last executing test programs: 1m25.404993949s ago: executing program 2 (id=482): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000008000000bf08fffff900000055090100000000009500000000ec0000bf916a0000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a1700"/56], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5, @ANYBLOB="123428ec5f18181d273ea0c703538817e3e58cd42c27e03a6cbb6c9bcbae268e926da512ee5f9f956dbf4f264e3d264176917464aee6c60424768caf522357a71097580bf82037768489574f963b8a047b649410aeda0a7f5f56035d4b74cea9fc3b1d066990a894f8f91c7b7ff3ffef8c576b11"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 1m11.827619007s ago: executing program 2 (id=482): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000008000000bf08fffff900000055090100000000009500000000ec0000bf916a0000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a1700"/56], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5, @ANYBLOB="123428ec5f18181d273ea0c703538817e3e58cd42c27e03a6cbb6c9bcbae268e926da512ee5f9f956dbf4f264e3d264176917464aee6c60424768caf522357a71097580bf82037768489574f963b8a047b649410aeda0a7f5f56035d4b74cea9fc3b1d066990a894f8f91c7b7ff3ffef8c576b11"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 57.829250631s ago: executing program 2 (id=482): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000008000000bf08fffff900000055090100000000009500000000ec0000bf916a0000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a1700"/56], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5, @ANYBLOB="123428ec5f18181d273ea0c703538817e3e58cd42c27e03a6cbb6c9bcbae268e926da512ee5f9f956dbf4f264e3d264176917464aee6c60424768caf522357a71097580bf82037768489574f963b8a047b649410aeda0a7f5f56035d4b74cea9fc3b1d066990a894f8f91c7b7ff3ffef8c576b11"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 43.425315999s ago: executing program 2 (id=482): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000008000000bf08fffff900000055090100000000009500000000ec0000bf916a0000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a1700"/56], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5, @ANYBLOB="123428ec5f18181d273ea0c703538817e3e58cd42c27e03a6cbb6c9bcbae268e926da512ee5f9f956dbf4f264e3d264176917464aee6c60424768caf522357a71097580bf82037768489574f963b8a047b649410aeda0a7f5f56035d4b74cea9fc3b1d066990a894f8f91c7b7ff3ffef8c576b11"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 25.399066951s ago: executing program 2 (id=482): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000008000000bf08fffff900000055090100000000009500000000ec0000bf916a0000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a1700"/56], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5, @ANYBLOB="123428ec5f18181d273ea0c703538817e3e58cd42c27e03a6cbb6c9bcbae268e926da512ee5f9f956dbf4f264e3d264176917464aee6c60424768caf522357a71097580bf82037768489574f963b8a047b649410aeda0a7f5f56035d4b74cea9fc3b1d066990a894f8f91c7b7ff3ffef8c576b11"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 9.416356619s ago: executing program 2 (id=482): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000008000000bf08fffff900000055090100000000009500000000ec0000bf916a0000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a1700"/56], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5, @ANYBLOB="123428ec5f18181d273ea0c703538817e3e58cd42c27e03a6cbb6c9bcbae268e926da512ee5f9f956dbf4f264e3d264176917464aee6c60424768caf522357a71097580bf82037768489574f963b8a047b649410aeda0a7f5f56035d4b74cea9fc3b1d066990a894f8f91c7b7ff3ffef8c576b11"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 1.983759266s ago: executing program 3 (id=1356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000000)='.'}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000040)={0x9, 0x0, 0xffffff3f, 0xffffffff, r5}, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) ioctl$SIOCGETSGCNT(r6, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000001080)=0x1, 0x4) 1.938669934s ago: executing program 4 (id=1358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0) recvmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@xdp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/233, 0xe9}], 0x1, &(0x7f0000000380)=""/131, 0x83}, 0x40010121) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tcp_retransmit_synack\x00', r1}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.758712735s ago: executing program 4 (id=1359): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x6c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x80}}]}}}, @IFLA_CARRIER={0x5, 0x21, 0xe0}, @IFLA_EXT_MASK={0x8, 0x1d, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$kcm(0x29, 0x2, 0x0) 1.682024698s ago: executing program 3 (id=1361): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}]}, 0x38}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001940)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x8b, 0x11, 0x0, @empty, @empty}, {0x24, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xf}}}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0xc8}}, 0x40891) socket$nl_generic(0x10, 0x3, 0x10) 1.555947335s ago: executing program 3 (id=1362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000abc010000000a05000000000000000000010000000900010073797a3000000000d30006003407ae8929b5d5805c2cb15c6832bdf04f6f732bf6c75790a071b67033b0bb7e81aac8c9ccb093263d99fcafa58fe6c7126fc1d2ccbc1888abd4a61e1818723b358b147b8836997950921d849981687e7eb599e28bd439758eefcbda6f7906db339e68d3869e4011ddfb254a2dda9b523f928b3626f8faa75357d4f9cb925df5cde675f9e8bb05e4f8cc9a0610fb2945b1b755b94883afb3697a7535ea5f9db3ce21c1f0cc3fb343e830c6a947f512c56b1a706b86e76bc58a075f7cb0322f7fa6fb5df1718361423df5cbd47608ca000900010073797a310000000008000240000000030c000440000000000000000499000600db2b252f3c9b3b419bda841c524cb69270214a733fee6d8e10561ce9d682ad271b8a317d699b2f000178b2aca7c7058e0df489887ebdcf11c4ddf03bc9b1284f5fb568bac9b64b06c9d8c2acf08c892fb2abeb7c72bc9c8fa0c7425b5aa3df8074d8412d67fad836b6cc1c0be2fff19dbd1830e29ae4bc6aaa4f42c244e40238dc8e2a247b1792a177693b55dc155f631634db5af90000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b40000000005c000480580001800b000100746172676574000048000280300003005fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b09000100534e41540000000008000240000000020900010073797a30"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}}, 0x0) 1.542932087s ago: executing program 4 (id=1363): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}}, 0x50) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @loopback, 0x2}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x3d, &(0x7f0000000900)=""/172, &(0x7f00000009c0)=0xac) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000002c40)={'wlan1\x00', &(0x7f0000002bc0)=@ethtool_gstrings={0x1b, 0x1}}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002100000009001f00706879f529000000050020"], 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x51}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r11, 0x29, 0x30, &(0x7f0000000640)={0x2ddf11b3, {{0xa, 0x4e23, 0x1, @remote, 0x780}}}, 0x90) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="01002dbd7000ffdbdf874cfe2b0008000300", @ANYRES32=r13], 0x1c}}, 0x4004000) sendmsg$NL80211_CMD_RADAR_DETECT(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r9, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0xf2c, 0x1e}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2f}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffa}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c090}, 0x4004800) 1.371864771s ago: executing program 1 (id=1364): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$isdn(0x22, 0x2, 0x26) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000680099d29cb2106615550100002e9f000000000002000000000000000400040008000500", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x401}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x6c}, 0x2, @in6=@private2, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@mcast1={0xff, 0x5}, @remote, @empty, 0x0, 0x200, 0x0, 0x0, 0xc, 0x8544000a}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$SIOCAX25DELFWD(r7, 0x89eb, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c9d75005200010000002c8eb86fd88bc84eeac308000100edcaf49900"], 0x1c}}, 0x0) close(r0) 1.370289402s ago: executing program 0 (id=1365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x1, 0x0, "2f720e0cb6ba65dbdfcbf21ce19620c96a91d856d57a9cdf9fda7ca31f82acb08e2802577743d8fd1d80e4778967a934edb1fbbf7bad1aeed9d3ab6af24afeff35c1d0efd876241b1e7eba2886970068"}, 0xd8) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000000950000002e0000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x505}, "1610c0b41980a97f", "30bc54452787dc92c5007cc369a654d1", "1e8b88eb", "cca8a3a1f0f0d4ba"}, 0x28) 1.295681314s ago: executing program 3 (id=1366): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x3, 0x2) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa", @ANYRES32, @ANYRES32=r3], 0x1c) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200448c4}, 0x850) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 1.265116898s ago: executing program 4 (id=1367): r0 = socket$kcm(0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020300000c00010001"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x2400c001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000008c55c8c1b45a61768042cf", @ANYRES16=r4, @ANYBLOB="00022dbd7000fedbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x64}, 0x1, 0x0, 0x0, 0x20000014}, 0x40050) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000700bd00aa"], 0x38}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000480), 0x10) sendmmsg$inet(r6, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000000c0)={r7, 0x40, 0xfffffffffffffffb, 0x1}) accept(r8, 0x0, &(0x7f0000000300)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000340)) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000000c0)=""/113, &(0x7f0000000040)=0x71) r9 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES16], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r9, &(0x7f000001ef40)=[{{0x0, 0x0, &(0x7f000001c980)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f000001ca40)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x20, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x6, 0x2, 0x9c, &(0x7f00000004c0)) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) 1.151741527s ago: executing program 1 (id=1368): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711204000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, 0x1418, 0x1, 0x10000, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x8000}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x0, 0x15}, @void, @mpls={[{0x8}, {0x8, 0x0, 0x1}, {}, {0x4, 0x0, 0x1}, {0x532, 0x0, 0x1}, {0xd}, {0x8, 0x0, 0x1}], @generic="2d147b47c4f552c042108a2c42b4f3a42e206dedc9a54fbf2f0de89b60fe20469bda767e7bf7401d485bd0737fcfd5f7f6ba1872f42f848028245510ce9c01e9e1b0e279a98d67ed9bed3de644dc73f502262149ba6713a422699ba9f50bdc4159d7"}}, 0x82) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x200, 0x0, {0x2, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1a}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}], {0x14}}, 0x7c}}, 0x0) r7 = openat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f00000000c0)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x3, 0x1ff, 0x9d, 0x1, 0x4, 0x7, 0x7ff, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x170, 0x3b, 0x10000, 0x6, 0x1000}}, &(0x7f00000004c0)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000500)={r9, @in6={{0xa, 0x4e24, 0xff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x1}}, 0xfff, 0x3}, 0x90) 1.149460017s ago: executing program 0 (id=1369): r0 = socket$isdn(0x22, 0x3, 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000000)=0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%-5lx \x00'}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xfffffff8, 0x61, &(0x7f00000001c0)=""/97, 0x41000, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0x9, 0x2, 0xfffffe5d}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000380)=[r4], &(0x7f00000003c0)=[{0x4, 0x5, 0x8, 0x2}, {0x0, 0x3, 0x6, 0x214161928b321650}, {0x3, 0x4, 0x1, 0x7}], 0x10, 0x3}, 0x94) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, r6, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x40, 0x3, 0x0, 0xd723}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x880) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000600)={r0, 0x1, 0x0, 0xc0000000000}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x80, r9, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xc47d, 0x2d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}]]}, 0x80}, 0x1, 0x0, 0x0, 0x40d0}, 0x4000000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', r5, 0x4000, r8}, 0x18) r10 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r1, &(0x7f0000000840)={0x8}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r11, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x5, 0x9}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x195}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x97d}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r13 = accept$phonet_pipe(r8, &(0x7f0000000a40), &(0x7f0000000a80)=0x10) sendmmsg(r13, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)="097c25e4da0b4608b8546204ecf36d0c3e80443f87fb80d84a58f4c6e393762813135eff5e825809a6756b85525c8c4a10bc3327ebcc5c827a900f7894b6675d979abf8c7c5f48d110e4a0e4842e43a37fa77bc4c56b4bb95271501b367ccfbd0fe66018b377ff6dd69b5aab5fb3bc750b2060f630c1e5e971b1a01a2bbb61d3e65b279ce26fbfef7c3e1e20f1bc345c8b9868ca9fb08e02b495f7a0bcd3fb078757820f76edc07fa7e7e8cbb42e3fe238bbcb11aa7ebde59f02bddc1b61e1a2b0e9362dc740bcf2a13f6f241af4f805d314e4edac52745b6da413baceb4057e6255df94", 0xe4}, {&(0x7f0000000bc0)="56093b0b3f0655cce380f25c5561b60fa7455961b79106e3bce7ea4ff84a62ab6c0cb8ece4d92030a428cf4c695c641bad54259a1ddeb66d766bc6b89b2f671a9db30e564b1de8f28c9724981733b44efdacdba624b6a89af15cf2bc1db02541507b417db235d235130cc137f76482c757c1a9b5dd545a13e3e6a0723522e242ce232d0e7ac53d2e8a7827292f4fb8fe338eeb0d0291b11a7a7879de8f296e04cefc2e162a9e0339d50ecbaab0c969a03c6668d828c64ffef0df25359c0bc5c2a2289cc6f9d631bd93e92bfd0fe0916ab3ce8b4200fd6ee82ad119f3392426f10519740d342f0576", 0xe8}], 0x2, &(0x7f0000000d00)=[{0xf8, 0x10a, 0x8, "f8a7d5c1675898e0ba10d7ddd280bf3680c6278408e92cbd03035b3045d4b11c3a7db383c7a15cf098159854d0bfbcae8db564613ada1c51be6159b0cccd7ed9f309e8e9b2bc0dae1b272387741a819ae9cfaa2e20362b253f14e6133cc729fa684f4135d1f995ec49b825ee99155e1c2aacdf403c351bdf8566aed4e0656530ebf6b63f8f31a51203ab8b7fab23aea1d1c26651642bdff930a2bb8d2617f3f10d3b65419ed72788b1a7c1a4a8f9715f5f1dfb2b36aba1c95c86f07e5f0ca6aae00661d16fce582610113bb120074c5d5709f37d985beafb07577f151378b8fc75a5eecd794a43"}, {0xf8, 0x103, 0xfff, "f44a320f24fb090f63b7b98e38f090d95cc54813ebc873d19a703d64dba32c03605acf22389149128c72ca207b097bceafdb8af9a3abc38303172da0664a7960eb3e92b3076f55fa38568d9cd70f6f57144b7007e3927a54faef3bf298cdec0ebcfe96a9ba009082902c87d4504eef4e0c8300cabcb6286af04f47062f4f3533c2272e4ff7a3585f6b48facdef220d68c72b8c2e664130d3bb8ccc4a3e501b9bdf0edb9b02771f58e0a546408d573f39d2171cc60e614b406e9b7d6211d900c8fd6636ee5a3cffa46e7f4e1e2807fa0f571ef2c851ef9dd66cbfdcbfdc7c15196d92a7"}, {0x1010, 0x114, 0x8000, "edd91e0a900cdd4a25a24221f27d3aa33067f5a37a936985128c2c5c2bc853ce335b6e28c23893ffd80b92cde32d3c2965e8286ff8dc5568b0370349662a2ba11de386906c2efd54eb3a2838c3f7acc70fb8dbd99ad9341577518f5a2e9dd433a4320432ccd72d605b13ac64c2cbdd85d9788b53c9bcc5b0ac733ed922ea3fa2ad7614967764cad86d5511ebbd5416767356f6b0bdcebf1258afc4016341ad03b8fa64841ee80c3bad2f2b04a95aa5866fa2a148deecc89be09f890ba63d4739054e9b1b89b6299aa6cdfa26e02a5d026d590843420623475e7c35c477cb611b359af6fc23371262ee3d83de6b48d4e63b4c8d39d24db89e72b7d2240daad33354a89f37b9c9683556141f0977b6641dbb5104fd04c1af98d84cba361200b89fe5cf3e1c2b2b3a2a2abb859ebb8be64ff96a070ff21ebe837d37183978c3339dfad5b6809608ee9019d03e50a6bd331e1fb53f708b73867d6afeb3e034399c9b9489021e8a22b93256c67ac6fce156b828ee651457c7e13cc412cc3b9db25cb7e29ec09e3f912f974a1db0a2b5c5174303084537ce08addd64df1f3166c7d0e5254fe0ef53689242156fdd6567aebb0deef78d178b8e3e067403bdc7dbb9cafc9bbb12a92b70671c95d0da7ba3732a55f503e444d68a46ab2bd255cf762f19ab0ef159d3fff82e8d37aec33cf4c70094dd5dc846f3c69072cd363851ce8e563cad66d8bc9f147e8b59ff841c625ec66f1263833a3a30e8c116fb5a6097cff59defd36eca0c650cef0773c91d48eb00809c4c052c76682bdf98aa0aa4c6c385f5a7175dd060e1bc95f03d14d715f5d94d0a8d7d7c3d40df578c74a723f25e2820f73dc0cf7d68beab1fac1fa65e6edccd028a2c7db2f4a7ccbf8222a68e50b08a149617274deac7ba4856e0b068d9dcc19f0b0eb87b94f9dfcf4e6717cce06734278998b166cb5d98188d17e229138fdf9d00297bc9887d0a94a4ca0b023ce15f3ff32a59efb8ee991920687f92b93fa375260fdb66f1201390d3aafc66e316d8cb099a5ca9a063b3013cbd12238da58d0105a117a1bf0a863dfcaf277ea1cab98e42e1e72eff023da1f83ae1ac7414c5df4faeb7a967af5f2ae30a2a5aaa97cbbdae7f0df163cb8e8e11223b8af4d162f7f817b0d12fac6b6b3c3841e8a907361b9348286489cb191d1c8875ec9aa9c04135512f1d197f2e4dc2622281e9282ef6a9c53645a675366cac7d1fd9567be372fb3bc4912c0196f7dae332a6160ec29c40a658a8ed1ed2874520de31759fa9f51ba50a460c6e44f1608f58739c76d797568ba4c16a2413b00e9e0ed400fe86ea66fa2325ec49c797cb6e4c1cc6ae2468a01fb39d83bbd3d00f6ac6ed59f4094da5078121d1f4b3ace65b0532ee70214235c54e6c95886b3141765fc27d2719e011416865567ec793206e24daf372cadce2f5f57f340220f61a6116d539afb9b01c5a6d756c0676415ec0169a7670b080f1f9da2710844530045eae9e84ff8dcfa2f35598370ff761e3e0996aa39fe05451cb16a900bde41a2e792c08e93de593e3da3ceff4fb994f556d570342d757271af1f0439ca4d92dd2dec58048583b927ae4ff672e678c32c70c15efcff46bb7e0c6472a9e1b080ac1f72b1ea697ab0ea26c1cc1d4ccb77c91e9e7a1b76a46c152eb06eb02a25e820638a44d4dea816414d3c9e4a1c2b1875831906cfc21f5c4aa36778ce4976974b771ccbbf893b0ae951dd1a8454f7a56f3b5f9169de408a065cc556be88b3d098c96c4df0fb0102c50ee41e2667557ba9858423f29b24ea378c3a734c2ee9655ab0398376ad310cb055dbe7dfd3e97c4c1266353b798efacdb75492564062096aade52d0d919e5d68fcd5fcb48241419da01c592b45ccb9769fe9cf6fbeb10341ff603270f31a0e6f5686dd6b487fae0c956f7ced3a2cc2775cb083bf1329c928a3619cb1808b6a7d6d19a58f3fbcfbc38fc386f181416e91187d56233bdf69d55029709c131ec64ce919877d70a86444302dfd525dcb23f57cad0a68dede9d30507d6814a78ac7c128109206b30ef20e428ba8e767ce02a294b186f5ad82e5d05770be7e8e093f1ff6fc7a38d7b8f4357e917e3cabb2ff054eec6bec617d7c077d1e76eb647d924466f1261da2d7d9d98e40a6155e64866b8f5b0ab0679266558a72c433eaf9cb49d9ce8937d898661c4f71f5ee68e3cb0eab9fb4138d10ea62f8713bd47c1e694b45d971b1a17b206f2af114140fb5c1b9bdd3af554b455558f39c343b9ce3cddd8d264f274c37f30a343d1f799da0d82dbeae8a1d9d47e1541e02c317d8c53e881e24075426774fb52a1d1903cc888a8a0b1f8abdc382bd41be69bbd6fa5e3b8dd67200d712a1ed97def6c3ba8a2853d2fe53a9834bb24b5be700ac9130a70951993bac5a1263d3f415d0b1959a29fc66d02c5a5c4455ec1ffa9a902e6b10e5a0e29b247d6e70bf66a1a66dadc539774b8469a66be9585503a8307be7a76cad15d71af9a8b7e9469aa5e729ed9fd082b0f4d5b150338b084d63d32584bd74b5c3981da516db8007e97e9132964347347ea1429cd2be6fd3dd390b318f1973cd1cebc614090b328025c289eb1a14f614c6009c980a657203f9db78e20f25128ad09dcc0a06aac6eeeadd279edf50771b5a0800626e10a182a343b7b3bcbaaa513e09968e5e070993f3ba533e4ca6d392f5ecb08a57b62fe1edaa571aaaa229e1876007d41cff05106d5e1784f193b3d4db7795d1bf8825f3dd080167c6c49887ba59dbbee1f2e9bed0cb63ede6bdf31e56022cfabf83eb8c8765b29232110497697085bb8a1940196be3719c116fd9b20e2e48be604cc8460f80123270cc8b7650550bd717045dac8521a582d9b2cb6219c2e173d8875529a7080e0bd1685791bad196dc745f25995ad90cba8d42b0275a852f135299c1606f5a3d0fb09f82573b6b2b8b648ba295526eb737ed4208891c0947b285868739fd3439755f97a74a7bb736ba3ae24f5b924a818e4073ab7e0a2b988c71a9112c695da15b79c91bc0e52891383b0676cdd22549962c9075a90ccdbdba0b6ef17c9c74f627ba5b001ed8cf6e623bd2e68f1cdece7b2a6063d3af6b0f5d1f52546e03f9924321e5618161f1b6bd1df78b30281a178b05679cc63668e3e95c39d43ddce38e7bc6abfc8b2c7a19711136c390b6a47eb65ebaab8ea2790b337f0cd681d7d59f58867fab5788702f1fd1022a6014f653cccc99205e74a3fe9f22d94fb99385de36b370bc2cfb556f4b963c6b493f77b993a60b64ce61e73bf320ca4b4583f5692b25ae386119e5a99c81c349281205c7eac4fa06cdeb95118774ccd0b64d82ea9eef49ef2e503702e06a6edd11dfe46e1705202a684f417886edc5ea8cbf6560063bb5297f1627c0bf57f1b0fa9b0a9037aeb10d9a6237b563e6aaea4406dd56c8bf906d9284d2e1b6c53def173f2660104ca07fd62f755768d7bdd6e06a85c0cd903ceb34717b651607d6314f3b2b88619398f0cb89625424ddcf7a2e73efddc435afc8dacfdce731f055ddd7f83021db129a3ee277dd0471373118a14b0dbf295878ac22eeaa4d1832842d33efef6a90ec3a5476df2e41eea7f6f60778266e1a915510dab84062e0920c982074f773b4f4b69f023f18401ecf71c8f2aee219ebb4aaa2ce4ef792b60c60e3a73905817a9aff60369f529409e94a0958b8244838b740706722f77c288bc26965e7e315b451aaabf8e141badb77cf887419dde03f8f6cb1d549d62dece6135f3555cc2fed58fbdc73f4353b135929521054d81a50c7311848f59db329ef99404cb2be15440ab819899bdc85674d4c67ec4b689bbfa7e3fafb8d662f824b1709792aec1401414bbae56019f7d6bf18f2aaacdc87023abf69e5e41aaa9f3b449d4c43bd75fa64bb58c5987d96e2a0e1d26a4cee57dc2622a917a1d64f30441dc035800988e989bc5c5b8dfe076c6a86e2213d72328c765dbbb67895eb6fd623372e218fa163822e2b57439c39bf2a764a651403634a60e141cb8c5899514583027f971da868a6503945474a2b01c2d2e2cb8cc85e07fa3656e8a6ce62751c13ba1e5f0bf114d1d7aef51b11869ef1db7c0cfbc629d9350dd7a74e408d4107d308c7fbd371864ae42b23bc75c94ea72168e32acef7459b816ce659add1bce6a24164261cc2df5ade0ef3de171537e6c04f8ddfad5cf48de9d669b0aebcffd61a5e47c0a98fa0dfc25c3a4d05ed1d4835a3c8ee9ae25fc66acac11d20c95fc870139da54d0435b34849dc1da97e813a25989429aa86358ad24ddd988a345c209ff90180acfe948ca5f8d89cf94f16ee2afe2acb40d7291664f0cdd6e3040f42abd61d5cb5e3c62577194528ccbab92f5041ab0dff53e7034af8eb342ace2a14f84e429535de85d4afd3c9a880c9c0926e345d8d4636f0e1528317ff94625d85f016d2aae7694a424ead2616f8ad0a7c121b2244bd268279e2b257457e0218ab89fbf0f47f8b1e9fd41006cf9e6f4cb2d0c5a7ba05cf2630edb26a1b5f3bd5af9ad891f8bc398244fbb7fc48fdb7bb06effb09987e557a2fdb3521eb5a3fa10a50363770e551aeaf39e2c7ab7b7a34bf6e9e7825b0e90f0d91a7a6006ae2d320a77b09950e884b5ba2eebf06584412892a907875bf9ddb66cb814f69d0c36e2a8a624b424efe80ed945be9aa1de181a8988c447a2c5ca6887791863ecc8b9a3df7942906df521864c15a50d7dec9c328354672f9e3b81e858f5d0d5fc36bf60dbcac956883e9c8925c009168cb1d7f1be7528b30fd0204a88dc7859fe7b10dee5293b457062fc0bd3dbe0115f700dce478114444dd73ef97fe0515bbf258832da3304cb1f610a8b09549f5e38f3d2c8ef5ff1ff467b9ec0fd19fac5f58efb4dfc5405cc5527e75866a22f9a436510eb89256555a46b433b89be46ecaab72c3cec10e5a0599832751dec0404361f9318c865d21fd9abe96ac76d1311838bc8207b8269a4b974723e328b5641bd9a99a04898aa5c88c5413ccb899485cd8153ac4da9eb685389ef8a965bf6f568f08ba2e6a0831e8af437c7ac40e1c88671dc79c06d05cfdf9cd3c68e4a1de8c2bd9d3cfe1b072b3f92f28733f827781a12e82434bd2ebc00e197b56df5b6aa6de54a61b9640d64feeb9649ae039991bad273e0f04f8e3282f918eaaa156548eef0eaf28dc7d5f052e2f4625bdfb84f42a064378ca957e0a28a39956b1332de276ab77d37f5e4e3c05dd23e3b9708e10b1a95224cd389445c2ed9e8be39b482d292982230412dda30c535fc80982229e1693e6fecf64f14cc391067265c1fb5767a5eee5e9f343073c2bfd1a042615ce458a94cb887751a178b94e6acc8da0cf77757f52dd6fd0a00acd88019582c0b357af5924dd1b7352020e990f84b4d23614932c1acfd42734dab2cec3ee979ac99620131a549189174a4de2b66d9bb987f2abcd263a7ef61dd6f8cace108ab2397eff0a7b4afb45813c347acb61ee88cfd5c3b7acd3b4489b5dd97036e82eb54b7a3c7f207de193153e7fa6f8e6c9e3b70d2ecfd68b49630f84d62a063c3785110a794c96cd05843e57369407800ed363bdfd3e88bf4d8f51c2473928a3be92f15e6cb9348004c6c215de7f7ff45ae9593e20c5397758699157c7961c43693b2fee2707d4c6b879d3d2cd108d861a98199ee3885f1013b9deb0a328f4877b8dedaffad3922626a54927d4dc82640a1994fb72199aba986bb95b54c9200a68ed09bf3c5544933a35331e7043e2349f3"}, {0x1010, 0x10a, 0x2, "635b734e3e37f7db8e861ed1919e9c0b802049d942edb0cb2d7ac9977868f23d5e0fa69879ea3e24474a3855cc4ca9d550aebf37374a68be308f383f5e0b3d1d540013354aa4b60d50088824b9a49813a4682e5f647854454346ad938bfda4258bafa7af703525ad4c4cac6a6e8376cccb14f1ea81ab3a0eade493e473fb98d6d8fb9c399f780749240307a5b9b0d9d7b3dae18841e557145f4884f855654a58b8a695fb98d7686807c3fca326a809932d6624772a7e81a3e8d5fe45215bd980328f2ce791b0eb22fd25c42f48e2de2825a09da37a56df49927de42f06462bb265bc89602e22acb4e4d96e6c35ede2ea6e9e0accb42960623315f595770ed31966e484d64572d4daafb5527507c8f495b1cb81cf6ef3ae72397ce4bd06c2115eca51c18b3a9ed208757933500c92807dd245bc6f7385e2b67c3d780f53d74d55aed1c81864427fe3b4c2dd0af7932c5d07e5f85e836e05ff3f11b485662cf2433f91a617d81012b64674ecf7ab1c724904b615806a08b54f691faf545acf61e65977f5f995a5432aff54984299cb0f5c1e84b1bb222b7663849fd042ea4365b76fb7486373969dfadb524f631286b9325327350299d4473a54042cb13a56a056f5cecae7f07b8f2938b141ce9e65414dea73082cd5c7eccbf5e5b1b8073efe029bb82bd88da96cc61426c5e57b736788995dbbce0ec4b58fc03871e3f2ce025f63cf63405f672742d2b162611c154b00ea6fbde680c70bc31235a654b0a5b4ffc84113f9874dcead20739e47285a558eac9377012cd3ee8a2a0e25dcd6c82835ca654662fd4320d57bd087abb2a708345aecf5110bd5b3c549327a9032533590b97a3336967b4993855ee3462302377264886ae90589dc3f310f0b65609d5ad058ab4f8e6aa92dfc9aa2757ca003a4b29419af2c44fe6473b93794f74ed6e8635c31bafc5fd839c66c0cc38ae682560a1f9d16addcc8dbe04189e5da60b6ac44e2fad7a537be819486016f9a35b0236b6be6b84c932b8a3c0dcb96b4ca363b194987aca7a5dc1011cefc8b6a68e115b2dc7d406dbee4bdcc0e991e1a4bc6cc202e2f5853a6772cbc53bcdc978bfc6130c687478dbfe10b1017d1f684bcf6957e8f17574e966ce909e9d664ee368ecdda9f66e48e506797612a05a2a58d530cba4a35f4a624d987d363987b5ac9b9b296d4d431fb8b5da553eb7065feba85c06f19dfc23a83e0af637a9ba8815926e9e65b3a4aa22a44ed83106a1cea08346102c32513a487d79251b8645f18f7e01b2d16151ac2144d5fa93912b1c853ed5952835c31136fc3e1183696428c8b7a34f04855903e6a65d879d821912ab6d9c6969cc6b5efbdee7e21542d8191f7d2ffb0fbf87b42aeec0eebb43655c96996967de360e04ef1d6558991a60e3080d993599efb42cfd31c4094b09f3f76aece98846a25e0b4035bdf991e5efc30a104f91f476331f228edb181c1806e16ee2b5257fe916f37094e0b43c258a095e9fe4380f197432c158337deef9a8f6c2d35916992cb3f7237bc2dab87f0ea1d18f5dba6170504026ad968470bd57b6d28cc19156637159162b3a078044dd282130685aadfd6c543028fa4c29920ef58260d25b1276f34d2eff9f20ef6aeb244455ec30d963a2740787661bc60dd4136e01f16e5925c7717063422db79c1be636f5c22b43f786e3de922882a4bb02774dfc00aed6b7c8c26b9b4f95ed7bc67b42dee4b2a1e06afba78992db0306093e12e52a3585b4a86e5ebdbe9a88d29b3f6cd0e492b96928d244c55490fc1269d5c07693df08b59f7a2a80ce2ada0742926f905d9b72281d2bc7cde3b202204395de74d48db191f0969b1aa823882301aa3c71297bd3eb7dd0262948b180f590d6acb24188d079e3fe909269505db7b05f74d42e86ee6d238fd56f5883c45a50a35e4e5150ad56f59aa799696bc04e86d076a8afcdf9dadc5d4736ec3b849fbd18e79a98415c136255cafeb998d99fe0f26e6f4e7c5170cfd853a865a1d139954409752180d428ae04c190049c554db380af092b6eab9c3570375ab870e4cdfbf78e92fcc3c9402b3f21e998603c6f331809ac8a66628b61eb76ba73709c9f4a670e88ef10e5032ab36920bebe61590798ac24a7fba6d760d9b324b8523ba3ef106e32761cc87c7a6fce82d6d7fa604b228d63b5986451b9762078086bbce319ee0ffbf9b757dd77090aafb00904ea3953030e7fe44d39461b756bf95366fd8fa843a5d8f7a1e1f05ced8b71e1cbe1d898d445f7eb688496d12064aba45a41af1b3c5e5c75293c7863b59358ea79a42d6ac3add045d6d076282982b17583c73fe5b33bde2fb700ce4ce227eb28610e990bb8dbc2975ad05633ae0e6ca8827286a3c5b775d7a90567e35426732e10dfeb76c3673f83013478d4b268247559bd04961d609a81c22cf54bab615248c5c1e62d27e6fdaab125945b581c25b1f23b54b588ec07aced55d880eb05db52eb87b38ecceac9b8749787324acf3c74bc456c759aad92f1116e58e13cf5526ffe479a2616306dba145f6048f1f7158b82fcd7892e9e128c403d142501601df5e7736e6cbce4aeaba7b2d91e92ad8ac31f0e185c483d33f5a8e5a7a4d934067236022cec7938389260dab44522422c6df425c7991f6814f09107fec151fe9f75bbace40ebb99f9de9d36683031a9456b1abd39fbef983b81e7d7671132c1b649a885717c56dca7b20b24e0e4762ad96c1df1e545ce0a5493113ecef6c6075eba6032c20b87f43e5434cc854d52bcba4788718339b514c7dcea06df207e1bc3f4c3d08d7b3ecd3e945cae7a3c7287ace6e872eacdb7c03849ce238b6f4a11b4ff51d33db324c768592dad3e2c3950a7ac8c70cbcd03ee7b9de122ac48d24f6b91c26fc61b7ec61c4e9d46ee803bf576472dea4f18b902f426fa3f8e82228a5741eac614e135b9047507a2288adf84d0aa8521ea6cf5abf593aec276323f416bec2c1696c480f028dadd09cf5ad98186322625229b2eef55011edb3a82c7f92a26ce4f58550cc4f079425a8e1f396a5a4c68d59ae40ab54141bc044f72efe1a25a5554104cfa5f8c78cb3de2ec7d2c251d47282db5123fd45993fb81de7fe81ca55df69ab98bb5e5cd27b80fff5b61bbb90c0f5e0e69e4695790ad304ad0bb9723eba5dc46e7856a9ebd602ef8a33f9157bc03b640a70cecf5a52afb6c645db01de5818e93a98a67831a2457297da6ba3771d886f36aaa9f015e95909242bc7eb87c67e79f2443717cd26a076ea0f6b4b54ec705d38c0947ee6b929289f19e3e3c090417670fa6bdb55c9e8ae6ae584c598d4f7baddd3d55e1dad0330390aad7cc3248b0a757bf547a3b35f4b1017bc61821889c317213e14a4935eafc503be17489b04b38cb8ca969507f242c79dd84bd13a5c876e31f5140a6667f9f8f576031cfc73257d8a950e9048522d2107aa4c1586da0687a3e55256e62d2bc10839e5b2f6414a6fd5ac235245830a4109c5610db258faa2190a686c5167961fdeae76765f01e099853c3069df8ed61e42616b1e11591cbef13174266247151ca598949ed2d701d1d5ebee82a860f61974dc9ce0fdac74c9dfe2d78c1e92b1d30cc612a7a33e40ef7a90ed3dde3d2e34f0cf3f729ffa1acb3ec105b73b18a758a74eb8885dc323490caada48ce5cf15119e7516bef3d1cf3737f08bd8d7fdd4f85357ae2cbaf2a0653596738f090c6c543857543cfe05c495d35d45ace77ec6f07d1d8887f7a40af78e528e9127b626e1c6730f6ec8d9044bcfa39398eef156b6d12f6f7338970e2fe78468f2cef14f146001f563ba3437f3de4d0fbb7ac762237c56c0e7ff323158a309222f2dcdbc4d96c5b47041ff3396425bd1105edb08ad4ab31450237a9c7f2219f8d15335b2dc4837503cf0d428bed9957f0add7bdd5396706c05f1528c1b6b8bd2705900fe7def76c0720ae2824cf1a852e3bc548f59a3f317c4aa9442f283cb4520c1e8868eec856d39d8424df360f09f810e2eb39ed620df9d064689221e8acdcba2ba3db51bcca78c4c1ce9318dc042cf88423362c1ac6a983d877b499ecb1aa020016b7bb29ac986b3be6d4b0436f5192f9b5f18d2e0d3cc248d3a0807502fafa4461fcdb5226c5f8dcb30144f7cce2123b1b7b520028c03763fe8baf985003223c59fbf032aacaefee6644b75d95f4925d281f9ec2c343e24519be758587835a03bd8ede99488597430a44549ed52681a1a1df82f1b4f64cb8acab03fbbbc40448b54e621f7d6ca18aa6dabc062c05f50e2b50a3c89f7176f48bcc21fc29a043daf8c480857d8d9b669dcba6080fa45531511721c4aa62486b1dfed1f26ccab2450752bafb4ce4d4454b5e3991a905b9a33d6617653eb5d47e1da91b6678e987e7002e9b59811e52ec225ac3960f0e23cf474873e65a9c4fc593a37f065eac8dee9d9713c9fbc356f7a257967078d03cb4d3237dcdd050d6ac2a61649e804d8ec02ea5c0cca1ad37dd131261862d3e12a29c094b94da83891c26bfab1e3f9a3e048c3463a36b17fd5456720ab756dd83ff8cde306a15757a19f5b99d1f95868459226ba5140692243e8e76f349df55fb4772c45fb722c700d7f3832a7c88e7a2e310bd46b2e7a184ddfc69a63d344ab419b423605917b1f5116ca452039559f50aff7150c21fda15b973c8b1f1f7e04dbafd3089ec93fd80be7b27fc392b018031f52b837c0cae823ba481248e0372b862d0dbfdec404f1b7e0c3d80d91fbe3914d001ea8c680dc3170a0a42735626c044bd3a96a219e1347baed81380bd159e33b72640dfed7b4a78e962be04359972d5e337d74545466c9b27cb934bc285eec41dc2ebd4a06ed4fa8b60706e97912f7afa1b08cec67211a06f35fb0e62e769b57deec5150c9e4557b03e9baf4b381e623ab94f294deff07409ef5ebb6259dd9ab74807dc0280b161eea6fd0c7027803a4ab09ab251c9dbf8de0febf643da995d444d17867c1aa3b3d8377af65e9b23bd5f62be6f721f058268ac02f64057870d14a5550b23079f5c552401e8f728b61d2a9d33130501202f78e84d387552e30b48dccad1722a418a02cfc6d25faca32110781c387359672fe7a87cdf5307ba6eb032fb7b58e1dac158c944acde14cc646573ca8afedf014ee32b076c149a00b9083dbf1430b447d24754e122241347f04bd8ebea4136e66776bb552bcfe7df79279e3223291a8bb8fa615c3c507c292b2b35272a8975ecf1a3a6c6e9581e7930a8967589ed195e33fa33cb0b1d86b7b0fef0d420b25c64d8fb2f45fa5bd826bcf94e824beda4e793cca060d78b9e0db1bd3415d82cd92cdbc253447e5affe8aedf0b7c3c6088a6ef0a40951834567c36668fe2f2090636ca738456b9919d9faff1c206298770745bf4736458d4c45714ec45106a819e209416f344976f7c81d989cfb23aa62a3fafa66c322d8e709956cfa893ec987202340d2d4c4fba0190b3df562a04daf73663998de5b12a07216f91118c132d4ef34666abcdd905d31ecbd6b536e96514997417941dfe4d6154fee992295212b073c2fa438e0c23a5443c1bcf55f799c4718be99a49589d8849af55258a7273459898f57a3a7bfb8a91f92d16c190374d8cf6fce61a1d0f1962366a3e398e6b22940c0c0db48920bcb96ed73fd0c29cfcd54e3bba347a93cdae0af3d093c8915a3f0e5e5feb225c7a632b74a908b64600d3b73c33c1db108a79e3cae7da43ae71281624054ff8009e0cfa242ca5ee914f5de6090e33a2f1af"}, {0x68, 0x103, 0x200, "2ec6b1b15e0e5cf42113ea32ff0e3b1300b5bfefb6cc892482030381221ebe9163750728cedda4e72e10063c26db6c8823aaeaddbfef169dc69d24df799e109b842609b2153614e71cb01acdaa496b6894c4"}, {0x98, 0x0, 0x7fffffff, "43115d64cd9350316c9cdab4649c7d533b7591c016eeb9c7c754b43807c85000f45833667a9d6058f6fae250a1e3544e06f06139261890c7eef66df7a0c070399b702103522eb810d26b732a536943b2f4dc61ed30d99c67ac0547c22a12f882644c0990e503617347d6a826f4bce21c12396fbb9c3c9f85a58f609cd3922c33f2775e031d1a"}, {0x20, 0x118, 0x3, "a52249f0106c7eb74e0bebf94c"}, {0x90, 0x103, 0x3, "186bf928ec8cd9f8000bb11dab29ba65bf631b4271cd4eec170ec2627f925bb4a89e96d80660e28ba9702d5f54aa98cc845e346d86d938163d07995fc341b448898db0b11dc74d0e983b6e1174f458ea60c6027b24529e4e3a62c03daf00034183967a181c446f662b35e97e8f925b03ea873c456ea0fd0f7f88"}], 0x23c0}}], 0x1, 0x8014) socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x26, 0x1, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000003100), r14) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r2, &(0x7f0000003140)={0x30002017}) syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), r14) epoll_create1(0x0) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), r14) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000003300)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000032c0)={&(0x7f0000003240)={0x48, r15, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x36}, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x6, 0x2e}}}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffffff}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8040) socket$pppl2tp(0x18, 0x1, 0x1) 1.054883287s ago: executing program 3 (id=1370): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680"], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x48, r1, 0x100, 0x0, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x8e, 0x1}}]}, 0x48}}, 0x4008804) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x18, 0x2c, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r7, 0x0, 0x53, 0x0, &(0x7f0000002e40)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYBLOB="7b5011b3eaa2227218c998ca26d888567c86ff93a3096c0279c9ef1aeeefb432d6bccf06d52e12252870fd1fa5cb6dbd835ce13aa9105984f0eacaf620707df36fe4f19d6d32c0a82c034fa6a48f861670ff1a3f0e4190047f3196245a32183a3d34955e21c13c7c46d12cb744bbffbe0057e72ccf306d2dc12e3039e81380a488baeab1671858f6c4e42765862aaeb318ff64252014b8a795984b1235e266dbbcff7bd96b2b557de658bc0adbd2beb7583bc6e8e17b5975dfc0723ffb74d7f429bc3b7d", @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 944.128509ms ago: executing program 0 (id=1371): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x300, 0x70bd29, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x40010) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 855.87449ms ago: executing program 1 (id=1372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe8000000000000000000000000000002001000000000000000000000000000200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000002001000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000230bd506000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000008d8300000000000000000000440008"], 0x16c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe8000000000000000000000000000002001000000000000000000000000000200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000002001000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000230bd506000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000008d8300000000000000000000440008"], 0x16c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) 646.512038ms ago: executing program 1 (id=1373): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x65e, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x24, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xad3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @generic={0x74, 0x3, 0xb, 0x9, 0x50}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x53ebdc68e6402963}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000340)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r0, r5, r6, r7, r8, 0xffffffffffffffff], &(0x7f0000000540)=[{0x1, 0x5, 0x6, 0x2}, {0x0, 0x4, 0x7, 0xb}, {0x1, 0x2, 0x5}], 0x10, 0x32ac}, 0x94) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x800448f0, &(0x7f0000000640)={0xffffffffffffffff, 0x8, 'Q\b1', 0x5, 0x6}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r11, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x8}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xc}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x6}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x7a64}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040005}, 0x4040) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x400000, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000840)={'wg0\x00', 0x1200}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000900)={0x0, 0xb7, "4bb8a7830d3f8d66535e2e260e6ad52fc6555378054028d676358d424958142bb4bf960a2916925a7b2a599cc288fc58ae81405d6b62c2b3c58918c0a9ab28e55872885efa78aac043539abe9c3db1c64e16f80598ea4e1ac7163a09135aa143b7111d627ea1639f218a40de4021eb71a2fe9f8c6a347af500a1719977c0671e3d0d2686f25360ce0412a59258d03206c8fd3ea3b2c86136c11552a840b48f280bcfb371305b08189f5837b00c1f38e3424db5f59e99bc"}, &(0x7f00000009c0)=0xbf) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000a00)={0x0, 0x1, 0x4}, &(0x7f0000000a40)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000a80)={r14, 0x4, 0x7, 0x3, 0x0, 0x6, 0x9, 0x5, {r15, @in6={{0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00', 0xfffffffb}}, 0x2, 0x9, 0x401, 0x7c, 0x40}}, &(0x7f0000000b40)=0xb0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000b80)={r10}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r16, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x7c, r11, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x6}, @ETHTOOL_A_COALESCE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x7ff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c5}, 0x850) setsockopt$packet_drop_memb(r10, 0x107, 0x2, &(0x7f0000000d00)={r13, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_rose_SIOCDELRT(r9, 0x890c, &(0x7f0000000d40)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @null, @bpq0, 0x6, [@default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x200, 0x0) getpeername$packet(r16, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001080)=0x14) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@base={0x20, 0x8, 0x81, 0x8, 0x2000, r6, 0x0, '\x00', r13, r4, 0x1, 0x2, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x18, 0x21, &(0x7f0000000e40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000f80)='GPL\x00', 0x8, 0x54, &(0x7f0000000fc0)=""/84, 0x41000, 0xeb, '\x00', r17, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000010c0)={0x5, 0xd, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001180)=[r18], 0x0, 0x10, 0xd5}, 0x94) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000012c0)=@get={0x1, &(0x7f0000001280)=""/21, 0x5}) 641.370508ms ago: executing program 0 (id=1374): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@bridge_setlink={0x38, 0x13, 0x400, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x39250}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x7512}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7}, @IFLA_EVENT={0x8, 0x2c, 0x5}]}, 0x38}}, 0x40020) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xfffffca8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9800000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673364d50e291883f39685ab34a808b32696d3000000000000008002800ba"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) 634.997135ms ago: executing program 3 (id=1375): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/133, 0x85}, {&(0x7f0000000140)=""/137, 0x89}, {&(0x7f0000000200)=""/11, 0xb}, {&(0x7f0000000240)=""/227, 0xe3}], 0x4, &(0x7f0000000380)=""/55, 0x37}, 0x2) r4 = accept4(r2, &(0x7f0000000400)=@nl=@unspec, &(0x7f0000000480)=0x80, 0x800) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb8, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xb0e8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1a}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfff8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000640), 0x10) socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000001c40)={&(0x7f0000000680)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000001bc0)=[{&(0x7f00000006c0)="3f95af053561721f6d4760c3507b0af5a5ebb7dee4d6331b037e0cef64b1e4e1a35429caf6db762a304a93309bef90f653517afcebf55fd1711714cdd255f3ba8e82fd20c838422b7bcd53fa760d7edc69363607b10da03af25f74207fabc0cdd79550fe", 0x64}, {&(0x7f0000000740)="ad67f26eadca71d9e52ee3020416b10397e136185ccbf4dd5c7f3aa628c6fb45ea01a46739119407c53c3ed58387304ed9f111fef2500f968d48021a0c9c7deaa9b757da31c72b02ff8aec0dfa18530b40e2d4733e64d8c79061041f53cc828039f49784f5eab5bb63f412b3f3fd40384a276a483f5aeb2c9cd677a0b2795986698ac0736fe8a3002a6e56a53e0ce0b9c5d306cebd4987", 0x97}, {&(0x7f0000000800)="308b24c9171a103a1cb99684f8e6eb76601037e5cbb98a294e951ba64e04abe7125f0c5c1f0954bfecd02516215b6a0175de667701faab0d39cc9b68549b3f2002caebe3ccaf0d8a5defbc8dcad572b5e85683118288f45fa3287bf5305a666e7f7566f74f7680f3e73d3bc2966080982e7b7bcf81e1e08f98f93103cbc5ca844f1cc483a08c67cca3dfcf5f4ed153255f", 0x91}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="cace91224550e32d883b2fd5e2ed2f8adeba37dbc318910f9bd1585e81191d51398ef9c31d00e53cda718ebc02c8225ae22d8ec5f0b24edf47a0dcd72530d7574c568e442c94c3c5ad0dfcc5358cbfe43a8157313e77bfe007d22ec383579a8d7f01da9b62aec00edc789f6c4a15da12c614ec7cd5c2584a55ec73a13c2249d96060b7dcd1bf1a7a8605fcfcd9fcbe353e5aa32cec60cb255b9983373eb0b474b7f641b100ea8d91d60647cbe5d9d96383dc08c3d835b48fe6b124da0caa0aa33b6cf73f3da30a59b56278f1eba58da9da6941cec96270adb6ab3946d77cb8b8", 0xe0}, {&(0x7f00000019c0)="8af6f0ed43bef12479a9fcf0b9974457addf05c707311b81a42e1185743117dc90b3521ee3aaa9ba79e520edc34da8821e53e9d652dad43967da3a4e4b3aa93876ba8bf3876bd480185fa5e0c212b2b642c63204493758c36d49b0bfb6327ccb8439ead18e4140100a5019bef8b47748caf165a78db24e542cdfc7432708ee3d31acf11782e89f7e1f1da0ddeada", 0x8e}, {&(0x7f0000001a80)="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", 0xff}, {&(0x7f0000001b80)="00b25440feff383bf21778d3c67f001d9484a44e3fe40dfd0aea6c30b9769bffd445c469369c0b23e0d6ce1b02fb78d0c41252e2b865d6b5d1362dd2c888", 0x3e}], 0x8}, 0x20000000) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000001c80)={r0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) recvmmsg(r5, &(0x7f0000006e40)=[{{&(0x7f0000001cc0)=@isdn, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001d40)=""/144, 0x90}, {&(0x7f0000001e00)=""/149, 0x95}, {&(0x7f0000001ec0)=""/39, 0x27}, {&(0x7f0000001f00)=""/174, 0xae}, {&(0x7f0000001fc0)=""/240, 0xf0}], 0x5, &(0x7f0000002140)=""/125, 0x7d}, 0x1}, {{&(0x7f00000021c0)=@caif=@dgm, 0x80, &(0x7f0000003740)=[{&(0x7f0000002240)=""/156, 0x9c}, {&(0x7f0000002300)=""/37, 0x25}, {&(0x7f0000002340)=""/181, 0xb5}, {&(0x7f0000002400)=""/121, 0x79}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/96, 0x60}, {&(0x7f0000003500)=""/125, 0x7d}, {&(0x7f0000003580)=""/100, 0x64}, {&(0x7f0000003600)=""/164, 0xa4}, {&(0x7f00000036c0)=""/103, 0x67}], 0xa, &(0x7f0000003800)=""/143, 0x8f}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000006cc0)=[{&(0x7f0000003940)=""/139, 0x8b}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/110, 0x6e}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/115, 0x73}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/217, 0xd9}, {&(0x7f0000006c00)=""/138, 0x8a}], 0x8, &(0x7f0000006d40)=""/225, 0xe1}, 0x33b}], 0x3, 0x10002, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000006f00)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000007000)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000007040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007200)={&(0x7f0000007140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x7, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x2, 0x8}, @var={0xb, 0x0, 0x0, 0xe, 0x2, 0x1}, @const={0xe}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @volatile={0x9, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x5f, 0x30, 0x2e, 0x3e, 0x0]}}, &(0x7f00000071c0)=""/38, 0x73, 0x26, 0x0, 0x2, 0x10000}, 0x28) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000072c0)=@generic={&(0x7f0000007280)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000007300)={r4, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000007340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3ff, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000073c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfff, '\x00', r6, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000007500)={0xd, 0x8, &(0x7f0000007080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x3, 0x0, 0x2, 0x8, 0x0, 0x1c, 0x42e7af71cdea04b5}, @call={0x85, 0x0, 0x0, 0x11}, @exit, @exit, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000070c0)='syzkaller\x00', 0x10000000, 0x2b, &(0x7f0000007100)=""/43, 0x40f00, 0xc, '\x00', 0x0, @fallback=0xc, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000007240)={0x0, 0xc, 0x1, 0x4}, 0x10, 0xffffffffffffffff, r9, 0x5, &(0x7f0000007440)=[r10, r7, r11, r12], &(0x7f0000007480)=[{0x5, 0x2, 0xa, 0x7}, {0x1, 0x3, 0x1, 0xc}, {0x0, 0x5, 0xe, 0xb}, {0x1, 0x9, 0x10, 0x8}, {0x3, 0x1, 0x3, 0x2}], 0x10, 0x3}, 0x94) writev(r7, &(0x7f0000007880)=[{&(0x7f00000075c0)="5a31c8c3e11055acd1d3048dfa3296488556da4d7812a4009a06b4fb1d079ea44cd1e130134bb65c39aa77", 0x2b}, {&(0x7f0000007600)="8f", 0x1}, {&(0x7f0000007640)="d28d82f8a4ae08a573d0e99f6bbd511c5ea55a9aae137f86049e36247acf9a4c63a8604394ffa301e396b1d7a235317066eef3dcb7b69b0fa55e9b8e0680d0b7df17896b5b3c45b7eec6258354c367471f5ebf484a2ab0a00af7c15e2426ece06116f665de1352f1fd2bab1d300dc59eb80623a9f6dcd52953dce9d44c10d668390342aabda204054bf082d095e3d22242655d18de8a4136b51ad6de4dbc430d4c6e92aa4ebde0b87e224835c977f0cc75568808721e64c1f086", 0xba}, {&(0x7f0000007700)="a2632d2de1ced35b52b50b9254cf2febd8d5903c254eb501eeab7aac16dc21bee96b3d9d79a529b3e25c7d25e66d429210058a6e80b3df5bc562c6ebf79d48", 0x3f}, {&(0x7f0000007740)="9ef90ba9e3168af37143743d8c1a9e9ebd8936a970a7a5062c72543929f40bc4c208e386f64dd60882ac9e4ab7954db48b84d150ad3ac3619e6fb55ca14774b3962061e205be4fd9bd612304eacea65db2c60a881290fa307a3fb63622c96337cf51f84cd0d6dc2317a26692ed56", 0x6e}, {&(0x7f00000077c0)="2d079e989893834976296a813a25fe27f2e1a8a5f788dce0322dae5ccdd789bcbea5dab34e4659663717154843e2a3a682194b0164a3fb948826f1fda5a46147633d2f8b4cedd8307bf54f8c0618099d6c4223bd5f5eb226bc5885917cda44e85dd930b87afa009554a1a059fa8bab10d39e0c1be04c6ba41e25798277fd198d5c59", 0x82}], 0x6) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000007900)={'veth0_virt_wifi\x00', @multicast}) sendto$inet6(r2, &(0x7f0000007940)="424bc7fd", 0x4, 0x4800, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r13, &(0x7f0000007980)={0xa, 0x4e22, 0x64, @loopback, 0x81}, 0x1c) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000007a80)={&(0x7f00000079c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007a40)={&(0x7f0000007a00)={0x2c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xe5}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000007ac0)={0x83b4, {{0xa, 0x4e22, 0x8, @remote, 0xfffffff9}}, {{0xa, 0x4e20, 0x3, @private0, 0x80000001}}}, 0x108) 621.014764ms ago: executing program 1 (id=1376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x4, 0x4001}, 0xc) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000300)=0x2000000000000000, 0x8) connect$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000050000000008000100ac1e0101080002006401010108000300", @ANYRES32=r0], 0x34}}, 0x0) 427.88876ms ago: executing program 0 (id=1377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x60, r5, 0x809, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}]}}]}, 0x60}}, 0x40010) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104004000"/20, @ANYRES32=0x0, @ANYBLOB="000000000a000100aaaaaaaaaaaa000008000f0000000000"], 0x30}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000000030d0003006c6973743a736574"], 0x5c}}, 0x0) 426.258978ms ago: executing program 1 (id=1378): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0x5, 0xfffffe97) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x30, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x800, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@dev}, {{@in6=@remote, 0x2000000, 0x33}, 0x0, @in=@multicast1}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in6=@private1}]}]}, 0x1bc}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e000038fd028008000500", @ANYRES32=r5, @ANYBLOB='!\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x26}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 317.534832ms ago: executing program 4 (id=1379): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x2, @multicast, 'veth1_to_bond\x00'}}, 0x1e) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', r3, 0x0, 0x8001}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r5, 0x0, 0xf}, 0x18) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x20000040) connect$pppoe(r1, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}}}}}}, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) (async) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x2, @multicast, 'veth1_to_bond\x00'}}, 0x1e) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', r3, 0x0, 0x8001}, 0x18) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r5, 0x0, 0xf}, 0x18) (async) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r6, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async) accept4(r6, 0x0, 0x0, 0x80800) (async) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x20000040) (async) connect$pppoe(r1, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) (async) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), 0x0) (async) 116.098178ms ago: executing program 0 (id=1380): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000200), 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)={0x44, r4, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r8, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x2b4, r4, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x78}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_TX_RATES={0x220, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x2, 0xff, 0x5a, 0x6, 0xbdb, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6, 0x1b, 0x60, 0x4, 0x0, 0xc, 0x36, 0x6c, 0x48, 0x60, 0x2, 0x3, 0x4, 0x4, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x502c, 0x62d, 0x4, 0xeb8, 0x95, 0x1ff]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1800, 0x7, 0x4, 0x7, 0x1, 0x5, 0x400, 0xc18]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x16, 0x7e, 0x6c, 0xc, 0x24, 0x6c, 0x60, 0x60, 0x9, 0xb, 0x30, 0x9, 0x0, 0x48, 0x1, 0x6, 0x1, 0x12, 0x6c, 0x1b, 0x30, 0xc, 0x48, 0x60, 0x1b, 0x3, 0x24, 0x16, 0x20]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x9}, {0x7, 0x7}, {0x0, 0x2}, {0x5}, {0x0, 0x4}, {0x5, 0x5}, {0x7, 0x5}, {0x2, 0x8}, {0x5, 0x5}, {0x1, 0x3}, {0x1, 0x7}, {0x0, 0x9}, {0x4, 0x4}, {}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0x7}, {0x7, 0xa}, {0x4}, {0x3, 0x2}, {0x7, 0x3}, {0x2, 0x3}, {0x1, 0x6}, {0x5, 0x1}, {0x2, 0x4}, {0x5}, {0x1, 0x5}, {0x1, 0x7}, {0x5, 0x4}, {0x2, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x7, 0x36, 0xfffa, 0xfffe, 0x1, 0x7, 0x5]}}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0xa}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x3}, {0x0, 0x6}, {0x3, 0xa}, {0x6, 0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x6}, {0x6, 0x3}, {0x5, 0x8}, {0x1}, {0x1, 0x7}, {0x7, 0x3}, {0x1, 0xa}, {0x2, 0x1}, {0x7, 0x1}, {0x4, 0xa}, {0x6, 0x3}, {0x4, 0x4}, {0x5, 0x8}, {0x0, 0x4}, {0x7, 0x8}, {0x3, 0x9}, {0x2}, {0x7, 0x1}, {0x4, 0x7}, {0x6, 0x1}, {0x0, 0x5}, {0x6, 0xa}, {0x5, 0x3}, {0x6, 0x2}, {0x2, 0x6}, {0x1, 0x3}, {0x4, 0x2}, {0x5, 0x4}, {0x7, 0x4}, {0x1, 0x3}]}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x1, 0x18, 0x4, 0x3, 0x48, 0x30, 0x18, 0x60, 0xc, 0x6c, 0x1b, 0x9, 0x3, 0xb, 0x4, 0x18, 0x36, 0x6, 0xb, 0x1, 0x1, 0x16, 0x24, 0x16, 0x18, 0x6, 0x1]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x5, 0x3, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x100, 0x7, 0x1, 0x1, 0x6, 0xffff, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x2, 0x800, 0x216d, 0x782, 0x1, 0x100]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x4, 0x6}, {0x0, 0x5}, {0x6, 0x9}, {0x5, 0x5}, {0x2, 0x3}, {0x6, 0x9}, {0x3}, {0x0, 0x7}, {0x7, 0x8}, {0x5, 0x7}, {0x3, 0x8}, {0x3, 0x5}, {0x6, 0x5}, {0x6, 0x2}, {0x7, 0x8}, {0x3}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0xb, 0x30, 0x24, 0x16, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x6, 0x0, 0x10, 0xfff0, 0x9, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xe3f, 0x6, 0x3, 0x0, 0xa, 0xae, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xb5a}, @NL80211_ATTR_PRIVACY={0x4}, @crypto_settings=[@NL80211_ATTR_PMK={0x18, 0xfe, "72df2f3b72407224dcb27072d49eb58006dcffdb"}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_PMK={0x29, 0xfe, "0de53dec736bb660803aaf921a8d1e907edec0a16ef4709d4424520ac6889b6f9ec5af6ee7"}]]}, 0x2b4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000090) 0s ago: executing program 4 (id=1381): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='syzkaller0\x00'}) kernel console output (not intermixed with test programs): r0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.667559][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.674764][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.693879][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.701139][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.758384][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.813004][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.840719][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.899570][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.906798][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.965142][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.972282][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.994851][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.032740][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.039953][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.080794][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.101682][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.108901][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.244519][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.259714][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.301538][ T771] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.308721][ T771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.319234][ T771] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.326393][ T771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.367054][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.507341][ T5828] veth0_vlan: entered promiscuous mode [ 76.563399][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.619694][ T5828] veth1_vlan: entered promiscuous mode [ 76.778321][ T5828] veth0_macvtap: entered promiscuous mode [ 76.839172][ T5828] veth1_macvtap: entered promiscuous mode [ 76.940652][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.971657][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.029444][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.038506][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.052339][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.062650][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.072581][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.081617][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.171215][ T5830] veth0_vlan: entered promiscuous mode [ 77.198102][ T5830] veth1_vlan: entered promiscuous mode [ 77.208882][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.279436][ T5829] veth0_vlan: entered promiscuous mode [ 77.312786][ T5829] veth1_vlan: entered promiscuous mode [ 77.325889][ T4412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.338574][ T4412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.352979][ T5830] veth0_macvtap: entered promiscuous mode [ 77.403571][ T5830] veth1_macvtap: entered promiscuous mode [ 77.409935][ T4412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.420163][ T4412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.433735][ T5843] veth0_vlan: entered promiscuous mode [ 77.512929][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.536220][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.541322][ T5831] veth0_vlan: entered promiscuous mode [ 77.574936][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.588971][ T5829] veth0_macvtap: entered promiscuous mode [ 77.608518][ T5831] veth1_vlan: entered promiscuous mode [ 77.619809][ T5843] veth1_vlan: entered promiscuous mode [ 77.630551][ T5829] veth1_macvtap: entered promiscuous mode [ 77.641381][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.650904][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.660753][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.670617][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.695194][ T5847] Bluetooth: hci0: command tx timeout [ 77.697627][ T51] Bluetooth: hci2: command tx timeout [ 77.700629][ T5847] Bluetooth: hci3: command tx timeout [ 77.706447][ T5150] Bluetooth: hci1: command tx timeout [ 77.711763][ T5836] Bluetooth: hci4: command tx timeout [ 77.778517][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.822122][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.867838][ T5843] veth0_macvtap: entered promiscuous mode [ 77.909976][ T5831] veth0_macvtap: entered promiscuous mode [ 77.924093][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.942342][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.943342][ T5955] Zero length message leads to an empty skb [ 77.951570][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.967043][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.981931][ T5843] veth1_macvtap: entered promiscuous mode [ 78.053413][ T5831] veth1_macvtap: entered promiscuous mode [ 78.074328][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.097642][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.136913][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.199032][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.257304][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.280761][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.300168][ T5961] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.310542][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.321201][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.335343][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.343186][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.394005][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.417462][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.431875][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.441472][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.458044][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.469504][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.502494][ T4412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.526226][ T4412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.558645][ T5964] netlink: 'syz.1.8': attribute type 10 has an invalid length. [ 78.585952][ T5964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8'. [ 78.600052][ T5963] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.700273][ T5964] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 78.709592][ T5964] team0: Failed to send options change via netlink (err -105) [ 78.717551][ T5964] team0: Port device geneve0 added [ 78.756503][ T5963] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.800427][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.821683][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.834906][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.835669][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.859545][ T5963] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.872999][ T5971] syz_tun: entered allmulticast mode [ 78.927043][ T5971] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9'. [ 78.946526][ T5963] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.986986][ T5969] syz_tun: left allmulticast mode [ 79.017607][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.037285][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.184361][ T5963] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.209380][ T771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.234580][ T771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.333292][ T5963] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.357049][ T5981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.429431][ T4412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.456497][ T4412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.494365][ T5963] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.558291][ T5963] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.626698][ T5994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14'. [ 79.775003][ T5847] Bluetooth: hci1: command tx timeout [ 79.780468][ T5847] Bluetooth: hci3: command tx timeout [ 79.786322][ T5840] Bluetooth: hci2: command tx timeout [ 79.793185][ T5836] Bluetooth: hci4: command tx timeout [ 79.793303][ T5150] Bluetooth: hci0: command tx timeout [ 80.284525][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 80.297945][ T6028] netlink: 'syz.4.22': attribute type 7 has an invalid length. [ 80.478096][ T6040] tipc: Started in network mode [ 80.483120][ T6040] tipc: Node identity ea60c0791226, cluster identity 4711 [ 80.517483][ T6040] tipc: Enabled bearer , priority 0 [ 80.692499][ T6045] Illegal XDP return value 455651405 on prog (id 6) dev N/A, expect packet loss! [ 80.911888][ T6032] tipc: Disabling bearer [ 80.976187][ T6064] Bluetooth: MGMT ver 1.23 [ 80.991361][ T6056] warning: `syz.2.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.221447][ T6074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.33'. [ 81.346386][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 81.376091][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.35'. [ 81.427455][ T6084] netlink: 'syz.2.36': attribute type 4 has an invalid length. [ 81.523044][ T6086] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 81.716310][ T6094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.777653][ T6099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.793083][ T6090] netlink: 'syz.4.39': attribute type 29 has an invalid length. [ 81.828793][ T6090] netlink: 'syz.4.39': attribute type 29 has an invalid length. [ 81.960747][ T6107] netlink: 'syz.3.44': attribute type 1 has an invalid length. [ 82.070301][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'. [ 82.140193][ T6113] tipc: Cannot configure node identity twice [ 82.173933][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 82.488109][ T6126] pim6reg1: entered promiscuous mode [ 82.497661][ T6126] pim6reg1: entered allmulticast mode [ 82.587098][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 82.783193][ T6126] netlink: 'syz.1.52': attribute type 1 has an invalid length. [ 82.823752][ T6126] netlink: 'syz.1.52': attribute type 2 has an invalid length. [ 83.089819][ T6154] smc: net device erspan0 applied user defined pnetid SYZ0 [ 83.314063][ T6162] netlink: 'syz.4.64': attribute type 1 has an invalid length. [ 83.333685][ T6162] netlink: 'syz.4.64': attribute type 1 has an invalid length. [ 83.493505][ T6169] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 83.616837][ T5150] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 83.674292][ T6185] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20004 [ 83.883547][ T6195] __nla_validate_parse: 7 callbacks suppressed [ 83.883564][ T6195] netlink: 156 bytes leftover after parsing attributes in process `syz.1.75'. [ 84.011577][ T6199] validate_nla: 1 callbacks suppressed [ 84.011594][ T6199] netlink: 'syz.4.76': attribute type 33 has an invalid length. [ 84.044988][ T6199] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.76'. [ 84.096266][ T6204] netlink: 48 bytes leftover after parsing attributes in process `syz.4.76'. [ 84.158224][ T6206] netlink: 'syz.1.78': attribute type 10 has an invalid length. [ 84.363470][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.78'. [ 84.676965][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 84.844139][ T6246] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.928099][ T6251] syz.1.92 uses obsolete (PF_INET,SOCK_PACKET) [ 84.957683][ T6250] netlink: 144 bytes leftover after parsing attributes in process `syz.3.93'. [ 84.969443][ T6250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.93'. [ 85.010667][ T6253] netlink: 'syz.1.92': attribute type 10 has an invalid length. [ 85.124279][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 85.174073][ T6261] xt_l2tp: v2 tid > 0xffff: 150994944 [ 85.177577][ T6253] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 85.190107][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 85.484146][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 85.631403][ T6290] netlink: 'syz.0.102': attribute type 3 has an invalid length. [ 85.987250][ T6307] sctp: [Deprecated]: syz.4.107 (pid 6307) Use of int in maxseg socket option. [ 85.987250][ T6307] Use struct sctp_assoc_value instead [ 86.032499][ T6307] lo: entered allmulticast mode [ 86.058253][ T6307] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20002 [ 86.178217][ T6315] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 86.227117][ T6312] tipc: Can't bind to reserved service type 0 [ 86.761136][ T1548] cfg80211: failed to load regulatory.db [ 86.780872][ T5910] IPVS: starting estimator thread 0... [ 86.793368][ T6341] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 86.836848][ T6341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.891423][ T6346] IPVS: using max 35 ests per chain, 84000 per kthread [ 87.039123][ T6356] bond1: entered allmulticast mode [ 89.733778][ T6450] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 89.748273][ T6450] macsec1: entered allmulticast mode [ 89.756398][ T6450] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 89.781676][ T6450] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 89.812187][ T6450] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 90.086550][ T6472] __nla_validate_parse: 11 callbacks suppressed [ 90.086570][ T6472] netlink: 300 bytes leftover after parsing attributes in process `syz.1.159'. [ 90.417310][ T6491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.166'. [ 90.657435][ T6498] tipc: Enabling of bearer rejected, media not registered [ 90.750956][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 90.803362][ T6505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.170'. [ 90.814788][ T6504] netlink: 'syz.0.171': attribute type 10 has an invalid length. [ 90.861461][ T6504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.871895][ T6504] team0: Port device bond0 added [ 91.027288][ T6508] ip6tnl1: entered promiscuous mode [ 91.032723][ T6508] ip6tnl1: entered allmulticast mode [ 91.361376][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 91.448654][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 91.609209][ T6545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.181'. [ 91.780767][ T6553] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.609662][ T6600] netlink: 104 bytes leftover after parsing attributes in process `syz.1.197'. [ 92.678906][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059840800: rx timeout, send abort [ 92.688652][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059840000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 92.791534][ T6613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.202'. [ 93.134213][ T6639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.208'. [ 93.160014][ T6639] netlink: 'syz.1.208': attribute type 7 has an invalid length. [ 93.187870][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059840800: abort rx timeout. Force session deactivation [ 93.428640][ T6651] netlink: 'syz.0.213': attribute type 4 has an invalid length. [ 128.480463][ T6686] __nla_validate_parse: 2 callbacks suppressed [ 128.480482][ T6686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.220'. [ 128.734187][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.226'. [ 128.882213][ T6715] netlink: 'syz.3.230': attribute type 1 has an invalid length. [ 128.886092][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 128.910672][ T6715] netlink: 'syz.3.230': attribute type 4 has an invalid length. [ 128.939529][ T6715] netlink: 188 bytes leftover after parsing attributes in process `syz.3.230'. [ 128.985432][ T6715] NCSI netlink: No device for ifindex 458760 [ 129.144161][ T6722] netlink: 72 bytes leftover after parsing attributes in process `syz.3.232'. [ 129.396996][ T6726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.234'. [ 129.543906][ T6738] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.237'. [ 129.545409][ T5903] IPVS: starting estimator thread 0... [ 129.566970][ T6737] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.237'. [ 129.687633][ T6743] IPVS: using max 32 ests per chain, 76800 per kthread [ 129.795633][ T6754] syz.2.241: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 129.841608][ T6754] CPU: 1 UID: 0 PID: 6754 Comm: syz.2.241 Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 129.841635][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.841653][ T6754] Call Trace: [ 129.841660][ T6754] [ 129.841670][ T6754] dump_stack_lvl+0x189/0x250 [ 129.841711][ T6754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.841738][ T6754] ? __pfx__printk+0x10/0x10 [ 129.841757][ T6754] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 129.841779][ T6754] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 129.841800][ T6754] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 129.841821][ T6754] warn_alloc+0x214/0x310 [ 129.841841][ T6754] ? stack_depot_save_flags+0x40/0x900 [ 129.841867][ T6754] ? __pfx_warn_alloc+0x10/0x10 [ 129.841890][ T6754] ? kasan_save_track+0x4f/0x80 [ 129.841915][ T6754] ? xskq_create+0x56/0x170 [ 129.841936][ T6754] ? xsk_init_queue+0xb0/0x110 [ 129.841957][ T6754] ? xsk_setsockopt+0x43f/0x710 [ 129.841976][ T6754] ? do_sock_setsockopt+0x25a/0x3e0 [ 129.841994][ T6754] ? __x64_sys_setsockopt+0x18b/0x220 [ 129.842013][ T6754] ? do_syscall_64+0xfa/0x3b0 [ 129.842035][ T6754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.842062][ T6754] __vmalloc_node_range_noprof+0x125/0x12f0 [ 129.842112][ T6754] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 129.842138][ T6754] ? __kasan_kmalloc+0x93/0xb0 [ 129.842158][ T6754] vmalloc_user_noprof+0xad/0xf0 [ 129.842178][ T6754] ? xskq_create+0xbf/0x170 [ 129.842201][ T6754] xskq_create+0xbf/0x170 [ 129.842226][ T6754] xsk_init_queue+0xb0/0x110 [ 129.842252][ T6754] xsk_setsockopt+0x43f/0x710 [ 129.842277][ T6754] ? __pfx_xsk_setsockopt+0x10/0x10 [ 129.842300][ T6754] ? do_futex+0x333/0x420 [ 129.842318][ T6754] ? __lock_acquire+0xab9/0xd20 [ 129.842347][ T6754] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 129.842368][ T6754] ? __pfx_xsk_setsockopt+0x10/0x10 [ 129.842392][ T6754] do_sock_setsockopt+0x25a/0x3e0 [ 129.842415][ T6754] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 129.842452][ T6754] __x64_sys_setsockopt+0x18b/0x220 [ 129.842486][ T6754] do_syscall_64+0xfa/0x3b0 [ 129.842510][ T6754] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.842534][ T6754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.842551][ T6754] ? clear_bhb_loop+0x60/0xb0 [ 129.842576][ T6754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.842594][ T6754] RIP: 0033:0x7f743518e929 [ 129.842615][ T6754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.842630][ T6754] RSP: 002b:00007f7435fda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 129.842649][ T6754] RAX: ffffffffffffffda RBX: 00007f74353b5fa0 RCX: 00007f743518e929 [ 129.842663][ T6754] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 129.842674][ T6754] RBP: 00007f7435210b39 R08: 0000000000000004 R09: 0000000000000000 [ 129.842685][ T6754] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.842696][ T6754] R13: 0000000000000000 R14: 00007f74353b5fa0 R15: 00007fffde5b7dc8 [ 129.842726][ T6754] [ 130.163903][ T6759] sock: sock_set_timeout: `syz.0.243' (pid 6759) tries to set negative timeout [ 130.196079][ T6754] Mem-Info: [ 130.200680][ T6754] active_anon:5377 inactive_anon:0 isolated_anon:0 [ 130.200680][ T6754] active_file:1142 inactive_file:39835 isolated_file:0 [ 130.200680][ T6754] unevictable:768 dirty:39 writeback:5 [ 130.200680][ T6754] slab_reclaimable:9734 slab_unreclaimable:99429 [ 130.200680][ T6754] mapped:29030 shmem:1380 pagetables:1115 [ 130.200680][ T6754] sec_pagetables:0 bounce:0 [ 130.200680][ T6754] kernel_misc_reclaimable:0 [ 130.200680][ T6754] free:1330029 free_pcp:15825 free_cma:0 [ 130.336970][ T6754] Node 0 active_anon:21544kB inactive_anon:0kB active_file:4568kB inactive_file:159140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116064kB dirty:168kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12216kB pagetables:4464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 130.381585][ T6754] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 130.414374][ T6754] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 130.443951][ T6754] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 130.449842][ T6754] Node 0 DMA32 free:1415892kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21496kB inactive_anon:0kB active_file:4568kB inactive_file:157324kB unevictable:1536kB writepending:168kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:41172kB local_pcp:20296kB free_cma:0kB [ 130.483964][ T6754] lowmem_reserve[]: 0 0 1 1 1 [ 130.493554][ T6754] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 130.556363][ T6754] lowmem_reserve[]: 0 0 0 0 0 [ 130.576406][ T5150] Bluetooth: hci4: command tx timeout [ 130.592537][ T6754] Node 1 Normal free:3890036kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22548kB local_pcp:12944kB free_cma:0kB [ 130.627613][ T6754] lowmem_reserve[]: 0 0 0 0 0 [ 130.632403][ T6754] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 130.654284][ T6754] Node 0 DMA32: 287*4kB (UME) 283*8kB (UME) 186*16kB (UME) 398*32kB (UME) 81*64kB (UME) 30*128kB (UME) 17*256kB (ME) 10*512kB (UM) 8*1024kB (ME) [ 130.677450][ T6773] netlink: 248 bytes leftover after parsing attributes in process `syz.4.244'. [ 130.721347][ T6754] 7*2048kB (ME) 331*4096kB (M) = 1415924kB [ 130.728311][ T6754] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 130.754981][ T6754] Node 1 Normal: 215*4kB (UME) 41*8kB (UME) 27*16kB (UME) 35*32kB (UME) 13*64kB (UME) 3*128kB (UM) 4*256kB (UME) 4*512kB (UME) 4*1024kB (ME) 2*2048kB (UE) 946*4096kB (ME) = 3890036kB [ 130.855552][ T6754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.869097][ T6789] netlink: 'syz.1.250': attribute type 2 has an invalid length. [ 130.887880][ T6754] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.919911][ T6754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.951248][ T6754] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.988708][ T6754] 42335 total pagecache pages [ 131.009753][ T6754] 0 pages in swap cache [ 131.020246][ T6754] Free swap = 124996kB [ 131.049719][ T6754] Total swap = 124996kB [ 131.054024][ T6754] 2097051 pages RAM [ 131.066456][ T6754] 0 pages HighMem/MovableOnly [ 131.071991][ T6754] 424694 pages reserved [ 131.093226][ T6754] 0 pages cma reserved [ 131.309087][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'. [ 131.672205][ T6831] openvswitch: netlink: Flow key attr not present in new flow. [ 131.690869][ T6823] netlink: 'syz.3.260': attribute type 39 has an invalid length. [ 132.645841][ T6874] ip6tnl0: mtu less than device minimum [ 132.836069][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.842456][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.268125][ T6961] __nla_validate_parse: 8 callbacks suppressed [ 134.268142][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.290'. [ 134.316317][ T6961] netlink: 36 bytes leftover after parsing attributes in process `syz.3.290'. [ 134.452061][ T6970] IPVS: set_ctl: invalid protocol: 41 172.30.0.5:20000 [ 134.517545][ T6969] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 134.650277][ T6977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.756129][ T6978] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.790913][ T6983] gtp0: entered promiscuous mode [ 134.812855][ T6983] gtp0: entered allmulticast mode [ 134.852223][ T6983] netlink: 5 bytes leftover after parsing attributes in process `syz.2.299'. [ 134.882279][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 135.149737][ T6998] netlink: 20 bytes leftover after parsing attributes in process `syz.4.303'. [ 135.533238][ T7009] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 135.981364][ T7033] xt_hashlimit: size too large, truncated to 1048576 [ 136.042078][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 136.356149][ T7053] xt_hashlimit: size too large, truncated to 1048576 [ 136.664470][ T7064] netlink: 'syz.2.323': attribute type 2 has an invalid length. [ 136.839113][ T7078] xt_l2tp: invalid flags combination: c [ 137.497830][ T7105] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20002 [ 137.728282][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 137.761104][ T7110] netlink: 576 bytes leftover after parsing attributes in process `syz.2.338'. [ 137.996324][ T7130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.343'. [ 138.057324][ T7132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.344'. [ 138.223626][ T7136] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.233074][ T7136] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.242655][ T7136] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.251734][ T7136] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.293985][ T7142] netlink: 'syz.4.348': attribute type 21 has an invalid length. [ 138.320296][ T7142] netlink: 'syz.4.348': attribute type 4 has an invalid length. [ 138.370131][ T7142] netlink: 'syz.4.348': attribute type 5 has an invalid length. [ 138.433481][ T7142] netlink: 'syz.4.348': attribute type 21 has an invalid length. [ 138.462920][ T7144] netlink: 'syz.3.349': attribute type 2 has an invalid length. [ 138.537260][ T7153] openvswitch: netlink: Key type 272 is out of range max 32 [ 139.320549][ T7142] netlink: 'syz.4.348': attribute type 4 has an invalid length. [ 139.328842][ T7142] netlink: 'syz.4.348': attribute type 5 has an invalid length. [ 139.339701][ T7142] __nla_validate_parse: 6 callbacks suppressed [ 139.339719][ T7142] netlink: 3 bytes leftover after parsing attributes in process `syz.4.348'. [ 139.383162][ T7150] xfrm2: entered allmulticast mode [ 139.555207][ T7160] netlink: 40 bytes leftover after parsing attributes in process `syz.3.353'. [ 139.653531][ T7166] netlink: 72 bytes leftover after parsing attributes in process `syz.1.356'. [ 139.883170][ T7181] openvswitch: netlink: Multiple metadata blocks provided [ 140.057485][ T7183] netlink: 'syz.2.361': attribute type 21 has an invalid length. [ 140.090220][ T7183] netlink: 152 bytes leftover after parsing attributes in process `syz.2.361'. [ 140.107692][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'. [ 140.260376][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 140.326517][ T7198] bridge_slave_1: left allmulticast mode [ 140.335762][ T7198] bridge_slave_1: left promiscuous mode [ 140.359695][ T7198] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.415173][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 140.422706][ T7198] bridge_slave_0: left allmulticast mode [ 140.434610][ T7198] bridge_slave_0: left promiscuous mode [ 140.442270][ T7198] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.541322][ T7205] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 140.553788][ T7205] netlink: 184 bytes leftover after parsing attributes in process `syz.3.368'. [ 140.664404][ T7218] netlink: 48 bytes leftover after parsing attributes in process `syz.0.372'. [ 140.792348][ T7228] pimreg: entered allmulticast mode [ 140.800731][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 140.822689][ T7230] pimreg: left allmulticast mode [ 141.418669][ T7268] ipvlan2: entered allmulticast mode [ 141.431335][ T7268] erspan0: entered allmulticast mode [ 141.706057][ T7282] netlink: 'syz.1.388': attribute type 6 has an invalid length. [ 141.757553][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bfea800: rx timeout, send abort [ 142.242840][ T7306] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 142.265894][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805bfea800: abort rx timeout. Force session deactivation [ 142.358630][ T7313] veth0: entered promiscuous mode [ 142.364657][ T7313] veth0: left promiscuous mode [ 142.379756][ T7313] netlink: zone id is out of range [ 142.386548][ T7313] netlink: zone id is out of range [ 142.391690][ T7313] netlink: zone id is out of range [ 142.397029][ T7313] netlink: zone id is out of range [ 142.402160][ T7313] netlink: get zone limit has 8 unknown bytes [ 142.483419][ T7315] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.512570][ T7316] netlink: 'syz.0.398': attribute type 8 has an invalid length. [ 142.545856][ T7315] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.643006][ T7315] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.758341][ T7315] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.881598][ T7315] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.928000][ T7315] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.968956][ T7315] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.016648][ T7315] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.517409][ T7349] netlink: 'syz.0.406': attribute type 23 has an invalid length. [ 143.536727][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 143.992483][ T7366] unsupported nlmsg_type 40 [ 144.536242][ T7381] x_tables: duplicate underflow at hook 1 [ 144.710750][ T7392] __nla_validate_parse: 11 callbacks suppressed [ 144.710767][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.421'. [ 144.743501][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.420'. [ 145.192032][ T7411] netlink: 'syz.4.429': attribute type 8 has an invalid length. [ 145.306812][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 145.360924][ T7415] macvlan2: entered promiscuous mode [ 145.380840][ T7415] macvlan2: entered allmulticast mode [ 145.513980][ T7427] netlink: 348 bytes leftover after parsing attributes in process `syz.0.435'. [ 145.525915][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.433'. [ 145.705318][ T7436] bridge0: port 3(gretap0) entered blocking state [ 145.712355][ T7436] bridge0: port 3(gretap0) entered disabled state [ 145.727940][ T7436] gretap0: entered allmulticast mode [ 145.750713][ T7436] gretap0: entered promiscuous mode [ 145.766610][ T7436] bridge0: port 3(gretap0) entered blocking state [ 145.773843][ T7436] bridge0: port 3(gretap0) entered forwarding state [ 145.797185][ T7438] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 146.012359][ T7442] team0 (unregistering): Port device team_slave_0 removed [ 146.049712][ T7442] team0 (unregistering): Port device team_slave_1 removed [ 146.080826][ T7453] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 146.156649][ T7456] vxcan3: entered allmulticast mode [ 146.172094][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 146.183215][ T7456] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 146.194500][ T7456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.341360][ T7427] syz.0.435 (7427) used greatest stack depth: 17992 bytes left [ 146.409774][ T7466] netlink: 'syz.1.446': attribute type 4 has an invalid length. [ 146.415603][ T7465] netlink: 'syz.1.446': attribute type 4 has an invalid length. [ 146.435551][ T7465] netlink: 17 bytes leftover after parsing attributes in process `syz.1.446'. [ 146.446019][ T7466] netlink: 17 bytes leftover after parsing attributes in process `syz.1.446'. [ 146.829944][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 147.354936][ T7516] xt_nfacct: accounting object `syz1' does not exists [ 147.789390][ T7548] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 147.816185][ T7541] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 147.828423][ T7554] netlink: 19 bytes leftover after parsing attributes in process `syz.0.470'. [ 148.136247][ T7559] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 148.312951][ T7573] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 148.625683][ T7591] xt_HMARK: proto mask must be zero with L3 mode [ 148.636828][ T7589] sctp: [Deprecated]: syz.1.481 (pid 7589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.636828][ T7589] Use struct sctp_sack_info instead [ 148.648396][ T7590] xt_HMARK: proto mask must be zero with L3 mode [ 148.712334][ T7589] sctp: [Deprecated]: syz.1.481 (pid 7589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.712334][ T7589] Use struct sctp_sack_info instead [ 148.880306][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.911473][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.353266][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.394795][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.520090][ T5150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.530181][ T5150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.542665][ T5150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.553097][ T5150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.569330][ T5150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.621463][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.646216][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.664169][ T7625] netlink: 'syz.3.491': attribute type 83 has an invalid length. [ 149.729890][ T7627] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 149.745526][ T7627] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 149.801974][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.822305][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.278867][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.503'. [ 150.302424][ T7649] bridge_slave_0: left allmulticast mode [ 150.308325][ T7649] bridge_slave_0: left promiscuous mode [ 150.316695][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.363076][ T7649] bridge_slave_1: left allmulticast mode [ 150.376557][ T7649] bridge_slave_1: left promiscuous mode [ 150.390531][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.429940][ T7649] bond0: (slave bond_slave_0): Releasing backup interface [ 150.463488][ T7649] bond0: (slave bond_slave_1): Releasing backup interface [ 150.510021][ T7649] team0: Port device team_slave_0 removed [ 150.547819][ T7649] team0: Port device team_slave_1 removed [ 150.559465][ T7649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.568017][ T7649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.586719][ T7649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.594965][ T7649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.620638][ T7649] team0: Port device geneve0 removed [ 150.629153][ T7649] bond0: (slave wlan1): Releasing backup interface [ 150.678816][ T7650] geneve2: entered promiscuous mode [ 150.771529][ T7661] gretap0: entered promiscuous mode [ 150.778411][ T7661] vlan2: entered promiscuous mode [ 150.849994][ T7669] vlan1: entered allmulticast mode [ 150.863396][ T7669] veth0_vlan: entered allmulticast mode [ 151.053294][ T59] bridge_slave_1: left allmulticast mode [ 151.092223][ T59] bridge_slave_1: left promiscuous mode [ 151.121894][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.172749][ T59] bridge_slave_0: left allmulticast mode [ 151.197656][ T59] bridge_slave_0: left promiscuous mode [ 151.222748][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.443018][ T7703] netlink: 'syz.1.514': attribute type 10 has an invalid length. [ 151.614849][ T5150] Bluetooth: hci3: command tx timeout [ 151.747280][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.760580][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.770513][ T59] bond0 (unregistering): Released all slaves [ 151.785169][ T59] bond1 (unregistering): Released all slaves [ 151.818239][ T7692] syzkaller0: refused to change device tx_queue_len [ 151.846948][ T7703] veth0_vlan: entered allmulticast mode [ 151.897021][ T7703] veth0_vlan: left promiscuous mode [ 151.914057][ T7703] veth0_vlan: entered promiscuous mode [ 151.941170][ T7703] team0: Device veth0_vlan failed to register rx_handler [ 152.079742][ T7714] netlink: 'syz.3.515': attribute type 4 has an invalid length. [ 152.302441][ T7722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.317333][ T7717] batadv1: entered allmulticast mode [ 152.410050][ T7616] chnl_net:caif_netlink_parms(): no params data found [ 152.435333][ T7724] netlink: 36 bytes leftover after parsing attributes in process `syz.4.516'. [ 152.455850][ T7729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.518'. [ 152.474919][ T7728] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 152.584746][ T7732] trusted_key: syz.1.520 sent an empty control message without MSG_MORE. [ 152.710850][ T6626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.770545][ T6626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.789588][ T59] hsr_slave_0: left promiscuous mode [ 152.825256][ T59] hsr_slave_1: left promiscuous mode [ 152.845424][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.865703][ T7741] netlink: 'syz.1.521': attribute type 178 has an invalid length. [ 152.881566][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.897361][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.917168][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.961532][ T59] veth1_macvtap: left promiscuous mode [ 152.982604][ T59] veth0_macvtap: left promiscuous mode [ 152.995579][ T59] veth1_vlan: left promiscuous mode [ 153.001071][ T59] veth0_vlan: left promiscuous mode [ 153.705138][ T5150] Bluetooth: hci3: command tx timeout [ 154.143358][ T7616] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.153007][ T7616] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.162389][ T7616] bridge_slave_0: entered allmulticast mode [ 154.171086][ T7616] bridge_slave_0: entered promiscuous mode [ 154.188475][ T7616] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.200402][ T7616] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.223456][ T7772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.228700][ T7616] bridge_slave_1: entered allmulticast mode [ 154.253106][ T7616] bridge_slave_1: entered promiscuous mode [ 154.566507][ T7793] netlink: 'syz.0.534': attribute type 10 has an invalid length. [ 154.620905][ T7616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.682357][ T7793] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 154.794164][ T7800] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 154.833595][ T7616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.863665][ T7800] wg1: entered promiscuous mode [ 154.888815][ T7800] netlink: 'syz.3.535': attribute type 1 has an invalid length. [ 154.915895][ T7800] netlink: 232 bytes leftover after parsing attributes in process `syz.3.535'. [ 154.945505][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.535'. [ 155.019640][ T7812] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 155.032176][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 155.057898][ T7616] team0: Port device team_slave_0 added [ 155.066491][ T7812] netlink: 'syz.1.538': attribute type 83 has an invalid length. [ 155.092366][ T7616] team0: Port device team_slave_1 added [ 155.118596][ T7812] »»»»»»: renamed from veth0_to_bond (while UP) [ 155.124309][ T59] IPVS: stop unused estimator thread 0... [ 155.242745][ T7616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.256677][ T7616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.283914][ T7616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.322012][ T7616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.344659][ T7616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.404294][ T7825] netlink: 'syz.0.541': attribute type 7 has an invalid length. [ 155.407706][ T7616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.450141][ T7827] netlink: 'syz.0.541': attribute type 7 has an invalid length. [ 155.528090][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 155.559098][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'. [ 155.602189][ T7616] hsr_slave_0: entered promiscuous mode [ 155.617608][ T7616] hsr_slave_1: entered promiscuous mode [ 155.643100][ T7616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.666654][ T7616] Cannot create hsr debugfs directory [ 155.778989][ T5150] Bluetooth: hci3: command tx timeout [ 155.788555][ T7844] x_tables: duplicate underflow at hook 3 [ 156.586961][ T7875] veth0_vlan: left promiscuous mode [ 156.628996][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 157.032531][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 157.655886][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 157.719162][ T7924] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 157.737558][ T7926] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 157.753788][ T7924] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 157.775129][ T7924] gretap1: entered promiscuous mode [ 157.785996][ T7924] gretap1: entered allmulticast mode [ 157.833058][ T7616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 157.855229][ T5150] Bluetooth: hci3: command tx timeout [ 157.868124][ T7616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 157.898960][ T7616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 157.921402][ T7616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 158.107158][ T7940] bridge0: port 3(gretap0) entered disabled state [ 158.213956][ T7943] tc_dump_action: action bad kind [ 158.274236][ T7946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'. [ 158.285075][ T7616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.320394][ T7946] netlink: 'syz.1.573': attribute type 33 has an invalid length. [ 158.341050][ T5925] IPVS: starting estimator thread 0... [ 158.348674][ T7949] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 158.361100][ T7948] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 158.408255][ T7616] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.443948][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.451138][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.460652][ T7951] IPVS: using max 35 ests per chain, 84000 per kthread [ 158.546313][ T6625] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.553510][ T6625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.615413][ T7963] xt_ipcomp: unknown flags B [ 158.701568][ T7969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.579'. [ 158.893349][ T7980] netlink: 'syz.4.581': attribute type 11 has an invalid length. [ 159.238881][ T8000] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 159.371686][ T7616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.524411][ T7616] veth0_vlan: entered promiscuous mode [ 159.591059][ T8021] netlink: 104 bytes leftover after parsing attributes in process `syz.1.591'. [ 159.630436][ T8019] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 159.687677][ T7616] veth1_vlan: entered promiscuous mode [ 159.860846][ T7616] veth0_macvtap: entered promiscuous mode [ 159.900552][ T7616] veth1_macvtap: entered promiscuous mode [ 159.934990][ T5150] Bluetooth: hci3: command tx timeout [ 159.959365][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.596'. [ 159.968194][ T7616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.065809][ T8039] netlink: 'syz.1.597': attribute type 8 has an invalid length. [ 160.084441][ T8036] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 160.123982][ T7616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.363396][ T8055] netlink: ct family unspecified [ 160.384664][ T8055] openvswitch: netlink: Actions may not be safe on all matching packets [ 160.549351][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.605'. [ 160.592214][ T8064] netlink: 9 bytes leftover after parsing attributes in process `syz.3.604'. [ 160.594495][ T7616] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.611414][ T7616] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.620503][ T7616] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.631381][ T7616] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.686490][ T8066] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 160.712875][ T8066] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 160.752377][ T8064] gretap0: entered promiscuous mode [ 161.126022][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.173288][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.277498][ T6630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.294187][ T6630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.454456][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.613'. [ 162.105632][ T6626] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.438553][ T6626] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.617843][ T6626] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.851275][ T8163] x_tables: duplicate underflow at hook 1 [ 162.867106][ T6626] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.101317][ T8170] netlink: 'syz.3.630': attribute type 1 has an invalid length. [ 163.129010][ T8170] netlink: 'syz.3.630': attribute type 3 has an invalid length. [ 163.171593][ T8170] netlink: 'syz.3.630': attribute type 235 has an invalid length. [ 163.180204][ T8174] ipvlan0: entered promiscuous mode [ 163.198329][ T8177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.631'. [ 163.227740][ T8174] ipvlan0: entered allmulticast mode [ 163.238917][ T8174] veth0_vlan: entered allmulticast mode [ 163.289317][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.306059][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.314203][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.323910][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.332887][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.523640][ T8190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.633'. [ 163.555001][ T8190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.633'. [ 163.555607][ T6626] bridge_slave_1: left allmulticast mode [ 163.584095][ T6626] bridge_slave_1: left promiscuous mode [ 163.600819][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.635648][ T6626] bridge_slave_0: left allmulticast mode [ 163.649390][ T6626] bridge_slave_0: left promiscuous mode [ 163.668768][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.333923][ T6626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.356360][ T6626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.369623][ T6626] bond0 (unregistering): Released all slaves [ 165.379739][ T5150] Bluetooth: hci3: command tx timeout [ 165.747165][ T8276] netlink: 'syz.1.645': attribute type 21 has an invalid length. [ 165.760820][ T8276] netlink: 156 bytes leftover after parsing attributes in process `syz.1.645'. [ 165.866093][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 165.889566][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 165.965276][ T8281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.647'. [ 165.974683][ T8282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.647'. [ 166.030861][ T8288] netlink: 'syz.4.648': attribute type 13 has an invalid length. [ 167.395056][ T8303] netlink: 27 bytes leftover after parsing attributes in process `syz.4.654'. [ 167.454775][ T51] Bluetooth: hci3: command tx timeout [ 167.512992][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.656'. [ 167.530694][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.656'. [ 167.593025][ T8314] netlink: 76 bytes leftover after parsing attributes in process `syz.0.657'. [ 167.628758][ T6626] hsr_slave_0: left promiscuous mode [ 167.637186][ T6626] hsr_slave_1: left promiscuous mode [ 167.651410][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.668264][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.673343][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.657'. [ 167.690629][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.699981][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.731089][ T6626] veth1_macvtap: left promiscuous mode [ 167.755892][ T6626] veth0_macvtap: left promiscuous mode [ 167.761489][ T6626] veth1_vlan: left promiscuous mode [ 167.771019][ T6626] veth0_vlan: left promiscuous mode [ 167.901318][ T8330] netlink: 'syz.3.659': attribute type 10 has an invalid length. [ 168.211332][ T6626] team0 (unregistering): Port device team_slave_1 removed [ 168.279120][ T6626] team0 (unregistering): Port device team_slave_0 removed [ 168.663293][ T8308] bridge0: port 1(vlan2) entered blocking state [ 168.670124][ T8308] bridge0: port 1(vlan2) entered disabled state [ 168.677040][ T8308] vlan2: entered allmulticast mode [ 168.682195][ T8308] bridge0: entered allmulticast mode [ 168.690983][ T8308] vlan2: left allmulticast mode [ 168.697121][ T8308] bridge0: left allmulticast mode [ 168.779873][ T8327] netlink: 'syz.0.657': attribute type 1 has an invalid length. [ 168.792713][ T8326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.815907][ T8329] netlink: 'syz.0.657': attribute type 1 has an invalid length. [ 168.881433][ T8330] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 168.917127][ T8180] chnl_net:caif_netlink_parms(): no params data found [ 169.130978][ T8351] Unsupported ieee802154 address type: 0 [ 169.447450][ T8180] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.474885][ T8180] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.482217][ T8180] bridge_slave_0: entered allmulticast mode [ 169.519542][ T8180] bridge_slave_0: entered promiscuous mode [ 169.535672][ T51] Bluetooth: hci3: command 0x040f tx timeout [ 169.553929][ T8180] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.575060][ T8180] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.604858][ T8180] bridge_slave_1: entered allmulticast mode [ 169.612622][ T8180] bridge_slave_1: entered promiscuous mode [ 169.867762][ T8180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.918276][ T8180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.203065][ T8180] team0: Port device team_slave_0 added [ 170.260110][ T8405] netlink: 'syz.4.675': attribute type 1 has an invalid length. [ 170.268553][ T8405] netlink: 'syz.4.675': attribute type 4 has an invalid length. [ 170.275926][ T8180] team0: Port device team_slave_1 added [ 170.282955][ T8405] NCSI netlink: No device for ifindex 458760 [ 170.411918][ T8410] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 170.436620][ T8180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.455564][ T8180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.490921][ T8180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.510732][ T8180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.535722][ T8180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.584270][ T8180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.811278][ T8424] netlink: 'syz.0.681': attribute type 23 has an invalid length. [ 170.831367][ T8180] hsr_slave_0: entered promiscuous mode [ 170.861969][ T8180] hsr_slave_1: entered promiscuous mode [ 170.874282][ T8180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.882530][ T8180] Cannot create hsr debugfs directory [ 170.968858][ T8431] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 171.614655][ T5150] Bluetooth: hci3: command 0x040f tx timeout [ 171.661284][ T8457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.731547][ T8457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.783241][ T8458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.821227][ T8457] pim6reg: entered allmulticast mode [ 172.241458][ T8180] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.273550][ T8180] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.293649][ T8180] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.309613][ T8500] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.336122][ T8180] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.628066][ T8180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.660096][ T8180] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.685988][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.693213][ T6629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.722739][ T6629] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.730013][ T6629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.746437][ T8524] __nla_validate_parse: 8 callbacks suppressed [ 172.746454][ T8524] netlink: 40 bytes leftover after parsing attributes in process `syz.0.699'. [ 172.779631][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 172.978721][ T8534] netlink: 44 bytes leftover after parsing attributes in process `syz.0.700'. [ 172.992113][ T8534] netlink: 43 bytes leftover after parsing attributes in process `syz.0.700'. [ 173.004192][ T8534] netlink: 'syz.0.700': attribute type 6 has an invalid length. [ 173.018361][ T8534] netlink: 'syz.0.700': attribute type 5 has an invalid length. [ 173.028112][ T8534] netlink: 43 bytes leftover after parsing attributes in process `syz.0.700'. [ 173.244364][ T8180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.261206][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'. [ 173.298610][ T8543] smc: net device erspan0 erased user defined pnetid SYZ0 [ 173.405779][ T8180] veth0_vlan: entered promiscuous mode [ 173.475121][ T8180] veth1_vlan: entered promiscuous mode [ 173.605121][ T8180] veth0_macvtap: entered promiscuous mode [ 173.644385][ T8180] veth1_macvtap: entered promiscuous mode [ 173.669098][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.706'. [ 173.699648][ T5150] Bluetooth: hci3: command 0x040f tx timeout [ 173.781665][ T8180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.858396][ T8180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.927768][ T8180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.994675][ T8180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.003428][ T8180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.052425][ T8180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.070176][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.3.714'. [ 174.101432][ T8582] netlink: 'syz.3.714': attribute type 33 has an invalid length. [ 174.442219][ T6626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.475636][ T6626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.486292][ T8602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.717'. [ 174.543709][ T8606] xt_connbytes: Forcing CT accounting to be enabled [ 174.575959][ T8606] --map-set only usable from mangle table [ 174.595987][ T6626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.603855][ T6626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.138683][ T8633] syzkaller1: entered promiscuous mode [ 175.154846][ T8633] syzkaller1: entered allmulticast mode [ 175.248956][ T8640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.726'. [ 175.818952][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.098725][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.327894][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.747892][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.209475][ T8742] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 177.226540][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.241127][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.252205][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.261395][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.270477][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.456783][ T8712] team0 (unregistering): Port device team_slave_0 removed [ 177.484015][ T8712] team0 (unregistering): Port device team_slave_1 removed [ 177.512521][ T8712] team0 (unregistering): Port device bond0 removed [ 177.770382][ T8763] __nla_validate_parse: 27 callbacks suppressed [ 177.770400][ T8763] netlink: 48 bytes leftover after parsing attributes in process `syz.1.749'. [ 177.836109][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 177.860535][ T8767] openvswitch: netlink: Actions may not be safe on all matching packets [ 178.136388][ T8775] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 178.187660][ T8783] netlink: 68 bytes leftover after parsing attributes in process `syz.4.753'. [ 178.474060][ T8792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.509859][ T59] bridge_slave_1: left allmulticast mode [ 178.524870][ T59] bridge_slave_1: left promiscuous mode [ 178.538775][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.572470][ T8798] netlink: 'syz.0.756': attribute type 1 has an invalid length. [ 178.581409][ T8798] netlink: 224 bytes leftover after parsing attributes in process `syz.0.756'. [ 178.597722][ T59] bridge_slave_0: left allmulticast mode [ 178.603409][ T59] bridge_slave_0: left promiscuous mode [ 178.628225][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.194484][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.208018][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.223290][ T59] bond0 (unregistering): Released all slaves [ 179.376645][ T5150] Bluetooth: hci3: command tx timeout [ 179.856618][ T8847] netlink: 'syz.3.766': attribute type 13 has an invalid length. [ 179.866017][ T8847] netlink: 324 bytes leftover after parsing attributes in process `syz.3.766'. [ 179.868990][ T8745] chnl_net:caif_netlink_parms(): no params data found [ 179.882675][ T8847] sctp: [Deprecated]: syz.3.766 (pid 8847) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.882675][ T8847] Use struct sctp_sack_info instead [ 179.994076][ T59] hsr_slave_0: left promiscuous mode [ 180.005743][ T59] hsr_slave_1: left promiscuous mode [ 180.012010][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.020624][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.024428][ T8851] delete_channel: no stack [ 180.033850][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.041749][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.066972][ T59] veth1_macvtap: left promiscuous mode [ 180.073954][ T59] veth0_macvtap: left promiscuous mode [ 180.080420][ T59] veth1_vlan: left promiscuous mode [ 180.086379][ T59] veth0_vlan: left promiscuous mode [ 180.250187][ T8857] netlink: 'syz.3.769': attribute type 11 has an invalid length. [ 180.261350][ T8857] netlink: 'syz.3.769': attribute type 4 has an invalid length. [ 180.269734][ T8857] netlink: 224 bytes leftover after parsing attributes in process `syz.3.769'. [ 180.452589][ T8861] netlink: 'syz.1.770': attribute type 1 has an invalid length. [ 180.588004][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'. [ 180.643896][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.772'. [ 180.742585][ T59] team0 (unregistering): Port device team_slave_1 removed [ 180.780939][ T59] team0 (unregistering): Port device team_slave_0 removed [ 181.165039][ T8853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.454757][ T5150] Bluetooth: hci3: command tx timeout [ 181.480568][ T8890] openvswitch: netlink: Key type 29 is not supported [ 181.560270][ T8883] netlink: 9 bytes leftover after parsing attributes in process `syz.0.773'. [ 181.621641][ T8745] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.629477][ T8745] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.643189][ T8745] bridge_slave_0: entered allmulticast mode [ 181.651735][ T8745] bridge_slave_0: entered promiscuous mode [ 181.717540][ T8745] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.739582][ T8745] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.751784][ T8745] bridge_slave_1: entered allmulticast mode [ 181.759850][ T8745] bridge_slave_1: entered promiscuous mode [ 181.903532][ T8745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.969517][ T8745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.112362][ T8745] team0: Port device team_slave_0 added [ 182.139324][ T8912] syzkaller1: entered promiscuous mode [ 182.145732][ T8912] syzkaller1: entered allmulticast mode [ 182.160102][ T8745] team0: Port device team_slave_1 added [ 182.424061][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.448271][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.476615][ T8745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.506024][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.513002][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.539570][ T8745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.691309][ T8745] hsr_slave_0: entered promiscuous mode [ 182.699836][ T8745] hsr_slave_1: entered promiscuous mode [ 182.727803][ T8745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.746212][ T8745] Cannot create hsr debugfs directory [ 183.013451][ T8939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.785'. [ 183.534836][ T51] Bluetooth: hci3: command tx timeout [ 183.849414][ T8983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.080741][ T8995] sock: sock_set_timeout: `syz.1.799' (pid 8995) tries to set negative timeout [ 184.304618][ T8745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 184.338272][ T8745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 184.380310][ T8745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 184.425143][ T8745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 184.789173][ T9025] set match dimension is over the limit! [ 184.802476][ T8745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.914046][ T8745] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.942075][ T9035] netlink: 'syz.4.806': attribute type 2 has an invalid length. [ 185.002992][ T9035] netlink: 188 bytes leftover after parsing attributes in process `syz.4.806'. [ 185.086025][ T9035] netlink: 256 bytes leftover after parsing attributes in process `syz.4.806'. [ 185.120601][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.127834][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.211784][ T6629] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.219090][ T6629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.464842][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'. [ 185.519175][ T9060] netlink: 28 bytes leftover after parsing attributes in process `syz.1.811'. [ 185.568907][ T9071] gre2: entered promiscuous mode [ 185.605812][ T9071] gre2: entered allmulticast mode [ 185.620192][ T51] Bluetooth: hci3: command tx timeout [ 185.723073][ T9080] netlink: 164 bytes leftover after parsing attributes in process `syz.0.814'. [ 185.989198][ T9087] sctp: [Deprecated]: syz.3.816 (pid 9087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.989198][ T9087] Use struct sctp_sack_info instead [ 186.247554][ T8745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.603865][ T9119] x_tables: duplicate underflow at hook 2 [ 186.633980][ T8745] veth0_vlan: entered promiscuous mode [ 186.674420][ T9117] xt_bpf: check failed: parse error [ 186.679813][ T8745] veth1_vlan: entered promiscuous mode [ 186.694715][ T9111] netlink: 32 bytes leftover after parsing attributes in process `syz.1.823'. [ 186.930753][ T9126] syzkaller0: entered promiscuous mode [ 186.941560][ T9126] syzkaller0: entered allmulticast mode [ 186.950610][ T8745] veth0_macvtap: entered promiscuous mode [ 186.982380][ T8745] veth1_macvtap: entered promiscuous mode [ 187.005611][ T9131] x_tables: unsorted underflow at hook 4 [ 187.323236][ T9145] netlink: 36 bytes leftover after parsing attributes in process `syz.1.832'. [ 187.338286][ T9145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.832'. [ 188.481842][ T8745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.528776][ T8745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.576388][ T8745] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.627628][ T8745] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.655442][ T8745] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.684595][ T8745] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.991860][ T6625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.022851][ T6625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.069008][ T9174] syz_tun: entered allmulticast mode [ 189.130307][ T6630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.162998][ T9172] syz_tun: left allmulticast mode [ 189.170847][ T6630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.555662][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.851'. [ 189.642352][ T9202] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 189.695745][ T6627] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.864955][ T9205] bridge0: port 1(gretap0) entered blocking state [ 189.871777][ T9205] bridge0: port 1(gretap0) entered disabled state [ 189.894856][ T9205] gretap0: entered allmulticast mode [ 189.920548][ T9205] bridge0: port 1(gretap0) entered blocking state [ 189.927992][ T9205] bridge0: port 1(gretap0) entered forwarding state [ 189.988734][ T6627] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.149986][ T6627] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.209980][ T6627] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.447094][ T6627] bridge_slave_1: left allmulticast mode [ 190.462867][ T6627] bridge_slave_1: left promiscuous mode [ 190.476541][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.599793][ T6627] bridge_slave_0: left allmulticast mode [ 190.616785][ T6627] bridge_slave_0: left promiscuous mode [ 190.622588][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.059074][ T5150] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.072081][ T5150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.084850][ T5150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.092908][ T5150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.101977][ T5150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.263938][ T6627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.275158][ T6627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.285273][ T6627] bond0 (unregistering): Released all slaves [ 191.305049][ T9241] netlink: 'syz.1.865': attribute type 1 has an invalid length. [ 191.885304][ T9261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.378073][ T6627] hsr_slave_0: left promiscuous mode [ 192.400009][ T6627] hsr_slave_1: left promiscuous mode [ 192.415734][ T6627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.423411][ T6627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.438922][ T6627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.451341][ T6627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.461576][ T9302] netlink: 112 bytes leftover after parsing attributes in process `syz.0.878'. [ 192.487893][ T6627] veth1_macvtap: left promiscuous mode [ 192.493684][ T6627] veth0_macvtap: left promiscuous mode [ 192.500495][ T6627] veth1_vlan: left promiscuous mode [ 192.506373][ T6627] veth0_vlan: left promiscuous mode [ 193.075677][ T6627] team0 (unregistering): Port device team_slave_1 removed [ 193.111816][ T6627] team0 (unregistering): Port device team_slave_0 removed [ 193.135073][ T5150] Bluetooth: hci3: command tx timeout [ 193.458545][ T9242] chnl_net:caif_netlink_parms(): no params data found [ 193.726005][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 193.737408][ T9327] nbd: couldn't find a device at index -373156329 [ 193.896258][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'. [ 194.025222][ T9344] netlink: 'syz.3.887': attribute type 10 has an invalid length. [ 194.036602][ T9344] netlink: 40 bytes leftover after parsing attributes in process `syz.3.887'. [ 194.089626][ T9338] gretap0: left promiscuous mode [ 194.095762][ T9338] bridge0: port 3(gretap0) entered disabled state [ 194.108960][ T9338] bridge_slave_1: left allmulticast mode [ 194.114824][ T9338] bridge_slave_1: left promiscuous mode [ 194.120616][ T9338] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.131857][ T9338] bridge_slave_0: left allmulticast mode [ 194.139116][ T9338] bridge_slave_0: left promiscuous mode [ 194.145409][ T9338] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.260332][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.271522][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.313708][ T9344] team0: Port device geneve0 added [ 194.332662][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.354786][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.372247][ T9242] bridge_slave_0: entered allmulticast mode [ 194.383987][ T9242] bridge_slave_0: entered promiscuous mode [ 194.425473][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.432610][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.443894][ T9242] bridge_slave_1: entered allmulticast mode [ 194.462455][ T9242] bridge_slave_1: entered promiscuous mode [ 194.730158][ T9242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.764412][ T9242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.818811][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'. [ 194.852814][ T9368] bridge0: port 3(gretap0) entered blocking state [ 194.871833][ T9368] bridge0: port 3(gretap0) entered disabled state [ 194.893510][ T9368] gretap0: entered allmulticast mode [ 195.042279][ T9242] team0: Port device team_slave_0 added [ 195.058158][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.896'. [ 195.075844][ T9242] team0: Port device team_slave_1 added [ 195.082379][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.896'. [ 195.220384][ T5847] Bluetooth: hci3: command tx timeout [ 195.242784][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.898'. [ 195.371112][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.392615][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.480656][ T9242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.540727][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.567919][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.644645][ T9242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.767744][ T9412] tipc: Started in network mode [ 195.786147][ T9412] tipc: Node identity 425fe9f04927, cluster identity 4711 [ 195.794223][ T9412] tipc: Enabled bearer , priority 0 [ 195.875979][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.905'. [ 195.909621][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.905'. [ 195.986776][ T9405] syzkaller0: entered promiscuous mode [ 196.002106][ T9405] syzkaller0: entered allmulticast mode [ 196.018904][ T9405] tipc: Resetting bearer [ 196.108651][ T9404] tipc: Resetting bearer [ 196.337348][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 196.343937][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 196.462325][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'. [ 196.846432][ T5925] tipc: Node number set to 192473584 [ 197.298489][ T5150] Bluetooth: hci3: command tx timeout [ 197.726096][ T9404] tipc: Disabling bearer [ 197.767463][ T9242] hsr_slave_0: entered promiscuous mode [ 197.774077][ T9242] hsr_slave_1: entered promiscuous mode [ 197.805474][ T9242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.825184][ T9242] Cannot create hsr debugfs directory [ 197.892385][ T9466] netlink: 112 bytes leftover after parsing attributes in process `syz.4.915'. [ 197.920956][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 198.046284][ T9464] netlink: 'syz.3.916': attribute type 1 has an invalid length. [ 198.073521][ T9464] netlink: 'syz.3.916': attribute type 2 has an invalid length. [ 198.181167][ T9471] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 198.249119][ T9478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.920'. [ 198.300003][ T9476] No such timeout policy "syz0" [ 198.351577][ T9483] netlink: 'syz.3.922': attribute type 11 has an invalid length. [ 198.580658][ T9493] gretap0: left allmulticast mode [ 198.605098][ T9493] bridge0: port 1(gretap0) entered disabled state [ 198.780514][ T9493] bond0: (slave bridge_slave_1): Releasing backup interface [ 198.863176][ T9493] bond0: (slave bond_slave_0): Releasing backup interface [ 198.944985][ T9493] bond0: (slave bond_slave_1): Releasing backup interface [ 198.994201][ T9493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.021293][ T9493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.077728][ T9493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.089707][ T9493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.198892][ T9525] Unsupported ieee802154 address type: 0 [ 199.346739][ T9495] netlink: 'syz.1.927': attribute type 33 has an invalid length. [ 199.383144][ T5150] Bluetooth: hci3: command tx timeout [ 199.648335][ T9536] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.684875][ T9536] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.693807][ T9536] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.734200][ T9536] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.507600][ T9569] __nla_validate_parse: 5 callbacks suppressed [ 200.507619][ T9569] netlink: 116 bytes leftover after parsing attributes in process `syz.1.941'. [ 200.631980][ T9242] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 200.681689][ T9242] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 200.720568][ T9242] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 200.769078][ T9242] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.023892][ T9592] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.947'. [ 201.043909][ T9592] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 201.073526][ T9598] netlink: 256 bytes leftover after parsing attributes in process `syz.0.946'. [ 201.179894][ T9242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.272311][ T9242] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.318611][ T6625] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.325863][ T6625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.380257][ T4412] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.387473][ T4412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.528309][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'. [ 201.573197][ T9616] netlink: 'syz.1.953': attribute type 33 has an invalid length. [ 201.612345][ T9616] netlink: 'syz.1.953': attribute type 15 has an invalid length. [ 201.646292][ T9616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.953'. [ 202.170124][ T9242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.372415][ T9659] netlink: 'syz.0.963': attribute type 10 has an invalid length. [ 202.372425][ T9657] openvswitch: netlink: IPv4 tun info is not correct [ 202.391818][ T9242] veth0_vlan: entered promiscuous mode [ 202.412579][ T9659] netlink: 'syz.0.963': attribute type 10 has an invalid length. [ 202.441123][ T9242] veth1_vlan: entered promiscuous mode [ 202.589637][ T9242] veth0_macvtap: entered promiscuous mode [ 202.618850][ T9242] veth1_macvtap: entered promiscuous mode [ 202.630165][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.967'. [ 202.725304][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.735587][ T1548] page_pool_release_retry() stalled pool shutdown: id 32, 1 inflight 60 sec [ 202.868918][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.913328][ T9242] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.941565][ T9242] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.972754][ T9242] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.999492][ T9242] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.041331][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.970'. [ 203.273416][ T9700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.293913][ T6630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.329826][ T6630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.399970][ T9705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.418077][ T771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.440991][ T771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.187342][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.1.983'. [ 204.259332][ T771] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.304898][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 204.327253][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.983'. [ 204.516548][ T771] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.792007][ T771] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.029442][ T771] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.434890][ T771] bridge_slave_1: left allmulticast mode [ 205.440586][ T771] bridge_slave_1: left promiscuous mode [ 205.467843][ T771] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.530165][ T771] bridge_slave_0: left allmulticast mode [ 205.550964][ T771] bridge_slave_0: left promiscuous mode [ 205.584110][ T771] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.653628][ T9785] __nla_validate_parse: 2 callbacks suppressed [ 205.653644][ T9785] netlink: 40 bytes leftover after parsing attributes in process `syz.0.991'. [ 206.142330][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.152300][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.161233][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.183635][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.204150][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.612590][ T771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.631861][ T771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.643293][ T771] bond0 (unregistering): Released all slaves [ 207.410759][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1007'. [ 207.457894][ T9861] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1007'. [ 207.480311][ T9864] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1008'. [ 207.503943][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 207.521644][ T9864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1008'. [ 207.678817][ T771] hsr_slave_0: left promiscuous mode [ 207.704264][ T771] hsr_slave_1: left promiscuous mode [ 207.727310][ T771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.749379][ T771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.785647][ T771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.807597][ T771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.882031][ T771] veth1_macvtap: left promiscuous mode [ 207.897669][ T771] veth0_macvtap: left promiscuous mode [ 207.909394][ T9899] netlink: 'syz.3.1014': attribute type 10 has an invalid length. [ 207.913206][ T771] veth1_vlan: left promiscuous mode [ 207.931243][ T771] veth0_vlan: left promiscuous mode [ 208.254880][ T5150] Bluetooth: hci3: command tx timeout [ 208.719567][ T771] team0 (unregistering): Port device team_slave_1 removed [ 208.768017][ T771] team0 (unregistering): Port device team_slave_0 removed [ 209.289369][ T9899] veth0_vlan: entered promiscuous mode [ 209.309666][ T9899] team0: Device veth0_vlan failed to register rx_handler [ 209.370790][ T9930] netlink: 'syz.1.1018': attribute type 1 has an invalid length. [ 209.384732][ T9930] netlink: 'syz.1.1018': attribute type 3 has an invalid length. [ 209.392625][ T9930] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1018'. [ 209.416117][ T9930] NCSI netlink: No device for ifindex 0 [ 209.472286][ T9927] bond2: entered promiscuous mode [ 209.477572][ T9927] bond2: entered allmulticast mode [ 209.483061][ T9927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.708837][ T9948] netlink: 'syz.1.1021': attribute type 8 has an invalid length. [ 209.728074][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1021'. [ 209.782206][ T9948] bridge0: entered allmulticast mode [ 209.842975][ T9811] chnl_net:caif_netlink_parms(): no params data found [ 209.911932][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 209.937793][ T9957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1025'. [ 209.994665][ T9957] netlink: 'syz.0.1025': attribute type 13 has an invalid length. [ 210.335092][ T5150] Bluetooth: hci3: command tx timeout [ 210.511477][ T9811] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.532745][ T9811] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.569932][ T9811] bridge_slave_0: entered allmulticast mode [ 210.606524][ T9811] bridge_slave_0: entered promiscuous mode [ 210.661410][ T9811] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.679468][ T9811] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.702688][ T9811] bridge_slave_1: entered allmulticast mode [ 210.719225][ T9811] bridge_slave_1: entered promiscuous mode [ 210.884431][T10017] netlink: 'syz.1.1038': attribute type 1 has an invalid length. [ 210.951509][T10014] tipc: Started in network mode [ 210.964740][T10014] tipc: Node identity ac14140f, cluster identity 4711 [ 210.972138][T10014] tipc: New replicast peer: 255.255.255.255 [ 211.004373][T10026] __nla_validate_parse: 2 callbacks suppressed [ 211.004390][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1039'. [ 211.012528][T10014] tipc: Enabled bearer , priority 10 [ 211.024217][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1039'. [ 211.040823][T10028] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1038'. [ 211.152646][T10017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.163831][T10022] netlink: 'syz.3.1039': attribute type 12 has an invalid length. [ 211.172065][T10022] netlink: 'syz.3.1039': attribute type 29 has an invalid length. [ 211.182261][T10022] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1039'. [ 211.191405][T10022] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1039'. [ 211.203881][ T9811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.216713][T10020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1036'. [ 211.234773][T10020] tipc: Disabling bearer [ 211.268149][ T9811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.305263][T10033] netlink: 'syz.4.1041': attribute type 1 has an invalid length. [ 211.484229][T10045] x_tables: duplicate underflow at hook 2 [ 211.516309][T10036] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 211.540662][T10050] netlink: 'syz.1.1045': attribute type 10 has an invalid length. [ 211.551163][T10043] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.565914][ T771] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 211.598982][ T9811] team0: Port device team_slave_0 added [ 211.615072][T10038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.628501][ T9811] team0: Port device team_slave_1 added [ 211.706004][ T6626] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 211.764238][T10057] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 211.771079][T10057] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 211.810197][ T9811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.828498][ T9811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.904204][ T9811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.936579][ T9811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.951519][ T9811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.027248][ T9811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.234463][T10067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.320918][T10069] syzkaller0: entered promiscuous mode [ 212.327152][T10069] syzkaller0: entered allmulticast mode [ 212.348337][ T9811] hsr_slave_0: entered promiscuous mode [ 212.364087][ T9811] hsr_slave_1: entered promiscuous mode [ 212.387289][ T9811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.406532][ T9811] Cannot create hsr debugfs directory [ 212.414641][ T5150] Bluetooth: hci3: command tx timeout [ 212.632430][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'. [ 214.216377][T10113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1061'. [ 214.269709][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 214.283270][T10110] netlink: 'syz.3.1058': attribute type 30 has an invalid length. [ 214.308713][T10110] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.317942][T10110] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.326996][T10110] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.336232][T10110] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.349597][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 214.363840][T10110] netlink: 'syz.3.1058': attribute type 30 has an invalid length. [ 214.494753][ T5150] Bluetooth: hci3: command tx timeout [ 214.501196][T10127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.901858][T10148] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 214.924413][T10150] netlink: 'syz.0.1070': attribute type 39 has an invalid length. [ 215.708134][T10171] netlink: 'syz.1.1072': attribute type 33 has an invalid length. [ 216.971419][T10179] __nla_validate_parse: 3 callbacks suppressed [ 216.972077][T10179] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1074'. [ 217.111404][T10185] bridge3: entered promiscuous mode [ 217.143030][T10185] bridge3: entered allmulticast mode [ 217.431377][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1080'. [ 217.461522][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1080'. [ 217.596954][T10203] nftables ruleset with unbound chain [ 217.806176][T10210] vlan2: entered promiscuous mode [ 217.843854][T10210] bridge0: entered promiscuous mode [ 218.050799][T10223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1086'. [ 218.052802][ T9811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.094473][T10228] netlink: 'syz.4.1088': attribute type 11 has an invalid length. [ 218.135607][ T9811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.179085][ T9811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.261748][ T9811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.270413][T10237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1088'. [ 218.611389][ T9811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.662999][ T9811] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.696188][T10257] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1092'. [ 218.715707][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.722900][ T6629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.742111][ T6629] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.749409][ T6629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.909045][T10268] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 218.934896][T10266] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1096'. [ 219.033692][T10271] veth1_macvtap: left promiscuous mode [ 219.160930][T10277] netlink: 'syz.3.1099': attribute type 7 has an invalid length. [ 219.255746][T10277] : entered promiscuous mode [ 219.443709][T10296] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 219.676664][T10303] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1103'. [ 219.725817][ T9811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.934393][ T9811] veth0_vlan: entered promiscuous mode [ 219.990472][ T9811] veth1_vlan: entered promiscuous mode [ 220.187872][ T9811] veth0_macvtap: entered promiscuous mode [ 220.269742][ T9811] veth1_macvtap: entered promiscuous mode [ 220.291298][T10335] xt_hashlimit: max too large, truncated to 1048576 [ 220.383269][T10337] sch_fq: defrate 0 ignored. [ 220.433327][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1114'. [ 220.477592][ T9811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.499803][T10348] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1113'. [ 220.517968][ T9811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.692775][ T9811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.734045][ T9811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.743287][ T9811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.778513][ T9811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.830730][T10355] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 220.855882][T10355] bridge0: port 1(wlan1) entered blocking state [ 220.871722][T10355] bridge0: port 1(wlan1) entered disabled state [ 220.908012][T10355] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 221.293825][ T6627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.340738][ T6627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.426518][ T6627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.453283][ T6627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.195592][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.286343][T10423] __nla_validate_parse: 7 callbacks suppressed [ 222.286363][T10423] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1133'. [ 222.412469][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.720287][T10423] bond0 (unregistering): Released all slaves [ 222.793100][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.994737][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.160850][ T59] bridge_slave_1: left allmulticast mode [ 223.175156][ T59] bridge_slave_1: left promiscuous mode [ 223.183014][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.197821][ T59] bridge_slave_0: left allmulticast mode [ 223.208808][ T59] bridge_slave_0: left promiscuous mode [ 223.217181][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.373217][T10460] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1137'. [ 224.211183][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.225396][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.235011][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.247485][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.257301][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.365289][T10491] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1144'. [ 224.583735][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1145'. [ 224.603602][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1141'. [ 224.625562][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.637011][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.649206][ T59] bond0 (unregistering): Released all slaves [ 224.858347][T10512] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 225.329016][T10524] netlink: 'syz.3.1149': attribute type 4 has an invalid length. [ 225.459599][T10524] netlink: 'syz.3.1149': attribute type 1 has an invalid length. [ 225.652213][T10541] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1153'. [ 225.692358][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1149'. [ 225.899896][T10554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1156'. [ 225.940308][ T59] hsr_slave_0: left promiscuous mode [ 225.956876][ T59] hsr_slave_1: left promiscuous mode [ 225.963990][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.976789][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.003315][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.011109][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.042099][ T59] veth1_macvtap: left promiscuous mode [ 226.049730][ T59] veth0_macvtap: left promiscuous mode [ 226.056120][ T59] veth1_vlan: left promiscuous mode [ 226.061559][ T59] veth0_vlan: left promiscuous mode [ 226.334711][ T5150] Bluetooth: hci3: command tx timeout [ 226.407222][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1157'. [ 226.903487][ T59] team0 (unregistering): Port device team_slave_1 removed [ 226.941723][ T59] team0 (unregistering): Port device team_slave_0 removed [ 227.673923][T10486] chnl_net:caif_netlink_parms(): no params data found [ 227.790105][T10604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1167'. [ 227.902650][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1168'. [ 227.968468][T10604] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1167'. [ 228.202357][T10486] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.220949][T10486] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.245696][T10486] bridge_slave_0: entered allmulticast mode [ 228.285407][T10486] bridge_slave_0: entered promiscuous mode [ 228.413331][T10486] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.422240][ T5150] Bluetooth: hci3: command tx timeout [ 228.437817][T10486] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.451951][T10486] bridge_slave_1: entered allmulticast mode [ 228.460141][T10486] bridge_slave_1: entered promiscuous mode [ 228.694489][T10486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.729073][T10653] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1175'. [ 228.762344][T10640] syzkaller0: entered promiscuous mode [ 228.790657][T10640] syzkaller0: entered allmulticast mode [ 228.982554][T10486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.152561][T10671] Cannot find add_set index 0 as target [ 229.341114][T10486] team0: Port device team_slave_0 added [ 229.378622][T10681] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 229.390897][T10486] team0: Port device team_slave_1 added [ 229.598511][T10486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.619754][T10486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.665180][T10486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.669893][T10696] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1184'. [ 229.728685][T10486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.784681][T10486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.867434][T10703] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1186'. [ 229.876416][T10486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.081758][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1188'. [ 230.084099][T10486] hsr_slave_0: entered promiscuous mode [ 230.117100][T10486] hsr_slave_1: entered promiscuous mode [ 230.120139][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1188'. [ 230.133158][T10486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.143916][T10718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1189'. [ 230.152979][T10486] Cannot create hsr debugfs directory [ 230.171725][T10722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1188'. [ 230.405091][T10731] netlink: 'syz.4.1191': attribute type 4 has an invalid length. [ 230.475316][T10731] : renamed from bond0 (while UP) [ 230.494755][ T5150] Bluetooth: hci3: command tx timeout [ 230.856644][T10758] netlink: 'syz.3.1196': attribute type 2 has an invalid length. [ 230.909938][T10758] netlink: 'syz.3.1196': attribute type 1 has an invalid length. [ 230.943977][T10764] netlink: 'syz.0.1197': attribute type 5 has an invalid length. [ 231.247984][T10780] bridge_slave_0: entered promiscuous mode [ 231.462513][T10775] syzkaller1: entered promiscuous mode [ 231.472676][T10775] syzkaller1: entered allmulticast mode [ 231.728530][T10794] netlink: 'syz.3.1205': attribute type 8 has an invalid length. [ 231.975478][T10809] lo: entered allmulticast mode [ 232.092959][T10486] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 232.152594][T10486] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 232.200959][T10808] lo: left allmulticast mode [ 232.244077][T10486] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 232.280007][T10486] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 232.447521][T10836] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 232.528557][T10836] gretap2: entered promiscuous mode [ 232.575276][ T5150] Bluetooth: hci3: command tx timeout [ 232.795102][T10486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.863245][T10862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.949014][T10486] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.004284][ T771] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.011542][ T771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.084202][ T6627] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.091452][ T6627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.147643][T10873] netlink: 'syz.1.1227': attribute type 2 has an invalid length. [ 233.198809][T10875] __nla_validate_parse: 11 callbacks suppressed [ 233.198826][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1227'. [ 233.321298][T10881] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 233.340741][T10881] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 233.350551][T10881] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 233.363879][T10881] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 233.394053][T10881] geneve2: entered promiscuous mode [ 233.413122][T10881] geneve2: entered allmulticast mode [ 233.492364][T10890] netlink: 'syz.0.1233': attribute type 33 has an invalid length. [ 233.564657][T10890] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1233'. [ 234.041005][T10486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.323492][T10486] veth0_vlan: entered promiscuous mode [ 234.383728][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1245'. [ 234.468148][T10486] veth1_vlan: entered promiscuous mode [ 234.756174][T10486] veth0_macvtap: entered promiscuous mode [ 234.807269][T10486] veth1_macvtap: entered promiscuous mode [ 234.864078][T10486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.026258][T10962] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.034199][T10962] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.139114][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1253'. [ 235.197428][T10962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.213470][T10962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.272024][T10978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'. [ 235.290862][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1253'. [ 235.300509][T10978] netlink: 'syz.0.1253': attribute type 2 has an invalid length. [ 235.309999][T10978] netlink: 'syz.0.1253': attribute type 1 has an invalid length. [ 235.318097][T10962] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.318115][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1253'. [ 235.332377][T10962] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.350926][T10962] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.360384][T10962] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.423605][T10962] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.432910][T10962] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.442019][T10962] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.451090][T10962] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.471338][T10962] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 235.480910][T10962] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 235.489935][T10962] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 235.499033][T10962] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 235.512703][T10486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.537475][T10486] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.556701][T10486] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.569252][T10486] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.579622][T10486] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.668013][T10975] bond0: (slave vcan0): The slave device specified does not support setting the MAC address [ 235.680546][T10975] bond0: (slave vcan0): Error -95 calling set_mac_address [ 235.897011][ T6630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.914749][ T6630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.948267][ T6627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.959274][ T6627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.665452][T11044] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 236.782465][T11051] openvswitch: netlink: Duplicate or invalid key (type 0). [ 236.791422][T11051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.133364][T11066] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1279'. [ 237.582400][T11097] netlink: 'syz.4.1290': attribute type 1 has an invalid length. [ 237.598359][T11097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.606007][T11097] IPv6: NLM_F_CREATE should be set when creating new route [ 237.612168][T11095] vxcan5: entered allmulticast mode [ 237.613247][T11097] IPv6: NLM_F_CREATE should be set when creating new route [ 237.644486][T11097] netlink: 'syz.4.1290': attribute type 1 has an invalid length. [ 237.653327][T11097] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 237.698025][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 237.775200][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 237.864420][T11115] netlink: 'syz.1.1295': attribute type 24 has an invalid length. [ 237.893532][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1294'. [ 237.921464][T11113] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 237.933342][T11113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.068122][T11121] netlink: 'syz.4.1296': attribute type 3 has an invalid length. [ 238.184941][ T6627] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.328060][ T6627] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.394271][ T6627] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.468920][ T6627] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.605197][ T6627] bridge_slave_1: left allmulticast mode [ 238.610886][ T6627] bridge_slave_1: left promiscuous mode [ 238.628214][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.641919][ T6627] bridge_slave_0: left allmulticast mode [ 238.648163][ T6627] bridge_slave_0: left promiscuous mode [ 238.655455][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.093071][ T6627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.172137][ T6627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.197115][ T6627] bond0 (unregistering): Released all slaves [ 239.298865][T11155] netlink: 'syz.4.1302': attribute type 29 has an invalid length. [ 239.328950][T11158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1299'. [ 239.352616][T11155] netlink: 'syz.4.1302': attribute type 29 has an invalid length. [ 239.513652][T11155] netlink: 'syz.4.1302': attribute type 29 has an invalid length. [ 239.546430][T11166] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1303'. [ 239.556187][T11157] netlink: 'syz.4.1302': attribute type 29 has an invalid length. [ 239.578585][T11165] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1303'. [ 239.800297][T11177] Cannot find set identified by id 4 to match [ 239.979186][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 239.988732][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 239.997366][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.007422][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.015516][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 240.161269][ T6627] hsr_slave_0: left promiscuous mode [ 240.194254][ T6627] hsr_slave_1: left promiscuous mode [ 240.215422][ T6627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.232338][ T6627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.266202][ T6627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.273669][ T6627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.301269][T11204] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1313'. [ 240.352676][ T6627] veth1_macvtap: left promiscuous mode [ 240.361288][ T6627] veth0_macvtap: left promiscuous mode [ 240.374144][ T6627] veth1_vlan: left promiscuous mode [ 240.392335][ T6627] veth0_vlan: left promiscuous mode [ 240.402885][T11205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1313'. [ 240.968386][ T6627] team0 (unregistering): Port device team_slave_1 removed [ 241.008107][ T6627] team0 (unregistering): Port device team_slave_0 removed [ 241.799502][T11228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.817133][T11229] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1315'. [ 241.859085][T11233] block nbd0: Unsupported socket: shutdown callout must be supported. [ 242.096635][ T51] Bluetooth: hci3: command tx timeout [ 242.145873][T11241] netlink: 'syz.3.1321': attribute type 5 has an invalid length. [ 242.241759][T11184] chnl_net:caif_netlink_parms(): no params data found [ 242.540597][T11263] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1326'. [ 243.149670][T11298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1332'. [ 243.180888][T11184] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.198852][T11184] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.215651][T11184] bridge_slave_0: entered allmulticast mode [ 243.226160][T11184] bridge_slave_0: entered promiscuous mode [ 243.245389][T11184] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.258535][T11184] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.269378][T11184] bridge_slave_1: entered allmulticast mode [ 243.274402][T11310] netlink: 'syz.4.1336': attribute type 1 has an invalid length. [ 243.281416][T11184] bridge_slave_1: entered promiscuous mode [ 243.285070][T11310] netlink: 'syz.4.1336': attribute type 10 has an invalid length. [ 243.298410][T11310] netlink: 'syz.4.1336': attribute type 4 has an invalid length. [ 243.313622][T11304] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1333'. [ 243.316665][T11310] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1336'. [ 243.469034][T11184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.501273][T11184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.504562][T11315] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 243.650272][T11184] team0: Port device team_slave_0 added [ 243.678950][T11184] team0: Port device team_slave_1 added [ 243.878704][T11184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.903699][T11184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.979574][T11184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.059348][T11184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.073311][T11184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.131890][T11184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.175630][ T5150] Bluetooth: hci3: command tx timeout [ 244.366790][T11184] hsr_slave_0: entered promiscuous mode [ 244.396812][T11184] hsr_slave_1: entered promiscuous mode [ 244.406189][T11184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.448459][T11184] Cannot create hsr debugfs directory [ 245.075732][T11387] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.184785][T11387] bond2 (unregistering): Released all slaves [ 245.368472][T11418] tc_dump_action: action bad kind [ 245.397625][T11419] tc_dump_action: action bad kind [ 245.548849][T11430] __nla_validate_parse: 6 callbacks suppressed [ 245.548867][T11430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1356'. [ 245.628189][T11426] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1357'. [ 245.953442][T11451] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1362'. [ 245.995145][T11451] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 246.051649][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 246.076274][T11184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 246.098057][T11453] delete_channel: no stack [ 246.124515][T11184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 246.200760][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1367'. [ 246.223399][T11184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 246.255909][ T5150] Bluetooth: hci3: command tx timeout [ 246.276883][T11184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 246.368261][T11473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1368'. [ 246.477343][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 246.512668][T11478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1370'. [ 246.534243][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 246.543597][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 246.568584][T11481] netlink: 'syz.0.1371': attribute type 15 has an invalid length. [ 246.607007][T11478] bond2 (unregistering): Released all slaves [ 246.750597][T11184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.826191][T11184] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.859718][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.866964][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.927186][ T6625] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.934584][ T6625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.449792][T11521] ------------[ cut here ]------------ [ 247.455849][T11521] WARNING: CPU: 1 PID: 11521 at ./include/net/mac80211.h:7748 _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 247.466745][T11521] Modules linked in: [ 247.470934][T11521] CPU: 1 UID: 0 PID: 11521 Comm: syz.0.1380 Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 247.483352][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.493570][T11521] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 247.500058][T11521] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 60 53 e5 f6 b8 04 00 00 00 eb 31 e8 54 53 e5 f6 eb 28 e8 4d 53 e5 f6 90 <0f> 0b 90 eb 1d e8 42 53 e5 f6 b8 02 00 00 00 eb 13 e8 36 53 e5 f6 [ 247.520131][T11521] RSP: 0018:ffffc90003e3ef48 EFLAGS: 00010283 [ 247.526277][T11521] RAX: ffffffff8adafb23 RBX: ffff888047f20000 RCX: 0000000000080000 [ 247.534701][T11521] RDX: ffffc90004ac2000 RSI: 00000000000003be RDI: 00000000000003bf [ 247.542698][T11521] RBP: 0000000000000000 R08: ffff88802dd51e00 R09: 0000000000000007 [ 247.551271][T11521] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 247.559369][T11521] R13: 0000000000000006 R14: ffff888047f20180 R15: 1ffff11008fe4030 [ 247.567574][T11521] FS: 00007fee20e4c6c0(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 247.576866][T11521] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.583480][T11521] CR2: 00002000005f7000 CR3: 000000007c674000 CR4: 00000000003526f0 [ 247.591524][T11521] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.599555][T11521] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.608066][T11521] Call Trace: [ 247.611363][T11521] [ 247.614309][T11521] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 247.620492][T11521] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 247.626207][T11521] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 247.632758][T11521] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 247.638727][T11521] ? ieee80211_sta_init_nss+0x8dd/0xbe0 [ 247.645477][T11521] ? ieee80211_get_link_sband+0x335/0x3e0 [ 247.651246][T11521] sta_link_apply_parameters+0xbb8/0xec0 [ 247.656953][T11521] sta_apply_parameters+0x944/0x15b0 [ 247.662278][T11521] ieee80211_add_station+0x424/0x6a0 [ 247.667965][T11521] rdev_add_station+0x105/0x290 [ 247.672856][T11521] nl80211_new_station+0x1723/0x1b40 [ 247.678242][T11521] ? __pfx_nl80211_new_station+0x10/0x10 [ 247.683905][T11521] ? netdev_run_todo+0xe1d/0xea0 [ 247.688945][T11521] ? nl80211_pre_doit+0x4f1/0x930 [ 247.694011][T11521] genl_family_rcv_msg_doit+0x215/0x300 [ 247.700197][T11521] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 247.706376][T11521] ? bpf_lsm_capable+0x9/0x20 [ 247.711072][T11521] ? security_capable+0x7e/0x2e0 [ 247.716090][T11521] genl_rcv_msg+0x60e/0x790 [ 247.720631][T11521] ? __pfx_genl_rcv_msg+0x10/0x10 [ 247.726014][T11521] ? ref_tracker_free+0x63a/0x7d0 [ 247.731071][T11521] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 247.736507][T11521] ? __pfx_nl80211_new_station+0x10/0x10 [ 247.742260][T11521] ? __pfx_nl80211_post_doit+0x10/0x10 [ 247.747802][T11521] ? __pfx_ref_tracker_free+0x10/0x10 [ 247.753225][T11521] netlink_rcv_skb+0x205/0x470 [ 247.758316][T11521] ? __pfx_genl_rcv_msg+0x10/0x10 [ 247.763378][T11521] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 247.768731][T11521] ? down_read+0x1ad/0x2e0 [ 247.773170][T11521] genl_rcv+0x28/0x40 [ 247.777219][T11521] netlink_unicast+0x758/0x8d0 [ 247.782014][T11521] netlink_sendmsg+0x805/0xb30 [ 247.787168][T11521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.792494][T11521] ? aa_sock_msg_perm+0x94/0x160 [ 247.797478][T11521] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 247.802777][T11521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.808133][T11521] __sock_sendmsg+0x219/0x270 [ 247.812841][T11521] ____sys_sendmsg+0x505/0x830 [ 247.817981][T11521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.823316][T11521] ? import_iovec+0x74/0xa0 [ 247.827872][T11521] ___sys_sendmsg+0x21f/0x2a0 [ 247.832575][T11521] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.837871][T11521] ? __fget_files+0x2a/0x420 [ 247.842477][T11521] ? __fget_files+0x3a0/0x420 [ 247.847500][T11521] __x64_sys_sendmsg+0x19b/0x260 [ 247.852471][T11521] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.858229][T11521] ? rcu_is_watching+0x15/0xb0 [ 247.863032][T11521] ? do_syscall_64+0xbe/0x3b0 [ 247.867829][T11521] do_syscall_64+0xfa/0x3b0 [ 247.872355][T11521] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.877975][T11521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.884065][T11521] ? clear_bhb_loop+0x60/0xb0 [ 247.889569][T11521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.895513][T11521] RIP: 0033:0x7fee1ff8e929 [ 247.899951][T11521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.919894][T11521] RSP: 002b:00007fee20e4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.928369][T11521] RAX: ffffffffffffffda RBX: 00007fee201b5fa0 RCX: 00007fee1ff8e929 [ 247.937139][T11521] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 247.946883][T11521] RBP: 00007fee20010b39 R08: 0000000000000000 R09: 0000000000000000 [ 247.955207][T11521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.963244][T11521] R13: 0000000000000000 R14: 00007fee201b5fa0 R15: 00007ffc86245aa8 [ 247.971335][T11521] [ 247.974381][T11521] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 247.981676][T11521] CPU: 1 UID: 0 PID: 11521 Comm: syz.0.1380 Not tainted 6.16.0-rc3-syzkaller-00121-g2def09ead4ad #0 PREEMPT(full) [ 247.993754][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.003900][T11521] Call Trace: [ 248.007180][T11521] [ 248.010107][T11521] dump_stack_lvl+0x99/0x250 [ 248.014705][T11521] ? __asan_memcpy+0x40/0x70 [ 248.019298][T11521] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.024511][T11521] ? __pfx__printk+0x10/0x10 [ 248.029114][T11521] panic+0x2db/0x790 [ 248.033018][T11521] ? __pfx_panic+0x10/0x10 [ 248.037433][T11521] ? show_trace_log_lvl+0x4fb/0x550 [ 248.042651][T11521] __warn+0x31b/0x4b0 [ 248.046719][T11521] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 248.052536][T11521] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 248.058341][T11521] report_bug+0x2be/0x4f0 [ 248.062674][T11521] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 248.068483][T11521] ? _ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 248.074288][T11521] ? _ieee80211_sta_cur_vht_bw+0x526/0x6e0 [ 248.080090][T11521] handle_bug+0x84/0x160 [ 248.084342][T11521] exc_invalid_op+0x1a/0x50 [ 248.088847][T11521] asm_exc_invalid_op+0x1a/0x20 [ 248.093703][T11521] RIP: 0010:_ieee80211_sta_cur_vht_bw+0x524/0x6e0 [ 248.100218][T11521] Code: 00 00 00 eb 49 41 83 fd 05 74 30 41 83 fd 0d 75 13 e8 60 53 e5 f6 b8 04 00 00 00 eb 31 e8 54 53 e5 f6 eb 28 e8 4d 53 e5 f6 90 <0f> 0b 90 eb 1d e8 42 53 e5 f6 b8 02 00 00 00 eb 13 e8 36 53 e5 f6 [ 248.119820][T11521] RSP: 0018:ffffc90003e3ef48 EFLAGS: 00010283 [ 248.125888][T11521] RAX: ffffffff8adafb23 RBX: ffff888047f20000 RCX: 0000000000080000 [ 248.133939][T11521] RDX: ffffc90004ac2000 RSI: 00000000000003be RDI: 00000000000003bf [ 248.141908][T11521] RBP: 0000000000000000 R08: ffff88802dd51e00 R09: 0000000000000007 [ 248.149890][T11521] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000000 [ 248.157878][T11521] R13: 0000000000000006 R14: ffff888047f20180 R15: 1ffff11008fe4030 [ 248.165956][T11521] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 248.171778][T11521] ? _ieee80211_sta_cur_vht_bw+0x523/0x6e0 [ 248.177589][T11521] __ieee80211_vht_handle_opmode+0x3c0/0x850 [ 248.183580][T11521] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 248.189239][T11521] ? __pfx___ieee80211_vht_handle_opmode+0x10/0x10 [ 248.195786][T11521] ? ieee80211_get_link_sband+0x5f/0x3e0 [ 248.201429][T11521] ? ieee80211_sta_init_nss+0x8dd/0xbe0 [ 248.206983][T11521] ? ieee80211_get_link_sband+0x335/0x3e0 [ 248.212706][T11521] sta_link_apply_parameters+0xbb8/0xec0 [ 248.218348][T11521] sta_apply_parameters+0x944/0x15b0 [ 248.223644][T11521] ieee80211_add_station+0x424/0x6a0 [ 248.229023][T11521] rdev_add_station+0x105/0x290 [ 248.233871][T11521] nl80211_new_station+0x1723/0x1b40 [ 248.239169][T11521] ? __pfx_nl80211_new_station+0x10/0x10 [ 248.244799][T11521] ? netdev_run_todo+0xe1d/0xea0 [ 248.249756][T11521] ? nl80211_pre_doit+0x4f1/0x930 [ 248.254784][T11521] genl_family_rcv_msg_doit+0x215/0x300 [ 248.260363][T11521] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 248.266465][T11521] ? bpf_lsm_capable+0x9/0x20 [ 248.271144][T11521] ? security_capable+0x7e/0x2e0 [ 248.276089][T11521] genl_rcv_msg+0x60e/0x790 [ 248.280692][T11521] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.285719][T11521] ? ref_tracker_free+0x63a/0x7d0 [ 248.290778][T11521] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 248.296147][T11521] ? __pfx_nl80211_new_station+0x10/0x10 [ 248.301775][T11521] ? __pfx_nl80211_post_doit+0x10/0x10 [ 248.307234][T11521] ? __pfx_ref_tracker_free+0x10/0x10 [ 248.312611][T11521] netlink_rcv_skb+0x205/0x470 [ 248.317373][T11521] ? __pfx_genl_rcv_msg+0x10/0x10 [ 248.322403][T11521] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.327729][T11521] ? down_read+0x1ad/0x2e0 [ 248.332169][T11521] genl_rcv+0x28/0x40 [ 248.336158][T11521] netlink_unicast+0x758/0x8d0 [ 248.340939][T11521] netlink_sendmsg+0x805/0xb30 [ 248.345738][T11521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.351041][T11521] ? aa_sock_msg_perm+0x94/0x160 [ 248.355981][T11521] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.361266][T11521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.366649][T11521] __sock_sendmsg+0x219/0x270 [ 248.371345][T11521] ____sys_sendmsg+0x505/0x830 [ 248.376117][T11521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.381416][T11521] ? import_iovec+0x74/0xa0 [ 248.385927][T11521] ___sys_sendmsg+0x21f/0x2a0 [ 248.390605][T11521] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.395831][T11521] ? __fget_files+0x2a/0x420 [ 248.400419][T11521] ? __fget_files+0x3a0/0x420 [ 248.405097][T11521] __x64_sys_sendmsg+0x19b/0x260 [ 248.410050][T11521] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.415592][T11521] ? rcu_is_watching+0x15/0xb0 [ 248.420468][T11521] ? do_syscall_64+0xbe/0x3b0 [ 248.425157][T11521] do_syscall_64+0xfa/0x3b0 [ 248.429668][T11521] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.434865][T11521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.440925][T11521] ? clear_bhb_loop+0x60/0xb0 [ 248.445598][T11521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.451569][T11521] RIP: 0033:0x7fee1ff8e929 [ 248.455981][T11521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.475594][T11521] RSP: 002b:00007fee20e4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.484116][T11521] RAX: ffffffffffffffda RBX: 00007fee201b5fa0 RCX: 00007fee1ff8e929 [ 248.492105][T11521] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000006 [ 248.500092][T11521] RBP: 00007fee20010b39 R08: 0000000000000000 R09: 0000000000000000 [ 248.508061][T11521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.516030][T11521] R13: 0000000000000000 R14: 00007fee201b5fa0 R15: 00007ffc86245aa8 [ 248.524011][T11521] [ 248.527292][T11521] Kernel Offset: disabled [ 248.531613][T11521] Rebooting in 86400 seconds..