last executing test programs: 4m53.729100679s ago: executing program 0 (id=5725): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x3, @local, 0x5}}, 0x5, 0xeeeb, 0x80, 0x4, 0x1, 0xd, 0x2}, &(0x7f0000000580)=0x9c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000005c0)={r2, 0xf}, &(0x7f0000000600)=0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x148, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d8, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x800, 0x1}, {0x3, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @iptfs_pkt_size={0x8, 0x29, 0x100}]}, 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x3, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x5, @remote, 0x441, 0x2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14"], 0x18}, 0xc800) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r7, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2, 0x0) sendto(r6, 0x0, 0x0, 0x20000044, 0x0, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xfff2, 0xf}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x1}}]}}]}, 0x40}}, 0x4c800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000380)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000640)=0x20) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000240)=0x7, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x8, 0x0, {{0x16, 0x4, 0x2, 0x0, 0x58, 0x68, 0x0, 0x5c, 0x2f, 0x0, @multicast2, @loopback, {[@ssrr={0x89, 0x1b, 0xba, [@remote, @private=0xa010101, @remote, @rand_addr=0x64010102, @empty, @multicast1]}, @ssrr={0x89, 0x7, 0x97, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x8b, 0x3, 0x8, [{@local, 0x10001}]}, @lsrr={0x83, 0x13, 0x80, [@multicast1, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv4_getaddr={0x18, 0x16, 0xb1a, 0x70bd2b, 0x25dfdbfb, {0x2, 0x40, 0xc0, 0x0, r11}}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 4m52.637554847s ago: executing program 0 (id=5733): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) (async) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000600)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_bpf={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x6, 0x4, 0x0, 0x2, 0x5775d27c, 0x158, 0x20100}, 0x20) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001800010000000000800000000200000000000006000000000600150004000000100016800c00088008000180"], 0x34}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040007"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 4m52.23288632s ago: executing program 0 (id=5734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r3, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fbdbdf2501000000080002000100000008000100", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x4000014) 4m51.745802909s ago: executing program 0 (id=5742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040000d604"], 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xf, 0x0, &(0x7f0000000080)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000420001000000000000000000030100000f0000007d00010000112233445566778899aabb86dd2c00001c00ff840001110000010101010253aa58fe6cbdf035bc6eae44132403b1fd606412c3258e6248ffa62e9e156d23cfd72ddb80723d4613dc929cbc86ba94e0cd05c4a639eee919c4b391a38f086b58225d45c1b4106bb4754aebb15e0feff76718ef7ff9be52ec9c00000004000280040003"], 0xa0}}, 0x0) 4m51.2876063s ago: executing program 0 (id=5744): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r1, &(0x7f00000000c0)='\').-\xf8*^#)\x00', 0x204000, &(0x7f0000000100)={@align=0xffffffffffffff81, {0x101, 0x1, 0x9, 0x7fffffffffffffff}}, 0x8, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x4000}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x18}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xefd5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044844}, 0x1) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1e4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1e4}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x6a, '\x00', 0x0, r2, 0x5, 0x3, 0x5}, 0x50) ioctl$XFS_IOC_READLINK_BY_HANDLE(r4, 0xc038586c, &(0x7f00000007c0)={r2, &(0x7f00000006c0)='macvlan0\x00', 0x20040, &(0x7f0000000700)={@_ha_fsid={[0x2, 0x40]}, {0x9fd, 0x3, 0x8fc4, 0x6}}, 0x2be, &(0x7f0000000740), &(0x7f0000000780)=0x2}) recvmmsg(r1, &(0x7f0000004380)=[{{&(0x7f0000000800)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000880)=""/41, 0x29}, {&(0x7f00000008c0)=""/239, 0xef}, {&(0x7f00000009c0)=""/60, 0x3c}, {&(0x7f0000000a00)=""/125, 0x7d}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x6, &(0x7f0000001b40)=""/2, 0x2}, 0x4}, {{&(0x7f0000001b80)=@pppoe, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001c00)=""/174, 0xae}, {&(0x7f0000001cc0)=""/85, 0x55}, {&(0x7f0000001d40)=""/253, 0xfd}], 0x3, &(0x7f0000001e80)=""/179, 0xb3}, 0xc38}, {{&(0x7f0000001f40), 0x80, &(0x7f0000002200)=[{&(0x7f0000001fc0)=""/136, 0x88}, {&(0x7f0000002080)=""/12, 0xc}, {&(0x7f00000020c0)}, {&(0x7f0000002100)=""/254, 0xfe}], 0x4, &(0x7f0000002240)=""/161, 0xa1}, 0x5}, {{&(0x7f0000002300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002480)=[{&(0x7f0000002380)=""/25, 0x19}, {&(0x7f00000023c0)=""/168, 0xa8}], 0x2, &(0x7f00000024c0)=""/153, 0x99}, 0x5}, {{&(0x7f0000002580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002600)=""/173, 0xad}], 0x1, &(0x7f0000002700)=""/169, 0xa9}, 0x8}, {{&(0x7f00000027c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002840)=""/158, 0x9e}], 0x1, &(0x7f0000002940)=""/189, 0xbd}, 0xffff}, {{&(0x7f0000002a00)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000002a80), 0x0, &(0x7f0000002ac0)=""/9, 0x9}, 0x5}, {{&(0x7f0000002b00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000002b80)=""/39, 0x27}, {&(0x7f0000002bc0)=""/80, 0x50}, {&(0x7f0000002c40)=""/127, 0x7f}, {&(0x7f0000002cc0)=""/252, 0xfc}, {&(0x7f0000002dc0)=""/209, 0xd1}, {&(0x7f0000002ec0)=""/23, 0x17}, {&(0x7f0000002f00)=""/4096, 0x1000}], 0x7, &(0x7f0000003f80)=""/182, 0xb6}, 0x18ad}, {{&(0x7f0000004040)=@can={0x1d, 0x0}, 0x80, &(0x7f0000004340)=[{&(0x7f00000040c0)=""/69, 0x45}, {&(0x7f0000004140)=""/7, 0x7}, {&(0x7f0000004180)=""/224, 0xe0}, {&(0x7f0000004280)=""/176, 0xb0}], 0x4}, 0xc0}], 0x9, 0x40002102, &(0x7f00000045c0)={0x77359400}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000004600)={'bond_slave_1\x00', 0xc200}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004680), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000046c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000057c0)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005780)={&(0x7f0000004700)={0x105c, r6, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xffff, 0x56}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x1020, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4}, @NL80211_MESH_SETUP_IE={0x1004, 0x3, "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"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x105c}, 0x1, 0x0, 0x0, 0x801}, 0x4040080) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000005800)={'ip_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000005900)={&(0x7f0000005840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000058c0)={&(0x7f0000005880)={0x34, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x26}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "00924970259bf7d5850dbd4cc62152f9"}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x40) recvmsg(r0, &(0x7f0000006cc0)={&(0x7f0000005940)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000006c00)=[{&(0x7f00000059c0)}, {&(0x7f0000005a00)=""/4096, 0x1000}, {&(0x7f0000006a00)=""/50, 0x32}, {&(0x7f0000006a40)=""/134, 0x86}, {&(0x7f0000006b00)=""/125, 0x7d}, {&(0x7f0000006b80)=""/94, 0x5e}], 0x6, &(0x7f0000006c80)=""/62, 0x3e}, 0x8103) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000006d40), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r8, &(0x7f0000006e80)={&(0x7f0000006d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000006e40)={&(0x7f0000006d80)={0x90, r9, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x8}, @NFC_ATTR_VENDOR_DATA={0x72, 0x1f, "771cf2218f918f09a3cdb620e7f567902d4ef176c347e1ec40b925cf9c5b2a7a153adc6a3d9fb9929154b809c80aed911d95c4b7736df7652986a25dd001c0e17929854564b2d12aee189b29d8e86a5363bbd33b71a0b50c6489d8a8db145e405235e060a4ff091f7afaa3b3466d"}]}, 0x90}, 0x1, 0x0, 0x0, 0x10840}, 0x408c2) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000006ec0)=r2, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000006f00)) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000006f80), r8) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f0000007040)={&(0x7f0000006f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000007000)={&(0x7f0000006fc0)={0x38, r10, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000800}, 0x24000000) r11 = syz_genetlink_get_family_id$fou(&(0x7f00000070c0), r2) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000007180)={&(0x7f0000007080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000007140)={&(0x7f0000007100)={0x24, r11, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000001}, 0x4008080) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000007200)=@generic={&(0x7f00000071c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000007240)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0xd66, '\x00', 0x0, r2, 0x0, 0x1, 0x4}, 0x50) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000007380)={&(0x7f00000072c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000007340)={&(0x7f0000007300)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4080}, 0x24058054) 4m50.099259684s ago: executing program 0 (id=5756): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x28, 0x68, 0xefce5d6aba1cf00f, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m35.024131105s ago: executing program 32 (id=5756): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x28, 0x68, 0xefce5d6aba1cf00f, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.152095905s ago: executing program 4 (id=7607): unshare(0x4000400) (async) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) (async) bind$rds(r0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) 4.681033195s ago: executing program 4 (id=7611): r0 = socket$netlink(0x10, 0x3, 0x4) (async) r1 = socket(0x2d, 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x84}}, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r0}) 4.101725879s ago: executing program 4 (id=7616): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x240089c) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a000002005000500000000100000002601003e800000000010101", 0x2d}], 0x1, 0x0, 0x0) 3.988031763s ago: executing program 5 (id=7617): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xd95a89b6006d9ca0}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffd}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0xc010}, 0x80) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1e31cdcc917f6b3e}, 0x20000050) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000300)={0x4b0, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x444, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x44, 0xb, "247e902f97722fb24fc3e5c1780043a9455edeffc67c1f90ec0dfe7d9e32709c9f5b9f9ba5b4ba26f04d4a65f5c3f90a1ad7cb366e9063534386d1e1f9e1359e"}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xd0}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xe}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2c8, 0xd, 0x0, 0x1, [{0xe9, 0x0, "ebbc284e1e0807d6abc1ec0046dd6ca53727c51abd7235adc413ef8bff3ab654155494e72df1b81d5ad70b25e8cbe97797c8462b137267bc38d0d4d2233577157a1e5b47ea7a50b0c7334598c49b0e60dcf1058f5b84c00dec2844dd4a89b865a93bb8cd1c49800a5017d74284e7260f67d67e47c27e7991ae9ba9bc24301b383915f6a131eb5839de0c4913272a1a6b2ba96fef446e882e973b641d775f1f3c6d34fb7293230b01f2be945c16cee899adb9bd955205eebe3723ada8377e15fd946945a17e7304e2fba2b67e5a914151e7989f02543601afbcd2a416d06c3ab51c6c1d2865"}, {0xdd, 0x0, "8a97499c9e97e25dd7a55df97f5bbb3fa9e24c0bbe1d1cf8c0ba98d9e986116f24d4c75bbdf5fa5c63ffcaca951b8433b608c0d3df1b7304405fb171288eabcb3a6485d9716b43b52d164b8244702a0062e09f31fc2b04abaf28338a5fe4fc74b4988c5a0109177c75ce2b431cde0844b5d26c65e54bb5e140701eee8c333ef48d98bb7a12a2a667e596896264da2159d911eb2b3cf0eb43d0fe72193ae3a4d38cbb29ba71190c9a723c96fe390e28ed6187eb44e9d7d12a253e37811ad9095bfbce5ed3c19f900e3c31fc9773fe84b628eeb0a849a5bf6abd"}, {0xf5, 0x0, "631d9fbafef9a2bb521eb3557b5eeecd11ab11223feb31a5b8fb281b4379b591df5345d4c820302077956c61d2aaa6cb78a456aa2835a99c1481904842fd551ff761f364093d59088311bcb9c5b3b1b4bd7fff88270be18fd6f33d999d480aab2c6960beeebef1240ab8bc33b42182634467f5cf22db7a1f524f6a6426e76cfc4575d8f8e381c5dfc67648e8eae438dd485ff5d26f6c40ecc540cb93d6321ac8a0f444fcafd90b1d737bfbfde3539c51472d7f8cd371cf27f63a4f1288427fbfb12c7fc2ddd5a2d4b8326ee370dad673b479a6aff0a1d0eb3767e25cb6e6ae00426e852523faa5c6c9d7ba80c2f88e0601"}]}, @NL80211_NAN_FUNC_SRF={0x108, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x40, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x8}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x10}]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x1}, 0x4044000) r4 = socket(0x21, 0x6, 0x824) bind$bt_rfcomm(r4, &(0x7f0000000840)={0x1f, @any, 0x4}, 0xa) recvmsg(r4, &(0x7f0000000b40)={&(0x7f0000000880)=@sco, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000900)=""/181, 0xb5}, {&(0x7f00000009c0)=""/100, 0x64}], 0x2, &(0x7f0000000a80)=""/136, 0x88}, 0x40000002) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80c1}, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r4) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r6, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000110}, 0x40) r7 = accept(r4, &(0x7f0000000dc0)=@can={0x1d, 0x0}, &(0x7f0000000e40)=0x80) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x22}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', r8, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000001000)={0x0, r7, 0x91, 0xb, 0x1, 0x6}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001080), r5) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f00000010c0)={0xcc, r10, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2900000}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000001540)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001500)={&(0x7f00000012c0)={0x230, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ce3d72f093af2d73edbf3a328e975f7f54081ee30cea6743"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1f2fcec36136520be93de5271ea2a55bee8bd8823bca6f8f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7c84894d4fe9d9c8eebf7e362855e88011ac8b5977ea6125"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2204b8b3a145cd60c543000595053e7db3387e9cfa6dce91"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dbb26c76cba6b359c7acf661365342219edad6dfc0977d11"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b0d3a1d69f7e02d6232d125fb3f5c5f8fbe9333b64a0d92e"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0807b91d675b7caa9dd71699cea660c815248d16f8f952c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7413894a31a06dde80623fe822bd1c07cb9e442e7e45cb8c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68157804c0f8b42e116df8f55d463643bc871673b9520c32"}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "99b9273f2d82ced4c8c8ef4943b20e5817fcdf7050856c37"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1530b7e70f95590c5a845c3a1fcbed85d6d857c3e7832b38"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b85eae0cafcdb99c2af13a11040e949b8be9d88c8ebd349a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "16d1329bee6da79b15e2e0055b63b60b54fdf33fb435f234"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "44b9eb518acaa8f716023903f1098d801051cab24bcaee23"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f0ef5a8e6320581f0b81e887e73c0a812ffe41c950c6bd60"}]]}, 0x230}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000015c0), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x28, r12, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '+^!\x1a\xab'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000001900)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000018c0)={&(0x7f0000001700)={0x18c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20044840}, 0x4010) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r13, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x20, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008000}, 0x1) sendmsg$NFT_BATCH(r7, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x98}, 0x1, 0x0, 0x0, 0x400080c}, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r5) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x24, r14, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008005) 3.561075176s ago: executing program 5 (id=7619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmmsg(r5, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$packet(r4, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000140)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x0) write(r4, &(0x7f0000000000)="010000000000000020", 0x9) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_emit_ethernet(0x6a, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x8}}}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112b9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)={0x2a4, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast}, 0x0, @random=0x2000, 0xdb95, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x3, 0x8a0c692f155d2ed2}}, @void}}, @NL80211_ATTR_IE={0x15f, 0x2a, [@tim={0x5, 0xb7, {0x6e, 0x50, 0xc, "e48e21c473541a1d59297f169f779ba239f63c30ea5dffb7e7a13314eb383700a7ec1034a33b9f19d4d5f07cd58ae34f24c66d8f43e8664d912620f300f62cf919b14d12e54f64c6cf53571ec41100ef5147c364454bbbf24306a7a1b37df9f7dffb427b68f2d3924938121f520db173b5ce392511e1439ee672403ae7ff56b47b19f852c0022376e48b38224ed3460e3152cb20fc3f1ac68c95520475aae91c43fdf21cbc1b0361f93b239ce0e7c727e9b7241a"}}, @peer_mgmt={0x75, 0x16, {0x1, 0xfff, @val=0x1000, @void, @val="7ec21dd81fed16ca21d0a59fa5b56545"}}, @mesh_chsw={0x76, 0x6, {0x8, 0x6, 0x25, 0x400}}, @rann={0x7e, 0x15, {{0x0, 0x34}, 0xfb, 0x9, @device_a, 0x1, 0xc2b, 0x5}}, @random_vendor={0xdd, 0x66, "0de4b96dc788df1537422a19f1b7402f80bdc26228a128b1854bd5a09a5aebc0a261586b9c582daeddcd3a75a82f09f822358fc008d2f1823ab60147acc0156868e84427426dc665524f2867d1249c6e978e5999aadceec76b9519bfc3ebda89eb8cfa3cddb6"}, @challenge={0x10, 0x1, 0xd6}]}, @NL80211_ATTR_IE_PROBE_RESP={0xd9, 0x7f, [@channel_switch={0x25, 0x3, {0x1, 0xad, 0x24}}, @fast_bss_trans={0x37, 0xa4, {0x1c, 0x3, "85003915f9181c08b012ef17aaa2713c", "3391ee0aeb502a54b31d9eabc47405596736cb7aa580ad07c67d904d591a6e07", "61d80ce9bc90e97018627504fa8624dd89e389b1034bdc435753204af74b7044", [{0x4, 0x25, "f3e145b250380b8b4fe9df52c93464fe27efaead5ad70f0ce82e96be1b011c4b6faf4004af"}, {0x3, 0x19, "2acf71cdcc449531eee9cab6fc5f632c2b03a25bb98c12e480"}, {0x1, 0xe, "58ffd6105c7b749bc6de6e91e8ff"}]}}, @mesh_chsw={0x76, 0x6, {0x5, 0xf0, 0x3c, 0xe100}}, @random_vendor={0xdd, 0x10, "2194016393e94e4c8fc7a75afe98569e"}, @ssid={0x0, 0xe, @random="3393b8af131146300bebb1afc3e3"}]}], @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac00}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000002800018014000400ff01000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB="060001"], 0x3c}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000a8bc001806fffe8000000000000000000000000000aafe0ebe65ab7b9e6580000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000001020000"], 0x0) 3.500327958s ago: executing program 3 (id=7620): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002c80)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000320800040043000000a80016000a000140fcff0c3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a979832adbca28d9fb1ad28516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b0d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5f0cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9374e2501f7c82a89276a2e116214695", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r6, 0x25, 0x0, @void}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x339) syz_emit_ethernet(0x14, &(0x7f0000000080)={@empty, @random='\x00\x00\x00\x00C7', @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@generic={0x88f5, "1f77"}}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 3.475517293s ago: executing program 4 (id=7621): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket(0x2, 0x5, 0x4) socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}}, 0x24000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.755927394s ago: executing program 2 (id=7625): syz_emit_ethernet(0x96, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60f81fcb00603a00fc000000000000000000000000000000ff0200000000000000000000000000010400907800000000604aa1d300000000fc01000000000000000000000000000000000000000000000000ffff7f0000013c0000000000010000000000000000000000000000ffffac1414bb2f000400"/150], 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b", 0xe) connect$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f00000001c0)=""/139, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x400003, 0x80040009}, 0x48) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x2e8, 0x258, 0x258, 0x2e8, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x6c4, 0x7, 0x1, 'snmp_trap\x00', 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e20, 0x4e22, 0x4e23, 0x4e21, 0x4e22, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x11, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1], 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x418) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x1, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) 2.524535725s ago: executing program 1 (id=7626): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=ANY=[@ANYBLOB="500000001000ffff2cbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="291101008180040008000a00", @ANYRES32=r1, @ANYBLOB="02cf140001fce3446caf00"/23, @ANYRES32=r1, @ANYBLOB="0001040020020000"], 0x50}, 0x1, 0x600, 0x0, 0x4c004}, 0x40040) 2.506242414s ago: executing program 3 (id=7627): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x3, 0x4) 2.484650779s ago: executing program 5 (id=7628): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000004900010000000000000000000a006000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa75bb78f794aa88a800008100000086dd60008c040018000020010000000000000000000000000000fe8000000000000000000000000000bb00010000000000000502007f000100010000000000000000bfd43ee4572497831f7919c5ae7839f924e73361ab55c984d469ddc509d710afca84292c38dc6a68dc1204cc3930e84ce74b26ff075f29b62f1ad47302726a07e82bda3029288fc7"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x4, 0x0, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) read(r2, &(0x7f0000000840)=""/141, 0xf6) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14001533b2353021c1c057ec26ab831d7200318707030d000800000006"], 0x14}, 0x1, 0x0, 0x0, 0xa053}, 0x20800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0xd}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000180)={r6, @in={{0x2, 0x4e22, @loopback}}, [0x4, 0x8000000000000000, 0x0, 0x3ff, 0x100000001, 0x1, 0x9, 0xfffffffffffffff7, 0x1, 0x6, 0x5, 0x1c1, 0x7fffffff, 0x3, 0x1]}, &(0x7f0000000300)=0x100) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x14, r8, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r10, 0x6, 0x19, &(0x7f00000004c0), &(0x7f0000000540)=0x4) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r11, 0x112, 0xb, &(0x7f00000030c0)=0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.216415626s ago: executing program 1 (id=7629): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f0000000040)) (async, rerun: 32) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, 0x0, 0x40000) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) (async) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5fdbb162553cae4d}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4000845) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={0x0}}, 0x810) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@gettfilter={0x3c, 0x2e, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1d, 0x5}, {0x0, 0xc}, {0x3, 0x8}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0xffff4bbd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async, rerun: 64) r9 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r10) (async) recvmmsg(r10, 0x0, 0x0, 0x2062, 0x0) (async, rerun: 64) sendmsg$netlink(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) socket(0x26, 0x80000, 0xfffffff7) 2.215718177s ago: executing program 3 (id=7630): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='syzkaller\x00', 0x551042, &(0x7f0000000080)={@align=0x3, {0x5, 0x0, 0x8, 0x5}}, 0x3fffffc, &(0x7f00000000c0), &(0x7f0000000100)=0x19e5}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000001000010427da205ac342380c7c89f3a1", @ANYRES32=0x0, @ANYBLOB="014800"], 0x50}, 0x1, 0x0, 0x0, 0x44840}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'sit0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x400e810}, 0x8080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], 0x0}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xf3f, 0x70fd28, 0x25dddbbf, {0x0, 0x0, 0x0, r8, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_EMATCHES={0x50, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_IPT={0x2c, 0x2, 0x0, 0x0, {{0x6, 0x9, 0x6}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe08b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa7cf}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40004) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r11, &(0x7f0000001300)=[{&(0x7f0000001340)=""/4097, 0x1001}, {0x0}], 0x2) close(0x3) write$cgroup_int(r12, &(0x7f0000000140), 0xfffffdef) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000001240)=ANY=[@ANYBLOB="60050000", @ANYRES16=r2, @ANYBLOB="3a9607df253b0000000800030000000000001591814810c88b75fc6028954f8b0632338925f427d4224fcc43dbaa3b676622001f2e", @ANYRES32=r13, @ANYBLOB="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"], 0x560}, 0x1, 0x0, 0x0, 0x4}, 0x4001) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000640)={'gre0\x00', 0x0, 0x8000, 0x40, 0x3, 0x3, {{0x1b, 0x4, 0x2, 0x8, 0x6c, 0x63, 0x0, 0xf9, 0x0, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0x44, 0x88, 0x3, 0x3, [{@loopback, 0x5ef2b939}, {@loopback, 0x8}, {@rand_addr=0x64010100, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x7}, {@broadcast, 0x2}, {@multicast2, 0x7}, {@multicast2, 0xfff}, {@private=0xa010101, 0xc19}]}, @generic={0x7, 0xd, "2c7c6a3787aa9d0b7d92c1"}, @cipso={0x86, 0x6, 0x1}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x3, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r9], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r14, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.837448893s ago: executing program 2 (id=7631): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x240089c) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a000002005000500000000100000002601003e800000000010101", 0x2d}], 0x1, 0x0, 0x0) 1.804785535s ago: executing program 1 (id=7632): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711218000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast1}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x1, 0x9, 0x80000001, 0x8, 0xb000000000000000, 0x4, 0x10001, 0xfffffffc, 0x6, 0x9000000, 0xd57, 0x2, 0x9, 0x3}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000940)={{r1, 0x6, 0x6, 0x68bd, 0x3, 0x3, 0xdd09, 0x8, 0x3, 0xee, 0x1, 0x0, 0x9, 0x7, 0xff}}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c20000090080c200000086dd60010700000c1100fc000000000000000000000000000001ff02000000000000000000000000000100004e22000c907801000000"], 0x0) 1.700217808s ago: executing program 4 (id=7633): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a0001000000000000009c39c743"], 0x18}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}, {&(0x7f0000000180)="95e9e162be82589ffd57fc41521a38af5fadb6d653ed9876c574aee38d7b9dd423de5d4d7ee97b25e4fb8dbd3dbfd2977222c3c550f39c05730986bf5b29752d1e1b338adb8b67524678", 0x4a}], 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x1, 0x5, 0x5, 0x1}], 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r4, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r5, &(0x7f0000000240), 0x0}, 0x20) bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000280)=0x60, 0x2) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600010000000000000000000308000000000000080001"], 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r8], 0x1c}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x4000009, 0x4, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x67, 0x0, 0xf7, 0x2f, 0x0, @multicast2, @multicast2}}}}) write$tun(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) socket$nl_route(0x10, 0x3, 0x0) readv(r0, &(0x7f0000004680)=[{&(0x7f0000003380)=""/85, 0x55}], 0x1) 1.644641078s ago: executing program 1 (id=7634): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @remote}, &(0x7f0000000040)=0xc) connect$packet(r0, &(0x7f00000000c0)={0x11, 0x19, r1, 0x1, 0xef, 0x6, @remote}, 0x14) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f0000000200)=0x18) 1.467526556s ago: executing program 2 (id=7635): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000700)={'wpan0\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x750, 0x450, 0x450, 0x0, 0x290, 0x360, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2, [], [], [], 0x0, 0x4000}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000040)=0xd0, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newae={0x5c, 0x1e, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x2, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd2a, 0x70bd28, 0x70bd2c, 0x5}}]}, 0x5c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r5, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) socket$can_raw(0x1d, 0x3, 0x1) 1.403964304s ago: executing program 5 (id=7636): syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @random="6076b5cad4f6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2b, 0x0, @mcast1, @remote, [], "6be2"}}}}}}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x9}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) 1.286297829s ago: executing program 5 (id=7637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000303a0020010000000000000800000000000000ff0200000000000000000000000000010103"], 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x1b0, r3, 0x1, 0x70bd23, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x179, 0x1, 'n\x01l\xb1\xd7jt/l\xdc\x82{V \xb82cap\x00\x83\xf2\xa6L6\xeb;\xe6\xd9\xa7\x1bsj\xb0$\x96\xda\xf5/\x9ct\xdb@\x82-\x97.O\xd6w\xce\xe5\xe1Ik^\xee\xa9=\x98\xdf\xf0S\x96\x0fr2\x9c\xdc\a\x90\xcc\x198\xf3\r\x96\x8fM*F\xa2Y7\xc3\xfd\x1br.<\x1b\xbd)^\x9f\xaar\xaexpW%\xf7L\xc9\x1d:\xb1\xc5f\xe3K{\xa3\xb1\xd5N\xf4Yj\x9fz\x03w\xd3\x8f\x11\xefC\x8d\xa9\xfe\"T=4\x89\xe6S6G)\xef\x8c\x0fm\xab\xa4\x15\x0f\x84\x15\xdf\x87\xc8\x82$\x18.~\xdf8\x92\xf5\xd9c\xd8.\xceyZ\xed\xfb\xd22\x86\xc7Q\xd5\x99\xf3Mbs\xb4n\x8d#\x04\x99qBF\r\x0f\xa9!<\xben\n\x802l\x05I\x1e\xbf=\xfd\x1a\xff\xaa=R\x19\xc6L\xb3./9\xb8W\n\xd1s\xba\xc5\xf8\xda(\xfe\x9cty\xb0:PE\xee\xd2\x176\x10L\xf9\x9a\x1d\xe8\xcb\x93\xc9\x8d\x1e\xc5<\xc8m\xa0.`x\x88\x18\xe9#\xf4\x0e\xb5t\x825\x94\x1b\xa0\x11a\x00\xab\xbfL\x88\x0e\xfb\xc3\xb1\xab\x04&K\xcf-\x19\xe4\x00\x94\xa8\xc6\xe1L\xb82\x1ed\xa6W\xed|\xafM7\xab\xc9R\xef\xcfgp\x94>]fk\xe9\x15\x93K\xdeUDUdQ\xb7\xc4\x19\xd3\xda\xcd\x91;C`\x90\'\x9b\x80\xf0\xb7\xc7\x1eb\x0e\xe2\xa2\xb9\x8b\x8d\x98\xca\x96\xe1\xbf]\x8b\xc7\xaa\xbb6\xa2f\xd8'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5d}, 0x1, 0x0, 0x0, 0x4000}, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x94489e87720a44e, [{0xa00, 0xff03000000000000}, {0x0, 0x100000000000000}]}, 0xa50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r5, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x0, 0x0, 0x7fff}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 1.141324713s ago: executing program 3 (id=7638): r0 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001680)={0x1, 0x0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002b80)={&(0x7f0000001700)=ANY=[@ANYBLOB="9feb01001800000000000000180000000303000100000000002e5f00"], &(0x7f0000002c80)=""/4096, 0x34, 0x1000, 0x0, 0x8000007, 0x10000}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0xe, 0x18, &(0x7f0000001a80)=ANY=[@ANYBLOB="180000004000000000000000ff070000cb2a040001000000182a0000", @ANYRES32, @ANYBLOB="00000000260a000018180000530587870931155b529d6ca0", @ANYRES32, @ANYBLOB="000000000000000018000000010000000000000000000080950000000000000078600000e2ffffff18300000040000000000000000000000416702000800000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000001740)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sk_skb=0x4, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001780)={0x5, 0x2, 0x20000006, 0x8000}, 0x10, r1, 0xffffffffffffffff, 0x3, &(0x7f0000001940)=[0x1, 0x1], &(0x7f0000001800)=[{0x3, 0xfffffffe, 0xf}, {0x5, 0x2, 0x4, 0xa}, {0x5, 0x2, 0x10, 0x4}], 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000001900)=r3, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$kcm(0x10, 0x0, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000002440)=""/148, &(0x7f0000000040)=0x9) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) write$tun(r5, &(0x7f00000016c0)=ANY=[@ANYBLOB="03000000090000806491bbbbbbbbbbbbffffffffffff000c030000e0010900000000000000a578d2"], 0x28) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000001c0)={0x0, 0x8, 0x7, 0x1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f00000015c0)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002bc0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x400) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001600)={r8, 0x8}, &(0x7f0000001640)=0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10012, r9, 0xffffe000) setsockopt$inet_buf(r9, 0x0, 0x2a, &(0x7f00000000c0)="f834e08b31444d39d8499d94c5b70d607c3923428e7dfda839b187e71f9d57e577c22c0fd26da6ed9120931633c98143849bc847dd9cb8f2e1", 0x39) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x3, 0x4) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000005c0)={r7, "ff42d884c4c9436b14279cc761581554"}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000400000000fdce2cdaa9971960af83df7784fd127f6b19ef697162c61bccc79e1bfb80bce0ef742653b778a0e779ed421e3c4c68f472f83de7c0b0cc4fd910e6f4321f0d45777e7c5bef189bb829e2"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080", 0x2b}], 0x1) 991.805125ms ago: executing program 2 (id=7639): r0 = socket(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002000004000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000001000000000000000000000000fc020000000000000000000000000000030005000000000002"], 0x80}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r3, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xf4, 0x0, 0xfffffffe}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x26, &(0x7f0000000040)=0x6, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000052000164f274e7b7c53ab2001c000000040003", @ANYRESOCT=r0], 0x18}}, 0x80) 896.048459ms ago: executing program 5 (id=7640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x6, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000deffffff0000000000000000bbe10f7600"], 0x48) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x16ec7077c8c871d9}, 0x38) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000004047300fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef) (async) recvmmsg(r6, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000040)=""/149, 0x95}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f0000005040)=""/96, 0x60}], 0x5, &(0x7f00000002c0)=""/72, 0x48}, 0x18000}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/160, 0xa0}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/167, 0xa7}, {&(0x7f00000034c0)=""/9, 0x9}, {&(0x7f0000003500)=""/138, 0x8a}], 0x7}, 0x7b8}, {{&(0x7f0000003640)=@alg, 0x80, &(0x7f00000039c0)=[{&(0x7f00000036c0)=""/213, 0xd5}, {&(0x7f00000037c0)=""/10, 0xa}, {&(0x7f0000003800)=""/199, 0xc7}, {&(0x7f0000003900)=""/183, 0xb7}], 0x4}, 0x4}, {{&(0x7f0000003a00)=@hci, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a80)=""/150, 0x96}, {&(0x7f0000003b40)=""/95, 0x5f}, {&(0x7f0000003bc0)=""/142, 0x8e}], 0x3, &(0x7f0000003cc0)=""/251, 0xfb}, 0x5710925a}, {{&(0x7f0000003dc0)=@nl=@proc, 0x80, &(0x7f0000004f00)=[{&(0x7f0000005140)=""/156, 0x9c}, {&(0x7f0000003f00)=""/4083, 0xff3}], 0x2, &(0x7f0000004f40)=""/98, 0x62}, 0x3}, {{&(0x7f0000004fc0)=@ax25={{}, [@netrom, @null, @null, @null, @rose, @null, @netrom]}, 0x80, &(0x7f0000006040)}, 0x400}], 0x6, 0x10142, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r11) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002cbd7001fedbdf251200000018000180060000006272696467655f736c61005f5f3100010800070002000000"], 0x34}, 0x1, 0x0, 0x0, 0x86}, 0x40040) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}}, 0x0) (async, rerun: 32) r13 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r13, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async) r14 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 888.130574ms ago: executing program 2 (id=7641): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00'], 0x38}}, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000040)=@assoc_value, &(0x7f0000000300)=0x8) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) writev(r0, 0x0, 0x0) 796.329125ms ago: executing program 3 (id=7642): r0 = socket$inet(0x2, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newtaction={0x64, 0x30, 0x100, 0x70bd29, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x3fff, 0x0, 0x0, {{0x5c}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0x5, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x3004080) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000180)="580000001500c5d427323b470c45b45602067fffffff81004e22030d00ff0028925a01000100eaa57b000900800a0efffeff2ef1020000ffe203f03adcac4b74fffffffffffeffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000500)="22e129633f31d7"}, {&(0x7f0000000800)="2c36faa130ea263648c11b203755dccf377e5806c10ffed26b11fde174e14f5d58a2d16bda1bb76de707796653956264c6c6be519dbc65f8e5b6a34a43d52b2565f0cfd74fb923807c6e5818106ec7c929b7c352eb62aafb7cc8bb765c11cf2fa575c99545e82e2279d9d25e899f9afbbc451c05ee8547dc40a429690e26d96cf95994c2229642e9a1cf063d067c83ed7202bce2d97d"}, {&(0x7f00000005c0)="3d342df880bcc3b458c93fd35587c486b92bf4cd51f0e90e8b77c7bd2b2bd08cd35a891c4623973e4cdf5a5015234fb37324679da1f56d2859378781d18c7ee1dbe097bc77294aa353f90f21dcb154a0ac8f9b135b4cadc0ed7690114f3c71c614d0e9b8460d"}, {&(0x7f0000000940)="a9628ae65776f33837b49114f9d89f6ad5e582f9ad6b917efdc2f4c58579800754b5aaaffe47afcf4c54ac5d0b697f663f84a16488d541a08eb24e9ff5b4001f13addf2f30fbe1eac4887e5ead3189c9cb388b208cd9a802073257850f92e29d3696cd248cd22e33060f277f1491ef70434ce6f3cf535e404a370c8a488eb7bc2b65b8bc6066d7ad0d31298254a22f765b05cbd00d5c8a4c209d935f1331e89b000000000000000000"}], 0x0, 0x0, 0x3d}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1d, 0x5, 0x470, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x8000000, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000300)={0xffffffffffffffff, 0x1, 0xa3, 0x1, @vifc_lcl_addr=@empty, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3400000018000100200000000000000002009400ff00fe09008c00000600150003000000100016800c000280080001"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001300050026bd7000ffdbdf25070fef93", @ANYRES32=r8, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000002900), 0x0, 0x4000840) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r10, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x58, 0x9}, 0x8) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 695.820354ms ago: executing program 1 (id=7643): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x24000001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x4008000) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0xfffffffffffffc72, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x0, 0x2, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 453.742893ms ago: executing program 4 (id=7644): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {0x6}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x6, 0x91, "8b72"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x6c}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x6c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {0x6}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_PROBE_RESP={0x6, 0x91, "8b72"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x6c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_FIOSETOWN(r7, 0x8901, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@delneigh={0x70, 0x1d, 0x0, 0x70bd2a, 0x25dfdbfc, {0x7, 0x0, 0x0, r5, 0x8, 0x8, 0x6}, [@NDA_SRC_VNI={0x8, 0xb, 0x49}, @NDA_DST_IPV4={0x8, 0x1, @multicast2}, @NDA_DST_MAC={0xa, 0x1, @broadcast}, @NDA_PROTOCOL={0x5, 0xc, 0x3}, @NDA_IFINDEX={0x8, 0x8, r5}, @NDA_PROBES={0x8, 0x4, 0x2}, @NDA_VLAN={0x6, 0x5, 0x2}, @NDA_VLAN={0x6, 0x5, 0x4}, @NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_NH_ID={0x8, 0xd, 0x3}]}, 0x70}}, 0x20000010) r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r8, &(0x7f0000000080)={0x1a, 0x0, 0x2, 0x0, 0x20}, 0x10) (async) bind$llc(r8, &(0x7f0000000080)={0x1a, 0x0, 0x2, 0x0, 0x20}, 0x10) epoll_create1(0x80000) listen(r8, 0x0) (async) listen(r8, 0x0) listen(r8, 0x7) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x8, 0x22f0bd24, 0x25dfdbff, {0x1b}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) 311.079705ms ago: executing program 1 (id=7645): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x240089c) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="002145000b2c000b0000400600000a0000010a000002005000500000000100000002601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 310.06309ms ago: executing program 2 (id=7646): r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) (async) sendmmsg(r0, &(0x7f0000000a00)=[{{&(0x7f0000000080)=@isdn={0x22, 0x5, 0xf9, 0xa2, 0xf}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000100)="2899d9f73e6b5d309ed6a3fae14bcea2b2d49b689f8ca053dc5d4fff1c4264337d049a19f912c7e4d1c225fefbd27250dc79bb515c2b67d5669220aa1fbe761a97bd5b8b92b1ff26a2d6a40e7d79afa9f3d7f321e6ea2f277eb121c3d3d0ece977dbcde77ae573dff44f8bab4acd640f4117412598528509192c59c084e817fbb2dbad815726f23fdb5f611cd2abb9b4c1ddaac9224e5aab99a5f9d2e04dd02c67f8206ee0bc25f67bee27e1ff3b9392b42492a91c36c446a930f48f6cae1340b8174ed54fc3a11ea6e9b3264afe525846a9aeb5", 0xd4}, {&(0x7f0000000200)="b25f7063af8657b4a78378acac275518bda2c18a517c8f4d8b03103b78d2c3d0b5cdc539252df5662a94e69238dfe03cb4cd37c49866ac9be671e713d98e0a5a4b551ef7cbad66f2b9bb276570648d71b7fa8ca029fe2b3089d7b865612623ec6261a65a71f136eda4f44421d01335eeaa94cd3c4a21e1958a189a649cff82f9556631f5bbcf92f1e3cb7c84b04c93b1fe14b887e46bdacc5730a8204c52d759fdd9e93d5a40624796ed430fa85b750a04656cc2b43c0756ef02f1c2c5f3b1085a8044399072f7756fabc4a31a3406c9c337b6c9c91874e62b", 0xd9}, {&(0x7f0000000300)="0edb8a80acb567db4938d3c7959ad7effdf5d313d6fa623f7f8601013b426c80794be372fc4a39d44fc57569310835bfc63f9feb5aef9e61aeef", 0x3a}, {&(0x7f0000000340)="f152816cc50e9930e0c1fc288af177463ad29def7ae6acde6a70a72887e5c559111626c4098fef8af7a503cfb1a24230ac7c1109f3f81a6bfda4e568c275f4c063609814df55a61a16c0aaff52168c5068bc7880c0e0aa993aba1640d1718213f8df664c97209346acfbef94aac0b6be24f292a3085cb2982b0a2cd7079e34", 0x7f}, {&(0x7f00000003c0)="e4233cece68d5c63b8a327d00e4a5bcac2195e19bc2bc0fee8382db2b32310a9956bd4c34a70978517e273b221eead5e7d5577f3d7ab302553b60a22a168469ee58a05642d477458799d9a055d5e07be7fb4f34e6974fc401226179ce209acdcfc88507add2c02", 0x67}], 0x5, &(0x7f00000004c0)=[{0x50, 0x10f, 0x4, "234d5cac56a6fb7f292b0fb3ffe214994a8500e97141fcbfc1bc7811c16229eb05141f07a2fc641e832c6acd7cba253f2d550e5e0013d69a267e7160ec"}], 0x50}}, {{&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x3, 0x3, {0xa, 0x4e22, 0x7ff, @empty, 0x8}}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000005c0)="9b17fa8b17452cd3d4617e7093564046a627a537cb20ad63a807b722d5da3df957f0cc1dd749b1aea3e11afc8db7cf5759e503c12ce93c", 0x37}, {&(0x7f0000000600)="d21a70d96e1b57a767317aa9a1c36edf3ed3d038c3093d3a8811fb7cd7", 0x1d}], 0x2, &(0x7f0000000680)=[{0x48, 0x6, 0x81, "1db76241fffc3ce477675d8d07270bd18b4d4c425d399b52895e33cf4dbc8558fd5a7f4299c5085fcbbe8effa5d9b6e089a8"}, {0xc8, 0xff, 0x40, "cd34e8dd5d823bcab28ab5e2ebb254b2209deda997ba7bfb51dacf2bb31e035aca718e381528b84ede8715d8d568eaf2d93759faa8f9ce48fa91c2373504bf992171b5e4279a183c10430115f60ecaba7dd2ce0329f209d9c89c1807e6dc62fe94af32f16e00e7069c672afb91ad2d204f21d51b5ecc07814044f9837753a4b641bf19c8cfa6ac9c8b974f32b9ba516432b79f57c9b9a1c4fcdfcd5ba8c2a17c41ecc9e7e5b6d8e95a424af12e5086cd7d11ca"}, {0xd8, 0x115, 0x0, "612c1ab504d98a08734809fde7c17da0bdd4c9ee8c1e0445bea5b89f64b585b1b858c9416aeb48780c414672c8053c814379e228591b48cb16c8b0a77c12edad3b5e222e2dd36054c8c8e54b47eb3fd93573d63ed3981625d1dab4674d901341f271d46713eb561e94fa8e216876b13560fa00e21aec6b65177cdb124625128bec59d7ca7a757c4704a525eff511ec6345b7be7b360b006928848a7e0c03c2d26e1f8c1da6bdd31748faacd52cba9b3351aadeb8baee60467d5ee81a73025079030d1a97d7cd83"}, {0xe8, 0x0, 0x1, "cd398cc342aa0700084b0e6caaf2cb5e249cb0b19fa55ab3eb8c806feb0867d6c7867c5f5e442bb82d907ae60828db9e13aae59f96888b6e85a8c19fa16c99f73b63678192bf951ee33be1186e6cdaab13a03ac2e55fbb326f6ebc0e6bb57a85b27eb667654b26b120e1e45de3e974f48cc91c89280aea98e96b864f27354d599e069e1c9f31eea9089543f0acbe00c2085b8afb5824ce1799deb4eda1481a7da5f36038997bcd96e1aac6aa81821d7f58e0746baefedd853ade05b31230c50fb854230d20d999e2ee8d6600c053f985f364146882a5"}, {0x50, 0x10d, 0x5, "290a50558d93434b86a4586eb937ab744f47f30388fecb3c6f2f4bd7b964f5e752f0d2757d7f1a726491467df9ccebd047821db45e5be718440961057b75ad48"}, {0x60, 0x88, 0x8403, "06fb86fa77eb5f464ac720588c0b9336492bc0e8c6436c9d0accb27e2c38f34623dbb6542b36273e5c21b5336d9bd3bfd00c63b2f7037c8723b8123dca64d10d32bb717c659b1e3e3481f36bd2"}], 0x380}}], 0x2, 0x841) (async) pread64(r0, &(0x7f0000000a80)=""/231, 0xe7, 0x4) (async) pwrite64(r0, &(0x7f0000000b80)="cfbafedd6d7c4e6466a6fa125ce7913bd945dbc2405fe6e748edfa6545d97329408177af85024ccbb2ee7153f43c8bb577d6e9bfe52adacc3f35342937588c7a393a5d5a5a84a44731e1e6fb885315616ee9882165b3fd558dcfb4378d8f3bb3581b05dadd839442d6c4123bc061c76d197a22a50968767da9c3b08b6707528287dce2e5652547cc33739b02caefeec5b7229f56544f0b9fc7b8f62bbfb6745abd68be2e643a22a8060ea150e0038e6b7715e470d9dafb74398aa21cf01543186de12f3f656cc4a0188d9e1df5a8136497a9d63b0f4493adb56c38e4fa42eedbc4df49f662126d51da3b8909ca9ceaf595ae3071befad48287ba4b4b8c65c5f9236725051e2772e28150882b9b8f89e9462e76304cdc385dcf1b207fc5db9df9a1256c8de2214343ca3262eef10ff6fd514a6b1098f0889cf3e83ccbf2fbdba754a8c492c87b6dca78fd36f73193e287d35e0875f3393892e97afc64a17bb44efbeab71e020f7aa7d60fec348f6e04a76157f88a14bb884855078a22f31485d58df314059397ce763efcbc357fcb1bbb052ccf19fa991536415b95db2bd53f44534b65eadcf8a87a59fe636b7b06a978e3bc33fa9d9386fa626a0488a2d1d504e9f73057d56a21786d067573647333f776c8c848846fcec91b8d3be64ee748ed094128f98b13d8faf90272346af4b9d93b0b291117ba9f79e51185b4c9b2632d6132b9fc243d260d75cede2602e190fc2162c346bb52950db64121958f4e878d65cd522f438aa69c2fdc4ddcf142403817df5aed804df455f135e854f4480e1ca25483bd237bd6d64d47393e286a8c82373be4b123928e5179f885264658f3b242d13b76f1429d9e38e38c594b32b68e93d6acf87de9f6c395d175320d03974429d8067d8c61873b36c65b7f5f7fc9fcab77b3fa2f6e630dab7326f48e0b4655f562862a9d9fe1461828561d2e4137ad2edc6dcb9eda4e35490d35f1fab7b90294e896117e32d65dbe74a6c4ea6a3eef7e0b9c3abf4be8ca3c1e92dc7ab7f6bad459ad2e6dcc3b023db68f06d53dad000fa8977c4997b39fb3f02e32eadf4e7642f9398e4c3a63a588866166b7571eda4346a392d61fb15f9718eacf3b46fafddd50a229b37ff3ad9a545f163ea3b21e363b086173d6375b0968c0471edf1d051861d6bd00ee9ece917a3eb2f1df3da3cbd2c541b8f8fd5e909993c5a3ee63b0e95d4102d895750fa1022421b5cf413ae1b802885329a06dba58625234e82b57b3ff638e19c12dc1f5f7c066410300e98e94e89f6e15fd7b2372914d7a3a271da570097b759d39dc0be26a5887709319b3fed87a63d631cac0158cf899e38f3297e5fb70da198225453642c560fe5e1b598d72abcd067a2b64499799d86f3fcce2921030d18ec127c7f85311a89672fbe7a472a8c883027d5dd292bbdb1581004b75937475f1110c9e165baa399458313375f4d722d334c50f8c0f03378d5b07d1739d78fdf7971e660c8b4f426f3d70c6a699269881480f3bd63baefd8690bc605f3594744cd1315e7c9d2b3cd7b959104273ed789f6884df162f0765540c9fd584cee97ede05722d6fbf95a734ea8412ada3fd556ea22b51c397b3703d5ca70733e74513f9c6cf4908355394752143370eede4db0d161ff7de4cb4ae4f20a23d12520c1a45eb4ac25cb1bab707bc5e5989212d0e03efb2d49108b0b17b23d5eaef74c9bd017569ad4d6ed72a4f71230943de7859d1dd18f6ba6950c8f84388f4600bff0c5441b1f1c0c8f619a16ceb43968d409e359c6d9aeeece11ceeeb685e6ece1047a9c91ba5b4efc0fc12c2afdcb940324fc3275b1ad4085662f396ed19ca87720af830f33ab650f96d767cda136dad5cc3e6c2d43cf8e90506382912ca74d406f2d38385c6cbdc11ebaa87a064f7dc7e2c27eb84228dae880a8b4efb534ad0c027db45f00a417ce65f832f50e57816a5082f3e9c8a173efbdba132c7d5b4d6577d491b3d80b0d9d556225b93e210945b1c4a55cf380a505333b27a39a50dcbedd37adca89935913d93ecf3eb7503530b0417a47ce4552255a81bb7a6bb9b8cfac2831390b4f8b3be80f3b5048eed77c7f35d6e30c210a0a2c056a725226dd2f73a8793d30fb721aa53c9e1d21ddc007a150acf6524830d423140bf115c4d1102ddd711a74f04467452af089e6636e932e678738a3032ac88a48c455a95d7291b4cd2e96d925c996855c00ef07a8c7554798424953cd14f2969ad435f6d249e7fea850d89cc9009919b783410b63c1c9c89f550e0585886b7266dabd316f86c516f3d34899b7d37e71c62bc82714822f3935ca1557c1a45b474bb8b00c382f1149da04ea4a91667816a1912f86d6edb6ed8c6585713bb5ed75ce7dfbcf318a509a8ed7cb44cd5358c2aed0c8b7c19fa438d3bfebcbfc83df792a08cc97043edd2e90a8ad1eca3ebc98992a0ca535f98e26865af64534bac23fbdd9abd3776328ac1b92db838f7643417e29adf330f52ad0550a68ab25c6cd0fa746c1fe46fe91abf015592c1d53dc54aed9f199b7e7b1f06cc89e53957b5f8ef7685f38ddaffa6335be221d89f0ad7d816af4f9e735083ed2aeadf27fbac626098490250858c82a9bb35155505c869cad59987f5fa643cb486f2a878b972267f86e0937f854d63455311f695481983cae81d888c562abb1597984e5da3d499dab34fd64cf8bb2cebc34fdb0bcd13b32af0959e6e71dfb5fa5f748b9c921b6dba942cdc6c4275ce425c4b1e22efcc4a82e48843b3cf96d13193729e41fa5d401779e95fd64cd9221ed22c09fe3baf9d7ac2f1714187e8f60228a715e92b9fc76abb5a767e29b6152b84a32f152d21034656707dceccd24fd5178965c3894a97e6921c3fecfefd2528e2f940c0439a00bced60e123387aee32647e39e8e32ae5e001935ab427783ea31a5d3edeec1535eba57a13e005a1f204a28ba4317841ca2e803bd2bc706b8a0a80fdf99749a6002b426b66df5000a18c792059996248f9a98ae7f5d407fd4213c52e42adbe2ec5d5882546c968b733dcb9de422841d0bd101043b35fb572778dfe042aabf70b2a5ae9a3ca63c24d34b00f588cad5bf67d606e4f02c20cf0ca3a07e9411ca623b7e6efa5e21989dfffc3933da476a8a7f2b72db79e3c1f21060f651d0d1c79e27aa2d4fb5ba8f83f6d7ec027a82343f0235806c2b5f4339b869650cd502b50ac0ae17cb4c7e45a978fdb83dbb6ea73047eeb2513649574d57a3c51cbd53bf8167585f21e9859e6428a61269fb809fe3a2ca148b6d025100b64f8bd356adcd3adb37881cbe6ba4c0ae1a3527fb1898b1011128563b289129063ac325ac49b95ac59adc85f6fe20e1e71dbb10baf560319a07497614fd5c96bbfa2e10be12fd62892e748a382735027040f9daa689a62b61d3b5b7bb321c90feb8fbedab6e13218a9d3bf5fe127b0385fa177de2c2658596cc2a3ecf450ef44f6f0e625ad9276c4c152f9f545fc2749a4512db061fb8ecca33ec782246866ed2552d589d2ec902c72dbd4b543f567da369da8b47bb0f012bd2df2ab475463252b31cd9c327637f61b14eda43126d3e895e50bdc6ae247be679e0d58200a5a28daeb27a2fea6b7be86627369c6332b46060eafef0dd098382eef6e52f4e53208615d8d309df4b89bb5ee92baf8570d060d8d9fd21f957c9b176fd2f74a1071613566468194dfab8f56688302317e5b62657a35981e4de62d93ecca084b6ddf344653d4f2cbf3f003d68ed579848850b79e24211af4c55abc09947aa357aaec8eca1e6ddb8954b097a2c3b66e5bb8c3bc138d1b630b2e23fd472a0f911b52923b43e09e717575cc5984ae2e09cc455091d16f1040be10da6f6d4c39efca4cf96a5d697f6f5d202954a22b630e4b8d209ac9de3117b113bd4d3c821f8815f967de6835a1d36072bc1a6da6d1bc0f0aa198d63b895a4a8d6db4578963ef673e179e239dcf4df81006fea45644f072a9e959ec6d28cb19a64da975b41911a5e65531556c2bbc0b86b212db03eacafaed25a08721843653e0e4dcf3bcb147af2cf2939c5e5aeffe7042867c94239adca5a7013db942fd6c08e32a7a7b7be797a653d69eb7450bd316645cb2860a626132b06a956df28dfbca2e1ca41e45a59e9493b5af5b5a8bf7c8730e348a60615da4b4cd311d9d1f651465c1aa272668f86e48266845e8e0ffa1db7dab0f897e732a710316f5eb4ec7798f6cce1c0f7edf95b10f34b27bf27095386d56b6efbc621a74fe79fa14e709bfd74790fda6162f159c0b2a88b8e7f8e42c6621fce100afc532c680df14cef9b8cc29dd1093c60cff4e9788bc6137ecc0512e06507ea9ec8e87bcef514d314887dda93c6cd86858d8970eacc1f6fab7a9d3c0854a695d060cc18ccffd21a76dfc987040ceae321e5e1250d154bdb6ac8bd600f0e161e26e82148779a83bc4d2452ea92589ed44a436cd81ec645b40a323c66a8cede4411bc2ec5ae44ea652db6c4f924b21d9fe48943b11c7239e8f81b365e40b36d93efcac9aa1434f2d792174638a7d0782aa72cf06ea34789f32fe11a4bb292d2958e754d0aea09edd062ee6ce6f697518d5ec535fb857ebe7b741b77d65fba3959406304c4f3455cd6fb7ca524101d15947664ea83e1ce7d69e3cba57790a476c02cff2d1af9946ecc4161ce17391308efd53410076a71e518a43c51251d70b1a5f0c5d911f0798fd2048c72fbf7a404048f6e6f9e4266ec1aa5171dc7fd5a07a23f6787360ecddd8a80e74f70f42a4d27f566eeb29c171d0811a29170617118abe3cbff6e88c5baf07441a3f2d8954d0c8218521382448f533d5d844d3ff697a5fee8d90b9ee153074e7f1cd3c1ea6ff8a2870f441c70f0ab2d88e7e2b9535ebd3eb6d35c2324c59f16f668f59a0bd7e886aef4037009d3f2be963fae01fa1a15e5019d043a376750b3ae13b1e37a415c1fe3b2a6f65e6a9b11d924281f673d87a089cbef5254978e3816fd42184404834299ae6fcaa8ee1c4372ad887cc6133b7eb1b1cda5cba063cb3a17b01a131af6470171939f58226eb65f2998d831baf0228c445176b926d1803d232e06de78af9f4bd6dc5d2828a6db6813486756afca2626ae472df3a56cb6929b96c7d7bb7a93892849de9a5c4d18c3bdb190b24a5814488346b09d53fca3ae652f416aad797bd8a577ea5ee939cc89548467e07fdbd57a841108972793dbbb281803fd7d2d238859c3c7ae510e81ebab1538688030697e9fdc33fe8b777af71febff944670931febe0617f003067c4666803a01a0ec0b7f76b9e03b621171180d206a0ce546951d9bbca8ffb6192e014cc70c1be63184ea960ebd0b38851d6d248da3cf72200f44ad8618c3d9fa97e753e0585d7e45e0c43c294cd80702389ab5558e4e0ca586f1055052fbec054d575da42fcb8a97b840c5bad8d38955d1346102029bf19b55877c9d02534aaed080382d83037b902a400da11b9ff2423708c23658ceb163f10ba9005ab5d99385c1a2c4b3e97e869c0a411de4d56adbed6eae6c4a9a21f9c345fedc8a5a5f828f4c372a003109e3f44eaa5e17a20edb64f755c386be50f3a3508d677f4a1ccbaf97315621bafbc84babe6881a528e1f5d15caf4f8590759748213be34106ad1a1c67716d08302a4c928e64b62c7f84720bc74efd40bcac1722cb79b02d56f37eab5ec0d8ae46bd3d325d68ad2d9749e0bfc3d6a6e0ba60ea1782c5d1ec7be11139c98b9c38ea35d8e4407e0d272b549602641f39dd6e6e834", 0x1000, 0xffffffffffffffff) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000001b80)='tasks\x00', 0x2, 0x0) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001bc0)=0x0) write$cgroup_pid(r1, &(0x7f0000001c00)=r2, 0x12) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001c80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x4c, 0x1, 0x7, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffffffff0000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x28d0}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) write$cgroup_pid(r1, &(0x7f0000001ec0)=r2, 0x12) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001f80)=0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f00), 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r6, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x140) (async) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r8, 0x0, 0x1, &(0x7f0000002080)=0x2, 0x4) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002100)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000002200)=0xe8) sendmsg$nl_xfrm(r9, &(0x7f0000002540)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002500)={&(0x7f0000002240)=@allocspi={0x288, 0x16, 0x800, 0x70bd2c, 0x25dfdbfc, {{{@in=@empty, @in=@local, 0x4e23, 0xa, 0x4e20, 0x1, 0xa, 0x20, 0x20, 0x29, 0x0, r11}, {@in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4d2, 0xff}, @in6=@mcast1, {0x26, 0x4, 0x0, 0x400, 0x5de3, 0x1, 0x6, 0x6}, {0x3, 0x4, 0x3, 0x6}, {0x1, 0x9, 0x5}, 0x70bd28, 0x3501, 0xa, 0x1, 0x2, 0xa0}, 0x1ff, 0x6}, [@tmpl={0x184, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d3, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3507, 0x4, 0x2, 0xb, 0x80000000, 0x5, 0xffffffff}, {{@in6=@mcast1, 0x4d5, 0x33}, 0xa, @in=@broadcast, 0x34ff, 0x5, 0x1, 0x5a, 0x1, 0x1, 0x8}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x6c}, 0xa, @in=@broadcast, 0x34ff, 0x3, 0x1, 0x8, 0xd6, 0x79, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x3, 0xf9, 0xffff, 0x1, 0xd21}, {{@in=@local, 0x4d2, 0xff}, 0x2, @in6=@rand_addr=' \x01\x00', 0x3506, 0x1, 0x0, 0xa, 0x1, 0x9, 0x4}, {{@in=@loopback, 0x4d2, 0xff}, 0x2, @in=@private=0xa010100, 0x3504, 0x1, 0x0, 0x5, 0x704, 0x5, 0x9c6}]}, @mark={0xc, 0x15, {0x35075c, 0xf}}]}, 0x288}}, 0x4804) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000002580), 0x8) sendmsg$nl_route(r12, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)=@ipv6_deladdr={0x18, 0x15, 0x2, 0x70bd2c, 0x25dfdbfd, {0xa, 0x3f, 0x82, 0xfe, r10}}, 0x18}, 0x1, 0x0, 0x0, 0x4004841}, 0x8001) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r13, &(0x7f0000002840)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002800)={&(0x7f0000002740)={0x88, r14, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:login_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:ptchown_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) openat$cgroup_ro(r5, &(0x7f0000002880)='devices.list\x00', 0x0, 0x0) (async) recvfrom(0xffffffffffffffff, &(0x7f00000028c0)=""/145, 0x91, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=7647): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0x157c, @mcast2, 0x2f89838}}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0xff, 0x1}}, 0x18) sendmsg$inet(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x40082) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) kernel console output (not intermixed with test programs): 4.5872'. [ 1044.146569][T30001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.146744][T30001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.146934][T30001] bridge_slave_0: entered allmulticast mode [ 1044.197369][T30001] bridge_slave_0: entered promiscuous mode [ 1044.261833][T30001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.262316][T30001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.262690][T30001] bridge_slave_1: entered allmulticast mode [ 1044.295639][T30001] bridge_slave_1: entered promiscuous mode [ 1044.331206][T30133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5873'. [ 1044.545130][T30137] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.5873'. [ 1045.002074][T30140] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5876'. [ 1045.064627][T29960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.064669][T29960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1045.064699][T29960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.064729][T29960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 37616 - 0 [ 1045.185200][T30001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.471535][T17087] Bluetooth: hci5: command tx timeout [ 1045.770348][T29960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.770397][T29960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1045.770433][T29960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.770473][T29960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 37616 - 0 [ 1045.948298][T30140] gretap0: entered promiscuous mode [ 1046.054941][T30142] 0{X功: renamed from gretap0 [ 1046.082790][T30142] 0{X功: left promiscuous mode [ 1046.083003][T30142] 0{X功: entered allmulticast mode [ 1046.102047][T30142] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1046.255477][T30001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.440133][T30152] nbd: must specify at least one socket [ 1046.558188][T29960] bond0: (slave netdevsim1): Releasing backup interface [ 1046.591655][T29960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1046.591697][T29960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1046.591727][T29960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.591756][T29960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 37616 - 0 [ 1046.968344][T30163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1047.043170][T30001] team0: Port device team_slave_0 added [ 1047.254214][T30168] __nla_validate_parse: 1 callbacks suppressed [ 1047.254237][T30168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5885'. [ 1047.412310][T29960] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1047.412352][T29960] netdevsim netdevsim2  (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 1047.412382][T29960] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.412411][T29960] netdevsim netdevsim2  (unregistering): unset [1, 1] type 2 family 0 port 37616 - 0 [ 1047.478373][T30001] team0: Port device team_slave_1 added [ 1047.528734][T30171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5886'. [ 1047.678900][T30174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5887'. [ 1047.801780][T30001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.801799][T30001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.801823][T30001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.808587][T30001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.820296][T30001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.820333][T30001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.510622][T30001] hsr_slave_0: entered promiscuous mode [ 1048.520051][T30001] hsr_slave_1: entered promiscuous mode [ 1048.520873][T30001] debugfs: 'hsr0' already exists in 'hsr' [ 1048.544156][T30001] Cannot create hsr debugfs directory [ 1048.705904][T30184] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5891'. [ 1048.705933][T30184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5891'. [ 1048.705953][T30184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5891'. [ 1048.780922][T30185] netlink: 31 bytes leftover after parsing attributes in process `syz.3.5891'. [ 1048.780955][T30185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5891'. [ 1048.780974][T30185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5891'. [ 1049.212386][T29960] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1049.250515][T29960] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1049.251069][T30203] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1049.258954][T29960] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1049.285127][T30203] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1049.286439][T30203] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1049.287770][T30203] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1049.289061][T30203] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1049.290383][T30203] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1049.305236][T29960] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1049.346396][T30203] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1049.371073][T30203] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1049.384744][T30203] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1049.418744][T30203] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1049.425097][T29960] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1049.456956][T29960] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1049.535569][T29960] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1049.596054][T29960] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1049.878388][T30225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5899'. [ 1050.706442][T29960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.983519][T30001] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1051.028602][T30001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1051.063787][T29960] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.115269][T30001] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1051.146961][T30270] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1051.165332][T30270] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1051.190933][T30001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1051.275711][T30001] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1051.319181][T30001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1051.336970][T30001] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1051.432109][T30001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1051.446754][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.447040][ T3292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.544548][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.544667][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.896637][T30300] Bluetooth: hci0: unsupported parameter 5135 [ 1051.896662][T30300] Bluetooth: hci0: unsupported parameter 8192 [ 1051.896676][T30300] Bluetooth: hci0: unsupported parameter 5135 [ 1051.896690][T30300] Bluetooth: hci0: unsupported parameter 8192 [ 1052.187041][T30001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.249836][T30001] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.293282][T25140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.293400][T25140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.354236][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.354388][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.413002][T30001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1052.413036][T30001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1052.517315][T30319] __nla_validate_parse: 5 callbacks suppressed [ 1052.517339][T30319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5916'. [ 1052.554083][T30313] rdma_op ffff888029781a38 conn xmit_rdma 0000000000000000 [ 1053.215634][T30337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5921'. [ 1053.469585][T30343] nbd: must specify a device to reconfigure [ 1053.491545][T30346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5923'. [ 1053.565628][T30343] netlink: 'syz.3.5922': attribute type 1 has an invalid length. [ 1053.565654][T30343] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5922'. [ 1053.565672][T30343] netlink: 'syz.3.5922': attribute type 1 has an invalid length. [ 1054.087066][T30360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5926'. [ 1054.483095][T30001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.488967][T29960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.591521][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1054.797501][T29960] veth0_vlan: entered promiscuous mode [ 1054.891290][T29960] veth1_vlan: entered promiscuous mode [ 1055.002726][T30383] IPVS: set_ctl: invalid protocol: 24198 100.1.1.1:20002 [ 1055.139503][T29960] veth0_macvtap: entered promiscuous mode [ 1055.229447][T29960] veth1_macvtap: entered promiscuous mode [ 1055.591199][T29960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.745206][T29960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.839973][ T7038] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.840027][ T7038] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.840068][ T7038] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.840107][ T7038] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.053227][T30001] veth0_vlan: entered promiscuous mode [ 1056.299376][T30001] veth1_vlan: entered promiscuous mode [ 1056.366499][ T6815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.366526][ T6815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.559954][T25139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.559979][T25139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.720457][T30001] veth0_macvtap: entered promiscuous mode [ 1056.797655][T30001] veth1_macvtap: entered promiscuous mode [ 1056.965711][T30001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.036744][T30001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.165928][T30432] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5935'. [ 1057.231300][T30418] netlink: 'syz.3.5935': attribute type 10 has an invalid length. [ 1057.284628][T25139] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.360498][T30418] dummy0: left promiscuous mode [ 1057.360715][T30418] dummy0: left allmulticast mode [ 1057.406482][ T3292] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.408741][ T3292] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.409172][ T3292] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.807881][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.807905][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.028021][T30454] ip_tables: iptables: counters copy to user failed while replacing table [ 1058.030893][T30454] netlink: 'syz.3.5940': attribute type 2 has an invalid length. [ 1058.030916][T30454] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5940'. [ 1058.258990][T30452] batman_adv: batadv0: Adding interface: syzkaller0 [ 1058.259011][T30452] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1058.259046][T30452] batman_adv: batadv0: Interface activated: syzkaller0 [ 1058.334774][T30452] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1058.404945][ T7063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.404968][ T7063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.888735][T30473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5844'. [ 1059.039958][T30468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5945'. [ 1059.129097][T30468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5945'. [ 1059.498743][T30488] netlink: 'syz.5.5948': attribute type 1 has an invalid length. [ 1059.579238][T30490] netlink: 'syz.5.5948': attribute type 1 has an invalid length. [ 1059.913062][T30498] sctp: [Deprecated]: syz.4.5950 (pid 30498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1059.913062][T30498] Use struct sctp_sack_info instead [ 1060.149993][T30509] netlink: 'syz.2.5954': attribute type 2 has an invalid length. [ 1060.176860][T30505] : renamed from bond0 (while UP) [ 1060.398602][T30502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5952'. [ 1060.849833][T30536] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5960'. [ 1060.934359][T30539] netlink: 'syz.5.5962': attribute type 23 has an invalid length. [ 1061.208852][T30540] mac80211_hwsim hwsim81 wlan0: entered promiscuous mode [ 1061.652119][T30558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5965'. [ 1061.903865][T30566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5968'. [ 1062.165465][T30574] netlink: 'syz.3.5970': attribute type 34 has an invalid length. [ 1062.165491][T30574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5970'. [ 1062.230130][T30577] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5970'. [ 1062.801412][T30590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1063.079570][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.079597][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.373001][T30607] __nla_validate_parse: 1 callbacks suppressed [ 1063.373027][T30607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5976'. [ 1063.373053][T30607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5976'. [ 1063.373071][T30607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5976'. [ 1063.920076][T30624] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5984'. [ 1063.985127][T30616] ip6gre1: entered promiscuous mode [ 1064.092570][T30631] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5982'. [ 1064.138733][T30634] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5982'. [ 1064.140978][T30636] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5982'. [ 1064.586826][T30644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5987'. [ 1064.586868][T30644] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 1064.766243][T30625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1064.953376][T30650] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1065.460647][T30668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5994'. [ 1065.508785][T30671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5995'. [ 1066.959981][T30695] bond11: entered promiscuous mode [ 1066.960218][T30695] bond11: entered allmulticast mode [ 1066.968817][T30695] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1068.063051][T30758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.145627][T30758] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.184130][T30759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1068.208815][T30764] ip_vti0: entered promiscuous mode [ 1068.253606][T30768] tc action pedit offset must be on 32 bit boundaries [ 1068.253630][T30768] tc action pedit offset must be on 32 bit boundaries [ 1068.253643][T30768] tc action pedit offset must be on 32 bit boundaries [ 1068.253654][T30768] tc action pedit offset must be on 32 bit boundaries [ 1068.253666][T30768] tc action pedit offset must be on 32 bit boundaries [ 1068.253679][T30768] tc action pedit offset must be on 32 bit boundaries [ 1068.253691][T30768] tc action pedit offset must be on 32 bit boundaries [ 1068.253703][T30768] tc action pedit offset must be on 32 bit boundaries [ 1068.253716][T30768] tc action pedit offset must be on 32 bit boundaries [ 1068.253728][T30768] tc action pedit offset must be on 32 bit boundaries [ 1068.253762][T30768] 0: reclassify loop, rule prio 0, protocol 800 [ 1068.619047][T30782] syz_tun: entered allmulticast mode [ 1068.719373][T30781] syz_tun: left allmulticast mode [ 1068.796355][T30785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1068.838984][T30787] macvtap0: entered allmulticast mode [ 1068.839015][T30787] veth0_macvtap: entered allmulticast mode [ 1069.357923][T30796] __nla_validate_parse: 2 callbacks suppressed [ 1069.357949][T30796] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6027'. [ 1069.477288][T30800] bond0: Removing last arp target with arp_interval on [ 1069.579727][T30817] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6031'. [ 1069.596091][T30818] veth0: entered promiscuous mode [ 1069.681562][T30815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6032'. [ 1069.858167][T30816] veth0: left promiscuous mode [ 1070.718514][T30866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6042'. [ 1070.718543][T30866] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6042'. [ 1070.718594][T30866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6042'. [ 1070.770336][T30866] ip6t_hbh: unknown flags 38 [ 1071.130340][T30869] openvswitch: netlink: Flow actions attr not present in new flow. [ 1071.674984][T30888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6049'. [ 1071.675020][T30888] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 1071.970084][T30895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6051'. [ 1071.984118][T30897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1072.086173][T30894] netlink: 'syz.2.6050': attribute type 1 has an invalid length. [ 1072.086201][T30894] netlink: 'syz.2.6050': attribute type 4 has an invalid length. [ 1072.086217][T30894] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6050'. [ 1072.088953][T30894] netlink: 'syz.2.6050': attribute type 1 has an invalid length. [ 1072.088975][T30894] netlink: 'syz.2.6050': attribute type 4 has an invalid length. [ 1072.088990][T30894] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6050'. [ 1072.378317][T30894] wlan0 speed is unknown, defaulting to 1000 [ 1072.425044][T30894] lo speed is unknown, defaulting to 1000 [ 1072.542078][T30902] wlan0 speed is unknown, defaulting to 1000 [ 1072.731222][T30902] lo speed is unknown, defaulting to 1000 [ 1073.937845][T30959] netlink: 'syz.4.6065': attribute type 1 has an invalid length. [ 1074.225706][T30966] ip_tables: iptables: counters copy to user failed while replacing table [ 1074.754664][T30972] netlink: 'syz.2.6067': attribute type 1 has an invalid length. [ 1074.863755][T30972] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1075.232683][T30979] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20002 [ 1075.249512][T30980] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20002 [ 1075.275345][T30979] __nla_validate_parse: 6 callbacks suppressed [ 1075.275370][T30979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6071'. [ 1075.275391][T30979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6071'. [ 1075.347327][T30982] bridge0: port 3(ipvlan1) entered blocking state [ 1075.349189][T30982] bridge0: port 3(ipvlan1) entered disabled state [ 1075.349381][T30982] ipvlan1: entered allmulticast mode [ 1075.349401][T30982] veth0_vlan: entered allmulticast mode [ 1075.388113][T30982] ipvlan1: left allmulticast mode [ 1075.388140][T30982] veth0_vlan: left allmulticast mode [ 1075.416084][T30981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1075.463596][T30987] ip_tables: iptables: counters copy to user failed while replacing table [ 1075.502796][T30988] ip_tables: iptables: counters copy to user failed while replacing table [ 1075.907947][T31007] IPVS: length: 56 != 206581052192 [ 1076.223489][T31018] netlink: 'syz.3.6080': attribute type 10 has an invalid length. [ 1076.516849][T31027] syz_tun: entered allmulticast mode [ 1076.540884][T31027] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6083'. [ 1076.589869][T31027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6083'. [ 1076.687005][T31049] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1076.839749][T31025] syz_tun: left allmulticast mode [ 1077.188211][T31070] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6089'. [ 1077.647400][T31080] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6092'. [ 1077.783342][T31080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6092'. [ 1077.794115][T31080] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6092'. [ 1078.126157][T31091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6094'. [ 1078.126189][T31091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6094'. [ 1079.851072][T31137] ip_tables: iptables: counters copy to user failed while replacing table [ 1080.206119][T31148] netlink: 'syz.3.6111': attribute type 1 has an invalid length. [ 1080.207843][T31151] netlink: 'syz.3.6111': attribute type 1 has an invalid length. [ 1080.329626][T31152] bond12: option min_links: invalid value (18446744073709551614) [ 1080.329655][T31152] bond12: option min_links: allowed values 0 - 2147483647 [ 1080.358027][T31152] bond12 (unregistering): Released all slaves [ 1080.369855][T31151] __nla_validate_parse: 6 callbacks suppressed [ 1080.369875][T31151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6111'. [ 1080.389040][T31156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6111'. [ 1080.638784][T31148] bond10: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1080.660398][T31148] bond10 (unregistering): Released all slaves [ 1080.837852][T26302] Bluetooth: hci5: command 0x0405 tx timeout [ 1081.301042][T31173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6118'. [ 1081.326234][T31173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6118'. [ 1081.904939][T31197] netlink: 'syz.2.6122': attribute type 1 has an invalid length. [ 1081.904965][T31197] netlink: 200 bytes leftover after parsing attributes in process `syz.2.6122'. [ 1081.942321][T31194] syzkaller0: entered promiscuous mode [ 1081.942348][T31194] syzkaller0: entered allmulticast mode [ 1081.984728][T31197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6122'. [ 1082.185282][T31194] macsec1: entered promiscuous mode [ 1082.736725][T31218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6125'. [ 1082.781340][T31217] bridge5: entered promiscuous mode [ 1082.781675][T31217] bridge5: entered allmulticast mode [ 1083.310766][T31225] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 1083.634328][T31248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6132'. [ 1084.056403][T31258] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6135'. [ 1084.094149][ T7063] IPVS: starting estimator thread 0... [ 1084.128858][T31268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6135'. [ 1084.181467][T31264] IPVS: using max 27 ests per chain, 64800 per kthread [ 1084.477867][T31281] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1084.560060][T31271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1085.698081][T31320] __nla_validate_parse: 2 callbacks suppressed [ 1085.698107][T31320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6145'. [ 1085.702588][T31319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6145'. [ 1085.702966][T31314] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6143'. [ 1086.587258][T17087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1086.659304][T17087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1086.664692][T17087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1086.668421][T17087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1086.676202][T17087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1087.010940][T31344] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6151'. [ 1087.365314][T31355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6154'. [ 1087.805401][T31365] netlink: 199784 bytes leftover after parsing attributes in process `syz.5.6157'. [ 1087.805447][T31365] netlink: 'syz.5.6157': attribute type 1 has an invalid length. [ 1088.753615][T26302] Bluetooth: hci1: command tx timeout [ 1088.963890][T31377] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6160'. [ 1089.113482][T31386] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6161'. [ 1089.115696][T31386] netlink: 'syz.2.6161': attribute type 21 has an invalid length. [ 1089.115721][T31386] netlink: 'syz.2.6161': attribute type 22 has an invalid length. [ 1089.115736][T31386] netlink: 'syz.2.6161': attribute type 23 has an invalid length. [ 1089.115752][T31386] netlink: 'syz.2.6161': attribute type 25 has an invalid length. [ 1089.115772][T31386] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6161'. [ 1089.307953][T31393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6162'. [ 1089.586668][T31340] wlan0 speed is unknown, defaulting to 1000 [ 1089.588799][T31340] lo speed is unknown, defaulting to 1000 [ 1090.644852][T31340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.645042][T31340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.645647][T31340] bridge_slave_0: entered allmulticast mode [ 1090.649027][T31340] bridge_slave_0: entered promiscuous mode [ 1090.682844][T31340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.687270][T31340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.687466][T31340] bridge_slave_1: entered allmulticast mode [ 1090.712898][T31340] bridge_slave_1: entered promiscuous mode [ 1090.805996][T31340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.828385][T31340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.832548][T26302] Bluetooth: hci1: command tx timeout [ 1090.924597][T31340] team0: Port device team_slave_0 added [ 1090.946052][T31340] team0: Port device team_slave_1 added [ 1091.021814][T31340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.021836][T31340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.021868][T31340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.026791][T31340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.026811][T31340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.026842][T31340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.333771][T31340] hsr_slave_0: entered promiscuous mode [ 1091.335392][T31340] hsr_slave_1: entered promiscuous mode [ 1091.336601][T31340] debugfs: 'hsr0' already exists in 'hsr' [ 1091.336634][T31340] Cannot create hsr debugfs directory [ 1091.690664][T31340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.690709][T31340] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.824519][T31340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.824564][T31340] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.944409][T31340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.944454][T31340] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.079378][T31340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.079422][T31340] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.262722][T31393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1092.643561][T31458] netlink: 'syz.4.6178': attribute type 1 has an invalid length. [ 1092.643735][T31459] netlink: 'syz.4.6178': attribute type 1 has an invalid length. [ 1092.911562][T26302] Bluetooth: hci1: command tx timeout [ 1092.925181][T31458] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1093.507043][T31465] bond16: (slave syz_tun): Enslaving as a backup interface with an up link [ 1093.758224][T31340] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1093.775266][T31340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1093.829569][T31484] __nla_validate_parse: 2 callbacks suppressed [ 1093.829593][T31484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6184'. [ 1093.830106][T31340] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1093.838688][T31483] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6184'. [ 1093.861023][T31340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1093.872026][T31340] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1093.926918][T31340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1093.981886][T31340] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1094.050610][T31340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1094.509859][T31507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6190'. [ 1094.509928][T31340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.564982][T31507] netlink: zone id is out of range [ 1094.565000][T31507] netlink: zone id is out of range [ 1094.565010][T31507] netlink: zone id is out of range [ 1094.565019][T31507] netlink: zone id is out of range [ 1094.565029][T31507] netlink: zone id is out of range [ 1094.565038][T31507] netlink: zone id is out of range [ 1094.565048][T31507] netlink: zone id is out of range [ 1094.565056][T31507] netlink: zone id is out of range [ 1094.565066][T31507] netlink: zone id is out of range [ 1094.565081][T31507] netlink: get zone limit has 4 unknown bytes [ 1094.648220][T31340] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.676099][T25140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.676216][T25140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.722778][T31512] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6192'. [ 1094.826407][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.826526][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.967386][T31520] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1094.992226][T26302] Bluetooth: hci1: command tx timeout [ 1095.785658][T31544] netlink: 'syz.1.6199': attribute type 4 has an invalid length. [ 1095.785685][T31544] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6199'. [ 1096.146179][T31556] netlink: 'syz.4.6201': attribute type 21 has an invalid length. [ 1096.146204][T31556] netlink: 'syz.4.6201': attribute type 22 has an invalid length. [ 1096.146220][T31556] netlink: 'syz.4.6201': attribute type 23 has an invalid length. [ 1096.146235][T31556] netlink: 'syz.4.6201': attribute type 25 has an invalid length. [ 1096.146249][T31556] netlink: 'syz.4.6201': attribute type 26 has an invalid length. [ 1096.146266][T31556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6201'. [ 1097.205073][T31340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.436978][T31340] veth0_vlan: entered promiscuous mode [ 1097.450960][T31340] veth1_vlan: entered promiscuous mode [ 1097.616739][T31340] veth0_macvtap: entered promiscuous mode [ 1097.647058][T31340] veth1_macvtap: entered promiscuous mode [ 1097.720753][T31340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1097.765588][T31340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1097.811598][ T7037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.812004][ T7037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.812047][ T7037] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.812087][ T7037] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.326991][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.327018][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.446167][T31604] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6216'. [ 1098.532211][ T1212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.532238][ T1212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.534408][T31604] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6216'. [ 1098.995679][T31622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6146'. [ 1099.033717][T26302] Bluetooth: hci2: SCO packet too small [ 1099.566124][T31642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6224'. [ 1099.598051][T31647] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6225'. [ 1099.600707][T31647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6225'. [ 1099.628650][T31647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6225'. [ 1099.628983][T31647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6225'. [ 1099.763944][T31649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6226'. [ 1100.289430][T31660] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6231'. [ 1100.446214][T17087] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1100.456895][T17087] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1100.477363][T17087] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1100.480986][T17087] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1100.484444][T17087] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1101.127060][T31668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.157272][T31668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.630009][T18880] bond16: (slave syz_tun): Removing an active aggregator [ 1101.644085][T18880] bond16: (slave syz_tun): Releasing backup interface [ 1101.795850][T31707] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6236'. [ 1102.389734][T31698] syzkaller0: entered promiscuous mode [ 1102.389759][T31698] syzkaller0: entered allmulticast mode [ 1102.592316][T17087] Bluetooth: hci0: command tx timeout [ 1102.979555][T31739] netlink: 'syz.2.6241': attribute type 2 has an invalid length. [ 1102.992675][T31739] Bluetooth: MGMT ver 1.23 [ 1102.992711][T31739] Bluetooth: hci0: unsupported parameter 5161 [ 1102.992744][T31739] Bluetooth: hci0: unsupported parameter 8192 [ 1102.992759][T31739] Bluetooth: hci0: unsupported parameter 5161 [ 1102.992773][T31739] Bluetooth: hci0: unsupported parameter 8192 [ 1103.000867][T31742] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1103.080976][T31664] wlan0 speed is unknown, defaulting to 1000 [ 1103.117819][T31664] lo speed is unknown, defaulting to 1000 [ 1103.181325][T31739] IPVS: Scheduler module ip_vs_sip not found [ 1103.193052][T31743] netlink: 'syz.3.6244': attribute type 4 has an invalid length. [ 1103.193080][T31743] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6244'. [ 1104.416783][T31664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.416979][T31664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.419292][T31664] bridge_slave_0: entered allmulticast mode [ 1104.451974][T31664] bridge_slave_0: entered promiscuous mode [ 1104.473468][T31664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.474590][T31664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.475052][T31664] bridge_slave_1: entered allmulticast mode [ 1104.482372][T31664] bridge_slave_1: entered promiscuous mode [ 1104.634455][T31785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6253'. [ 1104.671904][T17087] Bluetooth: hci0: command tx timeout [ 1104.675442][T31664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.703511][T31664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.758525][T31787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6253'. [ 1104.851116][T31787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1104.865648][T31787] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1104.963550][T31664] team0: Port device team_slave_0 added [ 1105.211817][T31664] team0: Port device team_slave_1 added [ 1105.245292][T31792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6254'. [ 1105.439480][T31795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6254'. [ 1105.492896][T31801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6254'. [ 1105.530928][T31795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6254'. [ 1105.748722][T31804] netlink: 'syz.5.6255': attribute type 1 has an invalid length. [ 1105.748750][T31804] netlink: 'syz.5.6255': attribute type 2 has an invalid length. [ 1105.823535][T31811] netlink: 'syz.5.6255': attribute type 1 has an invalid length. [ 1105.823561][T31811] netlink: 'syz.5.6255': attribute type 2 has an invalid length. [ 1106.057745][T31823] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 1106.073498][T31664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.073520][T31664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.074267][T31664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.102506][T31664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.102555][T31664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.102641][T31664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.754152][T17087] Bluetooth: hci0: command tx timeout [ 1106.817478][T31664] hsr_slave_0: entered promiscuous mode [ 1106.826631][T31664] hsr_slave_1: entered promiscuous mode [ 1106.847530][T31664] debugfs: 'hsr0' already exists in 'hsr' [ 1106.847559][T31664] Cannot create hsr debugfs directory [ 1107.149801][T31853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6262'. [ 1107.231059][T31857] netlink: 'syz.2.6262': attribute type 11 has an invalid length. [ 1107.307454][T31853] geneve2: entered promiscuous mode [ 1107.307483][T31853] geneve2: entered allmulticast mode [ 1107.440086][T31864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6265'. [ 1107.469672][T31863] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1107.508291][T31861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6264'. [ 1107.866813][T31874] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6266'. [ 1108.645650][T31664] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.669977][T31905] netlink: 'syz.2.6273': attribute type 1 has an invalid length. [ 1108.831630][T17087] Bluetooth: hci0: command tx timeout [ 1109.357527][T31664] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.716022][T31664] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.048919][T31946] ipt_rpfilter: unknown options [ 1110.090757][T31664] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.627548][T31959] __nla_validate_parse: 3 callbacks suppressed [ 1110.627575][T31959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6287'. [ 1110.807234][T31959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1111.066193][T31972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6291'. [ 1111.106880][T31664] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1111.131502][T31664] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1111.134399][T31664] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1111.160267][T31664] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1111.194628][T31664] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1111.216396][T31664] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1111.229738][T31664] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1111.260099][T31664] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1111.745005][T31664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.805607][T31664] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.849635][T25139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.849755][T25139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.893881][T25139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.893994][T25139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.033861][T31996] ip_tables: iptables: counters copy to user failed while replacing table [ 1112.913355][T32021] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6302'. [ 1114.073961][T31664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.577993][T32034] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6305'. [ 1115.038446][T32069] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6310'. [ 1115.722186][T31664] veth0_vlan: entered promiscuous mode [ 1115.784288][T32087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6314'. [ 1115.872456][T31664] veth1_vlan: entered promiscuous mode [ 1116.154210][T31664] veth0_macvtap: entered promiscuous mode [ 1116.200277][T31664] veth1_macvtap: entered promiscuous mode [ 1116.380864][T31664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.429939][T31664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.598414][T32110] netlink: 'syz.3.6322': attribute type 2 has an invalid length. [ 1116.639288][T32102] bond2: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 1116.655911][T32102] bond2 (unregistering): Released all slaves [ 1116.750719][T32110] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1116.862311][ T7039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.862767][ T7039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.865082][ T7039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.961984][ T7038] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.247764][T32124] ip_tables: iptables: counters copy to user failed while replacing table [ 1117.493932][T32132] netlink: 'syz.3.6324': attribute type 1 has an invalid length. [ 1117.538538][ T3292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.538565][ T3292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.827690][ T3292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.827716][ T3292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.153156][T32140] xt_CT: No such helper "snmp_trap" [ 1118.461271][T32163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6333'. [ 1118.465205][T32163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6333'. [ 1118.465233][T32163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6333'. [ 1118.696883][T32183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6335'. [ 1118.717144][T32183] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6335'. [ 1119.666181][T32208] netlink: 124 bytes leftover after parsing attributes in process `syz.3.6342'. [ 1119.724236][T32221] netlink: 124 bytes leftover after parsing attributes in process `syz.3.6342'. [ 1119.831061][T32227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6346'. [ 1119.873854][T26302] Bluetooth: hci0: command 0x0c1a tx timeout [ 1119.874006][T17087] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1119.926352][T32230] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1119.948293][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e873c00: rx timeout, send abort [ 1120.267336][T32242] batman_adv: batadv0: Adding interface: syzkaller0 [ 1120.267358][T32242] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1120.280110][T32242] batman_adv: batadv0: Interface activated: syzkaller0 [ 1120.448531][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ef97c00: rx timeout, send abort [ 1120.450182][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e873c00: abort rx timeout. Force session deactivation [ 1120.623308][T32238] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 1120.648907][T32238] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 1120.827317][T32254] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6351'. [ 1120.840531][T32254] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6351'. [ 1120.868069][T32235] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1120.948594][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ef97c00: abort rx timeout. Force session deactivation [ 1121.184452][T32235] batman_adv: batadv0: Removing interface: syzkaller0 [ 1121.363238][T32255] syz_tun: entered allmulticast mode [ 1122.190210][T17087] Bluetooth: hci5: SCO packet too small [ 1122.735751][T32302] netlink: 'syz.4.6361': attribute type 1 has an invalid length. [ 1122.735780][T32302] netlink: 220 bytes leftover after parsing attributes in process `syz.4.6361'. [ 1122.769205][T32306] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6362'. [ 1122.769232][T32306] openvswitch: netlink: Flow key attr not present in new flow. [ 1123.259548][T32317] netlink: Conntrack attr has 4 unknown bytes [ 1123.259588][T32317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1123.375107][T32320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6370'. [ 1123.375271][T32320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6370'. [ 1123.375398][T32320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6370'. [ 1123.375524][T32320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6370'. [ 1123.375649][T32320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6370'. [ 1123.375783][T32320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6370'. [ 1123.622298][T32331] netlink: 'syz.1.6369': attribute type 34 has an invalid length. [ 1123.753467][T32337] netlink: 'syz.1.6369': attribute type 34 has an invalid length. [ 1124.419564][T32360] netlink: 'syz.1.6376': attribute type 1 has an invalid length. [ 1124.648017][T32360] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1125.477607][T17087] Bluetooth: hci0: SCO packet too small [ 1126.370789][T32392] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1126.407228][T32424] __nla_validate_parse: 13 callbacks suppressed [ 1126.407253][T32424] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6389'. [ 1126.410535][T32424] xt_TCPMSS: Only works on TCP SYN packets [ 1127.181118][T32441] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6397'. [ 1127.405953][T32448] xt_hashlimit: size too large, truncated to 1048576 [ 1127.620520][T32455] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1128.371682][T32467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6403'. [ 1128.836565][T32478] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6407'. [ 1128.855696][T32479] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6407'. [ 1129.452450][T32500] netlink: 'syz.5.6410': attribute type 1 has an invalid length. [ 1129.509868][T32504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6412'. [ 1129.623994][T32504] Cannot find set identified by id 0 to match [ 1130.846696][T32528] netlink: 'syz.4.6422': attribute type 39 has an invalid length. [ 1131.905356][T32548] netlink: 'syz.1.6430': attribute type 5 has an invalid length. [ 1132.025077][T32549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6430'. [ 1132.238589][T32561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6431'. [ 1132.402853][T32565] geneve2: entered allmulticast mode [ 1133.290819][T32583] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6437'. [ 1133.872460][T32599] Cannot find set identified by id 4 to match [ 1134.139285][T32613] netlink: 'syz.4.6446': attribute type 26 has an invalid length. [ 1134.140144][T32613] netlink: 'syz.4.6446': attribute type 26 has an invalid length. [ 1134.203127][T32620] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1134.919103][T32640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6453'. [ 1135.864712][T32677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6455'. [ 1135.932161][T32665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.933849][T32665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.933996][T32665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.257552][T32686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6459'. [ 1137.730039][T32708] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6465'. [ 1138.769250][T32673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1139.173301][T32735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6470'. [ 1139.173618][T32735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6470'. [ 1139.229130][T32735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6470'. [ 1139.439140][T32739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6472'. [ 1139.439171][T32739] nbd: must specify an index to disconnect [ 1139.697750][T32749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6476'. [ 1139.839385][T32756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6476'. [ 1139.856864][T32756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6476'. [ 1140.068920][T32765] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6479'. [ 1140.234368][ T304] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6480'. [ 1141.043175][ T330] bond2: entered allmulticast mode [ 1141.616119][ T340] netlink: 'syz.3.6488': attribute type 1 has an invalid length. [ 1141.737234][ T314] syzkaller0: entered promiscuous mode [ 1141.737263][ T314] syzkaller0: entered allmulticast mode [ 1142.062455][ T345] gretap0: entered promiscuous mode [ 1142.086991][ T349] 0{X功: renamed from gretap0 [ 1142.101650][ T349] 0{X功: left promiscuous mode [ 1142.101674][ T349] 0{X功: entered allmulticast mode [ 1142.130466][ T349] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1142.130625][ T350] 1{X功: renamed from 30{X功 (while UP) [ 1142.177955][ T350] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 1142.800745][ T365] team0 (unregistering): Port device team_slave_0 removed [ 1142.843838][ T365] team0 (unregistering): Port device team_slave_1 removed [ 1143.384067][ T388] Bluetooth: MGMT ver 1.23 [ 1143.384106][ T388] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 1143.387506][ T389] netlink: 'syz.3.6499': attribute type 23 has an invalid length. [ 1143.834875][ T398] ip_tables: iptables: counters copy to user failed while replacing table [ 1143.840939][ T398] openvswitch: netlink: Missing key (keys=50, expected=80) [ 1143.881383][ T398] ip_tables: iptables: counters copy to user failed while replacing table [ 1143.885894][ T400] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1143.910106][ T398] openvswitch: netlink: Missing key (keys=50, expected=80) [ 1143.947465][ T407] __nla_validate_parse: 8 callbacks suppressed [ 1143.947492][ T407] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6503'. [ 1144.019779][ T407] syzkaller0: entered promiscuous mode [ 1144.019837][ T407] syzkaller0: entered allmulticast mode [ 1144.177386][ T410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6502'. [ 1144.288290][ T415] netlink: 'syz.4.6506': attribute type 1 has an invalid length. [ 1144.456687][ T416] bond1: (slave bridge1): making interface the new active one [ 1144.457403][ T416] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1144.593986][ T425] tipc: Enabled bearer , priority 0 [ 1144.772030][ T420] tipc: Disabling bearer [ 1145.413211][ T454] syzkaller0: entered promiscuous mode [ 1145.413239][ T454] syzkaller0: entered allmulticast mode [ 1145.564800][T26302] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1145.579511][T26302] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1145.581663][T26302] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1145.618311][T26302] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1145.629280][T26302] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1146.133292][ T467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6517'. [ 1146.133444][ T467] openvswitch: netlink: Message has 4 unknown bytes. [ 1146.706869][ T457] wlan0 speed is unknown, defaulting to 1000 [ 1146.710440][ T457] lo speed is unknown, defaulting to 1000 [ 1147.175596][ T485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1147.256010][ T457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.256190][ T457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.256342][ T457] bridge_slave_0: entered allmulticast mode [ 1147.258360][ T457] bridge_slave_0: entered promiscuous mode [ 1147.267538][ T457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.267715][ T457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.268568][ T457] bridge_slave_1: entered allmulticast mode [ 1147.275598][ T457] bridge_slave_1: entered promiscuous mode [ 1147.400457][ T457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.423021][ T457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.506274][ T457] team0: Port device team_slave_0 added [ 1147.510386][ T457] team0: Port device team_slave_1 added [ 1147.569707][ T457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.569728][ T457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.569759][ T457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.619068][ T457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.619090][ T457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.619122][ T457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.712169][T17087] Bluetooth: hci3: command tx timeout [ 1147.744618][ T457] hsr_slave_0: entered promiscuous mode [ 1147.746176][ T457] hsr_slave_1: entered promiscuous mode [ 1147.747180][ T457] debugfs: 'hsr0' already exists in 'hsr' [ 1147.747205][ T457] Cannot create hsr debugfs directory [ 1148.096155][ T457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1148.096199][ T457] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.112785][ T443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1148.562486][ T500] netlink: 'syz.3.6521': attribute type 18 has an invalid length. [ 1148.672095][ T457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1148.672139][ T457] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.752996][ T7039] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1148.753056][ T7039] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1148.753098][ T7039] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1148.753141][ T7039] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1148.867060][ T508] Bluetooth: ISO socket layer initialized [ 1148.953955][ T513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6527'. [ 1149.147889][ T457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1149.147931][ T457] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.267907][ T519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6528'. [ 1149.294954][ T520] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1149.573595][ T457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1149.580446][ T457] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.624185][ T534] xt_bpf: check failed: parse error [ 1149.653610][ T531] xt_bpf: check failed: parse error [ 1149.791436][T17087] Bluetooth: hci3: command tx timeout [ 1149.921891][ T533] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6531'. [ 1150.092297][ T553] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6531'. [ 1150.458834][ T562] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 1150.627274][ T565] pimreg: entered allmulticast mode [ 1150.742148][ T576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6536'. [ 1150.745339][ T568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6537'. [ 1150.745583][ T568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6537'. [ 1150.745838][ T568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6537'. [ 1150.746057][ T568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6537'. [ 1150.746282][ T568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6537'. [ 1151.875501][T17087] Bluetooth: hci3: command tx timeout [ 1152.897859][ T543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1152.959404][ T457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1153.193264][ T457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1153.245930][ T457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1153.297027][ T457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1153.301259][ T457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1153.410010][ T457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1153.411032][ T457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1153.428672][ T457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1153.951922][T17087] Bluetooth: hci3: command tx timeout [ 1153.996215][ T457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.107426][ T457] 8021q: adding VLAN 0 to HW filter on device team0 [ 1154.177148][T25139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.177263][T25139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.267634][T25139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.267751][T25139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.809898][ T657] __nla_validate_parse: 60 callbacks suppressed [ 1154.809922][ T657] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6554'. [ 1155.011699][ T663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6556'. [ 1156.084665][ T700] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1156.305062][ T717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6566'. [ 1156.397508][ T722] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 1156.526794][ T726] vcan0: tx drop: invalid da for name 0x0080000000000000 [ 1156.541541][ T717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6566'. [ 1156.563155][ T726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6568'. [ 1156.712659][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f3d1000: rx timeout, send abort [ 1156.898383][ T457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.139119][ T7063] dvmrp0: left allmulticast mode [ 1157.139251][ T7063] pimreg: left allmulticast mode [ 1157.212133][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f3d2400: rx timeout, send abort [ 1157.212716][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f3d1000: abort rx timeout. Force session deactivation [ 1157.575991][ T759] netlink: 'syz.2.6575': attribute type 12 has an invalid length. [ 1157.712201][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807f3d2400: abort rx timeout. Force session deactivation [ 1158.214978][ T7063] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1158.349654][ T7063] bond9 (unregistering): (slave bond0): Releasing active interface [ 1158.368181][ T7063] bond0 (unregistering): Released all slaves [ 1158.385347][ T7063] bond1 (unregistering): Released all slaves [ 1158.407462][ T7063] bond2 (unregistering): Released all slaves [ 1158.439091][ T7063] bond3 (unregistering): Released all slaves [ 1158.468379][ T7063] bond4 (unregistering): Released all slaves [ 1158.490395][ T7063] bond5 (unregistering): Released all slaves [ 1158.522835][ T7063] bond6 (unregistering): Released all slaves [ 1158.549965][ T7063] bond7 (unregistering): Released all slaves [ 1158.571871][ T7063] bond8 (unregistering): Released all slaves [ 1158.600090][ T7063] bond9 (unregistering): Released all slaves [ 1158.628409][ T7063] bond10 (unregistering): Released all slaves [ 1158.658181][ T7063] bond11 (unregistering): Released all slaves [ 1158.679783][ T7063] bond12 (unregistering): Released all slaves [ 1158.706309][ T7063] bond13 (unregistering): Released all slaves [ 1158.728707][ T7063] bond14 (unregistering): Released all slaves [ 1158.773365][ T457] veth0_vlan: entered promiscuous mode [ 1158.946332][ T457] veth1_vlan: entered promiscuous mode [ 1159.075207][T26302] Bluetooth: hci2: command 0x0406 tx timeout [ 1159.177070][ T761] wlan0 speed is unknown, defaulting to 1000 [ 1159.180009][ T7063] : left promiscuous mode [ 1159.353601][ T761] lo speed is unknown, defaulting to 1000 [ 1159.356910][ T7063] tipc: Disabling bearer [ 1159.357054][ T7063] tipc: Left network mode [ 1159.480505][ T772] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1159.480995][ T772] syzkaller1: linktype set to 823 [ 1159.571416][ T785] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1159.577493][ T786] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1159.577612][ T786] syzkaller1: linktype set to 823 [ 1159.672657][ T788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6579'. [ 1159.672684][ T788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6579'. [ 1159.784959][ T457] veth0_macvtap: entered promiscuous mode [ 1159.994004][ T457] veth1_macvtap: entered promiscuous mode [ 1160.445723][ T457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1160.527322][ T457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1160.578358][ T712] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.578622][ T712] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.578817][ T712] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.578881][ T712] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.828697][ T791] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1160.828850][ T791] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1160.873125][ T801] netlink: 'syz.3.6585': attribute type 12 has an invalid length. [ 1161.270035][ T808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1161.435563][ T815] IPv6: NLM_F_CREATE should be specified when creating new route [ 1161.435674][ T815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6588'. [ 1161.756081][ T7063] vlan0: left allmulticast mode [ 1161.756109][ T7063] veth0_vlan: left allmulticast mode [ 1161.757785][ T7063] veth1_macvtap: left promiscuous mode [ 1161.757833][ T7063] veth0_macvtap: left allmulticast mode [ 1161.757854][ T7063] veth0_macvtap: left promiscuous mode [ 1161.757980][ T7063] veth1_vlan: left promiscuous mode [ 1161.834159][ T821] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6591'. [ 1161.902199][ T822] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6592'. [ 1164.426985][ T711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.427011][ T711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1164.908401][ T711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1164.908428][ T711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.628757][ T7063] IPVS: stop unused estimator thread 0... [ 1165.912029][ T875] nbd5: detected capacity change from 0 to 63 [ 1166.000180][T17087] block nbd5: Receive control failed (result -104) [ 1166.262540][ T888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6609'. [ 1166.263577][ T888] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6609'. [ 1166.428738][ T892] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6610'. [ 1167.156285][ T918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6616'. [ 1167.156321][ T918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6616'. [ 1167.253238][ T923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6616'. [ 1167.317296][ T918] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1167.363652][ T918] bond2 (unregistering): Released all slaves [ 1167.599164][ T918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6616'. [ 1168.190652][ T967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6626'. [ 1168.190680][ T967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6626'. [ 1168.253596][ T967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6626'. [ 1168.253629][ T967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6626'. [ 1168.257479][ T965] netlink: 'syz.2.6625': attribute type 39 has an invalid length. [ 1168.769197][ T982] netlink: 'syz.4.6630': attribute type 22 has an invalid length. [ 1168.769226][ T982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6630'. [ 1168.853967][ T989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6631'. [ 1168.860119][ T982] netlink: 'syz.4.6630': attribute type 22 has an invalid length. [ 1169.181569][ T7063] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.421848][ T712] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.421940][ T712] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.421982][ T712] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.715435][T25139] nci: nci_ntf_packet: unknown ntf opcode 0x138 [ 1172.599483][ T1004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1172.617044][ T1011] netlink: 'syz.2.6638': attribute type 12 has an invalid length. [ 1172.827989][ T1060] __nla_validate_parse: 2 callbacks suppressed [ 1172.828023][ T1060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6646'. [ 1172.868930][ T1060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6646'. [ 1173.164132][ T1065] gretap0: entered promiscuous mode [ 1173.167305][ T1065] batman_adv: batadv0: Adding interface: gretap0 [ 1173.167325][ T1065] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 1173.167353][ T1065] batman_adv: batadv0: Not using interface gretap0 (retrying later): interface not active [ 1173.170932][ T1073] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6649'. [ 1173.328357][ T1065] netlink: 'syz.4.6647': attribute type 1 has an invalid length. [ 1173.328388][ T1065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6647'. [ 1173.702735][ T1094] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6655'. [ 1173.709322][ T1094] netlink: 'syz.3.6655': attribute type 83 has an invalid length. [ 1173.866371][ T1091] mac80211_hwsim hwsim95 wlan0: entered promiscuous mode [ 1174.653460][ T1130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6665'. [ 1174.885112][ T1130] netlink: 'syz.4.6665': attribute type 1 has an invalid length. [ 1174.885141][ T1130] netlink: 'syz.4.6665': attribute type 2 has an invalid length. [ 1174.888561][ T1139] netlink: 'syz.3.6667': attribute type 10 has an invalid length. [ 1174.889135][ T1135] netlink: 'syz.3.6667': attribute type 10 has an invalid length. [ 1175.065668][ T1139] team0: Device veth0_macvtap failed to register rx_handler [ 1175.094847][ T1135] team0: Device veth0_macvtap failed to register rx_handler [ 1175.331777][ T1149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6671'. [ 1175.747582][ T1178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6676'. [ 1175.969837][ T1184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1176.049984][ T1191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6679'. [ 1176.050897][ T1191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6679'. [ 1176.629919][ T1208] netlink: 'syz.5.6684': attribute type 7 has an invalid length. [ 1176.629945][ T1208] netlink: 'syz.5.6684': attribute type 8 has an invalid length. [ 1177.104750][ T1223] syzkaller1: entered promiscuous mode [ 1177.104778][ T1223] syzkaller1: entered allmulticast mode [ 1177.148476][ T1223] netlink: 'syz.5.6687': attribute type 7 has an invalid length. [ 1178.202404][ T1256] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1178.374349][ T1266] __nla_validate_parse: 6 callbacks suppressed [ 1178.374373][ T1266] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6700'. [ 1178.374866][ T1266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1178.587082][ T1272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6704'. [ 1178.929248][ T1284] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6709'. [ 1178.929281][ T1284] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6709'. [ 1179.883720][ T1319] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 1179.985667][ T1323] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6720'. [ 1179.985698][ T1323] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6720'. [ 1180.289384][ T1342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6722'. [ 1180.289415][ T1342] netlink: 'syz.4.6722': attribute type 3 has an invalid length. [ 1180.369876][ T1342] netlink: 'syz.4.6722': attribute type 16 has an invalid length. [ 1180.369903][ T1342] netlink: 'syz.4.6722': attribute type 2 has an invalid length. [ 1180.369919][ T1342] netlink: 64110 bytes leftover after parsing attributes in process `syz.4.6722'. [ 1180.590798][ T1344] wlan0 speed is unknown, defaulting to 1000 [ 1180.599631][ T1344] lo speed is unknown, defaulting to 1000 [ 1180.932569][ T1361] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6726'. [ 1181.207965][ T1378] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6732'. [ 1182.698374][ T1416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1182.916012][ T1429] openvswitch: netlink: Message has 4 unknown bytes. [ 1182.940690][ T1429] lo: entered allmulticast mode [ 1182.959324][ T1428] lo: left allmulticast mode [ 1183.037506][ T1430] netlink: 'syz.2.6747': attribute type 1 has an invalid length. [ 1183.332203][ T1435] syzkaller0: entered promiscuous mode [ 1183.332231][ T1435] syzkaller0: entered allmulticast mode [ 1183.715025][ T1443] __nla_validate_parse: 197 callbacks suppressed [ 1183.715052][ T1443] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6751'. [ 1183.868437][ T1455] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6753'. [ 1184.559075][ T1473] xt_IDLETIMER: label is empty or not nul-terminated [ 1184.596984][ T1477] netlink: 'syz.3.6758': attribute type 16 has an invalid length. [ 1184.597013][ T1477] netlink: 'syz.3.6758': attribute type 2 has an invalid length. [ 1184.597029][ T1477] netlink: 64110 bytes leftover after parsing attributes in process `syz.3.6758'. [ 1184.675118][ T1471] wlan0 speed is unknown, defaulting to 1000 [ 1184.676928][ T1471] lo speed is unknown, defaulting to 1000 [ 1185.393760][ T1500] xt_connbytes: Forcing CT accounting to be enabled [ 1185.393833][ T1500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1185.453489][ T1500] netlink: 'syz.2.6764': attribute type 1 has an invalid length. [ 1185.952568][ T1518] netlink: 'syz.3.6772': attribute type 3 has an invalid length. [ 1185.952598][ T1518] netlink: 'syz.3.6772': attribute type 1 has an invalid length. [ 1185.952615][ T1518] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6772'. [ 1186.088779][ T1523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6773'. [ 1186.088807][ T1523] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6773'. [ 1188.324055][ T1612] xt_hashlimit: size too large, truncated to 1048576 [ 1190.554927][ T1591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1190.874236][ T713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.874262][ T713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1191.079159][ T1632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1191.194850][ T1625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6797'. [ 1191.476184][ T1642] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6799'. [ 1192.055496][ T1654] block nbd3: NBD_DISCONNECT [ 1192.055528][ T1654] block nbd3: Send disconnect failed -32 [ 1192.418636][ T1671] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6809'. [ 1192.432127][ T1672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6811'. [ 1193.160885][ T1703] netlink: 'syz.1.6816': attribute type 5 has an invalid length. [ 1193.610648][ T1715] netlink: 'syz.3.6820': attribute type 1 has an invalid length. [ 1193.711917][ T1720] ip_tables: iptables: counters copy to user failed while replacing table [ 1193.727056][ T1715] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1193.819660][ T1715] netlink: 'syz.3.6820': attribute type 10 has an invalid length. [ 1193.927639][ T1726] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6822'. [ 1193.965570][ T1715] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1194.113782][ T1721] bond5: (slave gretap1): making interface the new active one [ 1194.120772][ T1721] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1194.378623][ T1738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6823'. [ 1194.378657][ T1738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6823'. [ 1194.456547][ T1738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6823'. [ 1194.648924][ T1745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6827'. [ 1195.095223][ T1752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6828'. [ 1195.315413][ T1752] Bluetooth: hci0: unsupported parameter 5161 [ 1195.315442][ T1752] Bluetooth: hci0: unsupported parameter 8192 [ 1195.315458][ T1752] Bluetooth: hci0: unsupported parameter 5161 [ 1195.315473][ T1752] Bluetooth: hci0: unsupported parameter 8192 [ 1195.898778][ T1772] netlink: 'syz.4.6836': attribute type 5 has an invalid length. [ 1195.898807][ T1772] netlink: 'syz.4.6836': attribute type 6 has an invalid length. [ 1196.038108][ T1725] block nbd5: Possible stuck request ffff8880272ae000: control (read@0,1024B). Runtime 30 seconds [ 1196.039068][ T1725] block nbd5: Possible stuck request ffff8880272ae1c0: control (read@1024,3072B). Runtime 30 seconds [ 1197.667036][ T1827] vlan2: entered allmulticast mode [ 1197.667063][ T1827] bond0: entered allmulticast mode [ 1197.836198][ T1828] vcan0: tx address claim with dlc 0 [ 1198.430747][ T1858] netlink: 'syz.2.6861': attribute type 1 has an invalid length. [ 1198.430773][ T1858] nbd: error processing sock list [ 1198.500008][ T1858] netlink: 'syz.2.6861': attribute type 2 has an invalid length. [ 1198.610378][ T1860] __nla_validate_parse: 4 callbacks suppressed [ 1198.610403][ T1860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6861'. [ 1198.668086][ T1862] ipt_ECN: cannot use operation on non-tcp rule [ 1198.699997][ T1858] : entered promiscuous mode [ 1198.775939][ T1860] netlink: 'syz.2.6861': attribute type 1 has an invalid length. [ 1198.913722][ T1873] netlink: 'syz.1.6867': attribute type 1 has an invalid length. [ 1199.046722][ T1873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1199.280457][ T1876] bond1: (slave gretap1): making interface the new active one [ 1199.314882][ T1876] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1199.601719][ T1895] netlink: 'syz.2.6874': attribute type 1 has an invalid length. [ 1199.684148][ T1895] bond3: entered promiscuous mode [ 1199.684582][ T1895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1200.110313][ T1904] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1200.206024][ T1904] bond2 (unregistering): Released all slaves [ 1200.306942][ T1905] syzkaller1: entered promiscuous mode [ 1200.306969][ T1905] syzkaller1: entered allmulticast mode [ 1200.857690][ T1929] netlink: 'syz.3.6881': attribute type 2 has an invalid length. [ 1200.956890][ T1937] netlink: 'syz.4.6884': attribute type 2 has an invalid length. [ 1201.737498][ T1964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6891'. [ 1201.840240][ T1965] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6892'. [ 1202.618143][ T1991] netlink: 'syz.3.6899': attribute type 2 has an invalid length. [ 1202.728394][ T1991] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1202.974168][ T1996] bond4: option lp_interval: invalid value (0) [ 1202.974199][ T1996] bond4: option lp_interval: allowed values 1 - 2147483647 [ 1203.002909][ T1996] bond4 (unregistering): Released all slaves [ 1203.652824][ T2021] sctp: [Deprecated]: syz.1.6908 (pid 2021) Use of int in maxseg socket option. [ 1203.652824][ T2021] Use struct sctp_assoc_value instead [ 1204.337523][ T2047] netlink: 'syz.2.6916': attribute type 12 has an invalid length. [ 1204.337551][ T2047] netlink: 'syz.2.6916': attribute type 29 has an invalid length. [ 1204.337567][ T2047] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6916'. [ 1204.337604][ T2047] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6916'. [ 1204.520143][ T2053] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6918'. [ 1205.100511][ T2072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6924'. [ 1205.153549][ T2076] xt_hashlimit: max too large, truncated to 1048576 [ 1205.154285][ T2076] Timeout policy `syz1' can only be used by L3 protocol number 34948 [ 1205.486033][ T2086] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1205.504568][ T2087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6927'. [ 1205.599491][ T2093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6932'. [ 1205.601030][ T2093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6932'. [ 1205.685180][ T2095] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6933'. [ 1206.250215][ T2114] netlink: Invalid conntrack timeout [ 1206.250253][ T2114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1206.949660][ T2134] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6944'. [ 1206.950015][ T2134] unsupported nlmsg_type 40 [ 1207.059118][ T2140] syzkaller1: entered promiscuous mode [ 1207.059147][ T2140] syzkaller1: entered allmulticast mode [ 1207.109024][ T2134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6944'. [ 1208.431629][ T2176] netlink: 'syz.3.6953': attribute type 9 has an invalid length. [ 1209.361981][ T2206] __nla_validate_parse: 3 callbacks suppressed [ 1209.362003][ T2206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6961'. [ 1209.378886][ T2206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6961'. [ 1209.378952][ T2206] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6961'. [ 1209.379112][ T2206] netlink: 'syz.5.6961': attribute type 5 has an invalid length. [ 1209.467815][ T2208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6960'. [ 1210.058487][ T2231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6969'. [ 1210.168042][ T2231] bond3: entered allmulticast mode [ 1210.276137][T17087] Bluetooth: hci1: command 0x0406 tx timeout [ 1210.276184][T17087] Bluetooth: hci5: command 0x0405 tx timeout [ 1210.456139][ T2241] x_tables: duplicate underflow at hook 1 [ 1210.587561][ T2243] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6972'. [ 1210.913956][ T2253] netlink: 9 bytes leftover after parsing attributes in process `syz.5.6976'. [ 1210.942303][ T2253] gretap0: entered promiscuous mode [ 1211.056066][ T2256] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6979'. [ 1211.378980][ T2263] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6981'. [ 1211.417730][ T2264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6982'. [ 1211.681139][ T2242] syzkaller1: entered promiscuous mode [ 1211.681603][ T2242] syzkaller1: entered allmulticast mode [ 1213.246138][ T2332] netlink: 'syz.2.6998': attribute type 1 has an invalid length. [ 1213.993215][ T2361] IPv6: NLM_F_CREATE should be specified when creating new route [ 1214.461742][ T2374] __nla_validate_parse: 5 callbacks suppressed [ 1214.461767][ T2374] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7009'. [ 1215.039130][ T2388] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7013'. [ 1215.651119][ T2405] netlink: 117 bytes leftover after parsing attributes in process `syz.5.7016'. [ 1215.669648][ T2405] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7016'. [ 1216.085040][ T2430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7021'. [ 1216.102517][ T2434] netlink: 'syz.2.7022': attribute type 2 has an invalid length. [ 1216.102542][ T2434] netlink: 'syz.2.7022': attribute type 8 has an invalid length. [ 1216.102558][ T2434] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7022'. [ 1216.204400][ T2437] Cannot find map_set index 2 as target [ 1217.094615][ T2476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7031'. [ 1217.097974][ T2478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7031'. [ 1217.268869][ T2486] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7030'. [ 1217.426044][ T2501] reject_tg6_check: 23 callbacks suppressed [ 1217.426066][ T2501] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1217.587048][ T2506] netlink: 'syz.5.7037': attribute type 3 has an invalid length. [ 1217.587426][ T2506] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7037'. [ 1217.684516][ T2509] netlink: 'syz.1.7039': attribute type 4 has an invalid length. [ 1219.263142][ T2596] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1220.174824][ T2636] tipc: Failed to remove unknown binding: 66,0,0/0:4057269672/4057269674 [ 1220.174862][ T2636] tipc: Failed to remove unknown binding: 66,0,0/0:4057269672/4057269673 [ 1220.175329][ T2636] tipc: Failed to remove unknown binding: 66,0,0/0:4057269672/4057269674 [ 1220.175358][ T2636] tipc: Failed to remove unknown binding: 66,0,0/0:4057269672/4057269673 [ 1220.725669][ T2642] team0: Device veth1_macvtap failed to register rx_handler [ 1220.815392][ T2645] vcan0: entered allmulticast mode [ 1221.193519][ T2669] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1221.564716][ T2681] __nla_validate_parse: 3 callbacks suppressed [ 1221.564739][ T2681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7074'. [ 1222.206802][ T2716] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7081'. [ 1222.225814][ T2714] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1222.400208][ T2718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7082'. [ 1222.486388][ T2727] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7085'. [ 1222.730408][ T2743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7090'. [ 1222.730447][ T2743] gretap0: left promiscuous mode [ 1222.790893][ T2746] netlink: 'syz.4.7087': attribute type 1 has an invalid length. [ 1222.871688][ T2746] bond4: entered promiscuous mode [ 1222.872127][ T2746] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1222.966275][ T2755] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7091'. [ 1222.966324][ T2755] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7091'. [ 1223.017559][ T2763] netlink: 'syz.4.7087': attribute type 1 has an invalid length. [ 1223.019686][ T2746] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1223.020123][ T2746] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1223.020146][ T2746] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1223.065810][ T2746] bond4: (slave ip6gre1): making interface the new active one [ 1223.065838][ T2746] ip6gre1: entered promiscuous mode [ 1223.082193][ T2746] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 1223.148514][ T2766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7092'. [ 1223.148542][ T2766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7092'. [ 1223.284023][ T2771] xt_hashlimit: size too large, truncated to 1048576 [ 1223.340010][ T2772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7093'. [ 1223.958497][ T2791] netlink: 'syz.1.7097': attribute type 1 has an invalid length. [ 1223.979188][ T2792] xt_addrtype: ipv6 does not support BROADCAST matching [ 1224.018301][ T2791] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1224.264152][ T2791] bond2: (slave geneve2): making interface the new active one [ 1224.287783][ T2791] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1224.400709][ T2804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1224.562982][ T2814] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1224.583593][ T2814] bond5 (unregistering): Released all slaves [ 1225.153483][ T2830] siw: device registration error -23 [ 1225.250178][ T2841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1225.363138][ T2841] netlink: 'syz.1.7109': attribute type 1 has an invalid length. [ 1225.516388][ T2841] bond4 (unregistering): Released all slaves [ 1226.112828][ T1725] block nbd5: Possible stuck request ffff8880272ae000: control (read@0,1024B). Runtime 60 seconds [ 1226.112879][ T1725] block nbd5: Possible stuck request ffff8880272ae1c0: control (read@1024,3072B). Runtime 60 seconds [ 1226.175149][ T2876] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1226.528806][ T2890] IPv6: Can't replace route, no match found [ 1226.735804][ T2893] __nla_validate_parse: 5 callbacks suppressed [ 1226.735830][ T2893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7121'. [ 1226.978638][ T2911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7124'. [ 1227.170307][ T2913] netlink: 'syz.4.7124': attribute type 2 has an invalid length. [ 1227.661481][ T2949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7132'. [ 1227.703598][ T2949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7132'. [ 1228.066334][ T7038] IPVS: starting estimator thread 0... [ 1228.172298][ T2957] IPVS: using max 25 ests per chain, 60000 per kthread [ 1228.359480][ T2965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7136'. [ 1228.359506][ T2965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7136'. [ 1228.360353][ T2965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7136'. [ 1228.360379][ T2965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7136'. [ 1228.540668][ T2976] atomic_op ffff8880673cb9e0 conn xmit_atomic 0000000000000000 [ 1228.551085][ T2976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7138'. [ 1228.847146][ T2981] netlink: 'syz.2.7139': attribute type 1 has an invalid length. [ 1228.847177][ T2981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7139'. [ 1229.206633][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.206686][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.206722][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.206759][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.206795][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.206830][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.206866][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.207000][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.401220][ T2966] net_ratelimit: 3007 callbacks suppressed [ 1229.401245][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.401299][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.435794][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.435846][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.435885][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.435922][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.435959][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.435995][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.436033][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.436163][ T2966] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1229.596275][ T2995] netlink: 'syz.1.7143': attribute type 30 has an invalid length. [ 1230.502231][ T3014] nbd: socks must be embedded in a SOCK_ITEM attr [ 1230.518847][ T3014] netlink: 'syz.4.7146': attribute type 10 has an invalid length. [ 1230.858467][ T3023] xt_REDIRECT: bad MAP_IPS. [ 1231.677557][ T3051] bond5: entered allmulticast mode [ 1232.081112][ T3051] bond6 (unregistering): Released all slaves [ 1232.123991][ T3058] bond5 (unregistering): Released all slaves [ 1232.558318][ T3093] netlink: 'syz.3.7168': attribute type 2 has an invalid length. [ 1232.575637][ T3096] __nla_validate_parse: 7 callbacks suppressed [ 1232.575663][ T3096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7170'. [ 1232.575688][ T3096] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7170'. [ 1232.939126][ T3096] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7170'. [ 1233.577418][ T3122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7176'. [ 1233.689560][T29969] udevd[29969]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1233.734841][T24189] udevd[24189]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1234.005240][ T3133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7180'. [ 1234.230046][ T3139] vlan2: entered promiscuous mode [ 1234.230076][ T3139] bridge0: entered promiscuous mode [ 1234.420871][ T3154] geneve3: entered promiscuous mode [ 1234.420901][ T3154] geneve3: entered allmulticast mode [ 1234.461563][T29476] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1234.461616][T29476] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1234.461653][T29476] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1234.472418][T29476] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1234.701516][ T3154] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1234.703406][ T3154] bridge0: port 3(bond4) entered blocking state [ 1234.706059][ T3154] bridge0: port 3(bond4) entered disabled state [ 1234.706435][ T3154] bond4: entered allmulticast mode [ 1234.735049][ T3154] bond4: entered promiscuous mode [ 1234.758887][ T3154] bridge0: port 3(bond4) entered blocking state [ 1234.759112][ T3154] bridge0: port 3(bond4) entered listening state [ 1234.954457][ T3181] netlink: 'syz.3.7189': attribute type 1 has an invalid length. [ 1235.014951][ T3171] team0 (unregistering): Port device team_slave_0 removed [ 1235.046301][ T3171] team0 (unregistering): Port device team_slave_1 removed [ 1235.068698][ T3168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7187'. [ 1235.215661][ T3154] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7185'. [ 1235.217374][T25139] bridge0: port 3(bond4) entered disabled state [ 1235.327969][ T3177] syzkaller1: entered promiscuous mode [ 1235.327996][ T3177] syzkaller1: entered allmulticast mode [ 1235.420959][ T3181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7189'. [ 1235.691669][ T3181] vcan0 (unregistering): left allmulticast mode [ 1236.326152][ T3200] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.7195'. [ 1236.326282][ T3200] 0猉功D龌: renamed from gretap0 (while UP) [ 1236.329252][ T3200] 0猉功D龌: entered allmulticast mode [ 1236.550957][ T3223] netlink: 'syz.5.7198': attribute type 2 has an invalid length. [ 1236.550989][ T3223] netlink: 'syz.5.7198': attribute type 2 has an invalid length. [ 1236.673889][ T3222] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7199'. [ 1237.104105][ T3235] bridge_slave_0: left allmulticast mode [ 1237.107627][ T3235] bridge_slave_0: left promiscuous mode [ 1237.108631][ T3235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.205066][ T3235] bridge_slave_1: left allmulticast mode [ 1237.205100][ T3235] bridge_slave_1: left promiscuous mode [ 1237.205352][ T3235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.248523][ T3235] : (slave bond_slave_0): Releasing backup interface [ 1237.267661][ T3235] : (slave bond_slave_1): Releasing backup interface [ 1237.307430][ T3235] team0: Port device team_slave_0 removed [ 1237.326682][ T3235] team0: Port device team_slave_1 removed [ 1237.327748][ T3235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1237.327772][ T3235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1237.377304][ T3235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1237.377509][ T3235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1237.408297][ T3235] net_ratelimit: 4186 callbacks suppressed [ 1237.408323][ T3235] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1237.980665][ T3265] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7209'. [ 1238.019011][ T3272] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7209'. [ 1238.400392][ T3279] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7213'. [ 1238.448388][ T3294] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.7217'. [ 1238.448418][ T3294] openvswitch: netlink: Message has 512 unknown bytes. [ 1238.690292][ T3297] bond5: option fail_over_mac: invalid value (16) [ 1238.705801][ T3297] bond5 (unregistering): Released all slaves [ 1238.817314][ T3302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7219'. [ 1241.292180][ T3286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1241.610862][ T3329] xt_NETMAP: bad MAP_IPS. [ 1241.665473][ T3337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7227'. [ 1241.802975][ T3343] netlink: 'syz.3.7230': attribute type 1 has an invalid length. [ 1242.085424][ T3349] netlink: Unknown conntrack attr (0) [ 1242.383354][ T3358] netlink: 'syz.5.7236': attribute type 58 has an invalid length. [ 1242.383387][ T3358] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7236'. [ 1242.409494][ T3369] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1242.411482][ T3369] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1242.430134][ T3369] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1242.430553][ T3369] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1242.453071][ T3369] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1242.457397][ T3369] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1242.541882][ T3364] can: request_module (can-proto-3) failed. [ 1242.650555][ T3364] can: request_module (can-proto-3) failed. [ 1242.650652][ T3366] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7238'. [ 1242.970480][ T3364] can: request_module (can-proto-3) failed. [ 1243.162625][ T3364] can: request_module (can-proto-3) failed. [ 1243.257531][ T3364] can: request_module (can-proto-3) failed. [ 1243.288030][ T3397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7245'. [ 1244.039847][ T3423] netlink: 'syz.4.7250': attribute type 21 has an invalid length. [ 1244.039874][ T3423] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7250'. [ 1244.044132][ T3423] netlink: 'syz.4.7250': attribute type 5 has an invalid length. [ 1244.044154][ T3423] netlink: 'syz.4.7250': attribute type 6 has an invalid length. [ 1244.044170][ T3423] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7250'. [ 1244.497632][ T3436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7252'. [ 1244.514821][ T3436] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7252'. [ 1244.709050][ T3430] tunl0: entered promiscuous mode [ 1244.745646][ T3430] netlink: 'syz.5.7251': attribute type 3 has an invalid length. [ 1244.745674][ T3430] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7251'. [ 1245.809208][ T3469] xt_addrtype: ipv6 does not support BROADCAST matching [ 1245.910922][ T3473] xt_addrtype: ipv6 does not support BROADCAST matching [ 1246.042450][ T3472] vlan3: entered promiscuous mode [ 1246.042633][ T3472] vlan3: entered allmulticast mode [ 1246.042651][ T3472] bridge0: entered allmulticast mode [ 1246.135221][ T3481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7260'. [ 1246.168448][ T3484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7260'. [ 1246.436565][ T3491] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7261'. [ 1246.506679][ T3491] netlink: 'syz.1.7261': attribute type 1 has an invalid length. [ 1246.990670][ T3506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7266'. [ 1249.054870][ T3483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1249.401223][ T3521] netlink: 'syz.5.7268': attribute type 23 has an invalid length. [ 1249.410817][ T3523] sctp: [Deprecated]: syz.2.7269 (pid 3523) Use of int in max_burst socket option. [ 1249.410817][ T3523] Use struct sctp_assoc_value instead [ 1249.515177][ T3529] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1249.612359][ T3521] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20001 [ 1250.758313][ T3573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7282'. [ 1250.827828][ T3577] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7282'. [ 1251.120987][ T3584] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7285'. [ 1251.162801][ T3584] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7285'. [ 1251.164544][ T3584] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7285'. [ 1251.194100][ T3584] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7285'. [ 1251.216796][ T3584] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7285'. [ 1251.270970][ T3584] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7285'. [ 1251.299737][ T3584] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7285'. [ 1251.324964][ T3584] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7285'. [ 1251.813500][ T3609] IPv6: NLM_F_CREATE should be specified when creating new route [ 1253.140165][ T3546] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1253.359484][ T3632] netlink: 'syz.4.7295': attribute type 1 has an invalid length. [ 1254.106397][ T3658] netlink: 'syz.3.7303': attribute type 1 has an invalid length. [ 1254.360100][ T3658] bond7: entered promiscuous mode [ 1254.372634][ T3658] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1254.515893][ T3662] bond7: (slave bridge2): making interface the new active one [ 1254.515924][ T3662] bridge2: entered promiscuous mode [ 1254.542760][ T3662] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 1255.351662][ T3688] netlink: 'syz.2.7312': attribute type 1 has an invalid length. [ 1255.786757][ T3709] __nla_validate_parse: 61 callbacks suppressed [ 1255.786782][ T3709] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7314'. [ 1256.192080][ T1725] block nbd5: Possible stuck request ffff8880272ae000: control (read@0,1024B). Runtime 90 seconds [ 1256.192129][ T1725] block nbd5: Possible stuck request ffff8880272ae1c0: control (read@1024,3072B). Runtime 90 seconds [ 1258.329546][ T4986] udevd[4986]: worker [23626] /devices/virtual/block/nbd5 is taking a long time [ 1264.157124][ T3704] 0猉功D龌: entered promiscuous mode [ 1264.157155][ T3704] 0猉功D龌: left allmulticast mode [ 1264.191832][ T3709] 0{X功: renamed from 00猉功D龌 [ 1264.213511][ T3709] 0{X功: left promiscuous mode [ 1264.213538][ T3709] 0{X功: entered allmulticast mode [ 1264.215557][ T3709] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1264.624863][ T3735] syz_tun: entered promiscuous mode [ 1264.688347][ T3742] --map-set only usable from mangle table [ 1265.646618][ T3751] syzkaller0: entered promiscuous mode [ 1265.646651][ T3751] syzkaller0: entered allmulticast mode [ 1265.675642][ T3768] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7329'. [ 1265.870014][ T3777] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1265.959588][ T3781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7330'. [ 1272.137840][ T3807] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1272.204813][ T3807] bond3 (unregistering): Released all slaves [ 1272.442339][ T3820] x_tables: duplicate underflow at hook 2 [ 1272.920165][ T3841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7341'. [ 1273.069426][ T3847] bridge0: port 3(syz_tun) entered blocking state [ 1273.069548][ T3847] bridge0: port 3(syz_tun) entered disabled state [ 1273.069752][ T3847] syz_tun: entered allmulticast mode [ 1273.095869][ T3847] syz_tun: entered promiscuous mode [ 1273.513675][ T3860] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1276.457441][ T3860] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1276.850440][ T3894] syzkaller1: entered promiscuous mode [ 1276.935233][ T3899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7357'. [ 1277.161908][ T3908] sock: sock_set_timeout: `syz.5.7362' (pid 3908) tries to set negative timeout [ 1277.367268][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7363'. [ 1277.390508][ T3918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7363'. [ 1277.748718][ T3927] Bluetooth: MGMT ver 1.23 [ 1277.817595][ T3931] x_tables: duplicate underflow at hook 1 [ 1277.895259][ T3929] Unknown options in mask 4 [ 1278.258031][ T3940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7371'. [ 1278.679654][ T3954] netlink: 'syz.2.7375': attribute type 11 has an invalid length. [ 1278.916880][ T3970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7377'. [ 1279.056587][ T3977] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.7377'. [ 1279.277476][ T3979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7379'. [ 1279.532597][ T3981] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7380'. [ 1279.671718][ T3983] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 1279.870870][ T3990] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7384'. [ 1280.042330][ T3995] netlink: 'syz.1.7386': attribute type 1 has an invalid length. [ 1280.229594][ T3995] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1280.442265][ T3997] bond5: (slave veth3): Enslaving as an active interface with a down link [ 1280.524866][ T3997] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1280.744981][ T3997] bond5: (slave veth7): Enslaving as an active interface with a down link [ 1280.858920][ T31] audit: type=1800 audit(1789223797.509:11): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7392" name="memory.events" dev="tmpfs" ino=1583 res=0 errno=0 [ 1280.926711][ T3997] bond5: (slave veth9): Enslaving as an active interface with a down link [ 1281.206068][ T4033] netlink: 'syz.4.7396': attribute type 2 has an invalid length. [ 1281.206709][ T4034] netlink: 'syz.4.7396': attribute type 2 has an invalid length. [ 1281.560761][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7400'. [ 1282.945237][ T4097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7410'. [ 1283.000819][ T4098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7410'. [ 1283.115404][ T4077] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1283.222430][ T4081] 1{X功: left allmulticast mode [ 1283.319679][ T4085] macvlan2: entered promiscuous mode [ 1283.319707][ T4085] macvlan2: entered allmulticast mode [ 1283.329987][ T4085] bond3: (slave macvlan2): Error -22 calling dev_set_mtu [ 1283.510786][ T4100] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7411'. [ 1283.851623][ T4106] xt_limit: Overflow, try lower: 536871034/127 [ 1283.870390][ T4106] ip_tables: iptables: counters copy to user failed while replacing table [ 1284.042672][ T4109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.297883][ T4122] sctp: [Deprecated]: syz.2.7419 (pid 4122) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1284.297883][ T4122] Use struct sctp_sack_info instead [ 1284.378000][ T4128] x_tables: duplicate underflow at hook 3 [ 1285.227866][ T4128] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7422'. [ 1285.309506][ T4141] netlink: 'syz.4.7426': attribute type 29 has an invalid length. [ 1285.445212][ T4145] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1285.952310][ T4154] wlan0 speed is unknown, defaulting to 1000 [ 1285.961816][ T4154] lo speed is unknown, defaulting to 1000 [ 1286.271903][ T1725] block nbd5: Possible stuck request ffff8880272ae000: control (read@0,1024B). Runtime 120 seconds [ 1286.271954][ T1725] block nbd5: Possible stuck request ffff8880272ae1c0: control (read@1024,3072B). Runtime 120 seconds [ 1286.392300][ T4171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7437'. [ 1286.897354][ T4184] netlink: 'syz.5.7441': attribute type 1 has an invalid length. [ 1286.897383][ T4184] netlink: 240 bytes leftover after parsing attributes in process `syz.5.7441'. [ 1286.897402][ T4184] netlink: 'syz.5.7441': attribute type 1 has an invalid length. [ 1287.280149][ T4198] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7445'. [ 1287.284219][ T4198] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7445'. [ 1287.301755][ T4198] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7445'. [ 1287.320165][ T4198] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7445'. [ 1287.349866][ T4198] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7445'. [ 1287.362851][ T4191] netlink: 'syz.2.7430': attribute type 16 has an invalid length. [ 1287.362875][ T4191] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.7430'. [ 1287.451220][ T4201] x_tables: duplicate underflow at hook 3 [ 1287.907956][ T4217] Cannot find del_set index 4 as target [ 1288.023139][ T4226] netlink: 'syz.1.7450': attribute type 33 has an invalid length. [ 1288.262996][ T4226] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1288.276205][ T4226] bond6 (unregistering): Released all slaves [ 1288.493769][ T4234] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1288.496233][ T4234] team0: Device ipvlan3 is already an upper device of the team interface [ 1288.865768][ T4246] netlink: 'syz.1.7455': attribute type 1 has an invalid length. [ 1288.974458][T32204] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1289.103727][ T4246] bond6: entered promiscuous mode [ 1289.110135][ T4246] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1289.296598][ T4253] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1289.297014][ T4253] bond6: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1289.297037][ T4253] bond6: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1289.364402][ T4253] bond6: (slave xfrm1): making interface the new active one [ 1289.364434][ T4253] xfrm1: entered promiscuous mode [ 1289.402866][ T4253] bond6: (slave xfrm1): Enslaving as an active interface with an up link [ 1289.403207][ T4270] __nla_validate_parse: 19 callbacks suppressed [ 1289.403228][ T4270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7461'. [ 1289.777539][ T4272] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7462'. [ 1289.777570][ T4272] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7462'. [ 1289.878563][ T4274] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7463'. [ 1290.354772][ T4293] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7466'. [ 1290.354822][ T4293] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7466'. [ 1290.546490][ T4297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7467'. [ 1290.827373][ T4302] vlan3: entered promiscuous mode [ 1290.827401][ T4302] bridge0: entered promiscuous mode [ 1291.105980][ T4309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1291.404049][ T4320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7470'. [ 1291.585735][ T4324] IPv6: sit1: Disabled Multicast RS [ 1291.698986][ T4328] netlink: 'syz.4.7475': attribute type 2 has an invalid length. [ 1291.720901][ T4330] netlink: 'syz.4.7475': attribute type 2 has an invalid length. [ 1291.901101][ T4333] Bluetooth: hci0: unsupported parameter 5135 [ 1291.904802][ T4333] Bluetooth: hci0: unsupported parameter 8192 [ 1291.904866][ T4333] Bluetooth: hci0: unsupported parameter 5135 [ 1291.904907][ T4333] Bluetooth: hci0: unsupported parameter 8192 [ 1292.025817][ T4337] netlink: 'syz.5.7477': attribute type 1 has an invalid length. [ 1292.123918][ T4339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7478'. [ 1292.561888][ T4353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7483'. [ 1292.561967][ T4353] netlink: 'syz.5.7483': attribute type 3 has an invalid length. [ 1292.930675][ T4362] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1293.007840][ T4362] bond5 (unregistering): Released all slaves [ 1293.763035][ T4395] netlink: 'syz.1.7491': attribute type 23 has an invalid length. [ 1294.791132][ T4430] __nla_validate_parse: 12 callbacks suppressed [ 1294.792122][ T4430] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7505'. [ 1294.926748][ T4428] netlink: 'syz.1.7504': attribute type 10 has an invalid length. [ 1294.926777][ T4428] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7504'. [ 1294.926916][ T4428] dummy0: entered promiscuous mode [ 1294.926960][ T4428] dummy0: entered allmulticast mode [ 1294.927944][ T4428] bridge0: port 4(dummy0) entered blocking state [ 1294.928069][ T4428] bridge0: port 4(dummy0) entered disabled state [ 1294.928573][ T4435] netlink: 232 bytes leftover after parsing attributes in process `syz.5.7506'. [ 1294.965704][ T4428] bridge0: port 4(dummy0) entered blocking state [ 1294.966107][ T4428] bridge0: port 4(dummy0) entered listening state [ 1295.011042][ T4435] netlink: 464 bytes leftover after parsing attributes in process `syz.5.7506'. [ 1295.231892][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1295.385108][ T4446] IPVS: length: 24 != 321214200216 [ 1295.646635][ T4454] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1295.750810][ T4460] netlink: zone id is out of range [ 1295.750942][ T4460] netlink: zone id is out of range [ 1295.750972][ T4460] netlink: zone id is out of range [ 1295.772078][ T4454] netlink: 'syz.2.7513': attribute type 12 has an invalid length. [ 1295.776983][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7514'. [ 1295.804627][ T4462] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7516'. [ 1296.159918][ T4474] netlink: 'syz.3.7520': attribute type 1 has an invalid length. [ 1296.548240][ T4468] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7518'. [ 1296.576045][ T4468] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7518'. [ 1296.610635][ T4468] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7518'. [ 1296.659795][ T4468] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7518'. [ 1296.804520][ T4494] FAULT_INJECTION: forcing a failure. [ 1296.804520][ T4494] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.804566][ T4494] CPU: 0 UID: 0 PID: 4494 Comm: syz.3.7523 Not tainted syzkaller #0 PREEMPT(full) [ 1296.804594][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1296.804609][ T4494] Call Trace: [ 1296.804619][ T4494] [ 1296.804629][ T4494] dump_stack_lvl+0xe8/0x150 [ 1296.804674][ T4494] should_fail_ex+0x410/0x560 [ 1296.804706][ T4494] ? __alloc_skb+0x1db/0x7a0 [ 1296.804736][ T4494] should_failslab+0xa8/0x100 [ 1296.804767][ T4494] ? __alloc_skb+0x1db/0x7a0 [ 1296.804801][ T4494] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1296.804839][ T4494] ? __alloc_skb+0x18d/0x7a0 [ 1296.804867][ T4494] ? __alloc_skb+0x1db/0x7a0 [ 1296.804902][ T4494] __alloc_skb+0x1db/0x7a0 [ 1296.804937][ T4494] ppp_write+0xb1/0x400 [ 1296.805088][ T4494] ? vfs_writev+0x495/0x990 [ 1296.805121][ T4494] vfs_writev+0x4bb/0x990 [ 1296.805150][ T4494] ? __pfx_ppp_write+0x10/0x10 [ 1296.805188][ T4494] ? __pfx_vfs_writev+0x10/0x10 [ 1296.805232][ T4494] ? __fget_files+0x2a/0x420 [ 1296.805272][ T4494] ? __fget_files+0x3a2/0x420 [ 1296.805304][ T4494] ? __fget_files+0x2a/0x420 [ 1296.805346][ T4494] __x64_sys_pwritev+0x19c/0x2b0 [ 1296.805375][ T4494] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 1296.805413][ T4494] do_syscall_64+0x166/0x520 [ 1296.805441][ T4494] ? trace_irq_disable+0x3b/0x140 [ 1296.805467][ T4494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.805493][ T4494] ? clear_bhb_loop+0x70/0xc0 [ 1296.805523][ T4494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1296.805547][ T4494] RIP: 0033:0x7fd48879e159 [ 1296.805570][ T4494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1296.805590][ T4494] RSP: 002b:00007fd489660028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 1296.805617][ T4494] RAX: ffffffffffffffda RBX: 00007fd488a25fa0 RCX: 00007fd48879e159 [ 1296.805634][ T4494] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 1296.805650][ T4494] RBP: 00007fd489660090 R08: 0000000000000000 R09: 0000000000000000 [ 1296.805666][ T4494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1296.805680][ T4494] R13: 00007fd488a26038 R14: 00007fd488a25fa0 R15: 00007ffe1970a518 [ 1296.805717][ T4494] [ 1297.510503][ T4502] openvswitch: netlink: Multiple metadata blocks provided [ 1297.659126][ T4520] netlink: 'syz.4.7530': attribute type 1 has an invalid length. [ 1297.659156][ T4520] netlink: 'syz.4.7530': attribute type 3 has an invalid length. [ 1299.149039][ T4575] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1299.340846][T32204] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1299.355564][ T4580] openvswitch: netlink: Tunnel attr 7439 out of range max 16 [ 1299.959887][ T4603] batman_adv: batadv0: Adding interface: syzkaller0 [ 1299.959927][ T4603] batman_adv: batadv0: Interface activated: syzkaller0 [ 1300.056312][ T4604] __nla_validate_parse: 8 callbacks suppressed [ 1300.056337][ T4604] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7555'. [ 1300.112518][ T4608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7558'. [ 1300.112587][ T4608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7558'. [ 1300.113393][ T4607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7558'. [ 1300.113418][ T4607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7558'. [ 1300.181025][ T4608] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1300.227974][ T4608] bond7 (unregistering): Released all slaves [ 1300.261746][ T4610] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7557'. [ 1300.428543][ T4607] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1300.466436][ T4607] bond7 (unregistering): Released all slaves [ 1300.883684][ T4639] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7564'. [ 1301.567373][ T4673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1302.267591][ T4677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7574'. [ 1302.388924][ T4680] syzkaller1: entered promiscuous mode [ 1302.388952][ T4680] syzkaller1: entered allmulticast mode [ 1302.748746][ T4707] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.7580'. [ 1303.068045][ T4714] syzkaller1: entered promiscuous mode [ 1303.068072][ T4714] syzkaller1: entered allmulticast mode [ 1303.263215][ T4723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7584'. [ 1303.772514][ T4745] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20004 [ 1303.779156][ T4747] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20004 [ 1303.832706][ T4749] netlink: 'syz.2.7587': attribute type 3 has an invalid length. [ 1306.338998][ T4815] __nla_validate_parse: 8 callbacks suppressed [ 1306.339023][ T4815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7609'. [ 1306.954882][ T4826] netlink: 'syz.5.7610': attribute type 13 has an invalid length. [ 1307.199400][ T4834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7614'. [ 1307.635470][ T4847] netlink: 'syz.2.7618': attribute type 32 has an invalid length. [ 1307.746247][ T4850] netlink: 'syz.4.7621': attribute type 2 has an invalid length. [ 1307.746277][ T4850] netlink: 'syz.4.7621': attribute type 2 has an invalid length. [ 1307.947594][ T4857] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7620'. [ 1307.947625][ T4857] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1308.043662][ T4860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7622'. [ 1308.098294][ T4852] ip_tables: iptables: counters copy to user failed while replacing table [ 1308.457184][ T4868] ipvlan2: entered allmulticast mode [ 1308.457216][ T4868] mac80211_hwsim hwsim87 wlan0: entered allmulticast mode [ 1308.478725][ T4868] batman_adv: batadv0: Adding interface: ipvlan2 [ 1308.478745][ T4868] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1308.478918][ T4868] batman_adv: batadv0: Interface activated: ipvlan2 [ 1308.788020][ T4872] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7626'. [ 1309.161971][ T4883] policy can only be matched on NF_INET_PRE_ROUTING [ 1309.161988][ T4883] unable to load match [ 1309.234419][ T4870] xt_CT: No such helper "snmp_trap" [ 1309.884275][ T4911] ip6t_srh: unknown srh invflags 4000 [ 1310.596105][ C0] bridge0: port 4(dummy0) entered learning state [ 1310.619081][ T4945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7643'. [ 1311.191284][ C0] ------------[ cut here ]------------ [ 1311.191302][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1311.191335][ C0] WARNING: net/mac80211/rate.c:404 at __rate_control_send_low+0x60c/0x8a0, CPU#0: syz-executor/31340 [ 1311.219948][ C0] Modules linked in: [ 1311.225876][ C0] CPU: 0 UID: 0 PID: 31340 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1311.235563][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1311.245742][ C0] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 1311.252162][ C0] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 1311.271861][ C0] RSP: 0018:ffffc900000076d8 EFLAGS: 00010246 [ 1311.277979][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1311.286063][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff908c3210 [ 1311.294146][ C0] RBP: ffff88805f8e0f40 R08: 0000000000000000 R09: 0000000000000000 [ 1311.302237][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88807cb8d168 [ 1311.310251][ C0] R13: dffffc0000000000 R14: ffffffff908c3210 R15: ffff88805f8e3258 [ 1311.318355][ C0] FS: 000055557b151500(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 1311.327399][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1311.334070][ C0] CR2: 0000200000000130 CR3: 000000007781a000 CR4: 00000000003526f0 [ 1311.342137][ C0] Call Trace: [ 1311.345452][ C0] [ 1311.348350][ C0] rate_control_send_low+0x1a7/0x7b0 [ 1311.353753][ C0] rate_control_get_rate+0x20b/0x5d0 [ 1311.359103][ C0] ieee80211_beacon_get_finish+0x385/0x6c0 [ 1311.365356][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1311.372220][ C0] ? __ieee80211_beacon_add_tim+0x1204/0x1630 [ 1311.378400][ C0] ? ieee80211_beacon_get_ap+0x8d4/0x20c0 [ 1311.384231][ C0] ieee80211_beacon_get_ap+0x19d5/0x20c0 [ 1311.389938][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 1311.396038][ C0] ? kasan_save_free_info+0x40/0x50 [ 1311.401374][ C0] ? lock_acquire+0x115/0x350 [ 1311.406198][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1311.411843][ C0] __ieee80211_beacon_get+0x1250/0x1920 [ 1311.417480][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1311.423142][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1311.428653][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1311.434830][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1311.440555][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1311.445856][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1311.452019][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1311.459294][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1311.465452][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1311.472580][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1311.478439][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 1311.483729][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1311.489584][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1311.494943][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 1311.500122][ C0] handle_softirqs+0x226/0x860 [ 1311.505020][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1311.509844][ C0] __irq_exit_rcu+0xcb/0x220 [ 1311.514534][ C0] irq_exit_rcu+0x9/0x30 [ 1311.518828][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1311.524548][ C0] [ 1311.527510][ C0] [ 1311.530473][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1311.536537][ C0] RIP: 0010:kasan_check_range+0x8a/0x2c0 [ 1311.542262][ C0] Code: 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 <4c> 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 9e 01 00 00 49 ff c3 [ 1311.561961][ C0] RSP: 0018:ffffc90003e7f2c8 EFLAGS: 00000202 [ 1311.568084][ C0] RAX: ffffffff821ee201 RBX: dffffc0000000001 RCX: ffffffff821ee241 [ 1311.576300][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea0001915774 [ 1311.584366][ C0] RBP: ffffc90003e7f590 R08: ffffea0001915777 R09: 1ffffd4000322aee [ 1311.592435][ C0] R10: dffffc0000000000 R11: fffff94000322aee R12: 0000000000000001 [ 1311.600448][ C0] R13: ffffea0001915740 R14: fffff94000322aef R15: 1ffffd4000322aee [ 1311.608525][ C0] ? copy_pmd_range+0x9f1/0x5c10 [ 1311.613566][ C0] ? copy_pmd_range+0xa31/0x5c10 [ 1311.618658][ C0] copy_pmd_range+0xa31/0x5c10 [ 1311.623558][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 1311.628826][ C0] ? __lock_acquire+0x747/0x2de0 [ 1311.633869][ C0] ? mas_wr_store_type+0xf80/0x1980 [ 1311.639238][ C0] copy_page_range+0xc82/0x1290 [ 1311.644220][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1311.649564][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 1311.656629][ C0] dup_mmap+0xf17/0x1dc0 [ 1311.660958][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1311.665748][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1311.670963][ C0] ? lock_acquire+0x115/0x350 [ 1311.675751][ C0] copy_mm+0x11a/0x480 [ 1311.679911][ C0] ? copy_process+0xd3c/0x43e0 [ 1311.684759][ C0] copy_process+0x1e75/0x43e0 [ 1311.689497][ C0] ? copy_process+0xd3c/0x43e0 [ 1311.694465][ C0] ? __pfx_copy_process+0x10/0x10 [ 1311.699570][ C0] kernel_clone+0x2d7/0x940 [ 1311.704189][ C0] ? cgroup1_freezing+0x20/0x350 [ 1311.709192][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1311.714343][ C0] __x64_sys_clone+0x1b6/0x230 [ 1311.719169][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1311.724583][ C0] ? do_user_addr_fault+0xc4c/0x1340 [ 1311.729930][ C0] do_syscall_64+0x166/0x520 [ 1311.734610][ C0] ? trace_irq_disable+0x3b/0x140 [ 1311.739676][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.745839][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1311.750568][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.756555][ C0] RIP: 0033:0x7fd4887c6bd2 [ 1311.761016][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1311.780808][ C0] RSP: 002b:00007ffe1970a730 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1311.789333][ C0] RAX: ffffffffffffffda RBX: 00007ffe1970a730 RCX: 00007fd4887c6bd2 [ 1311.797442][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1311.805515][ C0] RBP: 00007ffe1970a8bc R08: 0000000000000000 R09: 0000000000000001 [ 1311.813579][ C0] R10: 000055557b1517d0 R11: 0000000000000246 R12: 0000000000000001 [ 1311.821908][ C0] R13: 00000000000927c0 R14: 0000000000140110 R15: 00007ffe1970a910 [ 1311.829954][ C0] [ 1311.833076][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1311.840407][ C0] CPU: 0 UID: 0 PID: 31340 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1311.849994][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1311.860110][ C0] Call Trace: [ 1311.863435][ C0] [ 1311.866326][ C0] vpanic+0x56d/0xa60 [ 1311.870410][ C0] ? __pfx__printk+0x10/0x10 [ 1311.875099][ C0] ? __pfx_vpanic+0x10/0x10 [ 1311.879659][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1311.884996][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1311.890265][ C0] panic+0xc5/0xd0 [ 1311.894130][ C0] ? __pfx_panic+0x10/0x10 [ 1311.898631][ C0] __warn+0x315/0x4c0 [ 1311.902663][ C0] ? __rate_control_send_low+0x60c/0x8a0 [ 1311.908354][ C0] ? __rate_control_send_low+0x60c/0x8a0 [ 1311.914038][ C0] __report_bug+0x276/0x570 [ 1311.918680][ C0] ? __kernel_text_address+0xd/0x30 [ 1311.923961][ C0] ? __rate_control_send_low+0x60c/0x8a0 [ 1311.929675][ C0] ? __pfx___report_bug+0x10/0x10 [ 1311.934813][ C0] ? stack_trace_save+0xa9/0x100 [ 1311.939826][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1311.945270][ C0] report_bug_entry+0x19b/0x290 [ 1311.950176][ C0] ? __rate_control_send_low+0x638/0x8a0 [ 1311.955867][ C0] ? __rate_control_send_low+0x63d/0x8a0 [ 1311.961587][ C0] handle_bug+0xce/0x200 [ 1311.965898][ C0] exc_invalid_op+0x1a/0x50 [ 1311.970454][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1311.975353][ C0] RIP: 0010:__rate_control_send_low+0x638/0x8a0 [ 1311.981687][ C0] Code: 7c 24 10 48 8b 44 24 28 42 0f b6 04 28 84 c0 0f 85 c4 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 24 44 8b 4c 24 0c <67> 48 0f b9 3a e9 46 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f [ 1312.001341][ C0] RSP: 0018:ffffc900000076d8 EFLAGS: 00010246 [ 1312.007477][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 1312.015489][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff908c3210 [ 1312.023506][ C0] RBP: ffff88805f8e0f40 R08: 0000000000000000 R09: 0000000000000000 [ 1312.031520][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88807cb8d168 [ 1312.039536][ C0] R13: dffffc0000000000 R14: ffffffff908c3210 R15: ffff88805f8e3258 [ 1312.047578][ C0] ? __rate_control_send_low+0x600/0x8a0 [ 1312.053308][ C0] rate_control_send_low+0x1a7/0x7b0 [ 1312.058679][ C0] rate_control_get_rate+0x20b/0x5d0 [ 1312.064036][ C0] ieee80211_beacon_get_finish+0x385/0x6c0 [ 1312.069951][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1312.076332][ C0] ? __ieee80211_beacon_add_tim+0x1204/0x1630 [ 1312.082464][ C0] ? ieee80211_beacon_get_ap+0x8d4/0x20c0 [ 1312.088279][ C0] ieee80211_beacon_get_ap+0x19d5/0x20c0 [ 1312.094050][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 1312.100114][ C0] ? kasan_save_free_info+0x40/0x50 [ 1312.105429][ C0] ? lock_acquire+0x115/0x350 [ 1312.110160][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1312.115838][ C0] __ieee80211_beacon_get+0x1250/0x1920 [ 1312.121437][ C0] ? __ieee80211_beacon_get+0x36/0x1920 [ 1312.127063][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 1312.132589][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1312.138721][ C0] mac80211_hwsim_beacon_tx+0x378/0x820 [ 1312.144326][ C0] __iterate_interfaces+0x2af/0x5a0 [ 1312.149588][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1312.155713][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1312.162970][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1312.169093][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1312.176178][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1312.182026][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 1312.187284][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1312.193144][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 1312.198421][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 1312.203601][ C0] handle_softirqs+0x226/0x860 [ 1312.208473][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1312.213302][ C0] __irq_exit_rcu+0xcb/0x220 [ 1312.217950][ C0] irq_exit_rcu+0x9/0x30 [ 1312.222244][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1312.227923][ C0] [ 1312.230882][ C0] [ 1312.233841][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1312.239866][ C0] RIP: 0010:kasan_check_range+0x8a/0x2c0 [ 1312.245551][ C0] Code: 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 <4c> 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 9e 01 00 00 49 ff c3 [ 1312.265203][ C0] RSP: 0018:ffffc90003e7f2c8 EFLAGS: 00000202 [ 1312.271317][ C0] RAX: ffffffff821ee201 RBX: dffffc0000000001 RCX: ffffffff821ee241 [ 1312.279425][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea0001915774 [ 1312.287453][ C0] RBP: ffffc90003e7f590 R08: ffffea0001915777 R09: 1ffffd4000322aee [ 1312.295469][ C0] R10: dffffc0000000000 R11: fffff94000322aee R12: 0000000000000001 [ 1312.303482][ C0] R13: ffffea0001915740 R14: fffff94000322aef R15: 1ffffd4000322aee [ 1312.311516][ C0] ? copy_pmd_range+0x9f1/0x5c10 [ 1312.316509][ C0] ? copy_pmd_range+0xa31/0x5c10 [ 1312.321526][ C0] copy_pmd_range+0xa31/0x5c10 [ 1312.326395][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 1312.331666][ C0] ? __lock_acquire+0x747/0x2de0 [ 1312.336644][ C0] ? mas_wr_store_type+0xf80/0x1980 [ 1312.341894][ C0] copy_page_range+0xc82/0x1290 [ 1312.346824][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 1312.352170][ C0] ? __pfx___mapping_rmap_tree_augment_rotate+0x10/0x10 [ 1312.359173][ C0] dup_mmap+0xf17/0x1dc0 [ 1312.363503][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 1312.368238][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1312.373362][ C0] ? lock_acquire+0x115/0x350 [ 1312.378118][ C0] copy_mm+0x11a/0x480 [ 1312.382247][ C0] ? copy_process+0xd3c/0x43e0 [ 1312.387054][ C0] copy_process+0x1e75/0x43e0 [ 1312.391822][ C0] ? copy_process+0xd3c/0x43e0 [ 1312.396647][ C0] ? __pfx_copy_process+0x10/0x10 [ 1312.401714][ C0] kernel_clone+0x2d7/0x940 [ 1312.406257][ C0] ? cgroup1_freezing+0x20/0x350 [ 1312.411228][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 1312.416304][ C0] __x64_sys_clone+0x1b6/0x230 [ 1312.421104][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 1312.426439][ C0] ? do_user_addr_fault+0xc4c/0x1340 [ 1312.431771][ C0] do_syscall_64+0x166/0x520 [ 1312.436409][ C0] ? trace_irq_disable+0x3b/0x140 [ 1312.441470][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.447591][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1312.452310][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.458232][ C0] RIP: 0033:0x7fd4887c6bd2 [ 1312.462677][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 1312.482401][ C0] RSP: 002b:00007ffe1970a730 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1312.490842][ C0] RAX: ffffffffffffffda RBX: 00007ffe1970a730 RCX: 00007fd4887c6bd2 [ 1312.498837][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1312.506838][ C0] RBP: 00007ffe1970a8bc R08: 0000000000000000 R09: 0000000000000001 [ 1312.514831][ C0] R10: 000055557b1517d0 R11: 0000000000000246 R12: 0000000000000001 [ 1312.522830][ C0] R13: 00000000000927c0 R14: 0000000000140110 R15: 00007ffe1970a910 [ 1312.530846][ C0] [ 1312.534507][ C0] Kernel Offset: disabled [ 1312.538852][ C0] Rebooting in 86400 seconds..