last executing test programs: 4.857863675s ago: executing program 1 (id=3983): pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000380)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000b0038"], 0x34}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x9}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0xffe0}}]}}]}, 0x3c}}, 0x24044094) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8932, &(0x7f0000003f80)={'team0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="110000000000030000000f00000008000300", @ANYRES32=r12, @ANYBLOB="2b007f0040000000"], 0x34}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r16, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="e403000005ab05b7b149802a94c5002a6ce07b1137eb6fa433a51c73547f0c94bfd53576baffa7871291962c43469f218d4d545b2b284643f64a120a2db7dc762d220c32dac5bcdc5e27a78cc25fb80273b264dc1466e395e5a6fc512f3d961c7902369650d219d41e44a1a0ff5cfa9dd85f9fde02677d3ce2cd888cc53bf72b280130490f7593a3dd9502221de52ef276cd196e5f22ee375c4f686a716006830cdc2022180840f5815ad8bda60446a1c9f143c058709a7ba71666dec45141d7b1a070e10d60e76e42b2d3f582dd432ab9c126359c1935176b", @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf25150000003000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f31000008000300020000000800030003000000640001800800030002000000080003000100000008000300010000001400020070696d7265673000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="0800030002000000080003000300000008000300030000003c0001800800030001000000080003000000000014000200697036746e6c300000000000000000001400020076657468305f766c616e0000000000006c000180140002006e657464657673696d300000000000000800030000000000080003000200000008000100", @ANYRES32=r9, @ANYBLOB="08000300030000001400020076657468305f746f5f62726964676500080003000100000008000300b2dbb2a10800030002000000080003000200000044000180140002006e7230000000000000000000000000000800030007000000080003000300000008000300000000001400020076657468315f6d6163767461700000005000018008000100", @ANYRES32=r12, @ANYBLOB="0800030000000000080003000100000008000100", @ANYRES32=r16, @ANYBLOB="080003000100000008000100", @ANYRES32=r17, @ANYBLOB="08000300000000001400020074756e6c3000"/28], 0x1e4}, 0x1, 0x0, 0x0, 0xe24a0bfcaabfd4e8}, 0x8000) 2.441425931s ago: executing program 3 (id=4011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000002b703000000000001850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000580)="b936030526a80000", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="342000800010000200000000000009000000000600150002000000100016c00c0001000000000000000000"], 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r5, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xda}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x1a, 0x24, [{0x2, 0x1}, {0xb, 0x1}, {0x24}, {0x36}, {0x2}, {0x16, 0x1}, {0x75, 0x1}, {0x2}, {0x2, 0x1}, {0x9, 0x1}, {0x6, 0x1}, {0x60}, {0x18, 0x1}, {0x24, 0x1}, {0x60, 0x1}, {0x24}, {0x9}, {0x0, 0x1}, {0x1}, {0x18, 0x1}, {0x4}, {0x1}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x432}, @NL80211_ATTR_BSS_BASIC_RATES={0xd, 0x24, [{0x3, 0x1}, {0x2, 0x1}, {0x36}, {}, {0x2}, {0x16}, {0x6, 0x1}, {0x3, 0x1}, {0x16}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4001) 2.029248916s ago: executing program 4 (id=4015): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000640), &(0x7f0000000680)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x8}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0x6d}, @call={0x85, 0x0, 0x0, 0x92}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) socket$inet6(0xa, 0x200000000003, 0x87) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x20, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@multicast, @random="00005403cb00", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x87, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[@fragment={0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x66}]}}}}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0xe8, 0xe8, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000040), {[{{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'nicvf0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @broadcast}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x20, 'ERROR\x00', 0x0, "d1b7201e6851dcc361a7eb546f513b69c23cd84d078ce2b4e1b29dcf3fb6"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r4 = socket(0x1d, 0x2, 0x6) setsockopt$rose(r4, 0x104, 0x6, &(0x7f0000000540)=0x3, 0x4) bind$can_j1939(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40008000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xffffffffffffff8d}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r8, &(0x7f0000000080)={0x2, @short}, 0x14) 1.989503177s ago: executing program 3 (id=4016): socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xffff, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2}, "d33cffd98794e48a"}}}}}, 0x0) 1.838790294s ago: executing program 3 (id=4017): r0 = socket(0x2a, 0x2, 0xfffffffe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x40800) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) recvmmsg(r4, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1}, 0x8}], 0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100e94a00000359", @ANYRES32=r2, @ANYBLOB='\b\x001\x00Q\x00\x00\x00'], 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x41, 0x7800, 0x7, 0x9, {{0x5, 0x4, 0x0, 0x18, 0x14, 0x67, 0x0, 0x40, 0x2f, 0x0, @remote, @broadcast}}}}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3000000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03c00000000000001000128004000100767469000400028000000100", @ANYRES32=0x0, @ANYBLOB="00e67eff8b2a8e00000000000100", @ANYRES32=r2, @ANYBLOB="00000100", @ANYRES32=r6, @ANYBLOB="000003008a000000000002000a00000000000600050000005c0006000400000000000400ac1414bb00000400ac1414bb00000500ac1e0101000005000000000000000100", @ANYRES32=r2, @ANYBLOB="00000100", @ANYRES32=r2, @ANYBLOB="0000030006000000000002000701000000000300f2130000"], 0x30}, 0x1, 0x0, 0x0, 0x20000881}, 0x4054) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x48010}, 0x20004000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900442f"], 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) unshare(0x20000400) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 1.728902804s ago: executing program 1 (id=4019): r0 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x6e21, 0xfffc, 0xa, 0x0, 0x10}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0xbcfbddc4f0d79c8f}}, 0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.632313644s ago: executing program 4 (id=4020): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x8c}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x6, 0x8}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018290000", @ANYRES32=r1, @ANYBLOB="00000000014dfff5479c25c900b3e0f29500"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x14, 0x1, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0x1}, &(0x7f00000003c0), &(0x7f0000000400)='%ps \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%ps \x00'}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@map=r5, r0, 0x16, 0x0, 0x0, @void, @value=r0, @void, @void, r4}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000300)={r6, 0x2}, &(0x7f0000000500)=0x8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.565473728s ago: executing program 1 (id=4021): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r2, 0x11, 0x0, &(0x7f0000000040), &(0x7f0000000000)=0xfffffffffffffcad) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100), 0x4) sendmmsg$inet(r1, &(0x7f0000003bc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x48040) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r5 = socket$isdn(0x22, 0x3, 0x25) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x3, 0x1, [0x7, 0x7fff, 0x1000, 0xc5ab]}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000001c0)={0x2}, 0x8) r7 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r7, &(0x7f0000000280)={0x1d, r4, 0x2, {0x0, 0xf0}, 0x2}, 0x18) sendto$unix(r1, 0x0, 0x2, 0x0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x400, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40021}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8}]}, 0x38}}, 0x0) 1.474735807s ago: executing program 4 (id=4022): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}]}}]}, 0x3c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e27, @loopback}, 0x10) getpeername$l2tp(r1, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) sendmsg$nl_route(r10, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=@ipv4_getrule={0x1c, 0x22, 0x8, 0x70bd2b, 0x25dfdbfb, {0x2, 0x80, 0x14, 0x8, 0x2, 0x0, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000011) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$inet6(0xa, 0x3, 0x3a) bind$inet6(r12, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000b48fcfd3d0a35109e26d696a4da2caac12a36752fca05d32eeb4b7df042422f4a8b69d1174d3fe1d487b1dc97c4fde2f34c174019d9f8c22895bbd342b3c7b78c8faf417de563fdf37edf6188dce1814f5a94d23d21e6f95accd6547c756bb2e1f68dc99f6b78758c9e738476f3b5f7300b1f3fe49a9bcb1961877161189067eea2970c3f0f04239ae8b9ada77c2701210033f73109fb8daf59ad5027b8a4499e84a7ff7377755bd1b5a2ed11dc4760000", @ANYRES16=r11, @ANYBLOB="01002dbd7000ffdbdf2503000000060001004e2100000500020002000000050002000a000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc010) 1.399419511s ago: executing program 4 (id=4023): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000021301000600000600000000000000000e0003006269746d61f03a6970000000050003"], 0x2c}}, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a00), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, r1, 0x409, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4028044) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x9, 0x8}, {0x6, 0x81}]}]}}, &(0x7f0000000800)=""/196, 0x36, 0xc4, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r2, 0x9, 0x7ff, 0x8000000000000001}) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000000340)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x2, 'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000021301000600000600000000000000000e0003006269746d61f03a6970000000050003"], 0x2c}}, 0x0) (async) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000001a00), r0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, r1, 0x409, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4028044) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x9, 0x8}, {0x6, 0x81}]}]}}, &(0x7f0000000800)=""/196, 0x36, 0xc4, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r2, 0x9, 0x7ff, 0x8000000000000001}) (async) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000000340)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0x2, 'syz_tun\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async) 1.341516419s ago: executing program 2 (id=4024): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r0, 0x20, 0x70bd25, 0x679b, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4004) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.326057747s ago: executing program 1 (id=4025): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$kcm(0x10, 0x400000002, 0x0) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe00006600"], 0xfe33) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x143) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000101b49a60de00a72533b9f7800010000000000000000000000000a140800001100010000"], 0x28}}, 0x4004845) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000101b49a60de00a72533b9f7800010000000000000000000000000a140800001100010000"], 0x28}}, 0x4004845) 1.276362274s ago: executing program 3 (id=4026): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x70, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @loopback, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x6, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x22, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc433137593009290"}]}]}}}}}}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000240), 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r2, 0x800448d5, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x5) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="06000000000000006f6cffff00000000", @ANYRES16=0x0, @ANYRES64=0x0, @ANYBLOB="2ba5c30ef6b1768703edef6421bf878fa0d0bc7b29b28bbc74bbf30fe0c49b826ef9786a37cc781d3c45cd2127a0c3fa25baf8b66d1750ddbcc70d72a51682b395055641ccbee35b314d62fbd84eaf84e3821a2da8f2b7c9d61d1366db7f9e79c98327d2ca3ee1c85a914c1b92a6fcc5ff9f8e1912a192c2d4248ae11e49bf433024a1f67f3733899701f99a309f8d769c3d8620aeee1366b5eb8017fd5c0da69d682d4fd6221ce5bae8c9c9d5afd5847b49807d335a8779c3c9fb2f772529970eef9319e0247cb270c00b9dd8f78f4e3bc17d0301bb9273132db0582ca3167dc011", @ANYRES64=0x2710, @ANYRESOCT=r4], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x854) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0xdb}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.100421709s ago: executing program 0 (id=4027): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/108, 0x6c}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000003800)=""/4100, 0x1004}, {&(0x7f0000000780)=""/214, 0xd6}, {&(0x7f0000000640)=""/118, 0x76}, {&(0x7f0000000540)=""/60, 0x3c}, {&(0x7f0000000a00)=""/67, 0x43}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000140)=""/205, 0xcd}, {&(0x7f00000006c0)=""/122, 0x7a}], 0xb, 0x0, 0x0, 0xb00}}, {{0x0, 0x0, 0x0}, 0xa04}], 0x2, 0x2100, 0x0) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x32}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000580)=""/262, 0x106}, {&(0x7f0000002fc0)=""/4067, 0xfe3}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000000080)=""/238, 0xee}], 0x5}, 0x4}], 0x4, 0xa100, 0x0) 1.099679549s ago: executing program 4 (id=4028): unshare(0x20400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002d40), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000002dc0)={'wpan0\x00'}) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x0, 0xba02004b, 0x108, 0x0, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'caif0\x00', 'veth0\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0x2}}]}, @common=@SET={0x60}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'veth0_to_hsr\x00', 'wg2\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2082, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000440)="89edeeac78daddb4b473fec988cafbe863e070051190d7a1a12b36fe575810b64b50ce2dc7c22cab13ebf355a2e6", 0x2e}], 0x1) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x8c, r5, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x24}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:iptables_unit_file_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x8c}}, 0x40001) 1.096637493s ago: executing program 2 (id=4029): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r1, 0xd7735000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000100)=0xfffffffe, 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r3) sendto$rxrpc(r0, 0x0, 0x0, 0x40080, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @local}}, 0x24) 1.075452891s ago: executing program 1 (id=4030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a0200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000160500030000000000200001800700010063740000140002800800024000000004080004400000000c0900010073797a30000000000900020073797a32000000001400df00115dc25fd3000000000000000500000a"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(r0) r1 = socket(0x40000000003, 0x5, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @local, 0x9}], 0x1c) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000103) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x4070bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=@delqdisc={0x24, 0x25, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xa, 0x10}, {0x0, 0xfff1}, {0xffff, 0xfffc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) recvfrom$inet6(r1, &(0x7f0000000280)=""/11, 0x1a000, 0x102, 0x0, 0x0) 988.879083ms ago: executing program 0 (id=4031): syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, r2, 0x1, 0x26000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 905.323899ms ago: executing program 3 (id=4032): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000200)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}}, 0x108) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000063015a00000100009500000000000000028eb819745bf80bb0c6f0c1f61a8422edd53538feca41a5ae977c3b303d7e7a7d9bf3f571f454361a9bff960909951d6f1e375297d67b5faf95a520037d9047f1515904827354846f71ac059df9ee7fa26883d1c756b341755a41abdee33a782bd1e180c978bcadbc45e87d5d5a5f7cc0ceb1f49be1b510432e09094019dd71e63293ab8353ed57347e9b97501d400837ac3e6d4f0e9028733bd5a1e3c1b7b6a303d6cec1a9139313ec0ade3dd98bf050e09eca17fa3833"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 32) 892.542555ms ago: executing program 2 (id=4033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x7}, 0x4040815) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @broadcast, 0x1, 0x1, [@private=0xa010102]}, 0x14) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079108700000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1f, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) bpf$MAP_CREATE_RINGBUF(0x1d, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x34, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfffffffe}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) 802.206775ms ago: executing program 0 (id=4034): socket$can_raw(0x1d, 0x3, 0x1) socket$inet6(0xa, 0x4, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x13, 0xc28, 0x70bd26, 0x25dfdbfd, {0x2a, 0xfc, 0x9c, 0x7, {0x4e23, 0x4e24, [0x4, 0x75b1, 0xfffffffa, 0xd562], [0xc8, 0x80000000, 0x20, 0x7fff], 0x0, [0x8, 0x2]}, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x6, 0x1, 'XZ'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x400c004) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10) sendmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000000180)=@caif=@rfm={0x25, 0x2, "3b8581518aaf2af88e79b6ce4514425e"}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000200)="a7be07ef4e2c49b426b8fa700e34cd5a683837177ec66fb69b817643aa50a599fb466c22ea6c719f241ebbea83e8aa18e9401c7e60d4e015105a147c45cf966a05570cf932b1a023113143b34bdfe76f4d3e0138ed0d7dded1dd934419e8962b69f5bf3ae8b9e0fa6dd063bbebbaee542f8d4fac3602951412da8615ae2706e531236e8175029238728727f2cf7059329a979e0139655eb9de53f7bcdfe531ca495e0c092dd1f489e29a48406f5827fcd93498", 0xb3}, {&(0x7f00000002c0)="5cc0fce79653a0652c5d7a01639fe3475d2e6470c52b43a80bf7553e0cc58a80d825b6e7e7043dd7da41ffc6ffd52351433c1e33420e8b8c1c99e45f6d5ffafe7c7790f8113ffa7b5f19a31e66745b1bb5c56dc55822f804539757b58437d88f13de21200e76b15915b8348b0dec6717e4a64de6ae6b7adb033572d8c7a6dccad5d3c50f83412e8aa5b699b672e65de0a8ddbbda22f04f219820c655283c6a00c5d3b53242e22c18324fdedaacd7123a1e368325d2fabf9424", 0xb9}, {&(0x7f0000000380)="e4b55c63b5d7a48aef75c93af43aeaece12af340577cd6ac8c66cfc6ff2f1f7f6db516fa93d13d3c2a458104100f21c3046734b7e9d69c8dd7b137ce2bbf6211e84c49005679a8f04f4116a07f84c6bc0ea9da048c247b8d7bf382b80354d43754274ef88f95135e928b91184c08128965137ab67506e8543dd254d29cf6c45ab3d2915c1de3f3a9fc8d988e8f74f3bb7a6e543bc32594b988f9fd1ee2b80e402b2471e474d3d0ea4b65097b85b7eac3f401", 0xb2}, {&(0x7f0000000440)="c6217e6944c59da109d026ad690f870e6a0eecbc83ddfa09a80fed4ae31aba052cf73b4b08c2801455e09245eb9c2c26bd2019d104b6add43fdece457669b4b5ec8cb0a25116fa739a8816f12a9d81f0b9b8fa697c4b652d20e92bd4cf22ce02d9f66074735d7453dd7b076b42ffd45667d6eb28d136663104872c79a067b71ea40281f0752568735e4d22fbf175b196bab430d1f09acefa94b5224cd10629fac3490bab3afc05f4ae12166944ab70189efe02a3291a899d347842b9ca29e030011d3b5161fcea4ae7a0b08a9f78d86f5359e0111db7869de554d163e0a485e5ff7e3be9", 0xe4}, {&(0x7f0000000540)="8a68a88b773c28b1fcc00d2a0d295e297b5cb971df0f6ccf13d84496168f0e1473dbf6f7887f82495d9aae0983a71ba0dea0cfd0fbd1bb53c42d9e50fa480ff993ed087d4c45e196329525087b45832299b8734707a00751f29383783bc9090a442cf463051d067d93d70c9a2754aa2bb2a7259502594282283da06665e4584f9a9ff9b0d1b099f7a2c8e97aa1a3fd032aec93ededc823a7b11141f8dc78f3ce86f85ab069e4a02c8ad4d745631c8e57b75238faf90e2c93e819e0862b9185", 0xbf}, {&(0x7f0000000600)="469ad8a835bc019f4d39817475f03fdf9bf4405c8402edef4b8a6873f01ab9bdb4e5f8cfc5bdb16d3e4780d2660cf96baaa518bf5662af0ce1309148ebe246fff73d1dade1faff8defcd7d000c65445125b6345240b4d5784e881e8fe1627e50940e992d08fb652737d621a7a75b1d85645b0a0235f75046efebdbd879b896a3fb82a28d2dd837b7d69ade92d69e6e87a883eca080a5bcc64fae01786465daa7f89f6c78857b24c37ecfde45458ec22eefe9657756ea43b5", 0xb8}, {&(0x7f00000006c0)="edf14c3483ced3ff12e150ed362a5cea43df61f8aa8d4394eb6b9f2499033482642312580b7fd9d98af44965d12a12fd9325c80d65c69f27d298561816847a96791601f140682a2497901c4da0144a0376f6b2df5ae31a69fa773895f800c2addfe9c8cdbae606364030da6ac3db745c9ed9211f40ea2d855f86e362b4ee2fbda63ad96b478ea6968e70ec1d633cb3212c17e676fb22430e24d6dbbe49999a087905011456688efae0c25853d37af1b238187f97f6934dd8c20e38fc826288381d92f242be36effa83daa54ba9260009925e179eeb745f63461313d8b5f3c0", 0xdf}, {&(0x7f00000007c0)="6107171220bf15517d65caf05cd760a2e0c29419d7afd94899546959955eec5ab869b8257769e7c0b485f1bed91dfb8dd0ec0453caa4bb66a67d8b8724a4f93c724f0028da8975829d3449a17f790687bcca", 0x52}, {&(0x7f0000000840)="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", 0x1000}], 0x9, &(0x7f0000001900)=[{0x108, 0x0, 0xb, "0aecad9d0108d9c9203f88f8481e43ddb66d6cc2ae9e6a6cbc1d9ef175e96c5ae72106b4ac94d5fa2117bdd1f469fd636bd34f6d1054172c9ff82956416106fab8cffc32e2fccd5293dc8c7aa7c4dbbbad040e817eb50e8be997c3c6db8f7efa2dc048e25fe2377e619ba44910a679bb88f56a75293ac45ef8446a60d130887e33b846110af4814a82a56d0a731abfda81c91b18ac9116a95bc11f06d353f1c52eb4b27b95f880b07cb726b27f3a2560a90770be6e46ca92dbd20b92b9883054ddac71b328d290d20fab297f01c4863576539e8f357f5488544351d258a48ab8ae83a72eea4c238d8529691c1262732d094a6d7fa682e2a9"}, {0xe8, 0x113, 0xa, "50e118021bf82212f814b12027a7bcfc3d035c1be694db185b0098b8c9847cfd00e7746c49c5fd858dd2dec2c2084f938d7b04fe18307cff2f3abe43dcfa868256203727bb35c81f5928f6e7474d5216a7a51957bae294aa411e90391b846d4ce5b2648e76256a507b52c97d53a2fe51887eb5079246cb5e533d73de0af4e212c7014d8c492941bb537095c3d8f8637992d9f5620b83e47e8b39a639c9b0d842e1f4dc40e5b93c380aad09c25df423b5bf4b099489ff8b6a101472d9997fedbc7a31b70d67743d8c5473c16f6decf590cd"}, {0xb8, 0x84, 0x9, "cb56fcc4d3abe3270d01bc473cd66182e78e9c336f8c51a195c91efad2b2c83fab5aeb5222ab82d6cd956a91909a6c31416ecd37ca676ae3edd167634eb12b1ed932c2b15dae102947cf27c84af2c9b96b856dd458a32e12f6523a248b4d130f251c8e2429fca1299d2e0cec8de3329743ac20890fd58d9ae097aa6507d6e42100d3f4eb531e806f3a9742dbddc985fb46a787471beb4f1e21ac1516df3ae8acb1"}], 0x2a8}}, {{&(0x7f0000001bc0)=@caif=@util={0x25, "d71f5017c0c750a1deb25962f266df2e"}, 0x80, &(0x7f0000003200)=[{&(0x7f0000001c40)="1c596b4d92d42b46765f2b893f98fe8b4266f5533dd73257f7ef7fc5d7a98017c888a73683a5d78298f6c96b302e489c108acffbce03f416f63e8faf51d1d50ebdddf2f428b3fd00854ff425a3b74eb715ba9f229572147064c18d83ce21c31b8fc727b19b4117c8680c021e4df0d0790dd828e9b3cbaac1697615b19fa0fd4a18cb", 0x82}, {&(0x7f0000001d00)="e080609df73cf398fbe664123760942dd152e7dc03987e8b21f920ee7d8267ee2d9bbea4c6bb971fbb5736edc1401870890dcaacde4a88fbe06586aea245917f3ef2daf1ed8fb6d8babc5d1c870549a790f128577a9c55ce725a37de623ec5ca2385480360bb67e6aa9ba4b118ab6fb9edede425eb5c91079b5047fa85947ed938dcb8139e07e9224d91d9ab1241b29be5ead2eb90b6e66bd4433fa9d2a010d7ab2417095c7ef6eb41fafc699205fad981f660014efe5cb2fc8c9cda8468daefb116bc1843cbd8d9938c287f52a1caec8c2d90da7bb200a98736d9f1bbf369d36db4f6654101723c0a5acdc8988a", 0xee}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="93461ed2b341b2391861a03008c42c05bc5ec149cc6e2fa24a3a01655402fa0fabd17971342ed5bc62d7ff4f365a442a010721f81575bc7ce8b356272672c6a55589b066b1c0e4c4464e7eeadc9979d984754ff484cd940f94856dcf800c3c788fcbff8cc98838921d7aa518fa724a54330499ddefc1a47b98689b4f776b915824401fb2e18e22ffc49266f22f806e4616360467db341560431db2587b4f1908e01a774b58b569da4252911737efd370dcbd5842d0e3939f855f35c6e6355c9c664dae902f071da8471e9efa0f2dded2e9b0f4d38df1f30ac38475b7c93d8247a4c574cd990dbd4ee2a9306caf", 0xed}, {&(0x7f0000002f00)="e96778213d2c4e2402d64646956f079e123641f7a38562ded33740cdac05c9bbc8a52d2db2339c9fd53e14259d3fec1bd50578a39845658ed57e55732c65b37371a8bb79205dcdea91b7e94aec3c788f72306d928a3ad27d6e1428d843d7a2a7d339667b137f64b3dbf75c43647076a365d265f43ec760ef74c4d6aef12ba2b2d7d65770c92a837155b57f8ad02f3711327545654de94fccd59346b99240fe896359735eb5f0cd4e291e6e5ccb41380401c996a632e380eaefb2217aac9424a47977eacb985b72c66cfd665351edc99d66be61b02b547990b48e36e0c6259d10ce198fe7f51f907513e6", 0xea}, {&(0x7f0000003000)="a582b4557db8861947e36955fa160eb0a04568d0d01a5f4ce088a396e532759fc386e60f2f16dd5f3a296cd083957a9e8e537c4ddde927551dfa31e0247c47ef7ca991a65194dd8410e09f8f8d", 0x4d}, {&(0x7f0000003080)="b83caf3ba330102c6327e6a6a3c0d1a0225fc1", 0x13}, {&(0x7f00000030c0)="b121016ac6333aa3f680980ecf77981a07ec15293b540a5618aafdc436edf10c1abcc6b97c147c27650790753202271c31636d69aa2a75292bb0eb3b4e8351478c9e9fe7e5495505b6e514593818536e5bda0a65387f2bba6d2c59e6541213c0241e9ab4149da8084bf5451abc7951be1b73c6f314705d", 0x77}, {&(0x7f0000003140)="e90db3707803b454d0ed9041111661c59c41fca2ff9b5071d0d011f950dead4c577ec251edcc7075171e54087ad82ceabceb98ea5ae494ba2ea726860853915dcaa82682471c7315b5bbcaf627fd6964723362a36872e7c1f3d9aecc064a7baffa2abac9fb6d192e73c542507f1e8b74ce4e93429b2522cf781ba323044515689600e075af71", 0x86}], 0x9, &(0x7f00000032c0)=[{0xb0, 0x103, 0xc, "95b4de70256c9c7a80386687362106b890bd8c4ff3fc7295d7031e74b98ddb1b1fbe4d59668fba29a1c4a4f4ac4a377bcab577c8fc3f287fe85691645eadf63eca68ea6c8a789d329ff2f25da3cc6886e6f995ac87d34ca704fe44ce00b98e788ed3a4824d900bf9eb6cbb6ce9808fde45fce2d3b667d9470c73cd299be48ac7e9cdded7424345c09ce690fdad7372e864e93ac19ca5a53f0a70ee4be0e11bc5"}, {0x38, 0x29, 0x5, "c0ed62810017773a1997d8a882ff26826e219e6d13b4ce877c27c85c7b4e562e109a"}, {0x60, 0x84, 0x6523, "0af8d359e26338bee9d8294ce86c31f782a310fb213e69b2e1709e3913f5b5aefed0b1900fbeaaa58e48efc14cae33690b1c783f7df5ef07dcf6f031f41ec7ba0483feefe0e5da8780d421eedd"}, {0xe0, 0x109, 0x2, "2df8f51c0655b47de1a4e7ee688bf6199eafa2e3e8508978f02586216defec6a5432bdb340291f8a012d1b64828ed20ebfe8dcdea2c0affb0904eeaa9a934b9a5eff610c335ef3fd319eeba7ab10a96a4c7de0dc0372bc5e09771e35d254876cc6bd8b984b7681fbea35c6c7e1443ff39ff91bd15fad36c9d4a0f3f5dbea6a1c155803f07bc3cbea87df3a3e209d73dd6b4f8af55a4b08e93336de9aa1216784bb17bd39debd41eb972ab399bc568a6e0c4c7cdf1bb034681f105ce6a0ca587b5713f1520178d3281c8f6dfdf58fdc"}, {0x28, 0x88, 0x80b, "cd03247466708470ec2bb12167cbae84eb273ee8c8b6a9fd"}], 0x250}}, {{&(0x7f0000003540)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0x64010102}}, 0x80, &(0x7f00000039c0)=[{&(0x7f00000035c0)="1cfa611bbe4a7dc11a976032a8e1cba93f79f35833ae853a4f26b622cd5c90c0cf3733798fa7c12233d4f5401b2201bb5a72b5a6de23b497df09c959e0a400edb98baef703e7a97bd66671618871678ca65fc5590420bdb66d5d003a3ef4f73e5bbe373e69df9eb69e4daddadaec7b7345c2d55df204ca8d2e6b84af8eed6aa564fddbe87e38d3076e19831d7f4794d228d101cd18328417c0a6836f003fc7fe5d7ed5c54e3e990b9d9bfea6904c0ab1f2bce98c9e7f48012b2132222b9ce19f856828a6e5f5e909f1eefe0c071687a9", 0xd0}, {&(0x7f00000036c0)="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", 0xfb}, {&(0x7f00000037c0)="012bf4916dd52347118c71ea7266119e0c5b04da25290c1a151093068dc3aec6169f2d26190ae59aa90a27f76fc6e9360f5d18b26e027fd1e8f1bb4a99e133caf4950fd5c8d8846f60d4f9b10d5465d560217f172f42cb6640aeca9343bef485852b77c3f36868269eb6e393d98be383ebaed06b32bd78c58d2bc333ba6c74291dc3a111f30073107be2cc8a14deb9f0", 0x90}, {&(0x7f0000003880)="adf2a6a528ca719a4a46d0608462e7e3fd562e956b8dfd1a4a3553f6ec251577fe8a8d3f8d1062f7a2ea552ec9078e61a80e93e9c20221df744adaa657608f5fb68f2cad26207cb19eef586ad3748548deead817004ecd38ffd3055811cee75e365fef13ad8059ba2914a38be858af5c2520004da87bb79a8ba9e759e26ce9aa2c6474443ccb2f0bb87e458fe39fda74365f3de9b29e8411d3cd8c202d9c", 0x9e}, {&(0x7f0000003940)="c025a780984f9a740120b8a51f9cfc98fb6f2da1030b1c572c39669bf39b7a05bed1ca736d6cdb1038b60676d052137245afb6ba93c2807684d0f6d671c1ad57f5f4541cc327195cff307f8f6836fdc28e1d059f275d6d9175335f9166c96eea29656cb72ebfde4787704d0f", 0x6c}], 0x5, &(0x7f0000003a40)=[{0x80, 0x114, 0x200, "604a047380b7f7e1250f390eef83bc04f7187756c0a9cfae6242eb7d9945c032771983b408d3230a39c5704aed1141e56637c30444422096eb1889f6d8bff9c8f983c3563d252eb0f24d3b72cb2687f7f4f925b0c943190a3489004253fe6cf5746bde08582ed83816"}, {0x50, 0x10b, 0x4, "cf5a0224235f66f8b7d87df2f4bb285d0796e0028b7cada960d7d12023ca22f39d26e020f82661d6e9caba27a40a0f40f26fb8376635aca14a5e4c"}], 0xd0}}], 0x3, 0x810) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000003c00)=0xffffffffffffffff, 0x4) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000003c40)={r3}, 0x8) recvmmsg(r4, &(0x7f000000b200)=[{{&(0x7f0000003c80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000003d00)=""/136, 0x88}, {&(0x7f0000003dc0)=""/103, 0x67}, {&(0x7f0000003e40)=""/129, 0x81}, {&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/238, 0xee}, {&(0x7f0000005000)=""/168, 0xa8}], 0x6, &(0x7f0000005140)=""/253, 0xfd}, 0x8}, {{&(0x7f0000005240)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000005440)=[{&(0x7f00000052c0)=""/70, 0x46}, {&(0x7f0000005340)=""/125, 0x7d}, {&(0x7f00000053c0)=""/78, 0x4e}], 0x3, &(0x7f0000005480)=""/255, 0xff}, 0xc000}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006b80)=[{&(0x7f0000005600)=""/242, 0xf2}, {&(0x7f0000005700)=""/123, 0x7b}, {&(0x7f0000005780)=""/240, 0xf0}, {&(0x7f0000005880)=""/227, 0xe3}, {&(0x7f0000005980)=""/34, 0x22}, {&(0x7f00000059c0)=""/142, 0x8e}, {&(0x7f0000005a80)=""/56, 0x38}, {&(0x7f0000005ac0)=""/4096, 0x1000}, {&(0x7f0000006ac0)=""/186, 0xba}], 0x9, &(0x7f0000006c40)=""/70, 0x46}, 0x9}, {{&(0x7f0000006cc0)=@hci, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006d40)=""/246, 0xf6}, {&(0x7f0000006e40)=""/73, 0x49}], 0x2, &(0x7f0000006f00)=""/211, 0xd3}, 0x2}, {{&(0x7f0000007000)=@un=@abs, 0x80, &(0x7f00000071c0)=[{&(0x7f0000007080)=""/61, 0x3d}, {&(0x7f00000070c0)=""/133, 0x85}, {&(0x7f0000007180)=""/28, 0x1c}], 0x3, &(0x7f0000007200)=""/112, 0x70}}, {{&(0x7f0000007280)=@qipcrtr, 0x80, &(0x7f0000007540)=[{&(0x7f0000007300)=""/252, 0xfc}, {&(0x7f0000007400)=""/134, 0x86}, {&(0x7f00000074c0)=""/24, 0x18}, {&(0x7f0000007500)=""/56, 0x38}], 0x4, &(0x7f0000007580)=""/4096, 0x1000}, 0x59d56bb0}, {{&(0x7f0000008580)=@hci, 0x80, &(0x7f0000008700)=[{&(0x7f0000008600)=""/49, 0x31}, {&(0x7f0000008640)=""/105, 0x69}, {&(0x7f00000086c0)=""/60, 0x3c}], 0x3, &(0x7f0000008740)=""/4096, 0x1000}, 0xb}, {{&(0x7f0000009740)=@ax25={{0x3, @null}, [@remote, @netrom, @netrom, @rose, @rose, @remote, @null, @null]}, 0x80, &(0x7f000000ac00)=[{&(0x7f00000097c0)=""/15, 0xf}, {&(0x7f0000009800)=""/108, 0x6c}, {&(0x7f0000009880)=""/111, 0x6f}, {&(0x7f0000009900)=""/226, 0xe2}, {&(0x7f0000009a00)=""/4096, 0x1000}, {&(0x7f000000aa00)=""/165, 0xa5}, {&(0x7f000000aac0)=""/81, 0x51}, {&(0x7f000000ab40)=""/145, 0x91}], 0x8, &(0x7f000000ac80)=""/229, 0xe5}, 0x8000}, {{&(0x7f000000ad80)=@vsock, 0x80, &(0x7f000000b140)=[{&(0x7f000000ae00)=""/4, 0x4}, {&(0x7f000000ae40)=""/220, 0xdc}, {&(0x7f000000af40)=""/154, 0x9a}, {&(0x7f000000b000)=""/51, 0x33}, {&(0x7f000000b040)=""/10, 0xa}, {&(0x7f000000b080)=""/8, 0x8}, {&(0x7f000000b0c0)=""/78, 0x4e}], 0x7, &(0x7f000000b1c0)}, 0x5}], 0x9, 0x60, 0x0) syz_emit_ethernet(0x12, &(0x7f000000b440)={@multicast, @remote, @void, {@x25={0x805, {0x1, 0x6, 0xff, 'b'}}}}, &(0x7f000000b480)={0x1, 0x3, [0xea7, 0xc55, 0xcda, 0xf21]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f000000b580)={&(0x7f000000b4c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x3, 0x2}, {0x4517f424, 0x3}, {0xe, 0x2}, {0x8, 0x4}, {0xb, 0x1}]}]}, {0x0, [0x61, 0x5f]}}, &(0x7f000000b540)=""/20, 0x50, 0x14, 0x1, 0x10000, 0x10000, @value=r4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000b880)={0x6, 0x1d, &(0x7f000000b5c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf2fa}, [@btf_id={0x18, 0x23a26888318e2612, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f000000b6c0)='syzkaller\x00', 0x7, 0xb6, &(0x7f000000b700)=""/182, 0x41000, 0xc, '\x00', 0x0, @xdp=0x25, r4, 0x8, &(0x7f000000b7c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f000000b800)={0x0, 0x9, 0x9, 0x12f523b4}, 0x10, 0xffffffffffffffff, r4, 0x2, 0x0, &(0x7f000000b840)=[{0x1, 0x2, 0x1, 0x7}, {0x1, 0x4, 0xc, 0xb}], 0x10, 0x1d56, @void, @value}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f000000b980), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f000000ba40)={&(0x7f000000b940)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f000000ba00)={&(0x7f000000b9c0)={0x14, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040001}, 0x24000000) bpf$LINK_DETACH(0x22, &(0x7f000000ba80)=r3, 0x4) syz_genetlink_get_family_id$nfc(&(0x7f000000bac0), r5) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f000000bb00), 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f000000bb40)={0x0, 0x9f, "e5c1cab147a3b5180ed3a475b0eb1102cd674d3a5c20ea9133b25bda7086b9b786ef284389aed46c539fd0c269ca27b25975eeacb5bd97b2cf54e1c9a3b42ea7acf8e655189965e969fc62d4da0fa3caf3ffbc878acd09a7a6d7a743d3f307dbf4d0efe0741fbc13a7fde68fd881bdc778493a9899b09600706264932b8ecd090edfd81d9874ef066dcde2ef08488aa0661515c83950bf9bc107edd77047fd"}, &(0x7f000000bc00)=0xa7) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f000000bc40)={r7, 0x8, 0x3, [0x4, 0x4, 0x6]}, 0xe) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f000000bcc0), r5) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f000000bd80)={&(0x7f000000bc80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f000000bd40)={&(0x7f000000bd00)={0x28, r8, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4f}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040004}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000000bdc0)={'vlan0\x00', 0x0}) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f000000be00), &(0x7f000000be40)=0x4) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f000000be80)={r9, 0x1, 0x6, @random="1faff8f6d3fe"}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f000000bec0), r5) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bf40), r4) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f000000c040)={&(0x7f000000bf00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f000000c000)={&(0x7f000000bfc0)={0x3c, r10, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x3c}}, 0x840) 681.314858ms ago: executing program 4 (id=4035): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(nhpoly1305-sse2)\x00'}, 0x58) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4020040}, 0x80) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800000}}, 0x0, 0x4f1}, 0x90) 676.143147ms ago: executing program 3 (id=4036): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r4, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x12, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0xfffc, @empty}], 0x10) sendmmsg$inet6(r5, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, 0x0, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000700)={@val={0x6f01, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x20}, @ipv4=@dccp={{0x13, 0x4, 0x2, 0x4, 0xec, 0x65, 0x0, 0x6, 0x21, 0x0, @rand_addr=0x64010100, @multicast2, {[@lsrr={0x83, 0x1f, 0x3d, [@broadcast, @remote, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback]}, @lsrr={0x83, 0x17, 0xfd, [@loopback, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}]}]}}, {{0x4e22, 0x4e20, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, "45ecfe", 0xe, "57a303"}, "e339c5905e17b3b6d2f1f56065684e6a7282c87188b34594b3d332a5def738a54ce1a057283ad2fea4e6cf5679c790a3bd42d28252cd20154085bbb296df897c68ef10940b3623483a15bcbcd3166c71734a77b31610622b0ddafd91f30753ffc9eed84230ebb6e1cade6546acec065b32964502bc591d74bf4ed262d4ecfa8a5bb0e8e80346df9dd587c57222e4d032"}}}, 0xfa) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff, r0}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, r0}, 0x10) 670.418208ms ago: executing program 2 (id=4037): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180a0000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="ad2e923b9158aeceade1c262864c65c1a2985bbbb750beac08c70f66dbbffb20c4ccf7150582583d77c002664f030c1a1f38f700710c138d4be4e5f38ea088a1b31013113cb4f0a52fe8e11c2abba7aba688cad4c77626e17901ba686794c510092df3456e79b27eccbb00a061a7350fe4439fa6d222f4301a7e06874e6d220baef88ff24d588d773c7aee409d30b58ad25ead23bd3211", @ANYBLOB="0000000000004000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x48ab2bb9, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x12, 0x200, 0x70bd2b, 0x25dfdbfb, {0x1e}, [@typed={0x4, 0x39}, @typed={0xc, 0x22, 0x0, 0x0, @u64=0x1ad}, @generic="55edb3b30167bd6172099ac1ee3b5b53edb439422e1c24a88675a1dc5f87", @typed={0x8, 0x95, 0x0, 0x0, @fd=r2}, @typed={0x4, 0xd9}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x1) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000f4d78c2b988fb27e7956004ff7c5f4ee7e88b5a211ce4f48438d87d1865abdd018db95b46639340315b501272f6f2bb318e93c247c02d3f4175feb30cc588f11d1cf538fad48f92ba16fc86e7feb4efcd31174cd1d37fdb807fa26c2ae9c44a351622c33dcf641ae6ff998475c413ecfd09ad0cd8e499ee1183118ed3c151f240dc739547702da09ee652132", @ANYRES16=r3, @ANYBLOB="31070000000020000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030004000000"], 0x3c}, 0x1, 0x2}, 0x0) 448.994456ms ago: executing program 0 (id=4038): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'syzkaller0\x00', 0x8}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x1acc, 0x7}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@delnexthop={0x20, 0x69, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4041) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfc9b6909789b3542}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_deladdrlabel={0x68, 0x49, 0x800, 0x70bd29, 0xbdf, {0xa, 0x0, 0x80, 0x0, r2, 0x3}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @private1}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x40) (async) socket$packet(0x11, 0x3, 0x300) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000300), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x0, 0x4e20, 0xc4, 0xa, 0x80, 0x20, 0x0, r4, 0xee00}, {0x7, 0x7c, 0x100000001, 0x5, 0xec8, 0x2, 0x4f}, {0x1, 0x0, 0x2, 0x7}, 0x400000, 0x6e6bbd, 0x0, 0x1, 0x1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x33}, 0x0, @in6=@private1, 0x3503, 0x1, 0x3, 0x85, 0x0, 0x80b6, 0x4}}, 0xe8) (async) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000011c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000500)={0xc50, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0xb9c, 0x8, 0x0, 0x1, [{0x270, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1d0, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x68, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}, {0x60, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1704b6bdaf69e373cfe8a9fe0426a8de7401e39b581511838da255c6532505ba"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @remote, 0x1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b4e4a17f80ea5b2cba8319621fa40164e4b5b631c8577218a490b89da92cc837"}]}, {0x168, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x130, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}]}]}, {0x1a8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x124, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c0a4dfbcde69dfc4cdad29b316d2f942f7adf925ed9b967f62be79fb8ec20477"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x169}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1bc}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x238, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ALLOWEDIPS={0x144, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x42}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x38, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4, @mcast1, 0x4}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "66b9a556a28ea36ccf72f750c5f11fe72af600530274c7909271694df8b3a064"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "418524d912ecfc65a268e757b2f3d670340a8031a09f4354033e74077930b739"}]}, {0x224, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ALLOWEDIPS={0x210, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5, 0x3, 0x3}}]}, {0x4}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xa0, @rand_addr=' \x01\x00', 0x5}}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ffeaeae5feb7885972c959cd281b661d83f13a537cdf0866843374bcc310007"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0xc50}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x60, r7, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:usb_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40041}, 0xc040) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001380), r8) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001400), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r9, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x7}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001540), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r10, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, r11, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}}, 0x200480c1) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001640)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000001740)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000001780)={{{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4e21, 0xd, 0x4e22, 0x9, 0x2, 0x120, 0x120, 0x3b, r2, r14}, {0x2, 0x7, 0x5, 0x2, 0x5, 0x0, 0xadd, 0xffffffff}, {0x7, 0x80, 0x40, 0xef3}, 0xd, 0x0, 0x2, 0x1, 0x2, 0x1}, {{@in=@loopback, 0x4d6, 0xff}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xe8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r12, 0x8982, &(0x7f0000001880)={0x6, 'pim6reg0\x00', {0x7ff}, 0x7e}) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x24, r5, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r13}, @WGDEVICE_A_FWMARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000000) 381.352018ms ago: executing program 2 (id=4039): r0 = socket(0xa, 0x2400000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x6a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x20, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04000000000000000200"/20, @ANYRESDEC=r3, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRES32, @ANYRESHEX=r6], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="04000000000000000200"/20, @ANYRESDEC=r3, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRES32, @ANYRESHEX=r6], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2f, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @exit={0x95, 0x0, 0xc00}], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079109e000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x100}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 290.625076ms ago: executing program 2 (id=4040): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x24, r5, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40080) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@remote, @in6=@mcast2, 0x4e23, 0x2, 0x4e24, 0x8, 0xa, 0xc0, 0x80, 0xc3, r2, r7}, {0x4, 0x8000000000000000, 0x2, 0x5, 0x4, 0x8, 0x1, 0x2}, {0xf55, 0xc, 0x8}, 0x1, 0x0, 0x0, 0x1, 0x3, 0x3}, {{@in=@rand_addr=0x64010100, 0x4d6, 0x32}, 0xa, @in6=@mcast1, 0x34ff, 0x0, 0x1, 0x7, 0x0, 0x3, 0x80000000}}, 0xe8) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000001800)) 174.283962ms ago: executing program 0 (id=4041): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x8, &(0x7f0000000140)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 57.430072ms ago: executing program 0 (id=4042): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000006800010000000000fedffff70a000000000000001800088014000300fc020000000000000000000000000000060007000200000008000500", @ANYRES32=r1, @ANYBLOB="140006"], 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) bind$802154_raw(r0, &(0x7f00000000c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000540)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0x3c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x3, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x3c}}, 0x20000080) r2 = socket(0x25, 0xa, 0x3) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000008000000000200000a28000480240001800bf86cfcdd81a8b50472000014000280080006400000000208000140000000130900010073797a30000000000900020073797a3200000000140000801100010000000000000000000000000a"], 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'pim6reg\x00'}) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/10, 0xa}], 0x8, &(0x7f0000000880)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 1 (id=4043): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x2) accept4(r0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r6, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x437, 0x0, 0x10000, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}]}, 0x38}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) sendmsg$NL80211_CMD_AUTHENTICATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r11, 0x8007023327f40d31, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): uous mode [ 220.280380][T11735] syzkaller0: entered allmulticast mode [ 220.286502][T11735] tipc: Resetting bearer [ 220.306428][T11734] tipc: Resetting bearer [ 221.291036][ T5939] tipc: Node number set to 1828731437 [ 221.660363][T11734] tipc: Disabling bearer [ 221.798477][T11752] __nla_validate_parse: 44 callbacks suppressed [ 221.798496][T11752] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1748'. [ 221.901322][T11763] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 222.042606][T11763] bond3: entered promiscuous mode [ 222.047715][T11763] bond3: entered allmulticast mode [ 222.081141][T11763] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.098955][T11775] netlink: 137 bytes leftover after parsing attributes in process `syz.3.1751'. [ 222.244081][T11786] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1756'. [ 222.551702][T11802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1761'. [ 222.567073][ T8017] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 222.822782][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1768'. [ 222.920100][T11831] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 223.210854][T11840] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 223.804405][T11874] validate_nla: 25 callbacks suppressed [ 223.804424][T11874] netlink: 'syz.0.1781': attribute type 4 has an invalid length. [ 224.372747][T11905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1788'. [ 224.477841][T11913] IPVS: set_ctl: invalid protocol: 59 172.30.0.5:20001 [ 224.522307][T11913] tipc: Started in network mode [ 224.537760][T11913] tipc: Node identity ac14140f, cluster identity 4711 [ 224.556357][T11913] tipc: New replicast peer: 255.255.255.255 [ 224.576355][T11913] tipc: Enabled bearer , priority 10 [ 224.657683][T11920] xt_hashlimit: size too large, truncated to 1048576 [ 224.725462][T11920] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 224.787772][T11930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1796'. [ 224.967103][T11942] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1798'. [ 225.009143][T11939] vlan2: entered promiscuous mode [ 225.012607][T11942] IPVS: length: 197 != 440812209976 [ 225.052728][T11939] bridge0: entered promiscuous mode [ 225.082177][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'. [ 225.098204][T11946] netlink: 'syz.1.1797': attribute type 30 has an invalid length. [ 225.116394][T11943] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1797'. [ 225.224512][T11939] netlink: 'syz.1.1797': attribute type 1 has an invalid length. [ 225.571579][ T5941] tipc: Node number set to 2886997007 [ 225.716756][T11980] netlink: 'syz.3.1808': attribute type 1 has an invalid length. [ 225.745267][T11980] netlink: 'syz.3.1808': attribute type 3 has an invalid length. [ 225.968299][T11997] netlink: 'syz.2.1809': attribute type 1 has an invalid length. [ 226.554813][T12007] openvswitch: netlink: IP tunnel dst address not specified [ 226.749834][T12017] netlink: 'syz.4.1813': attribute type 2 has an invalid length. [ 226.767718][T12017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.793540][T12021] netlink: 'syz.2.1815': attribute type 4 has an invalid length. [ 226.816649][T12021] __nla_validate_parse: 11 callbacks suppressed [ 226.816666][T12021] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1815'. [ 227.089266][T12031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1819'. [ 227.120867][T12031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1819'. [ 227.202682][T12047] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 227.348048][T12053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.416095][T12053] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1826'. [ 227.563486][T12074] Cannot find del_set index 3 as target [ 227.838197][T12094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1840'. [ 227.933748][T12098] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1841'. [ 227.943736][T12098] syzkaller1: entered promiscuous mode [ 227.949394][T12098] syzkaller1: entered allmulticast mode [ 228.329971][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1845'. [ 228.339160][T12116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1845'. [ 228.967551][ T5939] IPVS: starting estimator thread 0... [ 229.010094][T12159] team0: Device gtp0 is of different type [ 229.063525][T12164] rdma_rxe: rxe_newlink: failed to add lo [ 229.091517][T12160] IPVS: using max 24 ests per chain, 57600 per kthread [ 229.157948][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.170212][T12168] netlink: 'syz.4.1858': attribute type 1 has an invalid length. [ 229.193371][T12168] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1858'. [ 229.254917][T12168] workqueue: Failed to create a rescuer kthread for wq "phy3-mac-cmds": -EINTR [ 229.458816][T12193] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 229.606052][T12193] team_slave_0: entered promiscuous mode [ 229.611788][T12193] team_slave_1: entered promiscuous mode [ 229.689665][T12202] netlink: 'syz.4.1867': attribute type 1 has an invalid length. [ 229.697469][T12202] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1867'. [ 230.095595][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.195033][T12227] ip6gre1: entered allmulticast mode [ 230.726759][T12245] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 230.777415][T12248] sctp: [Deprecated]: syz.4.1882 (pid 12248) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.777415][T12248] Use struct sctp_sack_info instead [ 231.127242][T12264] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 231.151022][T12266] netlink: 'syz.0.1884': attribute type 1 has an invalid length. [ 231.335058][T12280] : renamed from hsr0 (while UP) [ 231.857129][T12306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.868894][T12306] bond0: (slave vcan1): The slave device specified does not support setting the MAC address [ 231.880420][T12306] bond0: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 231.895404][T12306] bond0: (slave vcan1): making interface the new active one [ 231.903268][T12306] vcan1: entered promiscuous mode [ 231.908680][T12306] vcan1: entered allmulticast mode [ 231.917434][T12306] bond0: (slave vcan1): Enslaving as an active interface with an up link [ 232.164757][T12306] bond0: (slave vcan2): The slave device specified does not support setting the MAC address [ 232.229034][T12306] bond0: (slave vcan2): Enslaving as a backup interface with an up link [ 232.299093][T12325] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 232.359751][T12334] __nla_validate_parse: 6 callbacks suppressed [ 232.359771][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 232.557650][T12337] team0: Device vti0 is up. Set it down before adding it as a team port [ 232.955989][T12354] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 233.084349][T12356] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4. [ 233.281434][T12378] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1918'. [ 233.489326][T12377] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1919'. [ 233.782106][T12402] netlink: 'syz.0.1925': attribute type 29 has an invalid length. [ 233.813300][T12402] netlink: 'syz.0.1925': attribute type 29 has an invalid length. [ 233.833213][T12402] netlink: 'syz.0.1925': attribute type 29 has an invalid length. [ 233.887013][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1926'. [ 233.908492][T12411] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 233.984431][T12413] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 234.115237][T12427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1930'. [ 234.130290][T12427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1930'. [ 234.167628][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1930'. [ 234.238245][T12431] netlink: 'syz.1.1933': attribute type 10 has an invalid length. [ 234.267742][T12431] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.405990][T12442] netlink: 'syz.1.1933': attribute type 4 has an invalid length. [ 234.685355][T12455] veth5: entered promiscuous mode [ 234.748449][T12460] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1941'. [ 234.911230][T12468] syz_tun: entered allmulticast mode [ 234.980781][T12467] syz_tun: left allmulticast mode [ 235.300485][T12496] netlink: 'syz.2.1953': attribute type 12 has an invalid length. [ 235.458081][T12508] tipc: Enabled bearer , priority 0 [ 235.466253][T12508] syzkaller0: entered promiscuous mode [ 235.476170][T12508] syzkaller0: entered allmulticast mode [ 235.478961][T12511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.517510][T12508] tipc: Resetting bearer [ 235.553238][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1958'. [ 235.563978][T12518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1958'. [ 235.573296][T12506] tipc: Resetting bearer [ 235.621191][T12506] tipc: Disabling bearer [ 235.757159][T12530] netlink: 'syz.0.1960': attribute type 29 has an invalid length. [ 235.771468][T12528] tipc: Started in network mode [ 235.776627][T12528] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 235.797206][T12528] tipc: Enabled bearer , priority 12 [ 235.805496][T12531] netlink: 'syz.0.1960': attribute type 29 has an invalid length. [ 235.814889][T12528] openvswitch: netlink: Missing key (keys=40, expected=100) [ 236.106040][T12547] netlink: 'syz.0.1966': attribute type 2 has an invalid length. [ 236.719693][T12596] netlink: 'syz.0.1979': attribute type 12 has an invalid length. [ 236.910102][ T5939] tipc: Node number set to 10070698 [ 236.948139][T12612] SET target dimension over the limit! [ 237.141731][T12627] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20000 [ 237.453464][T12649] __nla_validate_parse: 11 callbacks suppressed [ 237.453484][T12649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 237.586749][T12658] xt_socket: unknown flags 0x50 [ 237.974865][T12678] netlink: 'syz.4.1999': attribute type 1 has an invalid length. [ 237.983567][T12678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.010399][T12678] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1999'. [ 239.438356][T12658] vlan3: entered allmulticast mode [ 239.443815][T12658] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 239.605418][T12687] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20002 [ 239.743589][T12694] netlink: 'syz.3.2006': attribute type 1 has an invalid length. [ 239.847653][T12706] gretap1: entered promiscuous mode [ 239.956808][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2013'. [ 240.072672][T12718] netlink: 'syz.4.2014': attribute type 20 has an invalid length. [ 240.099062][T12718] xt_policy: output policy not valid in PREROUTING and INPUT [ 240.215221][T12732] xt_HMARK: spi-set and port-set can't be combined [ 240.345886][T12741] netlink: 'syz.1.2022': attribute type 11 has an invalid length. [ 240.361365][T12741] netlink: 'syz.1.2022': attribute type 11 has an invalid length. [ 240.371480][T12741] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2022'. [ 240.491122][T12751] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 240.685931][T12761] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2028'. [ 240.724208][T12763] net veth1_virt_wifi .: renamed from virt_wifi0 [ 240.835309][T12768] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2032'. [ 240.913577][T12770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2031'. [ 240.930974][T12770] netlink: 'syz.3.2031': attribute type 10 has an invalid length. [ 240.983084][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2035'. [ 240.988226][T12770] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 241.091413][T12778] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2035'. [ 241.228082][T12788] xt_CT: No such helper "pptp" [ 241.733177][T12827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2049'. [ 242.146179][T12854] 0ªX¹¦D: entered promiscuous mode [ 242.156043][T12854] 0ªX¹¦D: left allmulticast mode [ 242.287709][T12854] netlink: 'syz.2.2057': attribute type 10 has an invalid length. [ 242.434238][T12871] netlink: 'syz.4.2062': attribute type 1 has an invalid length. [ 242.455135][T12871] netlink: 'syz.4.2062': attribute type 2 has an invalid length. [ 242.574131][T12873] __nla_validate_parse: 4 callbacks suppressed [ 242.574152][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2063'. [ 242.745249][T12892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.847573][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2067'. [ 242.896821][T12898] tipc: Enabled bearer , priority 0 [ 242.928027][T12898] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 242.968869][T12898] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 243.269116][T12907] nbd: must specify a device to reconfigure [ 243.627680][T12936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2077'. [ 243.689037][T12936] netlink: 'syz.1.2077': attribute type 2 has an invalid length. [ 243.709181][T12936] netlink: 'syz.1.2077': attribute type 21 has an invalid length. [ 243.733756][T12943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2079'. [ 243.749879][T12936] netlink: 'syz.1.2077': attribute type 1 has an invalid length. [ 243.991867][T12943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2079'. [ 244.001880][T12951] tipc: Enabled bearer , priority 0 [ 244.023144][T12951] syzkaller0: entered promiscuous mode [ 244.028694][T12951] syzkaller0: entered allmulticast mode [ 244.110085][T12951] veth1_to_bond: mtu less than device minimum [ 244.263870][T12968] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2089'. [ 244.290651][T12966] netlink: 'syz.0.2088': attribute type 15 has an invalid length. [ 244.582509][T12988] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2095'. [ 244.593292][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2094'. [ 244.615804][T12989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2094'. [ 244.771005][T12950] tipc: Resetting bearer [ 244.823123][T12996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2098'. [ 244.848751][T12950] tipc: Disabling bearer [ 245.047731][T13010] netlink: 'syz.1.2101': attribute type 10 has an invalid length. [ 245.086879][T13010] veth1_vlan: entered allmulticast mode [ 245.113862][T13010] team0: Device veth1_vlan failed to register rx_handler [ 245.251023][T13023] netlink: 'syz.3.2103': attribute type 18 has an invalid length. [ 246.138574][T13070] netlink: 'syz.4.2115': attribute type 2 has an invalid length. [ 246.388094][T13076] netlink: 'syz.1.2116': attribute type 4 has an invalid length. [ 246.390580][T13077] netlink: 'syz.1.2116': attribute type 4 has an invalid length. [ 246.541542][T13092] netlink: 'syz.2.2118': attribute type 1 has an invalid length. [ 247.160433][T13122] netlink: 'syz.1.2128': attribute type 1 has an invalid length. [ 247.332692][T13127] netlink: 'syz.3.2131': attribute type 1 has an invalid length. [ 247.354646][T13120] veth1_vlan (unregistering): left allmulticast mode [ 247.500403][T13122] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.561648][T13132] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.580281][T13132] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 247.606612][T13132] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 247.745228][T13150] __nla_validate_parse: 6 callbacks suppressed [ 247.745247][T13150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2133'. [ 247.872413][T13153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.946506][T13160] netlink: 'syz.1.2139': attribute type 10 has an invalid length. [ 248.523669][T13152] infiniband syz1: set active [ 248.528951][T13152] infiniband syz1: added bridge_slave_0 [ 248.594816][T13152] RDS/IB: syz1: added [ 248.599016][T13152] smc: adding ib device syz1 with port count 1 [ 248.609733][T13152] smc: ib device syz1 port 1 has pnetid [ 248.760166][T13208] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 249.034507][T13217] syzkaller0: entered promiscuous mode [ 249.050025][T13217] syzkaller0: entered allmulticast mode [ 249.081144][T13217] veth0: entered promiscuous mode [ 249.114036][T13214] veth0: left promiscuous mode [ 250.215969][T13277] netlink: 'syz.1.2174': attribute type 4 has an invalid length. [ 250.283412][T13274] syzkaller0: tun_chr_ioctl cmd 35595 [ 250.800892][ T5842] Bluetooth: hci0: command tx timeout [ 250.925417][T13300] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 251.121694][T13314] tipc: Enabling of bearer rejected, already enabled [ 251.181646][T13314] netlink: 'syz.0.2185': attribute type 4 has an invalid length. [ 251.185708][T13316] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2186'. [ 251.490857][T13325] netlink: 'syz.0.2190': attribute type 26 has an invalid length. [ 251.548300][T13325] tls_set_device_offload: netdev not found [ 251.606971][T13338] openvswitch: netlink: Message has 199 unknown bytes. [ 251.631936][T13338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.643728][T13337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2193'. [ 251.718452][T13342] netlink: 'syz.2.2194': attribute type 1 has an invalid length. [ 251.759999][T13341] netlink: 'syz.2.2194': attribute type 1 has an invalid length. [ 251.971061][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2195'. [ 251.992882][T13359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2195'. [ 252.006492][T13359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.056268][T13363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2198'. [ 252.093513][T13364] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2198'. [ 252.620829][T13400] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2208'. [ 252.891408][T13417] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2213'. [ 253.134379][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2216'. [ 253.287848][T13438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2219'. [ 254.489656][T13521] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 254.560450][ T8006] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 254.604514][T13531] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2243'. [ 254.615528][T13530] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2242'. [ 254.616546][T13529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2244'. [ 255.171762][T13569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2257'. [ 255.191844][T13563] IPVS: ip_vs_add_dest(): server weight less than zero [ 255.236564][T13569] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.347688][T13576] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2261'. [ 255.403936][T13576] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2261'. [ 255.434819][T13576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2261'. [ 256.156998][T13634] IPv6: NLM_F_CREATE should be specified when creating new route [ 256.187073][T13637] netlink: 'syz.1.2282': attribute type 4 has an invalid length. [ 256.193361][T13634] IPv6: Can't replace route, no match found [ 256.369878][T13644] netlink: 'syz.4.2284': attribute type 1 has an invalid length. [ 256.603612][T13655] netlink: 'syz.1.2290': attribute type 30 has an invalid length. [ 256.635740][T13655] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.645708][T13655] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.655101][T13655] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.663913][T13655] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.941279][T13679] vxcan1 speed is unknown, defaulting to 1000 [ 256.949019][T13679] vxcan1 speed is unknown, defaulting to 1000 [ 256.966715][T13679] vxcan1 speed is unknown, defaulting to 1000 [ 257.186752][T13693] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 257.206337][T13693] team0: Device ipvlan2 is already an upper device of the team interface [ 257.612438][T13679] infiniband syz2: set active [ 257.617308][ T5827] vxcan1 speed is unknown, defaulting to 1000 [ 257.628720][T13679] infiniband syz2: added vxcan1 [ 257.685227][T13679] RDS/IB: syz2: added [ 257.689420][T13679] smc: adding ib device syz2 with port count 1 [ 257.699986][T13679] smc: ib device syz2 port 1 has pnetid [ 257.712056][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 257.734008][T13679] vxcan1 speed is unknown, defaulting to 1000 [ 257.987981][ T8015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.000930][T13727] syzkaller1: entered promiscuous mode [ 258.008009][ T8015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.014727][T13735] __nla_validate_parse: 25 callbacks suppressed [ 258.014748][T13735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2314'. [ 258.024085][T13727] syzkaller1: entered allmulticast mode [ 258.081859][T13736] veth1_macvtap: left promiscuous mode [ 258.291940][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2318'. [ 258.358446][T13679] vxcan1 speed is unknown, defaulting to 1000 [ 258.388446][T13753] xt_policy: too many policy elements [ 258.917555][T13679] vxcan1 speed is unknown, defaulting to 1000 [ 259.305986][T13785] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2330'. [ 259.320785][T13785] 8021q: VLANs not supported on gre0 [ 259.332791][T13785] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2330'. [ 259.343698][T13785] 8021q: VLANs not supported on gre0 [ 259.349279][T13787] netlink: 'syz.1.2331': attribute type 1 has an invalid length. [ 259.378354][T13787] netlink: 'syz.1.2331': attribute type 1 has an invalid length. [ 259.428844][T13795] nft_compat: unsupported protocol 0 [ 259.458905][T13795] pim6reg: entered allmulticast mode [ 259.483859][T13795] C: left promiscuous mode [ 259.554112][T13679] vxcan1 speed is unknown, defaulting to 1000 [ 259.572154][T13799] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 259.876122][T13679] vxcan1 speed is unknown, defaulting to 1000 [ 260.400851][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2348'. [ 260.668413][T13867] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2353'. [ 260.767549][T13858] can: request_module (can-proto-0) failed. [ 261.156329][T13893] Cannot find del_set index 5 as target [ 261.182093][T13893] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2362'. [ 261.215886][T13893] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2362'. [ 261.262724][T13897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2364'. [ 261.310966][T13897] veth0: entered promiscuous mode [ 261.382235][T13903] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2366'. [ 261.492475][T13910] veth0: entered promiscuous mode [ 261.552103][T13914] veth0: left promiscuous mode [ 261.563386][T13894] veth0: left promiscuous mode [ 261.584342][T13916] sctp: [Deprecated]: syz.4.2369 (pid 13916) Use of int in max_burst socket option. [ 261.584342][T13916] Use struct sctp_assoc_value instead [ 261.798197][T13925] netlink: 'syz.2.2371': attribute type 1 has an invalid length. [ 261.987177][T13939] netlink: 'syz.4.2376': attribute type 33 has an invalid length. [ 262.562218][T13969] macsec2: entered promiscuous mode [ 262.612655][T13969] erspan0: entered promiscuous mode [ 262.634849][T13969] macsec2: entered allmulticast mode [ 262.824271][T13989] netlink: 'syz.3.2390': attribute type 2 has an invalid length. [ 263.146031][T14008] xfrm1: entered allmulticast mode [ 263.249216][T14008] __nla_validate_parse: 7 callbacks suppressed [ 263.249236][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2397'. [ 263.456733][T14028] netlink: 'syz.3.2404': attribute type 21 has an invalid length. [ 263.481158][T14026] !€ÿ: renamed from bond_slave_0 (while UP) [ 263.493387][T14028] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2404'. [ 263.529979][T14028] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2404'. [ 263.688123][T14037] tipc: Enabling of bearer rejected, failed to enable media [ 263.843689][T14055] netlink: 'syz.0.2409': attribute type 1 has an invalid length. [ 263.978236][T14055] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.985008][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2414'. [ 264.019182][T14065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2413'. [ 264.073370][T14059] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.081896][T14059] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 264.098480][T14059] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 264.125901][T14071] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2415'. [ 264.146222][T14071] nbd: must specify at least one socket [ 264.183348][T14067] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 264.243148][T14067] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 264.312141][T14077] netlink: 'syz.2.2419': attribute type 11 has an invalid length. [ 264.568786][T14097] netlink: 'syz.4.2424': attribute type 11 has an invalid length. [ 264.631840][T14100] sctp: [Deprecated]: syz.4.2424 (pid 14100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.631840][T14100] Use struct sctp_sack_info instead [ 264.705694][T14106] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 264.730491][T14107] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 264.894715][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2433'. [ 264.906641][T14122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2433'. [ 264.963951][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2433'. [ 264.996856][T14122] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.998683][T14125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2433'. [ 265.006451][T14122] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.023748][T14122] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.033076][T14122] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.096701][T14129] x_tables: duplicate underflow at hook 1 [ 265.634266][T14159] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 265.663310][T14159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.683999][T14159] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 265.697345][T14159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.846837][T14172] xt_TCPMSS: Only works on TCP SYN packets [ 266.108493][T14185] IPVS: Error joining to the multicast group [ 266.139561][T14182] netlink: 'syz.2.2450': attribute type 3 has an invalid length. [ 266.615801][T14202] Bluetooth: MGMT ver 1.23 [ 266.776719][T14211] vlan1: entered promiscuous mode [ 266.795036][T14211] bridge0: entered promiscuous mode [ 267.055918][T14226] netlink: 'syz.2.2462': attribute type 7 has an invalid length. [ 267.088368][T14226] : entered promiscuous mode [ 267.382914][T14233] netlink: 'syz.0.2464': attribute type 1 has an invalid length. [ 267.402481][T14233] netlink: 'syz.0.2464': attribute type 1 has an invalid length. [ 267.431958][T14232] netlink: 'syz.0.2464': attribute type 1 has an invalid length. [ 267.462543][T14232] netlink: 'syz.0.2464': attribute type 1 has an invalid length. [ 267.615886][T14196] vxcan1 speed is unknown, defaulting to 1000 [ 268.288740][T14274] netlink: 'syz.0.2476': attribute type 2 has an invalid length. [ 268.411524][T14280] xt_l2tp: wrong L2TP version: 0 [ 268.423300][T14278] __nla_validate_parse: 16 callbacks suppressed [ 268.423318][T14278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2479'. [ 268.546422][T14278] geneve2: entered promiscuous mode [ 268.759128][T14296] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 268.788471][T14297] syzkaller0: entered promiscuous mode [ 268.801354][T14297] syzkaller0: entered allmulticast mode [ 268.821406][T14310] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2486'. [ 269.003729][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2487'. [ 269.029806][T14310] mac80211_hwsim hwsim3 ÿ: renamed from wlan1 (while UP) [ 269.091034][T14318] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2488'. [ 269.176742][T14323] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 269.317273][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2490'. [ 269.345397][T14325] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2490'. [ 269.385295][T14327] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2491'. [ 269.692816][T14331] gretap0: entered promiscuous mode [ 269.698603][T14331] macvtap0: entered promiscuous mode [ 269.725497][T14331] vlan0: entered promiscuous mode [ 269.743132][T14331] macvtap0: entered allmulticast mode [ 269.748725][T14331] vlan0: entered allmulticast mode [ 269.769010][T14331] gretap0: entered allmulticast mode [ 269.781951][T14331] vlan0: left allmulticast mode [ 269.787078][T14331] gretap0: left allmulticast mode [ 269.796607][T14331] vlan0: left promiscuous mode [ 269.807328][T14331] gretap0: left promiscuous mode [ 270.568993][T14291] vxcan1 speed is unknown, defaulting to 1000 [ 270.744341][T14359] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2501'. [ 270.757373][T14364] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2503'. [ 270.835644][T14372] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2502'. [ 271.039834][ T49] ÿ: Trigger new scan to find an IBSS to join [ 271.157293][T14386] xt_cgroup: xt_cgroup: no path or classid specified [ 271.229172][T14388] netlink: 'syz.0.2508': attribute type 2 has an invalid length. [ 271.599359][T14392] netlink: 'syz.0.2509': attribute type 10 has an invalid length. [ 272.632244][T14431] netlink: 'syz.3.2522': attribute type 11 has an invalid length. [ 272.815707][T14438] bridge0: port 2(vlan3) entered blocking state [ 272.844526][T14438] bridge0: port 2(vlan3) entered disabled state [ 272.859815][T14438] vlan3: entered allmulticast mode [ 272.865046][T14438] bridge0: entered allmulticast mode [ 272.882246][T14438] vlan3: left allmulticast mode [ 272.887208][T14438] bridge0: left allmulticast mode [ 272.964440][T14376] vxcan1 speed is unknown, defaulting to 1000 [ 273.444565][T14465] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 273.677767][T14470] __nla_validate_parse: 7 callbacks suppressed [ 273.677785][T14470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2535'. [ 273.703818][T14470] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 273.715653][T14471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2535'. [ 273.744235][T14471] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 273.930892][T14473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'. [ 274.128452][T14475] team0: Device gtp0 is of different type [ 274.161057][T14478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2538'. [ 274.403227][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2538'. [ 274.897602][T14512] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2546'. [ 275.053582][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2548'. [ 275.129390][T14521] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2549'. [ 275.384748][T14539] openvswitch: netlink: Multiple metadata blocks provided [ 275.598979][T14549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.733778][T14558] ipvlan0: entered promiscuous mode [ 275.739060][T14558] ipvlan0: entered allmulticast mode [ 275.759023][T14558] veth0_vlan: entered allmulticast mode [ 276.276067][T14572] netlink: 'syz.1.2569': attribute type 1 has an invalid length. [ 276.301227][T14572] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2569'. [ 276.319908][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2569'. [ 277.043528][T14602] netlink: 'syz.1.2579': attribute type 1 has an invalid length. [ 277.103132][T14602] 8021q: adding VLAN 0 to HW filter on device bond5 [ 277.136974][T14603] macvtap1: entered promiscuous mode [ 277.143296][T14603] macvtap1: entered allmulticast mode [ 277.161685][T14602] bond5: (slave gretap2): making interface the new active one [ 277.172415][T14602] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 277.539159][T14623] netlink: 'syz.3.2586': attribute type 11 has an invalid length. [ 277.638856][T14626] xt_hashlimit: overflow, try lower: 4294967295/0 [ 277.837977][T14640] netlink: 'syz.0.2590': attribute type 2 has an invalid length. [ 277.876324][T14640] netlink: 'syz.0.2590': attribute type 8 has an invalid length. [ 277.878010][T14642] bridge_slave_0: invalid flags given to default FDB implementation [ 278.480641][T14680] netlink: 'syz.4.2600': attribute type 10 has an invalid length. [ 278.718547][T14691] netlink: 'syz.3.2604': attribute type 1 has an invalid length. [ 278.727098][T14691] __nla_validate_parse: 114 callbacks suppressed [ 278.727117][T14691] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2604'. [ 278.743307][T14691] netlink: 'syz.3.2604': attribute type 1 has an invalid length. [ 278.783593][T14691] netlink: 'syz.3.2604': attribute type 2 has an invalid length. [ 278.796879][T14691] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2604'. [ 278.986683][T14701] netlink: 'syz.3.2606': attribute type 13 has an invalid length. [ 279.044834][T14701] veth0_macvtap: left promiscuous mode [ 279.064131][T14701] macvtap0: entered allmulticast mode [ 279.094360][T14701] macvtap0: refused to change device tx_queue_len [ 279.466257][T14719] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2611'. [ 279.608062][T14721] xt_CT: No such helper "syz1" [ 279.678824][T14728] syzkaller0: entered promiscuous mode [ 279.684925][T14728] syzkaller0: entered allmulticast mode [ 279.743540][T14732] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2618'. [ 279.846307][T14731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2616'. [ 280.068065][T14750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2619'. [ 280.117550][T14754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2621'. [ 280.127513][T14754] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2621'. [ 280.136631][T14754] tc_dump_action: action bad kind [ 280.143417][T14750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2619'. [ 280.194751][T14757] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2620'. [ 280.402841][T14767] openvswitch: netlink: Flow key attr not present in new flow. [ 280.581151][T14777] tipc: Enabling of bearer rejected, failed to enable media [ 280.977582][T14801] xt_ecn: cannot match TCP bits for non-tcp packets [ 281.087807][T14815] tipc: Enabling of bearer rejected, failed to enable media [ 281.142760][T14818] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 281.197072][T14819] x_tables: duplicate underflow at hook 2 [ 281.206323][T14825] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 281.466835][T14839] 8021q: VLANs not supported on ip_vti0 [ 281.933624][T14869] openvswitch: netlink: Flow actions attr not present in new flow. [ 282.132318][T14881] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 282.266287][T14894] openvswitch: netlink: Flow actions attr not present in new flow. [ 282.368554][T14902] batadv0: entered allmulticast mode [ 282.556172][T14914] openvswitch: netlink: IP tunnel dst address not specified [ 282.655646][T14918] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 282.816125][T14930] validate_nla: 2 callbacks suppressed [ 282.816145][T14930] netlink: 'syz.2.2675': attribute type 29 has an invalid length. [ 282.825335][T14927] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 282.845890][T14930] netlink: 'syz.2.2675': attribute type 29 has an invalid length. [ 282.877890][T14935] netlink: 'syz.1.2677': attribute type 1 has an invalid length. [ 282.965825][T14935] 8021q: adding VLAN 0 to HW filter on device bond6 [ 283.063663][T14949] netlink: 'syz.4.2679': attribute type 1 has an invalid length. [ 283.149002][T14952] bridge_slave_0: left allmulticast mode [ 283.156511][T14952] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.730112][T14989] tipc: Enabled bearer , priority 0 [ 283.738690][T14992] __nla_validate_parse: 11 callbacks suppressed [ 283.738708][T14992] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2693'. [ 283.762779][T14989] wg0: entered promiscuous mode [ 283.768366][T14989] wg0: entered allmulticast mode [ 283.787324][T14992] bridge6: entered promiscuous mode [ 283.796263][T14992] bridge6: entered allmulticast mode [ 283.821801][T14988] tipc: Disabling bearer [ 283.906612][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'. [ 283.958296][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'. [ 283.995282][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'. [ 284.053042][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'. [ 284.080888][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'. [ 284.095769][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'. [ 284.118178][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'. [ 284.136644][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'. [ 284.179785][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2695'. [ 284.371641][T15021] x_tables: ip_tables: udp match: only valid for protocol 17 [ 284.707223][T14973] vxcan1 speed is unknown, defaulting to 1000 [ 285.711504][T15096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.834223][T15107] netlink: 'syz.3.2725': attribute type 2 has an invalid length. [ 286.116752][T15125] netlink: 'syz.0.2728': attribute type 1 has an invalid length. [ 286.972743][T15158] tipc: Resetting bearer [ 287.013687][T15158] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 287.582109][T15189] netlink: 'syz.3.2748': attribute type 11 has an invalid length. [ 287.592989][T15189] netlink: 'syz.3.2748': attribute type 11 has an invalid length. [ 288.407966][T15251] netlink: 'syz.0.2766': attribute type 1 has an invalid length. [ 288.478155][T15251] netlink: 'syz.0.2766': attribute type 1 has an invalid length. [ 288.580322][T15247] syzkaller0: entered promiscuous mode [ 288.606407][T15247] syzkaller0: entered allmulticast mode [ 288.738642][T15264] netlink: 'syz.0.2769': attribute type 4 has an invalid length. [ 288.874771][T15268] __nla_validate_parse: 41 callbacks suppressed [ 288.874791][T15268] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2770'. [ 289.168044][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 289.178570][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 289.192504][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 289.209562][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 289.223146][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.483207][T15283] tipc: Enabling of bearer rejected, failed to enable media [ 290.571178][T15293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.887547][T15308] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2780'. [ 290.916570][T15307] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2780'. [ 290.934133][T15308] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2780'. [ 291.001090][T15310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2781'. [ 291.013357][T15311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2781'. [ 291.291756][ T5842] Bluetooth: hci2: command tx timeout [ 291.316611][T15325] netlink: 'syz.2.2785': attribute type 1 has an invalid length. [ 291.434027][T15269] vxcan1 speed is unknown, defaulting to 1000 [ 291.451594][T15332] Unsupported ieee802154 address type: 0 [ 291.690820][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2792'. [ 291.727237][T15341] veth0_to_hsr: mtu less than device minimum [ 291.820923][T15347] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2794'. [ 291.861100][T15347] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 291.891157][T15347] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 291.964871][T15355] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2797'. [ 292.093410][T15366] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2798'. [ 292.288985][T15363] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 292.371534][T15384] set match dimension is over the limit! [ 292.381144][T15378] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 292.619088][T15269] chnl_net:caif_netlink_parms(): no params data found [ 292.926491][T15269] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.960405][T15269] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.989183][T15269] bridge_slave_0: entered allmulticast mode [ 292.996344][ T9] hid-generic 0005:0458:005A.0002: item fetching failed at offset 0/1 [ 293.015756][ T9] hid-generic 0005:0458:005A.0002: probe with driver hid-generic failed with error -22 [ 293.046088][T15269] bridge_slave_0: entered promiscuous mode [ 293.077495][T15269] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.084958][T15269] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.092467][T15269] bridge_slave_1: entered allmulticast mode [ 293.100842][T15269] bridge_slave_1: entered promiscuous mode [ 293.213331][T15269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.255724][T15269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.273527][T15434] ipvlan0: mtu less than device minimum [ 293.361660][ T5842] Bluetooth: hci2: command tx timeout [ 293.387054][T15269] team0: Port device team_slave_0 added [ 293.404523][T15269] team0: Port device team_slave_1 added [ 293.434878][T15445] sctp: [Deprecated]: syz.0.2817 (pid 15445) Use of int in maxseg socket option. [ 293.434878][T15445] Use struct sctp_assoc_value instead [ 293.558596][T15269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.575170][T15269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.675096][T15269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.710571][T15269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.719103][T15269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.757233][T15269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.828113][T15463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.996928][T15460] bridge0: port 3(gretap0) entered disabled state [ 294.145059][T15482] __nla_validate_parse: 2 callbacks suppressed [ 294.145078][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2829'. [ 294.292631][T15460] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.356004][T15460] team_slave_0: left promiscuous mode [ 294.377272][T15460] team_slave_1: left promiscuous mode [ 294.709267][T15460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.752170][T15460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.997376][T15460] vlan1: left allmulticast mode [ 295.004610][T15460] veth0_vlan: left allmulticast mode [ 295.070186][T15460] macvtap0: left allmulticast mode [ 295.090473][T15460] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.099401][T15460] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.109115][T15460] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.119752][T15460] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.136890][T15460] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 295.231595][T15460] ip6gre2: left allmulticast mode [ 295.248579][T15460] bond3: left promiscuous mode [ 295.255013][T15460] bond3: left allmulticast mode [ 295.328296][T15460] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.337921][T15460] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.346893][T15460] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.355959][T15460] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.383025][T15460] bridge6: left promiscuous mode [ 295.388026][T15460] bridge6: left allmulticast mode [ 295.450240][ T5842] Bluetooth: hci2: command tx timeout [ 295.524570][T15269] hsr_slave_0: entered promiscuous mode [ 295.531576][T15269] hsr_slave_1: entered promiscuous mode [ 295.537942][T15269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.552080][T15269] Cannot create hsr debugfs directory [ 295.557837][T15469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2826'. [ 295.622230][T15476] syz1: Port: 1 Link DOWN [ 295.791832][T15497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2832'. [ 295.999942][ T8017] wlan0: Trigger new scan to find an IBSS to join [ 296.035327][T15513] netlink: 'syz.3.2832': attribute type 2 has an invalid length. [ 296.194050][T15269] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.204840][T15269] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.447521][T15269] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.477170][T15269] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.566237][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2840'. [ 296.668976][T15269] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.698333][T15269] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.727937][T15532] team0: Device vti0 is of different type [ 296.788439][T15269] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.811977][T15269] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.843240][T15549] tipc: Enabling of bearer rejected, already enabled [ 297.127895][T15565] netlink: 'syz.3.2848': attribute type 2 has an invalid length. [ 297.189731][T15568] netlink: 'syz.0.2852': attribute type 24 has an invalid length. [ 297.228979][T15269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 297.264835][T15269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 297.296075][T15269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 297.348018][T15269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 297.519563][ T5842] Bluetooth: hci2: command tx timeout [ 297.713631][T15269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.770178][T15598] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2860'. [ 297.786230][T15269] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.806536][T15598] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2860'. [ 297.825139][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.832361][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.878141][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.885380][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.002124][T15607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2863'. [ 298.128514][T15610] openvswitch: netlink: Missing key (keys=40, expected=100) [ 298.381304][T15624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2867'. [ 298.395032][T15623] netlink: 'syz.3.2869': attribute type 1 has an invalid length. [ 298.607970][T15269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.820461][T15269] veth0_vlan: entered promiscuous mode [ 298.924203][T15269] veth1_vlan: entered promiscuous mode [ 298.960336][ T8019] wlan0: Trigger new scan to find an IBSS to join [ 299.027191][T15269] veth0_macvtap: entered promiscuous mode [ 299.048963][T15648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2877'. [ 299.057004][T15269] veth1_macvtap: entered promiscuous mode [ 299.098570][T15269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.109740][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2877'. [ 299.144787][T15269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.183762][T15269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.213237][T15269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.243712][T15269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.260756][T15269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.415390][ T8019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.428315][ T8019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.535822][ T8027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.574357][ T8027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.956813][T15682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.058957][T15685] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2883'. [ 300.077052][T15686] ip6gre1: entered allmulticast mode [ 300.207675][T15689] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2884'. [ 300.315278][T15693] netlink: 'syz.0.2886': attribute type 21 has an invalid length. [ 300.332563][T15633] vxcan1 speed is unknown, defaulting to 1000 [ 300.478258][T15703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2889'. [ 300.602531][T15708] x_tables: duplicate underflow at hook 2 [ 301.281238][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 302.000322][ T6109] wlan0: Trigger new scan to find an IBSS to join [ 302.115459][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.124883][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.126428][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'. [ 302.133023][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.150867][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.158972][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.177882][T15751] netlink: 'syz.2.2902': attribute type 1 has an invalid length. [ 302.186961][T15751] netlink: 'syz.2.2902': attribute type 2 has an invalid length. [ 302.249755][T15750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2902'. [ 302.300974][T15754] veth0_virt_wifi: mtu greater than device maximum [ 302.333716][T15750] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 302.345775][T15757] 8021q: VLANs not supported on ip6tnl0 [ 302.488583][T15761] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2906'. [ 302.717105][T15775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2911'. [ 302.815759][T15779] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2913'. [ 302.846558][T15777] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2912'. [ 302.943480][ T8017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.026104][T15788] syz.3.2916 uses old SIOCAX25GETINFO [ 303.045202][T15791] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2915'. [ 303.073283][T15790] netlink: 'syz.0.2917': attribute type 1 has an invalid length. [ 303.089796][T15790] netlink: 'syz.0.2917': attribute type 2 has an invalid length. [ 303.402481][T15748] vxcan1 speed is unknown, defaulting to 1000 [ 304.239896][ T5852] Bluetooth: hci4: command tx timeout [ 304.587446][T15748] chnl_net:caif_netlink_parms(): no params data found [ 306.321088][ T5852] Bluetooth: hci4: command tx timeout [ 307.099317][T15869] x_tables: unsorted entry at hook 2 [ 307.121615][T15748] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.129027][T15748] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.136927][T15748] bridge_slave_0: entered allmulticast mode [ 307.147616][T15748] bridge_slave_0: entered promiscuous mode [ 307.172911][T15748] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.181435][T15748] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.188675][T15748] bridge_slave_1: entered allmulticast mode [ 307.219009][T15748] bridge_slave_1: entered promiscuous mode [ 307.323020][T15748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.343532][T15748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.395727][T15887] sctp: [Deprecated]: syz.1.2944 (pid 15887) Use of int in maxseg socket option. [ 307.395727][T15887] Use struct sctp_assoc_value instead [ 307.492377][T15748] team0: Port device team_slave_0 added [ 307.503369][T15748] team0: Port device team_slave_1 added [ 307.585797][T15748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.598141][T15748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.624975][T15748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.645350][T15748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.646672][T15899] __nla_validate_parse: 5 callbacks suppressed [ 307.646689][T15899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2949'. [ 307.654724][T15748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.696872][T15748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.845534][T15748] hsr_slave_0: entered promiscuous mode [ 307.853261][T15748] hsr_slave_1: entered promiscuous mode [ 307.860901][T15748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.868516][T15748] Cannot create hsr debugfs directory [ 307.887175][T15905] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 308.127629][T15922] ip6t_srh: unknown srh match flags 536B [ 308.163626][T15922] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 308.173428][T15923] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2956'. [ 308.191677][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2956'. [ 308.399895][ T5852] Bluetooth: hci4: command tx timeout [ 308.435363][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2960'. [ 308.821012][T15953] netlink: 'syz.0.2966': attribute type 13 has an invalid length. [ 308.828894][T15953] netlink: 'syz.0.2966': attribute type 17 has an invalid length. [ 308.876699][T15953] 0ªî{X¹¦: left allmulticast mode [ 308.908900][T15960] netlink: 'syz.2.2968': attribute type 1 has an invalid length. [ 308.925324][T15953] sit0: left promiscuous mode [ 309.030558][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.085974][T15953] ipvlan0: left promiscuous mode [ 309.099182][T15953] ipvlan0: left allmulticast mode [ 309.107388][T15953] veth0_vlan: left allmulticast mode [ 309.163678][T15953] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 768 - 0 [ 309.173081][T15953] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 768 - 0 [ 309.182382][T15953] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 768 - 0 [ 309.191414][T15953] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 768 - 0 [ 309.208019][T15953] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 309.277718][T15960] 8021q: adding VLAN 0 to HW filter on device bond5 [ 309.301989][T15962] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 309.333243][T15962] bond5: (slave wlan1): Enslaving as an active interface with a down link [ 309.342868][T15477] vxcan1 speed is unknown, defaulting to 1000 [ 309.371468][ T5912] syz0: Port: 1 Link ACTIVE [ 309.530689][T15748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 309.566974][T15748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 309.595299][T15748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 309.621485][T15748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 309.696551][T15990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2976'. [ 309.753258][T15990] sch_tbf: burst 0 is lower than device bridge5 mtu (1514) ! [ 309.882817][T15999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2979'. [ 309.902211][T15748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.926704][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.016479][T15748] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.071476][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.078676][ T8037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.124826][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.132060][ T8037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.199177][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 310.205931][T15748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.275719][T16018] geneve2: entered promiscuous mode [ 310.284830][T16018] geneve2: entered allmulticast mode [ 310.347721][T16021] tap0: tun_chr_ioctl cmd 1074025678 [ 310.363525][T16021] tap0: group set to 0 [ 310.487299][ T5852] Bluetooth: hci4: command tx timeout [ 310.579124][T15748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.836980][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2992'. [ 310.850319][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2992'. [ 311.229030][T16040] vxcan1 speed is unknown, defaulting to 1000 [ 311.418975][T16059] bridge_slave_0: left allmulticast mode [ 311.460315][T16059] bridge_slave_0: left promiscuous mode [ 311.468561][T16059] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.522710][T16059] team0: Port device team_slave_0 removed [ 311.556187][T16059] team0: Port device team_slave_1 removed [ 311.618081][T16059] bond5: (slave wlan1): Releasing active interface [ 311.703288][T16066] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 311.921345][T15748] veth0_vlan: entered promiscuous mode [ 311.957563][T15748] veth1_vlan: entered promiscuous mode [ 312.088604][T15748] veth0_macvtap: entered promiscuous mode [ 312.132025][T15748] veth1_macvtap: entered promiscuous mode [ 312.168644][T16085] netlink: 'syz.0.3003': attribute type 5 has an invalid length. [ 312.218488][T15748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.282272][T15748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.294359][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3005'. [ 312.378479][T16089] netlink: 'syz.1.3005': attribute type 12 has an invalid length. [ 312.398722][T15748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.430037][T15748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.438793][T15748] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.462595][T15748] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.581783][T16096] tipc: Invalid UDP bearer configuration [ 312.581841][T16096] tipc: Enabling of bearer rejected, failed to enable media [ 312.723267][ T5852] Bluetooth: hci4: command tx timeout [ 312.924538][ T8017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.950512][ T8017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.087812][ T8027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.097357][ T8027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.405126][T16136] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.480350][T16140] __nla_validate_parse: 2 callbacks suppressed [ 313.480369][T16140] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3018'. [ 313.546985][T16140] netlink: 'syz.3.3018': attribute type 3 has an invalid length. [ 313.581955][T16140] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3018'. [ 313.749562][T16149] 8021q: VLANs not supported on sit0 [ 313.778628][T16147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3020'. [ 313.832055][T16152] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3023'. [ 313.941948][T16156] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3022'. [ 314.028562][T16161] netlink: 'syz.4.3026': attribute type 13 has an invalid length. [ 314.033217][T16162] netlink: 'syz.2.3025': attribute type 1 has an invalid length. [ 314.069653][T16161] netlink: 'syz.4.3026': attribute type 58 has an invalid length. [ 314.099738][T16161] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3026'. [ 314.152234][T16165] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3025'. [ 314.504602][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.515545][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.528661][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.539090][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.546938][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.720694][T16192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.768021][T16196] Cannot find del_set index 4 as target [ 314.811376][T16198] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3037'. [ 314.965964][T16202] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3038'. [ 315.024366][T16208] netlink: 212352 bytes leftover after parsing attributes in process `syz.3.3038'. [ 315.726236][T16239] syzkaller0: entered promiscuous mode [ 315.740243][T16239] syzkaller0: entered allmulticast mode [ 315.838231][T16176] vxcan1 speed is unknown, defaulting to 1000 [ 316.376497][T16265] netlink: 'syz.4.3058': attribute type 4 has an invalid length. [ 316.641351][ T5842] Bluetooth: hci0: command tx timeout [ 317.034534][T16176] chnl_net:caif_netlink_parms(): no params data found [ 317.443805][T16337] netlink: 'syz.3.3076': attribute type 1 has an invalid length. [ 317.487441][T16176] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.497648][T16176] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.505104][T16176] bridge_slave_0: entered allmulticast mode [ 317.513299][T16176] bridge_slave_0: entered promiscuous mode [ 317.581536][T16176] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.588828][T16176] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.629849][T16176] bridge_slave_1: entered allmulticast mode [ 317.647956][T16176] bridge_slave_1: entered promiscuous mode [ 317.690434][T16351] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.883876][T16176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.263412][T16176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.439662][T16381] RDS: rds_bind could not find a transport for ::ffff:172.20.20.37, load rds_tcp or rds_rdma? [ 318.451964][T16176] team0: Port device team_slave_0 added [ 318.462557][T16176] team0: Port device team_slave_1 added [ 318.611422][T16388] __nla_validate_parse: 12 callbacks suppressed [ 318.611442][T16388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3088'. [ 318.720072][ T5842] Bluetooth: hci0: command 0x041b tx timeout [ 318.882066][T16176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.889075][T16176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.915944][T16176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.008145][T16390] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.089338][T16176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.101104][T16176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.190605][T16176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.192058][T16401] can: request_module (can-proto-0) failed. [ 319.254518][T16390] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.396475][T16176] hsr_slave_0: entered promiscuous mode [ 319.410749][T16176] hsr_slave_1: entered promiscuous mode [ 319.423505][T16176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.437029][T16176] Cannot create hsr debugfs directory [ 319.466407][T16390] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.592077][T16390] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.945353][T16390] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.991527][T16390] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.065797][T16390] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.093650][T16390] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.206409][T16458] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3102'. [ 320.303470][T16176] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 768 - 0 [ 320.318714][T16464] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3105'. [ 320.329789][T16176] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.340555][T16176] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 320.506227][T16176] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 768 - 0 [ 320.528547][T16471] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 320.544771][T16176] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.557798][T16176] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 320.767082][T16176] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 768 - 0 [ 320.799863][ T5842] Bluetooth: hci0: command 0x041b tx timeout [ 320.811644][T16176] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.827114][T16176] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 321.050175][T16176] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 768 - 0 [ 321.060827][T16176] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.071748][T16176] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 321.093672][T16501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.107446][T16500] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3118'. [ 321.209348][T16505] ipt_ECN: cannot use operation on non-tcp rule [ 321.343848][T16176] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.370402][T16176] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 321.385841][T16176] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 321.443017][T16176] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 321.480703][T16522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3123'. [ 321.597885][T16176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.623818][T16176] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.665131][T16530] openvswitch: netlink: Actions may not be safe on all matching packets [ 321.673054][ T8017] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.680868][T16530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3125'. [ 321.681852][ T8017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.709096][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3126'. [ 321.746229][ T8017] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.753549][ T8017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.786200][T16530] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.794776][T16530] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.012128][T16542] bond0: entered promiscuous mode [ 322.031838][T16542] bond_slave_0: entered promiscuous mode [ 322.052114][T16542] bond_slave_1: entered promiscuous mode [ 322.081551][T16542] batadv0: entered promiscuous mode [ 322.099164][T16542] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 322.125677][T16542] bond0: left promiscuous mode [ 322.131150][T16542] bond_slave_0: left promiscuous mode [ 322.136926][T16542] bond_slave_1: left promiscuous mode [ 322.145990][T16542] batadv0: left promiscuous mode [ 322.376388][T16176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.395746][T16562] openvswitch: netlink: Key type 1040 is out of range max 32 [ 322.503738][ T5912] IPVS: starting estimator thread 0... [ 322.516919][T16176] veth0_vlan: entered promiscuous mode [ 322.528527][T16562] netlink: 'syz.1.3133': attribute type 58 has an invalid length. [ 322.545291][T16562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3133'. [ 322.557689][T16176] veth1_vlan: entered promiscuous mode [ 322.603265][T16571] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3133'. [ 322.619727][T16570] IPVS: using max 29 ests per chain, 69600 per kthread [ 322.688479][T16176] veth0_macvtap: entered promiscuous mode [ 322.745965][T16176] veth1_macvtap: entered promiscuous mode [ 322.797809][T16176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.833474][T16176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.882610][T16176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.899624][ T5842] Bluetooth: hci0: command 0x041b tx timeout [ 322.915331][T16176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.925317][T16176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.936992][T16176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.003382][T16584] netlink: 'syz.4.3140': attribute type 10 has an invalid length. [ 323.032173][T16584] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3140'. [ 323.065707][ T6109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.086598][ T6109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.100017][T16584] dummy0: entered promiscuous mode [ 323.119230][T16584] bridge0: port 3(dummy0) entered blocking state [ 323.150358][T16584] bridge0: port 3(dummy0) entered disabled state [ 323.156946][T16584] dummy0: entered allmulticast mode [ 323.349089][ T8019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.399365][ T8019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.672090][T16618] __nla_validate_parse: 4 callbacks suppressed [ 323.672109][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3149'. [ 323.729360][T16623] veth0: entered promiscuous mode [ 323.801152][T16623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3019'. [ 323.846986][T16623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3019'. [ 324.036020][T16623] veth0: left promiscuous mode [ 324.036992][T16631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'. [ 324.228213][T16638] siw: device registration error -23 [ 324.240439][T16637] siw: device registration error -23 [ 324.349802][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 324.518555][T16647] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 324.555387][T16650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3160'. [ 324.713662][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.726600][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.740392][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.766043][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.780337][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.920757][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.962863][ T5842] Bluetooth: hci0: command 0x041b tx timeout [ 325.133793][T16680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3166'. [ 325.208845][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.351285][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'. [ 325.369693][T16691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3168'. [ 325.392988][T16691] netlink: 'syz.4.3168': attribute type 15 has an invalid length. [ 325.498768][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.553203][T16697] netlink: 'syz.0.3172': attribute type 3 has an invalid length. [ 325.582722][T16700] ipt_rpfilter: unknown options [ 325.629116][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.729013][T16700] bridge_slave_0: invalid flags given to default FDB implementation [ 326.087600][T16727] xt_socket: unknown flags 0x50 [ 326.129012][T16727] netlink: 'syz.1.3178': attribute type 2 has an invalid length. [ 326.154213][T16727] netlink: 'syz.1.3178': attribute type 8 has an invalid length. [ 326.174166][T16727] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3178'. [ 326.376903][T16734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.763343][ T12] erspan0 (unregistering): left promiscuous mode [ 326.891934][ T5842] Bluetooth: hci1: command tx timeout [ 327.239554][ T12] bond0 (unregistering): Released all slaves [ 327.357015][ T12] bond1 (unregistering): Released all slaves [ 327.375758][ T12] bond2 (unregistering): Released all slaves [ 327.482494][ T12] bond3 (unregistering): Released all slaves [ 327.498908][ T12] bond4 (unregistering): Released all slaves [ 327.620506][ T12] bond5 (unregistering): Released all slaves [ 327.636923][ T12] bond6 (unregistering): Released all slaves [ 327.659297][T16656] vxcan1 speed is unknown, defaulting to 1000 [ 327.793665][ T12] : left promiscuous mode [ 327.827618][T16761] openvswitch: netlink: Key type 6672 is out of range max 32 [ 328.039892][ T12] tipc: Left network mode [ 328.542890][T16800] ipt_REJECT: TCP_RESET invalid for non-tcp [ 328.752192][T16786] "syz.0.3193" (16786) uses obsolete ecb(arc4) skcipher [ 328.960652][ T5842] Bluetooth: hci1: command tx timeout [ 329.023958][T16656] chnl_net:caif_netlink_parms(): no params data found [ 329.776399][T16832] __nla_validate_parse: 7 callbacks suppressed [ 329.776418][T16832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3201'. [ 329.823310][T16832] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3201'. [ 329.918961][T16656] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.933618][T16656] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.946754][T16656] bridge_slave_0: entered allmulticast mode [ 329.967759][T16656] bridge_slave_0: entered promiscuous mode [ 329.977007][T16656] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.993418][T16656] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.005302][T16656] bridge_slave_1: entered allmulticast mode [ 330.018805][T16656] bridge_slave_1: entered promiscuous mode [ 330.073177][ T12] hsr_slave_0: left promiscuous mode [ 330.117705][ T12] veth1_macvtap: left promiscuous mode [ 330.127030][ T12] veth1_vlan: left promiscuous mode [ 330.137218][ T12] veth0_vlan: left promiscuous mode [ 330.333803][ T12] pim6reg (unregistering): left allmulticast mode [ 330.836655][T16861] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3208'. [ 331.040031][ T5842] Bluetooth: hci1: command tx timeout [ 331.595806][T16865] tipc: Enabling of bearer rejected, failed to enable media [ 331.698272][T16656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.740638][T16656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.765440][T16867] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3209'. [ 331.904028][T16656] team0: Port device team_slave_0 added [ 331.933972][T16656] team0: Port device team_slave_1 added [ 332.104989][T16656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.115340][T16656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.179063][T16656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.233367][T16656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.251973][T16656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.317302][T16656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.360246][T16894] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 332.370345][T16894] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3219'. [ 332.382106][T16893] mac80211_hwsim hwsim28 wlan1: left allmulticast mode [ 332.382308][ T12] IPVS: stop unused estimator thread 0... [ 332.539174][T16656] hsr_slave_0: entered promiscuous mode [ 332.558414][T16656] hsr_slave_1: entered promiscuous mode [ 332.572748][T16656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.584410][T16656] Cannot create hsr debugfs directory [ 332.590314][T16906] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3222'. [ 333.120621][ T5842] Bluetooth: hci1: command tx timeout [ 333.285253][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 333.469155][T16946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3234'. [ 333.635608][T16949] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3237'. [ 333.803310][T16958] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3239'. [ 333.976144][T16656] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 334.015568][T16656] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 334.025318][T16966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3242'. [ 334.046744][T16656] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 334.079769][T16656] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 334.221730][T16953] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 334.366755][T16983] netlink: 'syz.4.3245': attribute type 24 has an invalid length. [ 334.663082][T16656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.731885][T16656] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.794782][ T8027] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.802032][ T8027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.897855][ T8027] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.905101][ T8027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.195258][T17014] netlink: 'syz.4.3252': attribute type 1 has an invalid length. [ 335.212860][ T8016] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 335.325293][T17020] Bluetooth: MGMT ver 1.23 [ 335.493722][T17023] veth3: entered promiscuous mode [ 335.508191][T17025] netlink: 'syz.0.3255': attribute type 14 has an invalid length. [ 335.529538][T16988] vxcan1 speed is unknown, defaulting to 1000 [ 335.636736][T16656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.765955][T16656] veth0_vlan: entered promiscuous mode [ 335.797595][T16656] veth1_vlan: entered promiscuous mode [ 335.971143][T16656] veth0_macvtap: entered promiscuous mode [ 336.012513][T16656] veth1_macvtap: entered promiscuous mode [ 336.096563][T16656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.143011][T16656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.173454][T16656] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.195314][T16656] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.207199][T16656] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.216425][T16656] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.262740][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3265'. [ 336.354395][T17063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3266'. [ 336.500556][T17066] netlink: 'syz.3.3267': attribute type 1 has an invalid length. [ 336.754908][T17075] netlink: 'syz.3.3270': attribute type 11 has an invalid length. [ 336.769985][ T8027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.777853][ T8027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.785597][T17075] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3270'. [ 336.992578][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.015822][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.166165][T17088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3273'. [ 337.534983][T17104] ªªªªªª†³?ÂHº: renamed from lo (while UP) [ 337.595274][T17106] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3277'. [ 337.667342][T17106] netlink: 'syz.4.3277': attribute type 9 has an invalid length. [ 337.799480][T17112] netlink: 'syz.0.3280': attribute type 29 has an invalid length. [ 337.830583][T17112] netlink: 'syz.0.3280': attribute type 29 has an invalid length. [ 338.405310][T17129] openvswitch: netlink: Tunnel attr 47 out of range max 16 [ 338.502750][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.515212][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.530343][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.538617][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 338.546461][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.610042][T17130] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.618876][T17130] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.627893][T17130] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.636690][T17130] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.659235][T17130] vxlan0: entered promiscuous mode [ 338.664615][T17130] vxlan0: entered allmulticast mode [ 338.913244][T17141] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 338.972382][T17141] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3290'. [ 338.991822][T17141] hsr_slave_0: left promiscuous mode [ 339.049591][T17141] hsr_slave_1: left promiscuous mode [ 339.088586][T17146] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3291'. [ 339.417857][T17162] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3297'. [ 339.476428][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3299'. [ 339.585543][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3299'. [ 339.683793][T17177] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 339.694982][T17179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.755446][T17131] vxcan1 speed is unknown, defaulting to 1000 [ 339.790982][T17181] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 340.547825][T17221] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 340.561987][ T5852] Bluetooth: hci3: command tx timeout [ 340.992610][T17131] chnl_net:caif_netlink_parms(): no params data found [ 341.311929][T17131] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.326914][T17131] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.334837][T17131] bridge_slave_0: entered allmulticast mode [ 341.349048][T17131] bridge_slave_0: entered promiscuous mode [ 341.369327][T17131] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.378973][T17131] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.394553][T17131] bridge_slave_1: entered allmulticast mode [ 341.405355][T17131] bridge_slave_1: entered promiscuous mode [ 341.503643][T17259] __nla_validate_parse: 5 callbacks suppressed [ 341.503664][T17259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3323'. [ 341.529614][T17259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3323'. [ 341.538629][T17259] netlink: 'syz.4.3323': attribute type 11 has an invalid length. [ 341.568004][T17131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.616579][T17131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.774766][T17268] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3327'. [ 341.788059][T17131] team0: Port device team_slave_0 added [ 341.805291][T17269] syzkaller1: entered promiscuous mode [ 341.811071][T17269] syzkaller1: entered allmulticast mode [ 341.830849][T17131] team0: Port device team_slave_1 added [ 342.032436][T17131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.048973][T17131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.077550][T17283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'. [ 342.088029][T17131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.135537][T17131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.143204][T17131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.171362][T17281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3330'. [ 342.181394][T17131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.220258][T17291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3330'. [ 342.324313][T17294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.339940][T17295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3335'. [ 342.405894][T17131] hsr_slave_0: entered promiscuous mode [ 342.424128][T17131] hsr_slave_1: entered promiscuous mode [ 342.432405][T17131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.444004][T17131] Cannot create hsr debugfs directory [ 342.611087][T17305] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3338'. [ 342.628362][T17307] netlink: 'syz.0.3339': attribute type 4 has an invalid length. [ 342.640806][ T5852] Bluetooth: hci3: command tx timeout [ 342.850172][T17313] nbd: socks must be embedded in a SOCK_ITEM attr [ 343.287706][T17322] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3342'. [ 343.312008][T17322] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3342'. [ 343.373304][T17328] dvmrp0: entered allmulticast mode [ 343.378846][T17131] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 343.418325][T17328] dvmrp0: left allmulticast mode [ 343.513321][T17131] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 343.542901][T17131] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 343.585018][T17131] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 343.761474][T17328] syzkaller0: entered promiscuous mode [ 343.767017][T17328] syzkaller0: entered allmulticast mode [ 343.934404][T17131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.996023][T17131] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.056139][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.063425][ T8037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.202630][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.209899][ T8037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.347750][T17373] netlink: 'syz.1.3354': attribute type 3 has an invalid length. [ 344.378636][T17374] netlink: 'syz.1.3354': attribute type 3 has an invalid length. [ 344.409959][T17370] tipc: Started in network mode [ 344.414898][T17370] tipc: Node identity ce5961754802, cluster identity 4711 [ 344.423770][T17370] tipc: Enabled bearer , priority 0 [ 344.554551][T17370] syzkaller0: entered promiscuous mode [ 344.561002][T17370] syzkaller0: entered allmulticast mode [ 344.577551][T17370] tipc: Resetting bearer [ 344.719826][ T5852] Bluetooth: hci3: command tx timeout [ 344.809019][T17369] tipc: Resetting bearer [ 345.549816][T15489] tipc: Node number set to 2254135669 [ 346.505881][T17369] tipc: Disabling bearer [ 346.515148][T17342] vxcan1 speed is unknown, defaulting to 1000 [ 346.638465][T17131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.809873][ T5852] Bluetooth: hci3: command tx timeout [ 346.823221][T17131] veth0_vlan: entered promiscuous mode [ 346.873099][T17131] veth1_vlan: entered promiscuous mode [ 347.073380][T17419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.092043][T17412] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.116858][T17415] __nla_validate_parse: 3 callbacks suppressed [ 347.116884][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'. [ 347.238408][T17421] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3365'. [ 347.253390][T17412] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.290004][T17424] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3366'. [ 347.434217][T17412] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.548199][T17131] veth0_macvtap: entered promiscuous mode [ 347.587030][T17434] syzkaller1: entered promiscuous mode [ 347.609716][T17434] syzkaller1: entered allmulticast mode [ 347.678943][T17412] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.854703][T17131] veth1_macvtap: entered promiscuous mode [ 347.952917][T17131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.006015][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.023624][T17448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3373'. [ 348.046756][T17412] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.102540][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3373'. [ 348.103423][T17412] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.137324][T17448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3373'. [ 348.202938][T17412] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.231804][T17453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3374'. [ 348.262759][T17131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.344937][T17412] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.490319][T17131] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.519912][T17131] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.548066][T17131] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.573348][T17131] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.696258][T17466] sctp: [Deprecated]: syz.1.3378 (pid 17466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.696258][T17466] Use struct sctp_sack_info instead [ 348.826289][T17470] xt_hashlimit: size too large, truncated to 1048576 [ 348.850525][T17469] xt_hashlimit: size too large, truncated to 1048576 [ 348.949876][ T30] audit: type=1800 audit(1749747468.577:6): pid=17475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3381" name="memory.events" dev="tmpfs" ino=590 res=0 errno=0 [ 348.992362][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.027162][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.056527][ T30] audit: type=1804 audit(1749747468.577:7): pid=17475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3381" name="/newroot/113/memory.events" dev="tmpfs" ino=590 res=1 errno=0 [ 349.193348][ T8037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.222760][ T8037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.326384][T17497] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3385'. [ 349.692248][T17517] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3389'. [ 349.741348][T17497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.760029][T17497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.772261][T17497] bond0 (unregistering): Released all slaves [ 349.855634][T17519] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 349.990451][T17527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3394'. [ 350.165384][T17536] sock: sock_set_timeout: `syz.1.3398' (pid 17536) tries to set negative timeout [ 350.242494][T17543] bond0: option ad_select: unable to set because the bond device is up [ 350.746233][T17565] netlink: 'syz.1.3406': attribute type 1 has an invalid length. [ 350.850320][T17567] netlink: 'syz.1.3407': attribute type 1 has an invalid length. [ 350.998555][T17571] netlink: 'syz.1.3409': attribute type 1 has an invalid length. [ 351.202122][T17579] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 351.284770][T17579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.345323][T17587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.370081][T17587] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 351.401148][T17587] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 351.435649][T17586] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 351.443674][ T24] IPVS: starting estimator thread 0... [ 351.511832][T17579] veth3: entered promiscuous mode [ 351.527972][T17579] bond1: (slave veth3): Enslaving as an active interface with a down link [ 351.550405][T17594] IPVS: using max 25 ests per chain, 60000 per kthread [ 351.560930][T17593] vlan2: entered allmulticast mode [ 351.566139][T17593] bond1: entered allmulticast mode [ 351.720020][T17603] netlink: 'syz.0.3418': attribute type 5 has an invalid length. [ 351.794667][T17602] xt_CT: No such helper "snmp" [ 351.802563][T17609] Bluetooth: MGMT ver 1.23 [ 351.865527][T17608] xt_CT: No such helper "snmp" [ 351.986853][T17621] geneve2: entered promiscuous mode [ 352.221437][T17632] openvswitch: netlink: IP tunnel dst address not specified [ 352.326855][T17636] __nla_validate_parse: 13 callbacks suppressed [ 352.326875][T17636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3429'. [ 352.402846][T17646] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3430'. [ 352.412178][T17646] netem: invalid attributes len -24 [ 352.421169][T17646] netem: change failed [ 352.421298][T17636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3429'. [ 352.505605][T17600] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 352.522375][T17636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3429'. [ 352.645477][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3432'. [ 352.806065][T17665] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3434'. [ 353.014026][T17678] bridge0: port 3(vlan3) entered blocking state [ 353.023622][T17678] bridge0: port 3(vlan3) entered disabled state [ 353.042627][T17678] vlan3: entered allmulticast mode [ 353.048850][T17678] bond0: entered allmulticast mode [ 353.061508][T17688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3435'. [ 353.099620][T17678] bond_slave_0: entered allmulticast mode [ 353.105433][T17678] bond_slave_1: entered allmulticast mode [ 353.162775][T17692] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 353.172432][T17678] vlan3: entered promiscuous mode [ 353.177530][T17678] bond0: entered promiscuous mode [ 353.229540][T17678] bond_slave_0: entered promiscuous mode [ 353.260080][T17678] bond_slave_1: entered promiscuous mode [ 353.281537][T17682] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3435'. [ 353.291675][T17674] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3435'. [ 353.372282][T17697] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3443'. [ 353.598076][T17706] bridge: RTM_NEWNEIGH with invalid ether address [ 353.679828][ T5852] Bluetooth: hci1: command 0x0401 tx timeout [ 354.332701][T17732] netlink: 'syz.1.3453': attribute type 10 has an invalid length. [ 354.385417][T17667] vxcan1 speed is unknown, defaulting to 1000 [ 354.738001][T17744] C: renamed from lo (while UP) [ 355.266938][T17767] netlink: 'syz.1.3467': attribute type 1 has an invalid length. [ 355.288424][T17767] netlink: 'syz.1.3467': attribute type 23 has an invalid length. [ 355.534171][T17778] can: request_module (can-proto-0) failed. [ 355.851105][T17787] netlink: 'syz.4.3471': attribute type 1 has an invalid length. [ 355.877578][T17787] netlink: 'syz.4.3471': attribute type 1 has an invalid length. [ 355.897314][T17787] netlink: 'syz.4.3471': attribute type 2 has an invalid length. [ 356.043192][T17796] netlink: 'syz.1.3474': attribute type 1 has an invalid length. [ 356.080694][T17796] netlink: 'syz.1.3474': attribute type 2 has an invalid length. [ 356.093512][T17796] netlink: 'syz.1.3474': attribute type 2 has an invalid length. [ 356.122035][T17796] netlink: 'syz.1.3474': attribute type 2 has an invalid length. [ 356.504378][T17813] netlink: 'syz.4.3479': attribute type 12 has an invalid length. [ 356.536147][T17811] netlink: 'syz.4.3479': attribute type 12 has an invalid length. [ 356.565131][T17811] netlink: 'syz.4.3479': attribute type 21 has an invalid length. [ 356.593688][T17811] IPv6: NLM_F_CREATE should be specified when creating new route [ 356.804949][T17820] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 357.204991][T17832] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 357.219336][T17770] vxcan1 speed is unknown, defaulting to 1000 [ 357.248119][T17828] xt_CT: No such helper "snmp" [ 357.484158][T17842] sctp: [Deprecated]: syz.4.3488 (pid 17842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.484158][T17842] Use struct sctp_sack_info instead [ 357.958008][T17860] __nla_validate_parse: 17 callbacks suppressed [ 357.958027][T17860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3495'. [ 358.274457][T17878] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3502'. [ 358.302763][T17878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3502'. [ 358.507560][T17893] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3505'. [ 358.531344][T17892] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3504'. [ 358.936668][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3510'. [ 359.258757][T17917] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3512'. [ 359.597494][T17924] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3516'. [ 359.674007][T17929] netlink: 4504 bytes leftover after parsing attributes in process `syz.1.3518'. [ 360.214468][T17952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3526'. [ 360.466368][T17962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.357623][T18001] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.379206][T18001] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.402056][T18006] validate_nla: 5 callbacks suppressed [ 361.402092][T18006] netlink: 'syz.1.3538': attribute type 16 has an invalid length. [ 361.416068][T18006] netlink: 'syz.1.3538': attribute type 17 has an invalid length. [ 361.493811][T18012] netlink: 'syz.3.3543': attribute type 1 has an invalid length. [ 361.519763][T18012] netlink: 'syz.3.3543': attribute type 1 has an invalid length. [ 361.638703][T18006] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.646078][T18006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.689813][T18006] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.697106][T18006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.930255][T18039] geneve2: entered promiscuous mode [ 362.058245][T18042] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.965794][T18074] hsr_slave_0: left promiscuous mode [ 362.976158][T18074] hsr_slave_1: left promiscuous mode [ 363.062096][T18050] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 363.118785][T18084] netlink: 'syz.1.3561': attribute type 16 has an invalid length. [ 363.127270][T18084] netlink: 'syz.1.3561': attribute type 17 has an invalid length. [ 363.389924][T18095] netlink: 'syz.0.3565': attribute type 3 has an invalid length. [ 363.551352][T18106] syzkaller1: entered promiscuous mode [ 363.557217][T18106] syzkaller1: entered allmulticast mode [ 363.695082][T18118] __nla_validate_parse: 8 callbacks suppressed [ 363.695100][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3571'. [ 363.992365][T18135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3576'. [ 364.025918][T18135] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 364.083901][T18143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3576'. [ 364.114814][T18143] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 364.234287][T18151] 8021q: VLANs not supported on gre0 [ 364.308839][T18157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3583'. [ 364.329526][ T5852] Bluetooth: hci1: command 0x0401 tx timeout [ 364.431185][T18163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3584'. [ 364.574435][T18174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3585'. [ 364.583356][T18177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3586'. [ 364.587608][T18177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3586'. [ 364.623487][T18176] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3587'. [ 364.629661][T18174] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 364.677857][T18174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.288827][ T8018] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 365.364809][T18216] netlink: 'syz.0.3597': attribute type 10 has an invalid length. [ 365.392307][T18216] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3597'. [ 365.533569][T18218] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.606554][T18218] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.678474][T18216] team0: Port device geneve0 added [ 365.698496][T18222] netlink: 'syz.1.3600': attribute type 25 has an invalid length. [ 365.784605][T18218] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.796233][T18218] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.036302][T18207] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 366.055403][T18218] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.068588][T18218] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.195662][T18218] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.219779][T18218] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.354988][T18218] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.387750][T18218] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.462861][T18218] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.471738][T18218] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.509132][T18218] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.528629][T18218] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.561813][ T8027] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 366.606155][T18218] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.633856][T18218] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.679620][T18268] batadv_slave_0: entered promiscuous mode [ 367.369553][ T5852] Bluetooth: hci4: command 0x0401 tx timeout [ 367.668090][T18270] vxcan1 speed is unknown, defaulting to 1000 [ 367.904769][T18320] tipc: Started in network mode [ 367.929558][T18320] tipc: Node identity 4, cluster identity 292 [ 367.943076][T18320] tipc: Node number set to 4 [ 367.959731][T18324] tipc: Enabling of bearer rejected, failed to enable media [ 368.458551][T18346] Cannot find del_set index 4 as target [ 368.476254][T18346] netlink: ct family unspecified [ 368.525353][T18346] openvswitch: netlink: Actions may not be safe on all matching packets [ 369.176636][T18384] __nla_validate_parse: 3 callbacks suppressed [ 369.176657][T18384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3643'. [ 369.193145][T18384] netlink: 300 bytes leftover after parsing attributes in process `syz.3.3643'. [ 369.249853][T18392] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3646'. [ 370.118843][T18437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3658'. [ 370.407310][T18445] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3662'. [ 370.765188][T18465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.865412][T18467] x_tables: duplicate underflow at hook 1 [ 371.232703][T18490] netlink: 'syz.0.3676': attribute type 1 has an invalid length. [ 371.313619][T18490] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3676'. [ 371.513168][T18497] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 371.907849][T18521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3685'. [ 372.217095][T18532] xt_cgroup: path and classid specified [ 372.347059][T18538] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3692'. [ 372.478346][T18545] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3695'. [ 372.754424][T18559] netlink: 'syz.4.3697': attribute type 1 has an invalid length. [ 372.789053][T18564] x_tables: duplicate underflow at hook 2 [ 372.844084][T18559] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 372.867732][T18561] netlink: 166528 bytes leftover after parsing attributes in process `syz.3.3700'. [ 373.129256][T18577] xt_cluster: node mask cannot exceed total number of nodes [ 373.626748][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 373.965023][T18618] gre1: entered promiscuous mode [ 373.991841][T18618] gre1: entered allmulticast mode [ 374.040301][T18632] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.047844][T18632] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.331381][T18646] __nla_validate_parse: 4 callbacks suppressed [ 374.331400][T18646] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3723'. [ 374.360683][T18651] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 374.379607][T18646] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3723'. [ 374.452655][T18646] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3723'. [ 374.495914][T18646] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3723'. [ 374.554920][T18646] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3723'. [ 374.580956][T18646] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3723'. [ 374.660999][T18646] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3723'. [ 374.695048][T18646] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3723'. [ 374.735834][T18646] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3723'. [ 374.767323][T18646] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3723'. [ 375.211529][T18706] gretap0: entered promiscuous mode [ 375.214964][T18705] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 375.232835][T18713] netlink: 'syz.0.3742': attribute type 2 has an invalid length. [ 375.259276][T18713] netlink: 'syz.0.3742': attribute type 1 has an invalid length. [ 375.287682][T18714] netlink: 'syz.0.3742': attribute type 2 has an invalid length. [ 375.317452][T18714] netlink: 'syz.0.3742': attribute type 1 has an invalid length. [ 375.564219][T18734] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 375.981519][T18756] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 376.076712][T18764] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 376.121807][T18764] 0ªî{X¹¦: entered allmulticast mode [ 376.161646][T18764] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 376.440670][T18778] netlink: 'syz.0.3758': attribute type 21 has an invalid length. [ 376.454260][T18778] netlink: 'syz.0.3758': attribute type 6 has an invalid length. [ 376.603269][T18785] netlink: 'syz.2.3761': attribute type 1 has an invalid length. [ 377.220821][T18814] netlink: 'syz.0.3770': attribute type 33 has an invalid length. [ 377.629828][T18833] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 377.819041][T18848] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 378.034597][T18857] netlink: 'syz.2.3786': attribute type 62 has an invalid length. [ 378.397497][T18870] bond1: entered promiscuous mode [ 378.402994][T18870] bond1: entered allmulticast mode [ 378.410425][T18870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.676683][T18892] siw: device registration error -23 [ 378.729312][T18893] xt_CONNSECMARK: invalid mode: 0 [ 379.283596][T18936] macvtap1: entered promiscuous mode [ 379.300090][T18936] vlan0: entered promiscuous mode [ 379.316220][T18936] macvtap1: entered allmulticast mode [ 379.325301][T18936] vlan0: entered allmulticast mode [ 379.334570][T18936] veth0_vlan: entered allmulticast mode [ 379.355794][T18938] __nla_validate_parse: 18 callbacks suppressed [ 379.355812][T18938] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3813'. [ 379.362503][T18936] vlan0: left allmulticast mode [ 379.362534][T18936] veth0_vlan: left allmulticast mode [ 379.362554][T18936] vlan0: left promiscuous mode [ 379.384595][T18942] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3815'. [ 379.524294][T18945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3816'. [ 379.538199][T18943] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3815'. [ 379.554971][T18943] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3815'. [ 379.574936][T18943] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 379.619154][T18950] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 379.737972][T18952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.757022][T18954] x_tables: unsorted underflow at hook 1 [ 379.873753][T18960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3820'. [ 380.084357][T18969] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3825'. [ 380.838891][T19007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.903072][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3834'. [ 380.945856][T19011] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3836'. [ 380.955822][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3834'. [ 380.970665][T19007] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.978354][T19007] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.546212][T19046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 381.790307][T19060] geneve2: entered promiscuous mode [ 381.795591][T19060] geneve2: entered allmulticast mode [ 381.845550][T19063] syzkaller1: entered promiscuous mode [ 381.851323][T19063] syzkaller1: entered allmulticast mode [ 381.948781][T19065] syz_tun: entered allmulticast mode [ 381.965074][T19067] netlink: 'syz.1.3858': attribute type 3 has an invalid length. [ 382.713473][T19064] syz_tun: left allmulticast mode [ 383.154427][T19127] netlink: 'syz.1.3876': attribute type 26 has an invalid length. [ 383.343138][T19138] bridge_slave_0: default FDB implementation only supports local addresses [ 383.428863][T19073] geneve2: entered promiscuous mode [ 383.482766][T19138] netlink: 'syz.4.3878': attribute type 10 has an invalid length. [ 383.511267][T19138] bridge0: port 3(dummy0) entered blocking state [ 383.517800][T19138] bridge0: port 3(dummy0) entered forwarding state [ 383.525832][T19138] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.533065][T19138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.540626][T19138] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.543877][T19141] netlink: 'syz.4.3878': attribute type 1 has an invalid length. [ 383.547830][T19138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.607302][T19138] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 384.028463][T19163] IPv4: Oversized IP packet from 127.202.26.0 [ 384.115927][T19072] vxcan1 speed is unknown, defaulting to 1000 [ 384.383582][T19177] xt_socket: unknown flags 0x3c [ 384.423782][T19177] netlink: 'syz.2.3890': attribute type 15 has an invalid length. [ 384.461305][T19177] __nla_validate_parse: 15 callbacks suppressed [ 384.461326][T19177] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3890'. [ 384.555539][T19185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3892'. [ 384.609196][T19185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3892'. [ 384.715831][T19191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.793727][T19217] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3904'. [ 385.818699][T19217] netlink: zone id is out of range [ 385.836932][T19217] netlink: get zone limit has 8 unknown bytes [ 385.880345][T19219] syzkaller1: entered promiscuous mode [ 385.885911][T19219] syzkaller1: entered allmulticast mode [ 386.007218][T19227] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 386.055644][T19228] Dead loop on virtual device ip6_vti0, fix it urgently! [ 386.331077][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3909'. [ 386.370469][T19233] netlink: 'syz.3.3910': attribute type 33 has an invalid length. [ 386.524769][T19239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3911'. [ 386.556688][T19239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3911'. [ 386.848865][T19253] netlink: 'syz.4.3914': attribute type 1 has an invalid length. [ 386.987737][T19263] vlan0: entered promiscuous mode [ 386.993375][T19263] bridge0: entered promiscuous mode [ 387.528995][T19293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3926'. [ 387.682571][T19299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3928'. [ 387.830032][T19299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3928'. [ 389.141280][T19373] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 389.168302][T19374] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 389.692204][T19370] vxcan1 speed is unknown, defaulting to 1000 [ 389.694960][T19396] __nla_validate_parse: 12 callbacks suppressed [ 389.694981][T19396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3952'. [ 390.449269][T19427] Cannot find add_set index 0 as target [ 390.819337][T19443] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3964'. [ 391.093150][T19447] netlink: 'syz.3.3965': attribute type 1 has an invalid length. [ 391.110172][T19447] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3965'. [ 391.661697][T19467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3971'. [ 391.732353][T19469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3970'. [ 391.755435][T19471] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3972'. [ 391.847969][T19471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3972'. [ 391.858761][T19469] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3970'. [ 391.900288][T19469] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3970'. [ 391.956301][T19469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3970'. [ 392.087685][T19484] netlink: 'syz.4.3977': attribute type 1 has an invalid length. [ 392.151638][T19481] sit0: entered promiscuous mode [ 392.201047][T19481] netlink: 'syz.1.3975': attribute type 1 has an invalid length. [ 392.677706][T19521] netlink: 'syz.0.3986': attribute type 1 has an invalid length. [ 393.513102][T19560] vlan2: entered promiscuous mode [ 393.557300][T19560] bridge0: entered promiscuous mode [ 393.653465][T19543] vxcan1 speed is unknown, defaulting to 1000 [ 393.943413][T19578] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 394.444335][T19591] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20000 [ 395.024492][T19611] __nla_validate_parse: 5 callbacks suppressed [ 395.024513][T19611] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4013'. [ 395.387318][T19617] netlink: 548 bytes leftover after parsing attributes in process `syz.4.4015'. [ 395.449138][T19621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4015'. [ 395.640544][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4018'. [ 395.740753][T19631] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 395.857768][T19639] netlink: 'syz.4.4022': attribute type 11 has an invalid length. [ 396.004388][T19641] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 396.021144][T19643] netlink: 'syz.2.4024': attribute type 10 has an invalid length. [ 396.081562][T19648] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4025'. [ 396.137303][T19651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4026'. [ 396.229231][T19651] ip6gre1: entered allmulticast mode [ 396.323616][T19662] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 396.332621][T19662] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 396.745039][T19683] veth1_macvtap: left promiscuous mode [ 396.836625][T19688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4036'. [ 397.281546][ T8017] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 397.312081][ T8017] ------------[ cut here ]------------ [ 397.324089][ T8017] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 397.349251][ T8017] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 397.358011][T19712] netlink: 'syz.0.4042': attribute type 3 has an invalid length. [ 397.396990][ T8017] CPU: 0 UID: 0 PID: 8017 Comm: kworker/u8:18 Not tainted 6.15.0-syzkaller-12458-g27cea0e419d2 #0 PREEMPT(full) [ 397.397023][ T8017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.397036][ T8017] Workqueue: events_unbound cfg80211_wiphy_work [ 397.397088][ T8017] Call Trace: [ 397.397097][ T8017] [ 397.397106][ T8017] dump_stack_lvl+0x189/0x250 [ 397.397144][ T8017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.397175][ T8017] ? __pfx__printk+0x10/0x10 [ 397.397212][ T8017] ubsan_epilogue+0xa/0x40 [ 397.397234][ T8017] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 397.397275][ T8017] ieee80211_request_ibss_scan+0x600/0x8b0 [ 397.397318][ T8017] ieee80211_ibss_work+0xd85/0x1060 [ 397.397343][ T8017] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.397369][ T8017] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 397.397393][ T8017] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 397.397418][ T8017] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 397.397449][ T8017] ? skb_dequeue+0x10e/0x150 [ 397.397474][ T8017] ? ieee80211_iface_work+0xcdb/0xfe0 [ 397.397513][ T8017] ? ieee80211_iface_work+0xf39/0xfe0 [ 397.397542][ T8017] ? rcu_is_watching+0x15/0xb0 [ 397.397568][ T8017] cfg80211_wiphy_work+0x2df/0x460 [ 397.397599][ T8017] ? process_scheduled_works+0x9ef/0x17b0 [ 397.397633][ T8017] process_scheduled_works+0xae1/0x17b0 [ 397.397695][ T8017] ? __pfx_process_scheduled_works+0x10/0x10 [ 397.397745][ T8017] worker_thread+0x8a0/0xda0 [ 397.397795][ T8017] kthread+0x70e/0x8a0 [ 397.397831][ T8017] ? __pfx_worker_thread+0x10/0x10 [ 397.397850][ T8017] ? __pfx_kthread+0x10/0x10 [ 397.397876][ T8017] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.397897][ T8017] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.397920][ T8017] ? __pfx_kthread+0x10/0x10 [ 397.397944][ T8017] ret_from_fork+0x3f9/0x770 [ 397.397976][ T8017] ? __pfx_ret_from_fork+0x10/0x10 [ 397.398015][ T8017] ? __switch_to_asm+0x39/0x70 [ 397.398033][ T8017] ? __switch_to_asm+0x33/0x70 [ 397.398050][ T8017] ? __pfx_kthread+0x10/0x10 [ 397.398072][ T8017] ret_from_fork_asm+0x1a/0x30 [ 397.398109][ T8017] [ 397.423813][T19712] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4042'. [ 397.428733][ T8017] ---[ end trace ]--- [ 397.455146][T19712] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4042'. [ 397.457125][ T8017] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 397.457144][ T8017] CPU: 0 UID: 0 PID: 8017 Comm: kworker/u8:18 Not tainted 6.15.0-syzkaller-12458-g27cea0e419d2 #0 PREEMPT(full) [ 397.457168][ T8017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.457186][ T8017] Workqueue: events_unbound cfg80211_wiphy_work [ 397.457230][ T8017] Call Trace: [ 397.457242][ T8017] [ 397.457252][ T8017] dump_stack_lvl+0x99/0x250 [ 397.457294][ T8017] ? __asan_memcpy+0x40/0x70 [ 397.457329][ T8017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.457368][ T8017] ? __pfx__printk+0x10/0x10 [ 397.457412][ T8017] panic+0x2db/0x790 [ 397.457464][ T8017] ? __pfx_panic+0x10/0x10 [ 397.457495][ T8017] ? _printk+0xcf/0x120 [ 397.457525][ T8017] ? __pfx__printk+0x10/0x10 [ 397.457562][ T8017] check_panic_on_warn+0x89/0xb0 [ 397.457594][ T8017] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 397.457641][ T8017] ieee80211_request_ibss_scan+0x600/0x8b0 [ 397.457689][ T8017] ieee80211_ibss_work+0xd85/0x1060 [ 397.457719][ T8017] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.457749][ T8017] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 397.457779][ T8017] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 397.457807][ T8017] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 397.457852][ T8017] ? skb_dequeue+0x10e/0x150 [ 397.457883][ T8017] ? ieee80211_iface_work+0xcdb/0xfe0 [ 397.457917][ T8017] ? ieee80211_iface_work+0xf39/0xfe0 [ 397.457951][ T8017] ? rcu_is_watching+0x15/0xb0 [ 397.457979][ T8017] cfg80211_wiphy_work+0x2df/0x460 [ 397.458015][ T8017] ? process_scheduled_works+0x9ef/0x17b0 [ 397.458054][ T8017] process_scheduled_works+0xae1/0x17b0 [ 397.458125][ T8017] ? __pfx_process_scheduled_works+0x10/0x10 [ 397.458182][ T8017] worker_thread+0x8a0/0xda0 [ 397.458237][ T8017] kthread+0x70e/0x8a0 [ 397.458267][ T8017] ? __pfx_worker_thread+0x10/0x10 [ 397.458289][ T8017] ? __pfx_kthread+0x10/0x10 [ 397.458318][ T8017] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.458345][ T8017] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.458373][ T8017] ? __pfx_kthread+0x10/0x10 [ 397.458401][ T8017] ret_from_fork+0x3f9/0x770 [ 397.458437][ T8017] ? __pfx_ret_from_fork+0x10/0x10 [ 397.458478][ T8017] ? __switch_to_asm+0x39/0x70 [ 397.458499][ T8017] ? __switch_to_asm+0x33/0x70 [ 397.458520][ T8017] ? __pfx_kthread+0x10/0x10 [ 397.458549][ T8017] ret_from_fork_asm+0x1a/0x30 [ 397.458594][ T8017] [ 397.462993][ T8017] Kernel Offset: disabled