 10 has an invalid length. [ 182.843208][T10516] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.860251][T10516] bond0: (slave team0): Enslaving as an active interface with an up link [ 182.988761][T10520] tls_set_device_offload_rx: netdev not found [ 183.180358][T10529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.192799][ T7709] nci: nci_rx_work: unknown MT 0x6 [ 183.424476][T10556] netlink: 'syz.1.1211': attribute type 11 has an invalid length. [ 183.683461][T10568] openvswitch: netlink: Multiple metadata blocks provided [ 184.337546][T10614] v: renamed from dummy0 (while UP) [ 184.547157][T10628] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 184.679660][T10632] netlink: 'syz.4.1232': attribute type 1 has an invalid length. [ 184.687618][T10636] netlink: 'syz.3.1231': attribute type 24 has an invalid length. [ 184.712074][T10632] netlink: 'syz.4.1232': attribute type 2 has an invalid length. [ 185.224018][T10663] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.232250][T10670] tipc: Enabling of bearer rejected, failed to enable media [ 185.282859][T10666] gretap1: entered promiscuous mode [ 185.293209][T10666] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 185.365027][T10680] syzkaller1: entered promiscuous mode [ 185.379191][T10680] syzkaller1: entered allmulticast mode [ 185.430912][T10663] macvlan2: entered promiscuous mode [ 185.446628][T10663] macvlan2: entered allmulticast mode [ 185.462280][T10663] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 185.504264][T10666] macvlan2: entered promiscuous mode [ 185.511089][T10666] macvlan2: entered allmulticast mode [ 185.529495][T10666] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 185.678835][T10694] __nla_validate_parse: 8 callbacks suppressed [ 185.678853][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1248'. [ 185.690282][T10697] tipc: Enabling of bearer rejected, already enabled [ 185.748139][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1248'. [ 185.892496][T10712] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1252'. [ 186.059305][T10722] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 186.232790][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1262'. [ 186.405942][T10739] tipc: Enabled bearer , priority 0 [ 186.413624][T10741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.431120][T10739] syzkaller0: entered promiscuous mode [ 186.446151][T10739] syzkaller0: entered allmulticast mode [ 186.504792][T10734] tipc: Resetting bearer [ 186.589697][T10733] tipc: Resetting bearer [ 186.634731][T10733] tipc: Disabling bearer [ 186.709845][T10759] syz_tun: tun_net_xmit 42 [ 186.958026][T10769] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 186.975644][T10769] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 186.992907][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1270'. [ 187.032894][T10772] tipc: Enabled bearer , priority 0 [ 187.061562][T10772] syzkaller0: entered promiscuous mode [ 187.087650][T10772] syzkaller0: entered allmulticast mode [ 187.136819][T10779] netlink: 'syz.1.1273': attribute type 1 has an invalid length. [ 187.268484][T10784] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 187.285057][T10784] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 187.305854][T10772] tipc: Resetting bearer [ 187.329762][T10771] tipc: Resetting bearer [ 187.417407][T10771] tipc: Disabling bearer [ 187.445697][T10784] gretap1: entered promiscuous mode [ 187.769058][T10806] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 187.789003][ C1] syz_tun: tun_net_xmit 42 [ 187.870365][T10811] netlink: 'syz.0.1285': attribute type 11 has an invalid length. [ 187.870365][T10810] netlink: 'syz.0.1285': attribute type 11 has an invalid length. [ 187.974724][T10817] netlink: 'syz.4.1286': attribute type 10 has an invalid length. [ 188.038900][T10815] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1284'. [ 188.054093][T10816] ipvlan3: entered promiscuous mode [ 188.061461][T10816] bridge0: port 2(ipvlan3) entered blocking state [ 188.072889][T10816] bridge0: port 2(ipvlan3) entered disabled state [ 188.080103][T10816] ipvlan3: entered allmulticast mode [ 188.085569][T10816] bridge0: entered allmulticast mode [ 188.103879][T10816] ipvlan3: left allmulticast mode [ 188.109499][T10816] bridge0: left allmulticast mode [ 188.133341][T10817] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.142627][T10817] team0: entered promiscuous mode [ 188.150585][T10817] bond0: (slave team0): Enslaving as an active interface with an up link [ 188.158482][T10815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1284'. [ 188.159494][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1288'. [ 188.272239][T10826] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 188.293775][T10826] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 188.302318][T10826] tipc: Resetting bearer [ 188.317308][T10826] tipc: Resetting bearer [ 188.323273][T10824] syz_tun: entered allmulticast mode [ 188.520161][T10836] netlink: 'syz.4.1294': attribute type 1 has an invalid length. [ 188.599491][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1296'. [ 188.610141][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 188.826287][ C1] syz_tun: tun_net_xmit 42 [ 188.868641][T10859] netlink: 'syz.2.1299': attribute type 1 has an invalid length. [ 189.126287][ T30] audit: type=1107 audit(1755031304.859:4): pid=10868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='*v CX^GF:iK^&evz? ]sU';nԇ1.@ Ppv6\J+7F3#8S*|f*L°D%Q0PHAB9xQd4ו孊), U(o(岃Zo7!9 [ 189.126287][ T30] ]Gw7U٢smo [ 189.126287][ T30] "' [ 189.559707][T10884] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.600483][T10899] netlink: 'syz.3.1314': attribute type 21 has an invalid length. [ 189.620531][T10884] bond0: left promiscuous mode [ 189.625341][T10884] bond_slave_0: left promiscuous mode [ 189.655100][T10884] bond_slave_1: left promiscuous mode [ 189.671068][T10884] syz_tun: left promiscuous mode [ 189.742457][T10884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.755845][T10884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.857521][T10884] vlan2: left promiscuous mode [ 189.862559][T10884] vlan2: left allmulticast mode [ 189.872579][T10884] hsr_slave_1: left allmulticast mode [ 189.881186][T10884] bridge1: left promiscuous mode [ 189.888809][T10884] bridge1: left allmulticast mode [ 189.894726][T10884] xfrm1: left allmulticast mode [ 189.902671][T10884] veth3: left allmulticast mode [ 189.912661][T10884] ipvlan2: left promiscuous mode [ 189.925585][T10884] gretap1: left promiscuous mode [ 189.963951][ T7717] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.990501][ T7717] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.010631][ T7717] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.034095][ T7717] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.067965][ T7709] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.092699][ T7709] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.109776][ T7709] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.125250][ T7709] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.276910][T10920] tipc: Enabled bearer , priority 0 [ 190.297289][T10920] syzkaller0: entered promiscuous mode [ 190.302795][T10920] syzkaller0: entered allmulticast mode [ 190.334098][T10922] tipc: Enabled bearer , priority 0 [ 190.342358][T10922] syzkaller0: entered promiscuous mode [ 190.348597][T10922] syzkaller0: entered allmulticast mode [ 190.364891][T10920] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 190.419603][T10922] tipc: Resetting bearer [ 190.447960][T10922] nbd: must specify at least one socket [ 190.455163][T10920] tipc: Resetting bearer [ 190.491350][T10921] tipc: Resetting bearer [ 190.540946][T10921] tipc: Disabling bearer [ 190.553213][T10918] tipc: Resetting bearer [ 190.583446][T10918] tipc: Disabling bearer [ 190.687108][T10949] __nla_validate_parse: 12 callbacks suppressed [ 190.687126][T10949] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1329'. [ 190.778368][T10951] netlink: 'syz.3.1330': attribute type 1 has an invalid length. [ 190.781269][T10957] netlink: 'syz.2.1332': attribute type 29 has an invalid length. [ 190.818374][T10951] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.904708][T10964] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1332'. [ 190.918324][T10964] unsupported nla_type 58 [ 190.980209][T10965] netlink: 'syz.2.1332': attribute type 21 has an invalid length. [ 190.988847][T10965] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1332'. [ 191.181303][T10951] veth7: entered promiscuous mode [ 191.303320][T10965] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1332'. [ 191.478638][T10976] geneve2: entered promiscuous mode [ 191.494723][T10983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.713306][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1341'. [ 191.785379][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1341'. [ 191.851255][T11007] openvswitch: netlink: IP tunnel TTL not specified. [ 192.060527][T11018] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004 [ 192.121482][T11028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1349'. [ 192.395827][T11048] syzkaller0: entered promiscuous mode [ 192.402055][T11048] syzkaller0: entered allmulticast mode [ 193.355924][T11094] tipc: Enabled bearer , priority 0 [ 193.364588][T11094] syzkaller0: entered promiscuous mode [ 193.370350][T11094] syzkaller0: entered allmulticast mode [ 193.380664][T11094] netlink: 212320 bytes leftover after parsing attributes in process `syz.0.1363'. [ 193.391970][T11099] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1362'. [ 193.404140][T11094] validate_nla: 2 callbacks suppressed [ 193.404155][T11094] netlink: 'syz.0.1363': attribute type 1 has an invalid length. [ 193.440941][T11094] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1363'. [ 193.483897][T11092] tipc: Resetting bearer [ 193.522628][T11092] tipc: Disabling bearer [ 193.890419][T11124] gtp0: entered promiscuous mode [ 193.901854][T11124] gtp0: entered allmulticast mode [ 194.049180][T11129] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 194.196764][T11137] netlink: 'syz.0.1379': attribute type 1 has an invalid length. [ 194.218904][T11140] block nbd0: Unsupported socket: shutdown callout must be supported. [ 194.274370][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.512745][T11157] xt_socket: unknown flags 0xe4 [ 194.688667][T11164] Bluetooth: MGMT ver 1.23 [ 194.694274][T11161] bond5: entered promiscuous mode [ 194.714013][T11161] bond5: entered allmulticast mode [ 194.720741][T11161] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.122299][T11185] netlink: 'syz.1.1395': attribute type 1 has an invalid length. [ 195.135272][T11187] netlink: 'syz.0.1396': attribute type 12 has an invalid length. [ 195.229185][T11193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.236480][T11193] IPv6: NLM_F_CREATE should be set when creating new route [ 195.380137][T11200] netlink: 'syz.0.1399': attribute type 12 has an invalid length. [ 195.401831][T11200] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744071562067969) [ 195.414612][T11200] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 196.105594][T11240] netlink: 'syz.4.1410': attribute type 1 has an invalid length. [ 196.135667][T11240] __nla_validate_parse: 7 callbacks suppressed [ 196.135684][T11240] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1410'. [ 196.358277][T11260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.674590][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1421'. [ 196.987925][ T5878] Bluetooth: hci2: command 0x0401 tx timeout [ 197.654599][T11326] netlink: 'syz.4.1436': attribute type 1 has an invalid length. [ 198.110979][T11356] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1447'. [ 198.337876][T11370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1452'. [ 198.346910][T11371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1452'. [ 198.422229][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1454'. [ 198.451091][T11378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1454'. [ 198.470128][T11380] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1455'. [ 198.530904][T11385] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20001 [ 198.621499][T11393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1459'. [ 198.791576][T11402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1461'. [ 199.742944][ T5960] IPVS: starting estimator thread 0... [ 199.838530][T11456] IPVS: using max 31 ests per chain, 74400 per kthread [ 200.991594][T11520] netlink: 'syz.2.1495': attribute type 1 has an invalid length. [ 201.047038][T11520] netlink: 'syz.2.1495': attribute type 2 has an invalid length. [ 201.132535][T11526] tipc: Enabled bearer , priority 0 [ 201.179923][T11527] netlink: 'syz.1.1487': attribute type 10 has an invalid length. [ 201.180031][T11526] syzkaller0: entered promiscuous mode [ 201.188744][T11527] __nla_validate_parse: 5 callbacks suppressed [ 201.188758][T11527] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1487'. [ 201.217161][T11526] syzkaller0: entered allmulticast mode [ 201.225165][T11527] !: entered promiscuous mode [ 201.234813][T11527] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 201.254702][T11526] sctp: [Deprecated]: syz.0.1496 (pid 11526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.254702][T11526] Use struct sctp_sack_info instead [ 201.331042][T11535] tipc: Resetting bearer [ 201.364200][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1496'. [ 201.398290][T11524] tipc: Resetting bearer [ 201.438567][T11524] tipc: Disabling bearer [ 201.467155][ T5880] Bluetooth: hci1: command 0x0406 tx timeout [ 201.474175][ T5880] Bluetooth: hci3: command 0x0406 tx timeout [ 201.484160][ T5880] Bluetooth: hci2: command 0x0401 tx timeout [ 201.969264][T11563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1507'. [ 202.031261][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1511'. [ 202.114033][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1511'. [ 202.153549][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1511'. [ 202.170153][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1511'. [ 202.196700][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1511'. [ 202.258857][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1511'. [ 202.287153][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1511'. [ 202.311612][T11590] netlink: 'syz.0.1514': attribute type 1 has an invalid length. [ 202.401216][T11600] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 202.429233][T11598] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 202.505306][T11600] 8021q: adding VLAN 0 to HW filter on device bond6 [ 202.527708][T11590] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 202.547082][T11590] bond4 (unregistering): Released all slaves [ 202.985957][T11627] netlink: 'syz.1.1524': attribute type 1 has an invalid length. [ 203.295646][T11646] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 203.314240][T11646] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 203.327780][T11646] gretap2: entered promiscuous mode [ 203.336526][T11646] gretap2: entered allmulticast mode [ 203.899860][T11685] netlink: 'syz.0.1540': attribute type 29 has an invalid length. [ 203.915628][T11685] netlink: 'syz.0.1540': attribute type 29 has an invalid length. [ 204.234209][T11704] netlink: 'syz.0.1546': attribute type 10 has an invalid length. [ 204.254991][T11704] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 204.872168][T11730] gtp0: entered promiscuous mode [ 205.377440][T11749] nbd: must specify a device to reconfigure [ 205.506875][T11757] netlink: 'syz.1.1564': attribute type 1 has an invalid length. [ 206.223053][T11799] __nla_validate_parse: 72 callbacks suppressed [ 206.223071][T11799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1575'. [ 206.331905][T11814] netlink: 'syz.3.1579': attribute type 2 has an invalid length. [ 206.347397][T11814] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1579'. [ 206.351959][T11799] 8021q: adding VLAN 0 to HW filter on device bond5 [ 206.362401][T11814] nbd: must specify a device to reconfigure [ 206.548234][T11822] geneve2: entered promiscuous mode [ 206.553559][T11822] geneve2: entered allmulticast mode [ 206.581369][ T7711] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.626679][ T7709] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.665976][ T7709] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.693211][ T7709] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.764337][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'. [ 206.770031][T11835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1585'. [ 206.808597][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1585'. [ 206.838308][T11831] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 206.855410][T11835] netlink: 'syz.2.1585': attribute type 20 has an invalid length. [ 206.870673][T11833] netlink: 'syz.2.1585': attribute type 20 has an invalid length. [ 206.944309][ T7685] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 206.962852][ T7685] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.010306][ T7685] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.054901][ T7685] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.098584][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1591'. [ 207.276331][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'. [ 207.312164][T11863] netlink: 'syz.3.1597': attribute type 10 has an invalid length. [ 207.323890][T11863] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1597'. [ 207.344633][ T30] audit: type=1800 audit(1755031323.089:5): pid=11867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1596" name="memory.events" dev="tmpfs" ino=1487 res=0 errno=0 [ 207.345021][T11863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1597'. [ 207.397600][T11869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1599'. [ 208.552234][T11921] netlink: 'syz.3.1612': attribute type 28 has an invalid length. [ 208.560881][T11921] netlink: 'syz.3.1612': attribute type 3 has an invalid length. [ 208.736783][T11926] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 209.071479][T11957] netlink: 'syz.3.1620': attribute type 16 has an invalid length. [ 209.095918][T11957] netlink: 'syz.3.1620': attribute type 17 has an invalid length. [ 209.333201][T11949] tipc: Resetting bearer [ 209.453950][T11957] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.494106][T11957] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.680969][T11981] openvswitch: netlink: EtherType 257 is less than min 600 [ 209.848722][T11992] netlink: 'syz.1.1630': attribute type 3 has an invalid length. [ 209.872110][T11992] veth0: entered promiscuous mode [ 209.942185][T11991] veth0: left promiscuous mode [ 210.876202][T12050] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.294289][T12084] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.554009][T12102] validate_nla: 2 callbacks suppressed [ 211.554027][T12102] netlink: 'syz.1.1661': attribute type 83 has an invalid length. [ 211.627108][T12102] __nla_validate_parse: 14 callbacks suppressed [ 211.627125][T12102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1661'. [ 211.685400][T12107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'. [ 211.724833][T12107] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 211.854041][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'. [ 211.910438][T12114] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 211.935508][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'. [ 212.419599][T12143] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1675'. [ 212.449853][T12143] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1675'. [ 212.721983][T12162] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1680'. [ 212.786953][T12162] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1680'. [ 212.807806][T12162] 0{X: renamed from gretap0 [ 212.849749][T12162] 0{X: entered allmulticast mode [ 212.879366][T12162] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 213.308301][T12199] rdma_rxe: rxe_newlink: failed to add lo [ 213.349029][T12199] 0{X: left allmulticast mode [ 213.395588][T12199] !: left promiscuous mode [ 213.518993][T12199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.604119][T12203] tipc: Resetting bearer [ 213.612721][T12206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1692'. [ 213.644903][ T7711] syz_tun: tun_net_xmit 90 [ 213.670106][ T5951] syz_tun: tun_net_xmit 110 [ 213.759425][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1697'. [ 214.391394][T12261] netlink: 'syz.0.1704': attribute type 1 has an invalid length. [ 214.427046][ T5951] syz_tun: tun_net_xmit 90 [ 214.446650][T12261] bond4: (slave geneve3): making interface the new active one [ 214.455586][T12261] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 214.465269][ T7716] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.477826][ T7711] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.501682][ T7711] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.511781][ T5951] syz_tun: tun_net_xmit 110 [ 214.518267][ T7685] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 214.653210][T12281] tipc: Enabling of bearer rejected, failed to enable media [ 215.165278][T12310] 8021q: VLANs not supported on ip6_vti0 [ 215.257464][T12315] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.286000][T12316] macvlan3: entered promiscuous mode [ 215.369354][T12316] macvlan3: entered allmulticast mode [ 215.379217][T12316] bond5: (slave macvlan3): Opening slave failed [ 216.537232][T12381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.772171][T12391] __nla_validate_parse: 19 callbacks suppressed [ 216.772189][T12391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1736'. [ 216.796401][T12391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1736'. [ 216.892276][T12396] netlink: 'syz.3.1740': attribute type 8 has an invalid length. [ 217.139752][T12407] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 217.163737][T12407] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 217.186755][T12407] tipc: Resetting bearer [ 217.227049][T12407] tipc: Resetting bearer [ 217.283490][T12412] bond6: entered promiscuous mode [ 217.289358][T12412] bond6: entered allmulticast mode [ 217.295022][T12412] 8021q: adding VLAN 0 to HW filter on device bond6 [ 217.395382][T12412] bond6 (unregistering): Released all slaves [ 217.686357][T12427] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1751'. [ 217.692845][T12425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1750'. [ 218.092426][T12442] netlink: 'syz.0.1755': attribute type 2 has an invalid length. [ 218.393181][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1761'. [ 218.525289][T12463] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1764'. [ 218.532302][T12461] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 218.746851][ T30] audit: type=1800 audit(1755031334.489:6): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1769" name="memory.events" dev="tmpfs" ino=1943 res=0 errno=0 [ 218.820502][T12485] pim6reg: entered allmulticast mode [ 218.831256][ T30] audit: type=1800 audit(1755031334.489:7): pid=12482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1769" name="memory.events" dev="tmpfs" ino=1943 res=0 errno=0 [ 218.912273][ T30] audit: type=1804 audit(1755031334.489:8): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1769" name="/newroot/379/memory.events" dev="tmpfs" ino=1943 res=1 errno=0 [ 219.087834][T12502] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 219.225376][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1776'. [ 219.732958][T12532] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1784'. [ 219.841900][T12530] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1786'. [ 219.862296][T12530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1786'. [ 220.675331][T12582] netlink: 'syz.4.1799': attribute type 64 has an invalid length. [ 220.767458][T12585] netlink: 'syz.0.1801': attribute type 18 has an invalid length. [ 220.934408][T12596] netlink: 'syz.0.1801': attribute type 18 has an invalid length. [ 221.211707][T12615] mac80211_hwsim hwsim7 : renamed from wlan1 (while UP) [ 221.252326][T12615] vlan0: entered promiscuous mode [ 221.309690][T12615] team0: Port device vlan0 added [ 221.528745][T12626] syzkaller0: entered promiscuous mode [ 221.541482][T12626] syzkaller0: entered allmulticast mode [ 221.548379][T12630] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 222.014066][T12651] __nla_validate_parse: 8 callbacks suppressed [ 222.014085][T12651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1818'. [ 222.195366][T12655] openvswitch: netlink: Flow key attr not present in new flow. [ 223.168551][T12647] tipc: MTU too low for tipc bearer [ 223.281056][T12662] netlink: 'syz.0.1822': attribute type 10 has an invalid length. [ 223.300096][T12662] team0: Device hsr_slave_0 failed to register rx_handler [ 223.341317][T12669] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 223.395749][T12679] sctp: [Deprecated]: syz.3.1824 (pid 12679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.395749][T12679] Use struct sctp_sack_info instead [ 226.435966][T12695] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 226.459749][T12695] netlink: 4192 bytes leftover after parsing attributes in process `syz.4.1830'. [ 226.580067][T12703] netlink: 'syz.2.1834': attribute type 18 has an invalid length. [ 226.801040][T12717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1837'. [ 226.815850][T12703] syzkaller1: entered promiscuous mode [ 226.826727][T12703] syzkaller1: entered allmulticast mode [ 226.832561][T12717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1837'. [ 227.119642][T12733] netlink: 'syz.2.1842': attribute type 33 has an invalid length. [ 227.151343][T12735] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1841'. [ 227.174111][T12735] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1841'. [ 227.176196][T12733] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1842'. [ 227.185143][T12735] netlink: 'syz.1.1841': attribute type 6 has an invalid length. [ 227.207203][T12735] netlink: 'syz.1.1841': attribute type 5 has an invalid length. [ 227.215271][T12735] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1841'. [ 227.237276][T12742] sctp: [Deprecated]: syz.0.1844 (pid 12742) Use of int in maxseg socket option. [ 227.237276][T12742] Use struct sctp_assoc_value instead [ 227.260750][T12739] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1841'. [ 227.301863][T12745] netlink: 'syz.4.1845': attribute type 1 has an invalid length. [ 227.323497][T12739] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1841'. [ 227.337293][T12740] netlink: 'syz.3.1843': attribute type 1 has an invalid length. [ 227.370750][T12740] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1843'. [ 227.373633][T12739] netlink: 'syz.1.1841': attribute type 6 has an invalid length. [ 227.408550][T12739] netlink: 'syz.1.1841': attribute type 5 has an invalid length. [ 227.416737][T12739] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1841'. [ 227.492239][T12749] veth11: entered promiscuous mode [ 227.514820][T12749] bond4: (slave veth11): Enslaving as a backup interface with a down link [ 227.689772][T12769] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1850'. [ 227.858225][T12779] netlink: 'syz.2.1853': attribute type 10 has an invalid length. [ 228.067761][T12779] team0: Port device dummy0 added [ 228.192258][T12780] team0: Port device dummy0 removed [ 228.239161][T12780] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 228.548187][T12809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1858'. [ 228.903022][T12834] delete_channel: no stack [ 229.402083][T12862] validate_nla: 1 callbacks suppressed [ 229.402102][T12862] netlink: 'syz.0.1878': attribute type 2 has an invalid length. [ 229.527228][T12874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.534605][T12874] IPv6: NLM_F_CREATE should be set when creating new route [ 229.541894][T12874] IPv6: NLM_F_CREATE should be set when creating new route [ 229.551432][T12872] tipc: Enabled bearer , priority 0 [ 229.559822][T12872] syzkaller0: entered promiscuous mode [ 229.565476][T12872] syzkaller0: entered allmulticast mode [ 229.575415][T12872] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 229.583849][T12874] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.652857][T12872] tipc: Resetting bearer [ 229.682555][ T5868] block nbd0: Receive control failed (result -32) [ 229.769034][T12871] tipc: Resetting bearer [ 229.785571][T12871] tipc: Disabling bearer [ 230.204947][T12913] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 230.215240][T12915] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 230.313419][T12922] bond0: (slave bond_slave_1): Releasing backup interface [ 230.354414][T12924] netlink: 'syz.1.1899': attribute type 4 has an invalid length. [ 230.883293][T12951] bond2: (slave bridge0): Releasing backup interface [ 230.900989][T12953] netlink: 'syz.3.1909': attribute type 10 has an invalid length. [ 230.969104][T12953] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 232.458980][ T7685] bond0: (slave team0): link status definitely down, disabling slave [ 232.481609][ T7685] bond0: now running without any active interface! [ 232.721720][T12980] __nla_validate_parse: 13 callbacks suppressed [ 232.721739][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1916'. [ 232.754019][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1919'. [ 232.763373][T12982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1919'. [ 233.615294][T13025] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1929'. [ 233.652458][T13027] bridge0: entered promiscuous mode [ 233.660660][T13027] bridge0: entered allmulticast mode [ 234.030934][T13049] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1939'. [ 234.075399][T13055] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1939'. [ 234.225270][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1944'. [ 234.361756][T13071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.392623][T13071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.638988][T13091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1952'. [ 234.667988][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1952'. [ 234.837150][T13109] netlink: 'syz.0.1958': attribute type 1 has an invalid length. [ 234.852364][T13107] netlink: 'syz.3.1957': attribute type 49 has an invalid length. [ 234.888355][T13109] bond6: entered promiscuous mode [ 234.894443][T13109] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.930128][T13116] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.941029][T13116] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 234.955193][T13116] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 234.975911][T13116] bond6: (slave wireguard0): making interface the new active one [ 234.998762][T13116] wireguard0: entered promiscuous mode [ 235.005815][T13116] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 235.102199][T13119] hsr0 speed is unknown, defaulting to 1000 [ 235.132808][T13119] lo speed is unknown, defaulting to 1000 [ 235.554627][T13154] netlink: 'syz.4.1971': attribute type 21 has an invalid length. [ 235.574468][T13154] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1971'. [ 236.253998][T13184] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 236.269033][T13187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.642956][T13214] netlink: 'syz.3.1992': attribute type 4 has an invalid length. [ 237.633087][T13267] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 237.957313][T13289] netlink: 'syz.4.2013': attribute type 3 has an invalid length. [ 237.965090][T13289] __nla_validate_parse: 6 callbacks suppressed [ 237.965105][T13289] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2013'. [ 238.076785][T13295] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 238.321549][T13310] netlink: 'syz.4.2023': attribute type 1 has an invalid length. [ 238.330731][T13310] netlink: 'syz.4.2023': attribute type 1 has an invalid length. [ 238.589437][T13323] netlink: 'syz.0.2026': attribute type 1 has an invalid length. [ 238.597922][T13323] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2026'. [ 238.609595][T13323] netlink: 'syz.0.2026': attribute type 1 has an invalid length. [ 238.618196][T13323] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2026'. [ 238.851950][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2030'. [ 238.995971][T13349] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2032'. [ 239.017101][T13351] nftables ruleset with unbound chain [ 239.024873][T13353] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2034'. [ 239.084466][T13357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2035'. [ 239.777096][T13381] bond0: entered promiscuous mode [ 239.804522][T13381] batadv0: entered promiscuous mode [ 239.811729][T13381] batadv0: left promiscuous mode [ 239.838714][T13381] bond0: left promiscuous mode [ 240.157937][T13404] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2049'. [ 240.195360][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2051'. [ 240.621535][T13441] sctp: [Deprecated]: syz.0.2057 (pid 13441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.621535][T13441] Use struct sctp_sack_info instead [ 240.669734][T13443] nbd: must specify a size in bytes for the device [ 240.848278][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2061'. [ 241.263854][T13488] IPVS: ip_vs_edit_dest(): server weight less than zero [ 241.579369][T13506] ieee802154 phy0 wpan0: encryption failed: -90 [ 241.971147][T13533] netlink: 'syz.1.2087': attribute type 10 has an invalid length. [ 242.191313][T13548] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 242.329111][T13548] bond6: entered promiscuous mode [ 242.341056][T13548] bond6: entered allmulticast mode [ 242.367183][T13548] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.649311][T13573] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 242.828401][ T7708] wlan1: Trigger new scan to find an IBSS to join [ 242.975041][T13589] netlink: 'syz.1.2103': attribute type 11 has an invalid length. [ 242.986574][T13589] netlink: 'syz.1.2103': attribute type 11 has an invalid length. [ 242.995948][T13589] __nla_validate_parse: 9 callbacks suppressed [ 242.995964][T13589] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2103'. [ 243.073114][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2107'. [ 243.418749][T13625] netlink: 'syz.3.2113': attribute type 1 has an invalid length. [ 243.443559][T13625] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2113'. [ 243.791967][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'. [ 243.801731][T13652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2120'. [ 243.811689][T13652] netlink: 'syz.3.2120': attribute type 15 has an invalid length. [ 243.822410][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'. [ 243.834820][T13652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2120'. [ 243.866463][T13652] netlink: 'syz.3.2120': attribute type 15 has an invalid length. [ 243.995051][T13661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2123'. [ 244.048244][T13661] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2123'. [ 244.093706][T13661] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2123'. [ 244.564255][T13707] netlink: 'syz.4.2135': attribute type 12 has an invalid length. [ 244.574522][T13707] netlink: 'syz.4.2135': attribute type 12 has an invalid length. [ 244.888079][T13730] netlink: 'syz.0.2140': attribute type 1 has an invalid length. [ 244.970812][T13735] bond7: (slave gretap2): making interface the new active one [ 244.980853][T13735] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 245.005186][T13734] netlink: 'syz.4.2141': attribute type 4 has an invalid length. [ 245.408406][T13758] bond0: (slave team0): Releasing backup interface [ 245.420883][T13758] team0: left promiscuous mode [ 245.434006][T13758] team0: Cannot enslave team device to itself [ 245.843804][T13787] netlink: 'syz.4.2157': attribute type 12 has an invalid length. [ 245.867203][ T7685] wlan1: Trigger new scan to find an IBSS to join [ 246.236983][T13823] netlink: 'syz.3.2168': attribute type 5 has an invalid length. [ 246.240966][T13821] syzkaller0: entered promiscuous mode [ 246.267945][T13821] syzkaller0: entered allmulticast mode [ 246.304668][T13828] syzkaller0: entered promiscuous mode [ 246.310640][T13828] syzkaller0: entered allmulticast mode [ 246.349143][T13828] tipc: Enabled bearer , priority 0 [ 246.375774][T13827] tipc: Resetting bearer [ 246.425150][T13827] tipc: Disabling bearer [ 246.860995][T13859] geneve1: entered promiscuous mode [ 246.867159][T13859] geneve1: entered allmulticast mode [ 246.912438][T13866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.928122][T13867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.770608][T13874] geneve1: left promiscuous mode [ 247.775689][T13874] geneve1: left allmulticast mode [ 247.781461][T13874] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 247.792832][T13874] bond1: left promiscuous mode [ 247.798100][T13874] bond1: left allmulticast mode [ 247.804716][T13874] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 247.827553][T13902] validate_nla: 2 callbacks suppressed [ 247.827569][T13902] netlink: 'syz.3.2194': attribute type 29 has an invalid length. [ 247.847548][T13906] netlink: 'syz.3.2194': attribute type 29 has an invalid length. [ 247.863673][T13888] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 247.889240][T13888] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 247.904571][T13888] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 248.020940][T13925] __nla_validate_parse: 14 callbacks suppressed [ 248.020959][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2196'. [ 248.049201][ T7716] nci: nci_rsp_packet: unknown rsp opcode 0x26 [ 248.237979][T13934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2199'. [ 248.482498][T13943] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2202'. [ 248.840443][T13945] netlink: 'syz.2.2203': attribute type 1 has an invalid length. [ 248.901893][T13948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2204'. [ 248.917466][ T7716] wlan1: Trigger new scan to find an IBSS to join [ 248.933644][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'. [ 248.951527][T13950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2205'. [ 248.964933][T13950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2205'. [ 248.980160][T13950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.133382][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2208'. [ 249.238370][T13963] netlink: 'syz.4.2210': attribute type 10 has an invalid length. [ 249.259566][T13963] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 249.301220][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2211'. [ 249.313526][T13963] sctp: [Deprecated]: syz.4.2210 (pid 13963) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.313526][T13963] Use struct sctp_sack_info instead [ 249.508394][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2216'. [ 249.811675][T14003] netlink: 'syz.2.2224': attribute type 7 has an invalid length. [ 249.845194][ T7711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.869848][ T7711] wlan1: Failed to join IBSS, beacons forbidden [ 250.168202][T14026] openvswitch: netlink: IPv4 tun info is not correct [ 250.398385][T14037] bond0: (slave bridge0): Releasing backup interface [ 250.432271][T14037] tipc: Resetting bearer [ 250.455479][T14036] netlink: 'syz.4.2234': attribute type 9 has an invalid length. [ 250.867004][T14063] syzkaller1: entered promiscuous mode [ 250.872518][T14063] syzkaller1: entered allmulticast mode [ 251.094801][T14085] syzkaller0: entered promiscuous mode [ 251.103678][T14085] syzkaller0: entered allmulticast mode [ 251.325859][T14103] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 251.466421][T14103] bond6: (slave bridge3): making interface the new active one [ 251.474664][T14103] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 251.501872][T14108] bond6: (slave bridge4): Enslaving as an active interface with a down link [ 251.693451][T14123] geneve3: entered promiscuous mode [ 251.716802][T14123] geneve3: entered allmulticast mode [ 251.732510][ T7709] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 251.757832][ T7709] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 251.789071][ T7709] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 251.833396][T14133] netlink: 'syz.3.2264': attribute type 10 has an invalid length. [ 251.867535][ T7709] wlan1: Trigger new scan to find an IBSS to join [ 251.889668][ T7709] ------------[ cut here ]------------ [ 251.895173][ T7709] WARNING: CPU: 0 PID: 7709 at net/mac80211/scan.c:1235 ieee80211_request_ibss_scan+0x701/0x790 [ 251.902740][T14133] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.905768][ T7709] Modules linked in: [ 251.916895][ T7709] CPU: 0 UID: 0 PID: 7709 Comm: kworker/u8:43 Not tainted 6.16.0-syzkaller-12091-g89886abd0734 #0 PREEMPT(full) [ 251.928046][T14133] bond0: (slave team0): Enslaving as an active interface with an up link [ 251.928968][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 251.947899][ T7709] Workqueue: events_unbound cfg80211_wiphy_work [ 251.954178][ T7709] RIP: 0010:ieee80211_request_ibss_scan+0x701/0x790 [ 251.960834][ T7709] Code: e8 f4 3d d5 f6 eb 05 e8 ed 3d d5 f6 b8 ea ff ff ff e9 2b fa ff ff e8 de 3d d5 f6 90 0f 0b 90 e9 e6 f9 ff ff e8 d0 3d d5 f6 90 <0f> 0b 90 eb dd 48 c7 c1 70 77 a3 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 251.980738][ T7709] RSP: 0018:ffffc9001c91f810 EFLAGS: 00010293 [ 251.987301][ T7709] RAX: ffffffff8aea6de0 RBX: 0000000000000000 RCX: ffff888068748000 [ 251.995299][ T7709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.005003][ T7709] RBP: dffffc0000000000 R08: 0000000000000000 R09: 1ffff92003923eb8 [ 252.013381][ T7709] R10: dffffc0000000000 R11: fffff52003923eb9 R12: ffff888028338e40 [ 252.019657][T14139] sctp: [Deprecated]: syz.4.2268 (pid 14139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 252.019657][T14139] Use struct sctp_sack_info instead [ 252.021819][ T7709] R13: ffff88802833cf78 R14: 0000000000000000 R15: ffff888028338e80 [ 252.045869][ T7709] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 252.055121][ T7709] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.061750][ T7709] CR2: 00007fcd90b91d58 CR3: 000000000df36000 CR4: 00000000003526f0 [ 252.069818][ T7709] Call Trace: [ 252.073111][ T7709] [ 252.076357][ T7709] ieee80211_ibss_work+0xdec/0x1060 [ 252.081627][ T7709] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 252.087315][ T7709] ? ieee80211_iface_work+0x1224/0x12d0 [ 252.092887][ T7709] ? rcu_is_watching+0x15/0xb0 [ 252.097729][ T7709] cfg80211_wiphy_work+0x2b8/0x470 [ 252.102869][ T7709] ? process_scheduled_works+0x9ef/0x17b0 [ 252.109385][ T7709] process_scheduled_works+0xade/0x17b0 [ 252.115380][ T7709] ? __pfx_process_scheduled_works+0x10/0x10 [ 252.121546][ T7709] worker_thread+0x8a0/0xda0 [ 252.126376][ T7709] kthread+0x70e/0x8a0 [ 252.130476][ T7709] ? __pfx_worker_thread+0x10/0x10 [ 252.135615][ T7709] ? __pfx_kthread+0x10/0x10 [ 252.140560][ T7709] ? _raw_spin_unlock_irq+0x23/0x50 [ 252.145792][ T7709] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.151070][ T7709] ? __pfx_kthread+0x10/0x10 [ 252.155687][ T7709] ret_from_fork+0x3fc/0x770 [ 252.160500][ T7709] ? __pfx_ret_from_fork+0x10/0x10 [ 252.165643][ T7709] ? __switch_to_asm+0x39/0x70 [ 252.170814][ T7709] ? __switch_to_asm+0x33/0x70 [ 252.175610][ T7709] ? __pfx_kthread+0x10/0x10 [ 252.180273][ T7709] ret_from_fork_asm+0x1a/0x30 [ 252.185111][ T7709] [ 252.188315][ T7709] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 252.195612][ T7709] CPU: 0 UID: 0 PID: 7709 Comm: kworker/u8:43 Not tainted 6.16.0-syzkaller-12091-g89886abd0734 #0 PREEMPT(full) [ 252.207494][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 252.217545][ T7709] Workqueue: events_unbound cfg80211_wiphy_work [ 252.223796][ T7709] Call Trace: [ 252.227062][ T7709] [ 252.230017][ T7709] dump_stack_lvl+0x99/0x250 [ 252.234606][ T7709] ? __asan_memcpy+0x40/0x70 [ 252.239185][ T7709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.244379][ T7709] ? __pfx__printk+0x10/0x10 [ 252.248976][ T7709] vpanic+0x281/0x750 [ 252.252952][ T7709] ? __pfx__printk+0x10/0x10 [ 252.257573][ T7709] ? __pfx_vpanic+0x10/0x10 [ 252.262077][ T7709] ? is_bpf_text_address+0x292/0x2b0 [ 252.267447][ T7709] panic+0xb9/0xc0 [ 252.271175][ T7709] ? __pfx_panic+0x10/0x10 [ 252.275605][ T7709] __warn+0x31b/0x4b0 [ 252.279599][ T7709] ? ieee80211_request_ibss_scan+0x701/0x790 [ 252.285578][ T7709] ? ieee80211_request_ibss_scan+0x701/0x790 [ 252.291553][ T7709] report_bug+0x2be/0x4f0 [ 252.295885][ T7709] ? ieee80211_request_ibss_scan+0x701/0x790 [ 252.301872][ T7709] ? ieee80211_request_ibss_scan+0x701/0x790 [ 252.307863][ T7709] ? ieee80211_request_ibss_scan+0x703/0x790 [ 252.313839][ T7709] handle_bug+0x84/0x160 [ 252.318085][ T7709] exc_invalid_op+0x1a/0x50 [ 252.322587][ T7709] asm_exc_invalid_op+0x1a/0x20 [ 252.327428][ T7709] RIP: 0010:ieee80211_request_ibss_scan+0x701/0x790 [ 252.334008][ T7709] Code: e8 f4 3d d5 f6 eb 05 e8 ed 3d d5 f6 b8 ea ff ff ff e9 2b fa ff ff e8 de 3d d5 f6 90 0f 0b 90 e9 e6 f9 ff ff e8 d0 3d d5 f6 90 <0f> 0b 90 eb dd 48 c7 c1 70 77 a3 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 252.353610][ T7709] RSP: 0018:ffffc9001c91f810 EFLAGS: 00010293 [ 252.359671][ T7709] RAX: ffffffff8aea6de0 RBX: 0000000000000000 RCX: ffff888068748000 [ 252.367628][ T7709] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.375587][ T7709] RBP: dffffc0000000000 R08: 0000000000000000 R09: 1ffff92003923eb8 [ 252.383545][ T7709] R10: dffffc0000000000 R11: fffff52003923eb9 R12: ffff888028338e40 [ 252.391513][ T7709] R13: ffff88802833cf78 R14: 0000000000000000 R15: ffff888028338e80 [ 252.399486][ T7709] ? ieee80211_request_ibss_scan+0x700/0x790 [ 252.405483][ T7709] ieee80211_ibss_work+0xdec/0x1060 [ 252.410694][ T7709] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 252.416334][ T7709] ? ieee80211_iface_work+0x1224/0x12d0 [ 252.421909][ T7709] ? rcu_is_watching+0x15/0xb0 [ 252.426671][ T7709] cfg80211_wiphy_work+0x2b8/0x470 [ 252.431782][ T7709] ? process_scheduled_works+0x9ef/0x17b0 [ 252.437505][ T7709] process_scheduled_works+0xade/0x17b0 [ 252.443064][ T7709] ? __pfx_process_scheduled_works+0x10/0x10 [ 252.449047][ T7709] worker_thread+0x8a0/0xda0 [ 252.453646][ T7709] kthread+0x70e/0x8a0 [ 252.457707][ T7709] ? __pfx_worker_thread+0x10/0x10 [ 252.462807][ T7709] ? __pfx_kthread+0x10/0x10 [ 252.467394][ T7709] ? _raw_spin_unlock_irq+0x23/0x50 [ 252.472583][ T7709] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.477773][ T7709] ? __pfx_kthread+0x10/0x10 [ 252.482438][ T7709] ret_from_fork+0x3fc/0x770 [ 252.487018][ T7709] ? __pfx_ret_from_fork+0x10/0x10 [ 252.492122][ T7709] ? __switch_to_asm+0x39/0x70 [ 252.496960][ T7709] ? __switch_to_asm+0x33/0x70 [ 252.501712][ T7709] ? __pfx_kthread+0x10/0x10 [ 252.506300][ T7709] ret_from_fork_asm+0x1a/0x30 [ 252.511077][ T7709] [ 252.514538][ T7709] Kernel Offset: disabled [ 252.518896][ T7709] Rebooting in 86400 seconds..