last executing test programs: 59.76346342s ago: executing program 0 (id=1723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000b8"], 0x18}}, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r3, @ANYRESHEX=r0], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 49.408072791s ago: executing program 0 (id=1723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000b8"], 0x18}}, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r3, @ANYRESHEX=r0], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 39.649033593s ago: executing program 0 (id=1723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000b8"], 0x18}}, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r3, @ANYRESHEX=r0], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 28.693650569s ago: executing program 0 (id=1723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000b8"], 0x18}}, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r3, @ANYRESHEX=r0], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 18.330395123s ago: executing program 0 (id=1723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000b8"], 0x18}}, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r3, @ANYRESHEX=r0], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 7.673532648s ago: executing program 0 (id=1723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000b8"], 0x18}}, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r3, @ANYRESHEX=r0], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 1.832233976s ago: executing program 1 (id=2438): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000001c40)={'IDLETIMER\x00'}, &(0x7f0000004580)=0x1e) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0xe2) close(r0) 1.831677041s ago: executing program 2 (id=2439): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x7, 0x20000, 0x0, 0xa2fe}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x30000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) 1.793261115s ago: executing program 3 (id=2440): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000580)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x1, 0x8001, 0x3, 0x8, 0x2, 0x7ff, 0x5, {0x0, @in={{0x2, 0x4e23, @private=0xa010101}}, 0x7, 0x2, 0x5, 0x12586ca9, 0xff}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r2, 0xf}, 0x8) 1.71307157s ago: executing program 2 (id=2441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000}, 0x4000) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x3b06fd60, 0x40, {{0xe, 0x4, 0x1, 0x31, 0x38, 0x66, 0x0, 0x2, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x37}, {[@generic={0x85, 0x5, "be1d63"}, @lsrr={0x83, 0x1f, 0xc4, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @broadcast, @rand_addr=0x64010102, @loopback, @multicast1]}]}}}}}) (rerun: 32) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) (async) ioctl(r0, 0x5, &(0x7f0000000340)="dc8e2420d28123aae3b9ed922d9e5de16c8487e973643e6a395610ddfa4b14d439de9d2e69a88b44038aebce863d4e927967a799cc623a9fe0854c1638a508dfe247d036b55fafd9a3d5c570c4b111ec3241954fbd08b36a80f8400811967c787ff97a21720f9b88aac7835964d7f629063570ee3f27e0f279dc0eb069f4e1f27ad7458b7df71b73a787903511d973beeac0521ca59707bdec52ac0a24a1246477a5b3b8734c80b3d56dee94da79bf1aa187cc1f9f0f7aa5c2a1b9642ab0e5ed9e1ff47c9d73b2427c8c492c265bcfc371cb55a991466a7364141cbd500e2be042e97c804b8c2b4c19a00d575b") (async, rerun: 32) close(r0) (async, rerun: 32) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000004c0)={@multicast1, @private=0xa010102, r2}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@setneightbl={0x5c, 0x43, 0x100, 0x70bd2c, 0xfffff800, {0x1c}, [@NDTA_PARMS={0x2c, 0x6, 0x0, 0x1, [@NDTPA_RETRANS_TIME={0xc}, @NDTPA_IFINDEX={0x8, 0x1, r2}, @NDTPA_BASE_REACHABLE_TIME={0xc}, @NDTPA_MCAST_PROBES={0x8, 0xb, 0x1}]}, @NDTA_THRESH2={0x8, 0x3, 0x7ff}, @NDTA_NAME={0x9, 0x1, '#^$@\x00'}, @NDTA_THRESH2={0x8, 0x3, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004081) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x5eb6868e, 0x8, 0x6, 0x40, 0x1, 0x3, '\x00', r2, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) (rerun: 32) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000700)="efe33e1be13bdee616b9a4276aba8b3f50a9010c7dcec4c53c3537aa701cbc8189cd510086d068922da0d9ab56ea2b1b95e7f47be59f623cf751d454ac77315f74714fbe9df05ec4dc9614019616c6604282a05cfb0d0e01762f04a5363245b5d2c16bb7ee47ca403ce67b940231f8451e08f637e9167eb731eb9a3dc2a1a3f55efb646272c923"}, 0x20) (async, rerun: 64) r7 = socket$netlink(0x10, 0x3, 0xa) (rerun: 64) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000900)='syz1\x00', 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000940)='rdma.max\x00', 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000018c0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001880)={&(0x7f00000009c0)={0xebc, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x2e8, 0x8, 0x0, 0x1, [{0x2c0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @empty, 0x2}}, @WGPEER_A_ALLOWEDIPS={0x29c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @mcast1, 0x5}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0xb74, 0x8, 0x0, 0x1, [{0x6b8, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "121f1d80aed91ec45d729ec031971a5423a178085fc26eeef9ad7db892d02f7e"}, @WGPEER_A_ALLOWEDIPS={0x410, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x31}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xb, @dev={0xfe, 0x80, '\x00', 0xd}, 0x439}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}]}, {0x3dc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "460282af4e40fb3f311d7ef38dae5d53cdd9e77039eb76d00891335aafbd52ea"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xffffffff, @remote, 0x5}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7fff}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x350, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c0b8bee851df684a65afc3f55dd63d09a1f5c0def6fb3e73753321422118e0e0"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8c5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0xebc}, 0x1, 0x0, 0x0, 0x2048000}, 0x10) (async) r9 = accept(r5, &(0x7f0000001900)=@pptp, &(0x7f0000001980)=0x80) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f00000019c0)={'veth1_to_team\x00', 0x10}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a80)={r6, 0x58, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000001ac0)={@ipv4={'\x00', '\xff\xff', @empty}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0x101, 0x8000, 0x400, 0x0, 0x400060, r10}) sendmsg$kcm(r9, &(0x7f0000002f40)={&(0x7f0000001b40)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001bc0)="61bc8d6cf0e500633b1ff09e9c6e4bc32236cc406c8aff9c208e15a29e24cc38a3a59fd62fcc949ce686616ab180839afde632e744500fc8da9d1039b2f20c3f6e547bb0f3621d38746c0c02b794f23f10f543e09f7a58bae3d18bac32f75449352d4fbad3558db7efc4b2dd3672fae5c63c78a54d390ee6bcf6f5ac19db40e65a7f987bbbc268386a847badb5b8027f6bd17487d63b0deafd6acbb261b868d61155ca027eff0f6febe85f9fec6b776c6ec73e2ff848fed7e3f49ca845cf623b9b53dba90d73cd5c9f4ec18f912966bc07eec5ddfce260c3ba70da3145dc0c66d63e231c116373b3994f", 0xea}, {&(0x7f0000001cc0)="a71e86d52eef462d7b58dc0ae9abeb096ec50d2e9d314b28ea782b09acd7974daa4d48a5a0d1545b6ad99d91095040507f3ede84daf4b5914bf34a01cf520aff7562d5d998657dcd2b0b071219a8a38cca6163b33717a6313be454e004f481ef79", 0x61}], 0x2, &(0x7f0000001d80)=[{0x1010, 0x112, 0x100, "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"}, {0xd8, 0x10d, 0xd52, "e118f732226034d4cd7cc228c868b94c530406b764f62d5a629a84827aef31cc6dca4a9fdb746e7eca04f91bfb718897aec0308407426bb10ba6105c5a9e3d6420d9110230118dfe9d20547f9067cb7dea40f63b985f40f5660d7582859ac20ebc7279b7a3097936ac61840bcce3083eb4f6a6de4137dc7e548e625c794fc947e5eab48b3aa133bcd89ada8250afe7e173dc8cf444abda43405a668a6f63fa35b27d76c8800793f41fffb24c2e2cc3cfebe28d3849c312ac0cf3c9970949754cb3773e901fe2"}, {0x60, 0x0, 0x7fc00, "7509676b1a0ed963d1f0297e1c260b3b174eed30a39378ae84c6ff97784193c40322f28145a58c9a62b8242f728e5ad5bf30265bae337af715d5fcdbef4a43b6f9bdca9ac6b68e74161799987781"}, {0x78, 0x1, 0x9, "ad578dcb3725bf60431d7aeb1faf2c1289a962fb84fbdd4fc36aeb10f54cd170b1224065e28f370117bf778934df08b775c0aa5d49af7fe5ed50d7cdc27b8020675d917a0c6a332895c24ae6edeb15b4af6dff5cb1a8cdbecc8a8561e3d482e8b11467b888d2e8"}], 0x11c0}, 0x4008000) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000002f80), r11) (async, rerun: 32) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003000), r11) (rerun: 32) sendmsg$NLBL_UNLABEL_C_LIST(r11, &(0x7f0000003100)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003040)={0x78, r12, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:modules_object_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000004}, 0x200488c0) (async) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000003180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x40, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x40}, 0x1, 0x0, 0x0, 0x2404c0c4}, 0x40) 1.033109977s ago: executing program 3 (id=2442): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) 1.01827771s ago: executing program 1 (id=2443): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000012c0)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf6e207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af", 0x32}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677", @ANYRES32=0x0, @ANYRES16=0x0], 0x6b}, 0x40000d0) close(0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001600)=ANY=[@ANYBLOB="14010000220001002100000000000000020100800c000000000000", @ANYRESOCT=r0, @ANYRES16=r1], 0x114}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000010c0)=""/40, 0x28}, {&(0x7f0000001100)=""/50, 0x32}, {&(0x7f0000001400)=""/207, 0xcf}, {&(0x7f0000001140)=""/26, 0x1a}], 0x4, &(0x7f0000001540)=""/79, 0x4f}, 0x2) 1.016104106s ago: executing program 2 (id=2444): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$802154_raw(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, @long}, 0x14, &(0x7f0000000180)={&(0x7f0000000280)="114663f7f9ffb48ab2ba17db1bb38519a7a12c0cd70fd50f54250173474b8d82f06614d2aa8b156a05e012e4598ae8d21cc6d488995bea0c088e0c4a5a91b61e3c87bb46ea605c478e2a55a02286ed7c2fcd2d2b3ee76dcfba42efdee9d1cac6f0f4524fb4ce8141d66b7524f314ed5800f52ef1b487798b64c30f830833cb3a20b2bef93e0cc1c5e95059b160c45edda01b52013622f6ef9fc24c426aeb33d95b2b4222040a5aac656ec81465f7c9963b", 0xb1}, 0x1, 0x0, 0x0, 0x42854}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3e, &(0x7f00002cef88)="d8", 0x1) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r3, &(0x7f00000001c0)="a294238a60599e0c170c975906b66fefb05768afcb889fda2d66465d950225082ac8e85b9d51", &(0x7f0000000340)=""/86, 0x5943bb55469cc16e}, 0x20) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000800)={'veth0\x00', &(0x7f00000007c0)=@ethtool_cmd={0x19, 0xc5f, 0xca, 0x876, 0x3, 0x2, 0x5, 0x2a, 0x9c, 0x0, 0x3, 0x7, 0x21a, 0x0, 0x4, 0x28, [0xb, 0x8]}}) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x44, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}]}, 0x24}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r9 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e22, 0x63, @remote, 0x3}}, 0x0, 0x5, 0x0, 0x0, 0xc, 0xfffffffb}, 0x9c) r10 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) recvmmsg$unix(r10, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/76, 0x4c}], 0x1}}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f00000008c0)=""/86, 0x56}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x2}}], 0x2, 0x0, 0x0) 1.015527032s ago: executing program 3 (id=2445): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0x801000) 1.014139842s ago: executing program 3 (id=2446): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb01001800000000000100008000002400000004000000b5fb26a00000000c040000000000000000000003000000000200000002000000727a5c16002e0000e13fd3ac18125eabb9c0cf18ddaba83ffda5b1d0c39bbbf58dbb454dd1d0e8e01c096ed163efb2963a9c6c2f86c47a0751e0a0403221300b7f065d2e71cf5ea2f1d801541feb9de84df79246d03c0d84a5df03bd176777586491abdc8230fe607ad48d7896544677af614ac9a9e3be363fa9cdc8c76ecad6812ec85d7f3346fbb52841deeb046bfbb1ae7e4fee056364a58e6ba85c3d01f17de02e5fafbb00"], &(0x7f0000001280)=""/212, 0x40, 0xd4, 0x1, 0x80000000, 0x10000, @value=r3}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb01001800000000000100008000002400000004000000b5fb26a00000000c040000000000000000000003000000000200000002000000727a5c16002e0000e13fd3ac18125eabb9c0cf18ddaba83ffda5b1d0c39bbbf58dbb454dd1d0e8e01c096ed163efb2963a9c6c2f86c47a0751e0a0403221300b7f065d2e71cf5ea2f1d801541feb9de84df79246d03c0d84a5df03bd176777586491abdc8230fe607ad48d7896544677af614ac9a9e3be363fa9cdc8c76ecad6812ec85d7f3346fbb52841deeb046bfbb1ae7e4fee056364a58e6ba85c3d01f17de02e5fafbb00"], &(0x7f0000001280)=""/212, 0x40, 0xd4, 0x1, 0x80000000, 0x10000, @value=r3}, 0x28) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r6, 0x29, 0x4a, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x1f8, 0x11, 0x148, 0x0, 0x10, 0x2e0, 0x2a8, 0x2a8, 0x2e0, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x190, 0x1f8, 0x1c, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x7, 0x13, 0x0, 'syz0\x00', 0xd}}, @common=@icmp={{0x28}, {0x5, "c8ce", 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3d8) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x1f8, 0x11, 0x148, 0x0, 0x10, 0x2e0, 0x2a8, 0x2a8, 0x2e0, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x190, 0x1f8, 0x1c, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x7, 0x13, 0x0, 'syz0\x00', 0xd}}, @common=@icmp={{0x28}, {0x5, "c8ce", 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3d8) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x73c7d38a1b8432c4, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$TUNSETLINK(r8, 0x400454cd, 0x10e) (async) ioctl$TUNSETLINK(r8, 0x400454cd, 0x10e) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) bind$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) (async) bind$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r10, 0x0) ioctl$sock_SIOCINQ(r10, 0x541b, 0x0) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24008841}, 0x804) 1.011720406s ago: executing program 4 (id=2447): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f00000000c0)="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", &(0x7f00000001c0)=""/215}, 0x20) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r1, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xf}, @NL80211_ATTR_SSID={0x9, 0x34, @random="d568551b54"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x24010890) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x4, [@fwd={0x1}, @union={0x7, 0x5, 0x0, 0x5, 0x0, 0x101, [{0x400, 0x4}, {0x7, 0x2, 0x4}, {0x9, 0x0, 0xfff}, {0xa, 0x2, 0xa2}, {0x2, 0x3, 0x1}]}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000680)=""/40, 0x70, 0x28, 0x0, 0x3, 0x23f79d4150f902f4}, 0x28) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x9, &(0x7f0000000500)=@raw=[@jmp={0x5, 0x1, 0xd, 0x9, 0x4, 0xfffffffffffffff8, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @alu={0x7, 0x1, 0x0, 0xf, 0x3, 0xffffffffffffffc0, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000580)='syzkaller\x00', 0x34051b93, 0x0, 0x0, 0x41100, 0x3, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000700)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r0, r0, r0, r0], 0x0, 0x10, 0x6}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x5, [@restrict={0x6, 0x0, 0x0, 0xb, 0x5}, @ptr={0x7}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xb}, {0xa, 0x4}, {0x8, 0x4}, {0x1, 0x2}, {0xd, 0x4}, {0x8}, {0xd, 0x5}, {0x8}]}, @var={0x9, 0x0, 0x0, 0xe, 0x5}, @enum64={0x7, 0x4, 0x0, 0x13, 0x1, 0x4, [{0xa, 0x4, 0x2}, {0x3, 0x3, 0x2}, {0xe, 0x8, 0x3}, {0x4, 0x3, 0x4}]}, @float={0x1, 0x0, 0x0, 0x10, 0x4}, @fwd={0xa}, @volatile={0x5}]}, {0x0, [0x2e, 0x0, 0x61]}}, &(0x7f0000000940)=""/238, 0xf1, 0xee, 0x0, 0x5}, 0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x21040}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x80, r1, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_IE={0x3b, 0x2a, [@challenge={0x10, 0x1, 0xe6}, @mesh_chsw={0x76, 0x6, {0x1, 0xff, 0x14, 0x3}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @chsw_timing={0x68, 0x4, {0x9, 0x1000}}, @mesh_chsw={0x76, 0x6, {0x5d, 0x9, 0x7, 0x80}}, @sec_chan_ofs={0x3e, 0x1}, @cf={0x4, 0x6, {0x54, 0x0, 0x7fff, 0xf}}, @supported_rates={0x1, 0x6, [{0x1, 0x1}, {0x1, 0x1}, {0x1b, 0x1}, {0x9, 0x1}, {0x24}, {0xc, 0x1}]}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001cc0)={r0, &(0x7f0000000bc0)="a52a5e4b7fb855715c1dbf67d374764d386f7a41fd98d82183d334c5084de69ff222b93d2b5ce16255d63a3026b824537099c26c5bcbf122c18b58ba2e1e99aad5f8d5dd7e9b6c814584eb26797f47a6552d08a72c4dace08672f982e4d989fde112c74865c6dc4c5ceb4982857277b425c4019e6a5d1dc8884ec1d775f16ac2a2890ffd1a126279b66df08cd528639b161a56e20fdcb0b1357c5ed49e1a6f472563fc94884f9c846ee7803eec07c3d9cd7048126550f1d545fec2589ff02fd95b7f90cbe0dd8321435f53125a1da597d6beea19922d", &(0x7f0000000cc0)=""/4096, 0x4}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001d80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000001e80)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x78, r8, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6f58ae8ee3b74ca2fdae5c97c3fdc6ee17158e7ae7ed248b"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "770bd3b5f4422fc3ae29b77ff8b9f0928d0f28ec66fc92f9"}]]}, 0x78}, 0x1, 0x0, 0x0, 0x24000001}, 0x40080) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r6, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x44, r1, 0x1f6c6a7fb57f4c5c, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20048005) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002100)={&(0x7f0000002040)={0xa4, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40000000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffff7f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x99}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0xa4}, 0x1, 0x0, 0x0, 0x240008d0}, 0x40) close(r5) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000021c0), r4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x1c, r10, 0x10, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x1000) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000022c0), 0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000002900)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002340)={0x574, r1, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x41c, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xdb, 0x0, "b54545e556d29a38a071c1a2b0881b0ccb6c0abca69406769107cf3bb089c89513b649cd582fe0f7d8f6d5d1e65e2944c87e452ed358239606e6ff3f74d2a7d4b27bd97e4ba2415f7118d1e3d73524b2b63bdd7b6a954e980f27f0959bac080a81607badeaa0996a1781143e71d6ac7455feaa2e53641c0f5f02b23baf2992dbbedd0ddcbdef836f53bb809f730d5a49cf014f86834ccf9c1bb1873c582decf55c2998cc31b9f264c46caa80072fffb6ece57dc3806a775833ef33a0e0c77fad2681a6916e138c5d971897c3081bafd88f3557a817130b"}, @NL80211_BAND_6GHZ={0xce, 0x3, "1499110f4355f70a277df2799c3207b8906646994c37d9d8bdb25b0e94c939e4f32a340c6b1041b2531bc1bd504d2b49900bd7ff6823796371cb8ff6f44e041355d5447c2e953c86232299649813344c712de05c35655e0cdba6f412cdee3091b94ecf0d730f8a8dd6c5d95cf35099afd0b59558133998ff4fedb9ef696d729d4feac376f2e76a626ad46ec83cb640a48766978ed00ca96b31473b6f38929dd44f6d51e2155a6bc48718ae8f86fcb1d2b02d86721bfa04c2fcaf6d0579ae8974fd0d5982e6aa91bbb007"}, @NL80211_BAND_60GHZ={0x9, 0x2, "d036e6420d"}, @NL80211_BAND_6GHZ={0xc1, 0x3, "6ffdcbc96692e6e4fed816876bb43b56cac1b6eb6d3d28870e7ad7b9e8d78cf12d8676d9b9ccb1e7f936927dfde2b1567665b83a57e6beb3bdc3d34e729ebc65bfa2903726e020aa55f999164d6bc5327193076afe90d2059d2f81d2dde49ed42927f9f529421f7d2ffdb3b915bb47593e012628dd263e6b5845472580080d8dc412172b6c12261427e6063f2acb58d6f8c04ef5b43ef33b07d0aceffedd1350b03e8a7ad6aca86bda9df88f6b9a878d2ab00b1efab95cb62f81ae8dff"}, @NL80211_BAND_60GHZ={0x7c, 0x2, "67ca6d1d794ed79e64d84b291f31450979fcfe9436d027432ec4e81d1e948fc570847a85e0024c9946a7035b2186d75d86bf98afc395606215270948165c9d7f0d8d0edbb746beba11d24e31a13f833b3d9f13073be2a80769eb87c49b587dfd6615ff19e6641c5795a96b47dfacad26e9e7141681e848bd"}, @NL80211_BAND_6GHZ={0xb, 0x3, "fea1106844db1b"}, @NL80211_BAND_2GHZ={0x68, 0x0, "0381d16a22986725960d8fd2bd1a80c5c3f921a433e7317e3df98644c1f0e6694136edc1ea0210d81aafb286a6cacd213abf1c9a7ef13c76374dafae3c524cfefb8629f619d0bcd259c0605fc0defcdd27666ac2fa33e9de73ffa617125f421a9fd0a0fd"}, @NL80211_BAND_5GHZ={0xab, 0x1, "d3fd175b0136297d8179b51e73cffdd8e4c5bd35b1210245fe89ccc4d8f74e7aafb335ab407e3f3bed1f759b334bcda2aadfb2d00589c17a11e5297541390fddf43be5989594bc4b8af349fbd5aa5c26b67ccbc480fb78115313de2495f3a5698853672643198aa0d9d220108d0c65e9503d14cbf103355321552fcf1743858c015f20199258d84c595b379be7f56d996793da79c5d1022cb77adea6e19e2a1e28038844cb9222"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0x5e, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @measure_req={0x26, 0x47, {0x10, 0x0, 0x2, "03a4ad7f78b024d4d4d6d7fb2af51082fdaef00863bb29ba2e40b0dc7daeb9f9750e4ac21098f9722df9c3bbe4102f28eaef43e1efc9f89af393172b5fb3a587b72d1649"}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x9}}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xa8, 0x84, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffff8}]}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfff}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x4}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7fff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x80000000}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xb4a}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x80000000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5e}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x4}, {0x8, 0x0, 0x400}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0x14f3}]}]}, 0x574}, 0x1, 0x0, 0x0, 0x44}, 0x8040) bind$ax25(r11, &(0x7f0000002940)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r12 = socket$key(0xf, 0x3, 0x2) r13 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r13, 0x8982, &(0x7f00000029c0)={0x7, 'team_slave_1\x00', {0x4}, 0x1}) ioctl$sock_TIOCINQ(r12, 0x541b, &(0x7f0000002a00)) sendmsg$key(r11, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002a40)={0x2, 0x15, 0x8, 0x2, 0xd, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d5, 0x5, 0x60, 0x50, 0x1, 0x20000000}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d3}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1, @in6=@private2, 0x26, 0x0, 0x14}, @sadb_x_nat_t_port={0x1, 0x59197af4b52dff13, 0x4e23}]}, 0x68}}, 0x91) pipe(&(0x7f0000002b40)) 900.026023ms ago: executing program 4 (id=2448): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x7, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)}, 0x10) 826.687584ms ago: executing program 4 (id=2449): syz_init_net_socket$ax25(0x3, 0x5, 0x1) (async) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) 743.791847ms ago: executing program 4 (id=2450): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000080)=r2}, 0x20) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x5d}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (rerun: 32) pipe(&(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x39}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x6, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x170919bf739e519}}}, &(0x7f0000000000)='GPL\x00', 0xe4, 0x0, 0x0, 0x1f00, 0x8, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000280)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x1, 0x10001, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffeff}, 0x94) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, 0x0, 0x0) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x2, {0x0, 0xf0}, {0x1, 0xf0, 0x2}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x1}, {0x0, 0xf0, 0x2}, 0x2, 0x2}, {0x1, 0x0, {0x2, 0x1, 0x2}, {0x0, 0xff, 0x4}}], 0x80) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 623.799407ms ago: executing program 1 (id=2451): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='net_dev_xmit\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x31, 0x0, 0x7, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r5, r0, 0x16, 0x10, 0x0, @void, @value=r2, @void, @void, r4}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 497.111273ms ago: executing program 1 (id=2452): r0 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x65}}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) (async) sendmsg$802154_dgram(r1, &(0x7f0000000040)={&(0x7f0000000500)={0x24, @long}, 0x14, &(0x7f0000001880)={0x0}}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) ppoll(&(0x7f0000000380)=[{r2, 0x1002}, {r3, 0x2000}, {r2, 0x8080}], 0x3, &(0x7f00000003c0), &(0x7f0000000400), 0x8) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x15, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) socket$inet6(0xa, 0x3, 0xfffff21d) (async) sendmmsg(r0, &(0x7f00000027c0)=[{{&(0x7f0000000080)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)="8dbf58ee7f32c11c29c7bf112aceeaf7b1db4731dedff1b58fbed1bf26d0a36fdae0f214f9cac352c373699eb8a06558a150d074db74c4449a0c7fbf4e78b5a222716c9eb8eb51ea8c9a8f70f8e1a16d2fda92b51da587a2d7da79da4c81507113cdc5947d5846de584037235b36f6d002b1cfa7a69e1bf1d082a0c21725c0be2fec1c5c5fd39a2c5d6ff04f3fe47cffad9a8d8bea2b255be048336c3369d037b480", 0xa2}, {&(0x7f00000002c0)="6963e01bf3e89aee6067770e0c9f64b589e24189fcc4f63b4e4ef35cbddf8f42225ccf704e03f6c78fc8cac606f1300fe71893da5e2b2f4ab99f4706f74dcbd6b3b73a6947492ad1d0c18686f0fddf8ddc9493e7ee1cbbf6ff8f920eb59d9fcef18e6f1bec54210587b7fd59f6d17e9f54856a9c21917dde1b55efd5e0e0d9cb0b617413", 0x84}, {&(0x7f0000002900)="ac2c7fe6a8a8ee86b99305be6c81891c5db8a80910a9c95cccb3f18f0a03795806e78ebe9f9e6cac3a83ffa1e8ed5ce5f901207894a297bdb7a8ccb47ccb93d9282d96df49525f8a770052b181905a9cd99806c8e1346fea5adc578bc6aa79d656b772cf847dd20758420b4f65fd96ab680b2b2a917923a25378715584b9f5f9c5f3fbf25074274a9c1a7bbc51b19169eeabb93f11bec256a58b20ed9465b4063611c4bf7c0f820f841ad8a7361f525cb074fd4f17cfbef1823304a9a31e60693705cd02b378e75184497cc8b2f3160f443867194d", 0xd5}], 0x3, &(0x7f0000000480)=[{0xa8, 0x10b, 0x9, "91c89d2deb3190d57efc9dcf37a5cad5a9d012e520337e04b4ba95f99d15c83bc44bb275e68125064507ab32f42707da1a795031f37cc286e98c3862959848b866ec501e7feb91b1002fa0e78e4867e28a1b7df78decdefba02969a8ff86b3e3f8d154dcd3759da95e5c734d8ab9aacc9d71bf3c6759543a531624eb2f133c3ef1a718b1a84b5e1e20f198456ac74e0b5a94"}, {0x70, 0x2, 0x8, "04232f4147da1a4830fd93427b15640fbf1509a4a3e3f9d3fc88d5eda0e47bbbf1e06568f4c17cf06f3427cb2bf7d0f3ac996be1e31f473617276f91402c73aae9a45aa81da88fe5f1d78a94d3083d818208866cbbe72a98bb9a8e"}, {0x108, 0x6, 0x7, "4656cb04666885ed867cbd2d53eca4ee4ba1c6fe35929f70d604152f1b96978f19c029e7cf6883cb420041bd34dd41ae4ef45cc6f7c860a16a4d1081585719d07a541d8c97d84a74a2edbd4ddd1f211c1bf40894d01ee0e3124e762c4164653c4afa25dda209d3cdb234b59e80fe1d71a7ac2337e629b24619adc321ec5af9bf98ad078dcce5470251e10d75fe50ad2bf5129e71afddc9fa33ad9c560ef24a158546da6790ad820dfd9ce1e7ea148f9613c3d7bc7011f5ae611f9f80a4f5947a645724ae86a6ac5df061cac0444c4c429be80a7e839dc754707ea0c423ef6eac33aed2d79c6c5705240d47ad208efe149ee7d05087ce"}, {0x90, 0x1, 0x8, "494d047cb028ecc033e843ddeba032da5bfa5c02162a2802fd088c41472b94db0e9dfd767332e2b73f94f59862203f3bae7a2960ed9c6a36432952c506b0a5f3a16403a1fe5ee1ae7414447386c4a1aba6426c371e28a0e7a28d1e4d225c1bbfec539ad2697aeef2c93282f431f51efb36e810ee186754864398b5"}, {0x28, 0x119, 0x9, "01a302780d2986a7d5e631222d454f4532"}], 0x2d8}}, {{&(0x7f0000000100)=@l2={0x1f, 0xfcb8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3, 0x1}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)="127e90487003e39e7d81880d82b4ebc978f4bbf80cb866946b61ec774dc50e99ac29de653de58806b05989de3208458c09936d508758a1a23d60e115c75b29544f8e883ad62e1232294c65ecddbaa3ff4ef606800aa0031e3ba4612ce4dda19951379e6890a20e83c588f9e71dd49b68e970618f61ab027e2e3ea3e6dccb5b9a3c1240f2053112390efd692a1ded3fca950dad3049618e3069734daed3089aac74c4b9ccbae7027147d2a0a31626645fba713ac74a6660b251cf6509eac4f6df619e8ac98538bb60cfe0569c3296868456", 0xd1}], 0x1, &(0x7f00000008c0)}}, {{&(0x7f0000000a40)=@nfc={0x27, 0x0, 0xfffffffe, 0x9822e5a9daabea01}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000ac0)="dad2abbd676918cc9a7074ba35a9f8dba3b6532dcd982f99cb264f5c35c6a36c24916d0a55588d3a0e970988cb82141cb4896f6a77a7e00f860852383bebf8536102648ab93998d3986eeb9538fbc1d033333a728b2758c8811b5cd09a5de729dd37963537e1725615552932d096776d19d6422fef82a81f5c12e689f39c4ef2afb1ea370f47811710a0421627c9f58eb599a7e76d441a9d417c18610291fe7aa4d7339ccdabde131cc395feb7b7c3fc166dc0e22ae79aae124056e6f78ee3bf67462434ef10fddcbbc2975ab5e100666ebdeac4177b1beedca8bc166708514068ba40ad538b", 0xe6}, {&(0x7f0000000bc0)="c6a1b6e7e856356d821f9f29160a832c1f21aa33fbcdd8335e184f235a06", 0x1e}], 0x2, &(0x7f0000000c40)=[{0x98, 0x10f, 0x2, "e4f7108d52798e1f777ec5931ebdcf7f5202b53c3033132a3becb20a1b08f2dda275afbf45ae079c04793d2dccbb5fd315b2fb7d7236f2b888f0a39dbacf249bd1edb2377ab37c950fc58cf4c95aab9aa9ddffbd7e62fe735752c4f3c85a4165439c05374e1f9063d5e967625f02c5dd8d4a1de8f99f92da758e97bdead87fac811ed156567cfad8"}, {0x40, 0x0, 0x6, "80a9f07ea925c1d3cd94d37a2dfe47c898dfedbf0bf19ff6be6815f9f656ae8f9fae46a52d732a483a766efaf3"}, {0xd0, 0x0, 0x3, "a2871647cd3148c1e0212f1dcd4abfb336aaab44c6e305af9a4cb9310a3d6574b2ec8ae75344dc1ceae98043046a7e4491d5e392f4007a79f77a1d7e24524d5593be2c3b5e91648dac6f598ff7a6cf265186cd82fbaa512565299c7b489133fc389ed55adbda6db58e1a4b8906291df687ef9be251ec473864f0c826ff6b84f2bed67d6f668c8b05e9b94da8ef6db23e08a02fab1c887832d977cbe3cebe333afabfe884366497bdd1d613cf58a75ce5ea051cebcf6d3c856e5aa4f04cd8ce"}, {0x30, 0x108, 0x2, "f269c4411232d45ce4a7565441261766f601c44c4f4383a8fcab"}, {0xf0, 0x118, 0x200, "881763d83e5829e6d856aefcc12c2e210f793aea2859310386513f8fa610b074c1b5303cb0eeb59e8cdb7e63ab352f4d51b2b04f837762b0b08dae697dc608f51d38af02f7a7366ec3b699fcc19aea610c27513d2ab628ef8a77d436df167f082e55f92dea2622a9e0a99b4b024c0d0ed87891ee87c2a8fdddb53d48621cff781b536e0c58797a0484bf12466baab05d18c36023fafba10fa13fc17f1d5f0e7fd6d3554297fbee718316760cc6360ee531039cbeec7a9cda7ae715a7fff7f9fa20ed05dbf07713060c6d901cc1d6f5acd62217d2d74ba383ee81ebcc"}], 0x2c8}}, {{&(0x7f0000000f40)=@ethernet={0x1, @broadcast}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000fc0)="516c1d41d621f76050ad0201eeea0417237564c3c0a696479cc5050dcff301e5f16dccc679c7c5f079c3da0435b730f63fa79c5406a4afa73625c3a706b32157a7960ca0e94a8735d8490a4bdec3cc0d856ee2545af0201f4783cab076a978496d9c2989b8a8ebdca0c5fceefee4fd6365dfa2ee0d14aa479dbf371ef5f8180a7da2d02c0e3eaab56c41fb1b6ee38a02d8b8184c0bc14483", 0x98}, {&(0x7f0000001080)="6ac75798296f6e529f82742b07dd555f9c5597ee6e3f564bd529f4efeea7f217fb751a071c5c40a36fac631295ff90a029607c1ef26f06036d063436b7d11eba97ccc13fa48490f0902af532bec25fb6cbe5c89526b81922ebf3eb34c6befa24c392dbe8de4912cc4667f71e95e77a025471f01ddfe5fa5c8bf315299790fcca8b7a20c37ce2074322f7faa1562f21fb6aa48dc4d8f9c0c574225fb2cb0c65924740ba258a9a30f47422cc1192a0f77426dfeccd13c16cd71ed2bea66bdd2e9e4c72f629c20e4aba3197de991ccb12ee7a16576297f6a3b21b6541bf4fb4df1e25d4d63bab5f260cd1101d8ee532c51969217b4a589a23b380a0cff4daf21d2fb0b9fbbf086683ee47995d74f4d3a64d171b78e54792ec345b959faddb0ad5fd950b194e876a00f03537361c402bd1a83fea0092dc533c562277dbb90cc3e9b6c3d34025b93d7152117bdfacc8a558e06295a9767dece6acef094648a1cb1bd931cf6987a76d24c4d3490cae94e9b9f5c5d3341aa95d6672dac53eca74d87f76f1c5f40694ebac316a702519c5567c776665f508d924e1ff3c1c18e7a63120990e71b0fb54f4ba96ba21f981c99ee4b035cb2e3c11577414f8d5e1361c2f68dc5f5a04841f80deadad3fca1ef718e02f8c36770d4d38720e7bd72e2535e1d120be6d173c5404c3692ce22b3138128fe354dd04cc7a53fb7a1275c0c4c50af56d1f1c43d3f1eea6c39dcb2704cc24fd690e748508457648d74838b97cbb789d57c4c094c153e3bb75ed03817c4da007c4fc79087cb3670deffe4ae27dba0063ef9d38030b0f7f236864612191264dbe0524a75d43fd7256be5ed2bf62d09d5ac3a7ba2ed2e5eb3f862e64344d26f72bb82fc8bdd7c7fdb9f9edc839fa558600b46ae0db5077e901d61f3dd8d4ca0479a9d66de3e7769aee19379ea7dceae310144327a59a8d6914712a324fd6aa06e7eb7ed706d7b46e17a68aa655bf40c4c2a84211b30d852423ba7ceff3771e9732bd4e5077e46a19dc6aa1c36962aef3e36baaadfaf3f0557b95067579845557dd3bc44b32ef3514c9378c8b95f73e9da4d7240f038f66aa47709ddf875265bc7f1b4c0be956955ec5c5965b7193e2fac349db049e48168f31796f27d2d647ce66176d1b232bb7f796d6db2ec2d0302dbe2d99d2b4b4dcd973dfff1bd8c7af8019cc1119835ba53233a4083455fc83437d6fbe1f6665a981609e57bb47b43577eb71df1fa07665d2209a1bce111058fcf4c1c348164542c7eeee3023e47a26272f409f6b72b8a3b33f244dfaf7e597b4ba3c7c17939d25e8ecff94174b6f8242c473aaec9e23877316047a707af0a2c6e019bbe85fae45d832ebf09755eaa8f9b9887c772c5c6beb96fd80bab9674f9e0d238242570ccf164a46dac6dc2fb82b6b49d1a0b6d317d154b8b21e5d20b575f0ecac754787e4f0ab8458850c5f96224edaa2524b14e6dbbe40457f16a381ce99de75519008d7740b7305607a68acc22a50805212eb80899dac519d4c08b819ee2485855878307b60c2b90760fbe3c011120a9d9f2f08d7538655bfe09dd2a5ed39e854ec754a4cf6d06f3038222081ac8be44328abdcf159a9d71137022cd2cfb03273e0f45921480d9e9d4b5eb05fc0f13acbc4c9ad50b7ec3912a19e7a8917cc79a2768237c71ca4856f8b1d3255b9dfe3d95a910f7ba64ad253791c0ddc066b2dd9bf840ec6fa4568afbea1e7cd7e0fe178c026acfed120b32991ab70a9ad246857c7a3466cc1b53b598e846cc847e491662acda6be3082e582a2c613c840af71773a433d2c437fea02f508269d616ec3b34dfbf5fc97352bae444c2359cb91eb5560d03809963b2f39f6343bb38be72fed35fa21b3deac366ec2295c8f2dd4fd7a460241fc1ea422ca22a15f9554b370b8758e8cfab2ec4d4ffe9e99889735210d2d06da4f47f166dc12455a51c13a44d2ab81d30f118c2ce0c41b1ce3cb8890828c3f3b0e6bc9d0a9e77fd193ea3ccb569f98ebeff8233b606e7c8c6f8c59c3ef80a1a2212fb70712da511e945528e5fcfe1bb56b6c25d8db6b0f61afc577ff4a3f04126f1afe061908ae93f94ee58bce4f25562e61161479bf169ddc8e4157f8be03ee9aed024498a3b8d29fea4c8fdb106b5785900fb0333e25382605c3fc24034fb693bdc49931f12409d73ceb9b0f9ac2b75431beef64f297ce07b61c57226292d328e787cc8098ed46dce1470818b2cbbccf0716f5e9a045d248d70e2a86fa05116cfab973129e7b55c8d8ff75b44d5dd496b4d1c280ead7164f810128b73f597e377e0b7259ae94c1e76239886c2213e2998f8d707c809314f430368bd5da82f5de8316eda64970dd46334bdaa36d0cc8d9bbbc671db19f98bfb870c223cecf134bb2b22a9c5c513c9d8197f7631f8878f6a78476e8b0acf60ccd3d7dd2714868ab3bdb5511fd8b910d3ba9bb27f61bf56c19f10f3e1c348162a980586cc2a9479f3cffb35fd870765dcdc90d1cc26c53a6872715e5361e41e96c63ef065d48327329167e3c50717bf106e89d57b513cb5cde9018124dff010f4369c55b94a888b299996eae05da644d16989417490e91a5489ab05e2b0997f3014a9fd0bbf8387d854370846d0d0e1a2d69755453a0c341eee03b16d9b14496774a76b0f88b8a17159ed3b789117577be44b476b33556156da9bab7a6d1ed8c784e8fe83c5b1d78d4bfc666b1bb47a0db5f24c1cffc36d48bb985b0d0a6ff0b1b31c520a5ae08e77ddd8789be1034ed73292837b15ac9c638ff01293af5d9d3d2a3a4246af9d8c0e70d61882e0bfdb746120f285444587a3767bc1a2c1a6f5c95cc2b4766312a6135ea9af6bdedc86c9f74d6f704ae9940c3786021db65df03b791b98ebd658d835d8e3af03655b296125260ed2213b39f9802f2e94cb12041680533dd5bc883e55ae4aa20c1e0f84ff4ce381581ebd7e9c8ae132ec4a3b7f38e6d91531a37a97ea88c335316fda881409025af3b127ec98d3576aeaaa53414dd298d78a40a34810687112d3ae2898082135a1072b0dfbbd60503c64f58182b9315671608875d3d9c3a2a52a5ecaecfd3816642b4f82a258ec9a867ac83041fae06e51ec7e169318dfecc232b256ed80a91e6137e7a45bdb83f5e7261d560b5ef9ce16791309248d2ab59b0befbdc3c0d5b0fc6384c92684e578ae11c42ff2eeed2e7eaab4a23db91250e068a0960a2a7706f99542f0ae51e9c074b9556ad81dc6198a5c718f94bf2ee14bc721802619aaff5d816365c3408d377ea9c2d627fd49024d1358abeef7aee13f075ddbf5ceb242d29f951349cd66922c6554343a1cf4d3afabfc98a14e87c0eec9e3b0185bc9c8a53bf6edd30a6be726a7158e715e42f9783f76e85a8df0b71c71f26973afd7b80438c6f6612111e9a5e2c3cf2ccea476feeb9fa62795544b309a0b4a52fc4282db025992da6d84d99555b3ce0af197251223bec76af68ff4e1674bb9d3188245a39bf8a235711c814a6d570bce5238041de9e09915a5b8cf7e884d64d1ffaa312949ce746fff28c62ff81ac88558a9d434c2256c4662714be3b9d64e2da8d1394b7e7e11eae9516d5deac8a147cd46d9115485d1688c3a526c55cc94420aa04984aff90df324af4174fb14cecd5043fd45fd1eff74342695ca5f69ae5a892e4b979168e04f65737083f0be43a5429176c935b23b26a867160e0b41dafe216a6443fa858094d8c499de9517e3eb816752a48b84df23abfe0aea9bf24eefa67441db996ab0d1daad2f5be78406700403058dc0c0f55c1f7bb3f5b3f258be69b225cf0d990e42a27697378ac58a7349d557c48e8ce18d5330ba1af5204bd20403f228c34bab504e5deadf8bca8cf7b5a169cff43f30b29df23f54f895ef03ef87d90b38f7dc5685f5e5246419c02e13561ba1b1bf924e23a1cdf07ec307b5cd6f1e0f8454c7b5330d07b6abfa18391e072315b985012abad623a00041a631f0dba80108f8d1acfc82217879bbd7f33bc8b6b2a7b92d9b1dda3a4d54b8e88f93014050dab6457459bcd4b79e7f5c8d37b79cf64c33969961b653d92496b87e2c598b1c0c36608d0068dbdf537619f8b43af4b0b57a2a4fc3ba005100253dfd9670b4e417e1481fa0e36cb4bd622a4c38a8c165343559a880cbdc36b9b389d53246d5a512d41ac2c2b1a81949f82c75b33d51d1bb963a4cda6355511b3addd63d027a93cb6c6ffbf94a57513083a19a250d7c21afbba62951057a5cd1e54e3ccf6db5a296faa061d487982228b7b2adb85676b49aef1f61bad1367f3fae6cbc70a6212e0b548a0fd30d3713a43ccdf95cf27131be5bcfce3527ee7ef265dd20cb53bacf0e6bba82474c1080f70c000869f4e991e1921e8765cbf0a9c5de8dc79d7cf200811c192cb3e40a32682d3e41397746028636fcb7e595a08e8ddcad056e60f30b645e1e8feacf044e91d5ee85b4f56aef91ed9eecb762c5319bf7c824990dcfa4b9c37d5eff053f0b75dee29e3183c6b20307558c4646bdbc1e5bcca36a844052ce1484bf1bf14fdce4fd68dc66a9001b574dfab329d8bfa35b24e65de027815c674c3b13116441fa690f266f3d9fa6f6289a901be9f424e3537f63481e66d9059c508d80d6805151e0e865423fd4fb76638c46cfed887d5c1481762c5fee25844da931c1e84208b144ba11b681d87aafbaecd1ed308d183c43f01ed20d4f1b448d59ac0e1c20076a398f5d92d22523befe4f1e587476a11926d61fef9033002289cde8947d4ae064b3860ca11db92ea3b0235a4cce71d489056fd2fba04776da674dec3fb4fd4c5c889615cb1c8186ac907588d9561e7f14904807df516cf663d8738a9b6ed8eb4eed63eaf3fd5fc0675de75e8b39395293b46e5e75af71e49168487baf491b0e4c3b6ae8f45af77a8c8664ade6656fca7463ad7b8525f1b51c41b7cb0b2c05a81329751daa88d4e846d6918bfecd21c5521fa6fcbceff273ced770ba310f56a8d2557dbbabf0dfdc0d4ae5f90e4cb2b70b156abd9789157a0e4a7e4f197185a1b74441073969b1cfd12a77f60c353d9323fc12805ec90c6c361c2ae8db2787ee48bfe58a33df7970baf023830d13867ce95f77bc2cf087c7baa9aeb0f2d01c98d9d0d983d84616f7ab11a93fa375b3ca200320427d473ee729f84a233d49f59578c5d3593fee21793526371c2157a36c4eb255c6e12ed75095085af7c015769f7620904071d44afee805f6fae0576f82a12d7b3b8870ef5041836704026f437bbab0e2af87fcf5846ac865006134e9a98c18e86047654e02eeeaa4e498b579be5c4a5223307a90d156f9e0a4826df137440ae199b6b85889920a43e08b040c2d4b20f2452e30a6b476c63cfd0087bd02c73e1221162031329a11dfa504ff8c8fac087e4724409920c14c452178e231290cdc3a9ee750fb0e272d558b077087280c231271cdee600284d0bc46c2cf5c6b31c8233da8aaa88f1d1b7db4598d74e86dc1b4c9fbf1ec0e3b46f06e9e8b5d68ad5b5705e3b66b9b3554537b17e57e650eda24d6d445b1ee9216da2753ba6221d968d4a5668f0966069ed24528415f1da5de1fe8990652865ee426a36c36c68fb64c308fd0b4d47d88b5fe9b783b47c436372a1c4931af831064dda3c28443cc712a93ee5fcf73cfeba8b494b56e814622223ea37cd8fbfaa354738e3aa7248e4e945221849d70f4b9da847c136b493024b7f5e5870678cfd78968df29b4569fd1a97f77e4a015381cbf41dc461b85f94e2217168c1d9ac", 0x1000}, {&(0x7f0000002080)="fc60a74ba00f34973f36d1605b5728917404d7e8a545281f9d527cc4931d4b8b944582945d947b31fcf51c0523ee9f59afd4619783ec0bf73cf3e8876b5d9f3048bf10c448ffdc88f5c53016bfa58a98609e0142d04acfe52806f95764cc5bd4a6fa05588a251216a739fe0b1f80accffa55eeba8aad1cef31884d00fc4663a21df58bebe386d2d8a3ce920de1d3ffd95298388cf90509fd018c5e7ac8f9f31e592013c0567c76679a7638818c98b5a981aedc819cc825483c3dc8148b8f622c4d5fc68cadff887e91fd244298102fe5c33a3a1469abeeee4c405cf9c690aa0d574d372edfa5d9fe37e56765", 0xec}], 0x3, &(0x7f00000021c0)=[{0xa0, 0x103, 0x7, "764ea24700081bfb3113fc5121226925e8bda2089a87de3687b8423164b456ca47dfdf75caf533d99be3eb5de6f341ba08d7045eb4c28a934586456810a39f84e0ff874c8f516f29b75032c4f6cd2d099ef7fbb10c7a9a8198b8d9be0886c1fa39cec323d369ddafefc214d39e0e78d49e16aa3ad6a1b4851d0378d84c5739338620fe346d8b703c274bb56ea7304fca"}, {0x88, 0x10f, 0x5, "c0a21e7763ed52f0954305c23a4d0e17ceba795b3cf3182d1d3e2acfd778f911441fc4d5dfd1576bae05581ebc54ff9f33566f9ea42d5f75f57c867ed175b7670ae1870722624da786539a1c87a6a310ce6ef6eb588da4d151ef94c5db01b37242187ac2caff5f9672f20d25fff8239a13"}], 0x128}}, {{&(0x7f0000002300)=@l2={0x1f, 0x1, @none, 0x3ff, 0x2}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002380)="a865519a2a706301d64a4f7d2f8aef4283a89b1ecee2530918836f348a70afc6a6183e96cb78a4d841f976fb29e458e8f3a0c6f7cc99291a4c64dee287d86759fbbdabca5062a9c8866236fa08b1610c547e532f4f8b43ecd3c63b449ebfcea1799f6c43b2429e3391fe46fef87b14d94e4897e3a87aacf87b2ea3a4c47c1e59e6b4e380549457e488f1e425d42f021f235ac7fdd3eaf1d8177e00ad0d77dfadbb2287f8eca429a5d8979a7b0abd593e39e384559a2f4320a660a53354149fa91acc70834ad2559dc46f48b5d89b5830e8a9b2f0fb4c8cf84c1c73bc018194ecbf5bf987f4a2f91a032ed9b12e", 0xed}, {&(0x7f0000002480)="e7f2d509c534108d7c23a5f9fdf664ac1509f717cc0de57fd520ca8b2b3e2f1cc7a69c370190dc", 0x27}, {&(0x7f00000024c0)="220363028c044ec938116d702a5311337fa14787c1d1e8103d26536e813e5f1f30feb36b15bd9d4a6b0ed7ab0ff4107f3e7ac672354d4c3d78b4a255c05e8a10f67b804d1a71b0f302342fd6d7d33e43eff294d083c56ea7a80b3aaef4aaae2b7fdeb7d1391c600f43d1b26b9e806158de9266d850bd675f888196fece2e863d7702284d084e765d8d4d1ed21e5f6487ba27f8c2e587dd0bed432ac296f7a3177e5047e42f19e1575be843ed20d963ac22df80622b6d639427ac7662ff73", 0xbe}, {&(0x7f0000002580)="1f2dd1ac9c4fac7f91c252b73bfda43b30110020c7422ff99eb55317ee9789adaa26e645d3086ef9f86c12dc96e0163f2c9fa006331b0bf44fa570df366e6a", 0x3f}], 0x4, &(0x7f0000002600)=[{0x38, 0x107, 0x9, "4efa42e321fb869c9fc198f5c680f8122cde639bd0bc6fe53515f5b1309dcfbabe201fe211f8b4"}, {0x60, 0x10e, 0x3fffc000, "ca3d60ddb29ed7a224065796a9d98e25066f909d194b12d01682dfef57ad787a6344972addac3d7484de8735a42426a8c210ba2cbd2707106bdc85eae4403b656acd324b7b132ad9e440c65491bc"}, {0x38, 0x113, 0xb, "9fcc58e6c7635e26494ea086c8f627f5ea1577cb5bbe7e62793b0362efe59b070750e75c9f"}, {0xd8, 0x117, 0x3, "14144f2ff1d0f616aa537bb42acfb9fe5248a7f1aedbeaca27e543def9f0853105b86880247eb78dc49427b03382f7864993413f4920ff8b8f3f21fb0ea3a5b71fbe41e40e981be73364b4c359736b6dffe5a38f725cfbbb20e9687913165bb814c9ae8496cd27ebff7665ad5c36e2c618df075d61a83a5e8c858d1247ab4333d99e8cf95a27834fd5d833000e8c55cbdcf1289273de67525d7f4140d6f123d64ebf0124157f3a1bd390e2051de655d423da14d8ce57762935dfbb7ad0966923ba"}], 0x1a8}}], 0x5, 0x0) 452.146476ms ago: executing program 2 (id=2453): syz_emit_ethernet(0x7b, &(0x7f0000000dc0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000610", 0x45, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@hopopts], "983864eee1fe71e030673c5d9f"}}}}}}}, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) (async) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x4, 0x4) (async) setsockopt$MRT_TABLE(r0, 0x0, 0x31, 0x0, 0x0) 312.063181ms ago: executing program 4 (id=2454): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000001100010000000000000000000400000008"], 0x30}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) (async) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x100) (async) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) accept4(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80, 0x800) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000040)={0x1}) 242.569614ms ago: executing program 2 (id=2455): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x15, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, {}, {}, [@call={0x85, 0x0, 0x0, 0x64}, @jmp={0x5, 0x0, 0x4, 0x4, 0x4, 0xfffffffffffffff8, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 229.711005ms ago: executing program 3 (id=2456): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) epoll_create1(0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x390, 0xffffffff, 0x190, 0x98, 0x190, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x9, 0xffffffff, 0x4, {0x7}}}, @common=@unspec=@connlabel={{0x28}, {0x7fff}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x138, 0x168, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff000000, 0xffffff, 0xffffff00], @ipv4=@rand_addr=0x64010101, [0x0, 0xffffff00, 0xffffffff, 0xffffffff], @ipv6=@local, [0xff, 0x0, 0xffffffff, 0xff000000], @ipv6=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], 0x2, 0x10001, 0x3c, 0x4e20, 0x4e24, 0x4e21, 0x4e24, 0x300, 0x2001}, 0x80, 0x1000, 0x4e29, 0x4e22, 0x4e23, 0x4e24}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x4, 0x6}, {}, 0x360, 0xa}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0xfea4}}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x20, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40051}, 0x8880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x24000000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr=0xfffffffe}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000280)) 180.07309ms ago: executing program 1 (id=2457): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) 179.65067ms ago: executing program 4 (id=2458): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) (async) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async, rerun: 64) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x80004b}]}}]}, 0x3c}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000c7910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x25}, 0x7f, r5}) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) 79.960304ms ago: executing program 2 (id=2459): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="9fd6223827c38001ff9de8a267dc91516bb60639461709b87491b45fd20019eda7eef47acc07d014fdd2940c2733c41a4c9f2f0d4142ae32491d74431adce5b42d333f463a8614bde570b3c03db310e55c5081e4705856a8cd99d6efd7c0bab5aa4a1ecb7cf94af9dcdf8e7dc1c8084f32f448df3566e8f90fef8e15d405e8ca316963a8db5bd6cd44eac1eb3553776d86d8e1942dcb2a119ed1182b226ee84be5a64f13337a7c3f4ee8d0526e1ce8c4666dd8e2338920740f6f9194b26850c9b4098748c130376334601ddadc42514e7f29244e0fd79b9b73154ad9", 0xdc}, {&(0x7f00000002c0)="2911307c8abeb9fd3136f1feab87d767f6482b3568f2b0bef2032d658544d11cdae15718b04765a1f4b75eddbf0420c7728fe5697d0f3de3b87757c2756cc4481cc3bb4a7f16671a75a7a3d473d525f7726063776c59d7db163977e7384e914b6fc15fea04f03132ce69df8e3016d37caa6907857f3b55ba8da7c91c8f33a2e9f8ceffc3f6d9bb8a31d534763b715a3f61b97b26a89054f03738b121e9351adef9359f62d65214c36005771cd5", 0xad}, {&(0x7f0000000380)="cb6c470adc9210b7de111e652eece033b589d42a8d168ab3c94f0ca227ad9fdb6dfcbb740f0e4cf867d76d83924be5bfac61d9082e423eae62f235034c450acd540305dcd458d1b982e5f98f77f262584e4c4fb0d77a2d8c1b91597a80b6521be14348dd0d042394532b0d5b8876a6ff8d1a2d141f1f8d81672cc6b4c6b825f39f2fc603f335aec9fea8c75048515d35b5677c8a8f99eed060777abcb982627b1056694a3b566778d55927756c18aea9795fdec9b30748eb70a5cc48", 0xbc}, {&(0x7f0000000440)="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", 0xff}, {&(0x7f0000000540)="a49547bc64c63aee9e0b518d508dd9040561b359bb4fe2228288fd380f944a3f02eb084feb2674cf11ed04d848b4e0b710f8544f7129581ca298fd696d33fda84ac71a4fca8b77a265f1050cda6869f78a83699dd54bceb0ec0caad2092ffd26f2852bc9991d3474676b541145cbf69490c9019156719f07b5d9616dd427ca0f00dec31745f9907f86694e1f5f394e699203800a52588b3c356e56b8e00ffa4145c84341c8e80db01cd2d5d1a5fe1f59b350bbfa68566e8e3790d1333cca0d9abcfca26a5d80e93b50c08eacae640ccc3f0420528757a3f4c6da0aa171fb5df2ad858b6796ddeff8f7ee3d948fe3f0f803", 0xf1}], 0x5, &(0x7f0000000640)=[@ip_retopts={{0xd8, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x31, [@remote, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x1f}, @empty, @empty, @empty, @remote]}, @end, @timestamp_addr={0x44, 0xc, 0x75, 0x1, 0x1, [{@broadcast, 0xb}]}, @cipso={0x86, 0x32, 0x3, [{0x7, 0x11, "3ebb87ec49cda7873bc3c537215b34"}, {0x1, 0xf, "04161816ac5c86137b2298b6fb"}, {0x0, 0xc, "16b2fa9cd9188c3f6f79"}]}, @timestamp_addr={0x44, 0x34, 0x1d, 0x1, 0x0, [{@rand_addr=0x64010102, 0xe91}, {@empty, 0x2}, {@broadcast}, {@loopback, 0x1}, {@loopback, 0x2}, {@broadcast, 0x400}]}, @rr={0x7, 0xf, 0xb9, [@local, @rand_addr=0x64010101, @local]}, @ssrr={0x89, 0xf, 0xe2, [@dev={0xac, 0x14, 0x14, 0x1e}, @multicast2, @rand_addr=0x5]}, @generic={0x7, 0x12, "e901e257ad76f741b57dbe15f57511b2"}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @rand_addr=0x64010102}}}], 0xf8}}, {{&(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000740)="7664596e8c", 0x5}, {&(0x7f0000000780)="26e51a6ad5ac1319d5e09c2890f2cc45ec9a071be1f9ee6d000000000000", 0x1e}, {&(0x7f00000007c0)="59b087a78fbe99a540b6982fdb3b9c7abb307ce47d6d498e180dd0876e7e281a3da96f5d0516bed01ab289", 0x2b}, {&(0x7f0000000800)="05824bc39be1b253b0d0b76ac268c59548d62a1f01e36abb0a55db57550adca746b72f0f1884ce3cf4557c910c43f6f7ddc4e09114321a41d6d8ccbe1f5d5c1faa", 0x41}, {&(0x7f0000000880)="4edb7f9761a42a4dd17a86bb7802742c2037d7236f982e4fbffeee74d2abb6a277678262a78b0f122be93f706ae4c51359e26f44cfd5c4caf8bb2ddf7116e185824fa9b55c73790d5f7457a8ae49411594b5a7cb6ee1b23971796710f78a527929af56c2f07fafc42523a9a00670da6e4323e8075be046d30a6646a3b71452011280f74092", 0x85}, {&(0x7f0000000940)}, {&(0x7f0000000980)="d84ff08b6014b0e94d261634cced09c60d4f1cf28e768fd3b3f52fe8e53c6cb4249e92c47620c26bd73a5465726b4e99ccc7543f3976e1f8057a74b17126997f1e2c3d2567b55a804dc3ac2759eabcbf917a73045518fc127f7b00e385d1b563d4c3afd0754c9fc73e11ba631be08b771a125b5acf4e2387cf50ed0442abab25dc6c6445f5c450d70a70b9c02066ebaf7c3b5ca8ab3b391d841f996b10b6aeda0b9072cf330023e8e48bbf4ebac7ede4c184eb24a9190dc966b3f87f5382f717ecf5dd9079dc308c5504b748d6346788373d1a5adf4a46b87078453c7429", 0xde}, {&(0x7f0000000a80)="e23c4c287c392b3cba246049520f715203bb3f3c55c7abd52556833fc7557d975355d947552f1d7a81dce14ee5e1159b314f5e3c006fe50f60d2a9ca5676f77b0fe4af55183d212331893ef23325ae81abc3dc02e4f424714e9eaed3fe4436", 0x5f}], 0x8, &(0x7f0000000b80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}}], 0x2, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c000180060006008035"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, @in6={0xa, 0x4e22, 0x7ff, @empty, 0x7}], 0x38) 54.079601ms ago: executing program 3 (id=2460): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x18) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x15, 0x0, 0x2}, {0x2d}, {0x40, 0x40}, {0x6}]}) listen(r1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0xb) r4 = accept(r1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'pim6reg0\x00', {0x1}, 0x8}) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@gettaction={0x14, 0x32, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) bind$bt_hci(r4, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x180, 0x2, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfe1c}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048010) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x83, &(0x7f0000000080)={r9}, 0x8) sendmsg$802154_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)="99132437984f932d7ab395c4ae", 0xd}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008800) 0s ago: executing program 1 (id=2461): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x8, 0x0, 0x6, 0x8, 0x51d}, 0x14) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r0, &(0x7f0000000740)='\x00', 0x1, 0x4c0c0, &(0x7f0000000300)={0x11, 0x86dd, r3}, 0x14) kernel console output (not intermixed with test programs): per chain, 69600 per kthread [ 185.120683][ T9692] netlink: 'syz.3.1056': attribute type 1 has an invalid length. [ 185.128904][ T9694] sctp: [Deprecated]: syz.4.1057 (pid 9694) Use of int in max_burst socket option. [ 185.128904][ T9694] Use struct sctp_assoc_value instead [ 185.146422][ T9692] netlink: 'syz.3.1056': attribute type 3 has an invalid length. [ 185.166034][ T9692] netlink: 'syz.3.1056': attribute type 235 has an invalid length. [ 185.443825][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'. [ 185.457895][ T9710] netlink: 'syz.4.1063': attribute type 2 has an invalid length. [ 185.476188][ T9710] netlink: 'syz.4.1063': attribute type 1 has an invalid length. [ 185.551321][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1065'. [ 185.631206][ T9725] netlink: 'syz.4.1066': attribute type 1 has an invalid length. [ 185.646843][ T9725] netlink: 'syz.4.1066': attribute type 3 has an invalid length. [ 185.659706][ T9725] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1066'. [ 185.680462][ T9725] NCSI netlink: No device for ifindex 0 [ 186.112797][ T9745] netlink: 'syz.3.1072': attribute type 1 has an invalid length. [ 186.204564][ T9752] sctp: [Deprecated]: syz.4.1073 (pid 9752) Use of int in max_burst socket option. [ 186.204564][ T9752] Use struct sctp_assoc_value instead [ 186.481954][ T9762] xt_l2tp: v2 sid > 0xffff: 262144 [ 187.015634][ T9790] sctp: [Deprecated]: syz.4.1087 (pid 9790) Use of int in max_burst socket option. [ 187.015634][ T9790] Use struct sctp_assoc_value instead [ 187.139409][ T9794] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1089'. [ 187.221119][ T9800] netlink: 'syz.4.1091': attribute type 10 has an invalid length. [ 187.258438][ T9800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.277613][ T9802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.285716][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1091'. [ 187.296202][ T9802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.312800][ T9802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.325521][ T9802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.880171][ T9827] netlink: 'syz.1.1098': attribute type 4 has an invalid length. [ 188.030088][ T9836] syz.0.1100 uses old SIOCAX25GETINFO [ 188.147567][ T9840] sctp: [Deprecated]: syz.1.1101 (pid 9840) Use of int in max_burst socket option. [ 188.147567][ T9840] Use struct sctp_assoc_value instead [ 188.236133][ T9842] __nla_validate_parse: 4 callbacks suppressed [ 188.236151][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 188.480444][ T9856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 188.551702][ T9864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1109'. [ 188.598872][ T9856] team1: entered promiscuous mode [ 188.608663][ T9856] team1: entered allmulticast mode [ 188.727171][ T9864] ip_vti0: Master is either lo or non-ether device [ 189.185261][ T9888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1115'. [ 189.253882][ T9893] sctp: [Deprecated]: syz.0.1116 (pid 9893) Use of int in max_burst socket option. [ 189.253882][ T9893] Use struct sctp_assoc_value instead [ 189.338217][ T5836] Bluetooth: hci1: command 0x0405 tx timeout [ 189.422144][ T9900] x_tables: duplicate underflow at hook 2 [ 189.711258][ T9914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.719073][ T9914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.753139][ T9917] xt_HMARK: proto mask must be zero with L3 mode [ 189.775366][ T9914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.802704][ T9914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.862786][ T9906] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1121'. [ 189.954472][ T9906] 1ªX¹¦D: left allmulticast mode [ 190.130263][ T9936] tipc: Started in network mode [ 190.135188][ T9936] tipc: Node identity 4, cluster identity 4711 [ 190.135202][ T9936] tipc: Node number set to 4 [ 190.189586][ T9940] bond0: entered allmulticast mode [ 190.204596][ T9940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.333325][ T9944] sctp: [Deprecated]: syz.1.1132 (pid 9944) Use of int in max_burst socket option. [ 190.333325][ T9944] Use struct sctp_assoc_value instead [ 190.497416][ T7440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.513783][ T7440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.614465][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1137'. [ 190.655621][ T9955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1137'. [ 190.698002][ T9955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1137'. [ 190.902110][ T9970] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.083912][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1145'. [ 191.105471][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1145'. [ 191.130894][ T9978] validate_nla: 6 callbacks suppressed [ 191.130914][ T9978] netlink: 'syz.0.1145': attribute type 12 has an invalid length. [ 191.174548][ T9978] netlink: 'syz.0.1145': attribute type 11 has an invalid length. [ 191.197545][ T9981] sctp: [Deprecated]: syz.2.1147 (pid 9981) Use of int in max_burst socket option. [ 191.197545][ T9981] Use struct sctp_assoc_value instead [ 191.529572][ T9997] bridge0: port 3(gretap0) entered blocking state [ 191.536197][ T9997] bridge0: port 3(gretap0) entered disabled state [ 191.578999][ T9997] gretap0: entered allmulticast mode [ 191.598459][ T9997] gretap0: entered promiscuous mode [ 191.604498][ T9997] bridge0: port 3(gretap0) entered blocking state [ 191.611151][ T9997] bridge0: port 3(gretap0) entered forwarding state [ 192.142134][T10022] netlink: 'syz.2.1160': attribute type 1 has an invalid length. [ 192.157193][T10026] xt_hashlimit: max too large, truncated to 1048576 [ 192.391986][T10034] bond3: (slave bridge5): making interface the new active one [ 192.416060][T10034] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 192.486314][T10051] netlink: 'syz.4.1166': attribute type 2 has an invalid length. [ 192.511723][T10051] netlink: 'syz.4.1166': attribute type 10 has an invalid length. [ 192.553994][T10051] veth0_vlan: left promiscuous mode [ 192.637248][T10051] veth0_vlan: entered promiscuous mode [ 193.077005][T10051] team0: Device veth0_vlan failed to register rx_handler [ 193.482524][T10076] tipc: Enabled bearer , priority 10 [ 194.072236][T10096] __nla_validate_parse: 4 callbacks suppressed [ 194.072259][T10096] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1178'. [ 194.120324][T10103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1181'. [ 194.389865][T10117] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 194.545266][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.552636][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.635891][T10126] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1189'. [ 194.669077][T10126] 1ªX¹¦D: entered promiscuous mode [ 194.684730][T10126] 1ªX¹¦D: entered allmulticast mode [ 195.311840][T10162] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1201'. [ 195.640433][T10172] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 195.665577][T10172] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1207'. [ 195.694592][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'. [ 195.963482][T10186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1211'. [ 196.378083][T10202] netlink: 'syz.2.1216': attribute type 1 has an invalid length. [ 196.412788][T10202] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1216'. [ 196.599246][T10212] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1220'. [ 196.621939][T10212] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 196.972444][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 197.343740][T10250] lo speed is unknown, defaulting to 1000 [ 197.371323][T10250] lo speed is unknown, defaulting to 1000 [ 197.398693][T10250] lo speed is unknown, defaulting to 1000 [ 197.453645][T10252] x_tables: unsorted underflow at hook 4 [ 197.632225][T10259] delete_channel: no stack [ 198.053888][T10285] netlink: 'syz.1.1242': attribute type 23 has an invalid length. [ 198.074876][T10284] batadv0: entered promiscuous mode [ 198.153139][T10284] team0: entered promiscuous mode [ 198.203409][T10284] team_slave_0: entered promiscuous mode [ 198.242768][T10284] hsr1: entered promiscuous mode [ 198.269399][T10284] hsr1: entered allmulticast mode [ 198.285187][T10284] batadv0: entered allmulticast mode [ 198.309449][T10284] team0: entered allmulticast mode [ 198.324073][T10250] infiniband syz0: set active [ 198.337954][T10284] team_slave_0: entered allmulticast mode [ 198.345109][T10250] infiniband syz0: added lo [ 198.423390][T10250] RDS/IB: syz0: added [ 198.430199][T10250] smc: adding ib device syz0 with port count 1 [ 198.436805][T10250] smc: ib device syz0 port 1 has pnetid [ 198.816866][T10302] net_ratelimit: 17 callbacks suppressed [ 198.816886][T10302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.836324][ T10] lo speed is unknown, defaulting to 1000 [ 198.850484][T10250] lo speed is unknown, defaulting to 1000 [ 198.861066][ T43] lo speed is unknown, defaulting to 1000 [ 199.102898][T10307] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 199.563169][T10320] __nla_validate_parse: 9 callbacks suppressed [ 199.563187][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1251'. [ 199.765035][T10320] hsr_slave_1 (unregistering): left promiscuous mode [ 199.794039][T10327] netlink: 'syz.1.1254': attribute type 1 has an invalid length. [ 199.808634][T10250] lo speed is unknown, defaulting to 1000 [ 199.816673][T10328] netlink: 'syz.1.1254': attribute type 1 has an invalid length. [ 200.179915][T10340] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.191885][T10345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.235456][T10347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.624170][T10362] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1264'. [ 200.640848][T10362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1264'. [ 200.775485][T10362] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1264'. [ 200.798195][T10362] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1264'. [ 200.860105][T10371] nbd: must specify a device to reconfigure [ 200.878016][T10250] lo speed is unknown, defaulting to 1000 [ 201.077490][T10384] sctp: [Deprecated]: syz.4.1270 (pid 10384) Use of int in max_burst socket option. [ 201.077490][T10384] Use struct sctp_assoc_value instead [ 201.312214][T10392] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 201.425582][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1275'. [ 201.449255][T10395] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1275'. [ 201.478240][T10395] netlink: 'syz.4.1275': attribute type 5 has an invalid length. [ 201.524335][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1275'. [ 201.568461][T10395] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1275'. [ 201.656276][T10395] netlink: 'syz.4.1275': attribute type 5 has an invalid length. [ 201.743195][T10250] lo speed is unknown, defaulting to 1000 [ 201.915845][T10415] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1279'. [ 201.994700][T10420] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 202.004851][T10415] netlink: 'syz.4.1279': attribute type 11 has an invalid length. [ 202.229442][T10428] sctp: [Deprecated]: syz.4.1283 (pid 10428) Use of int in max_burst socket option. [ 202.229442][T10428] Use struct sctp_assoc_value instead [ 202.457666][T10436] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 202.663768][T10250] lo speed is unknown, defaulting to 1000 [ 203.601168][ T10] hid-generic 0005:0458:000E.0002: collection stack underflow [ 203.612559][ T10] hid-generic 0005:0458:000E.0002: item 0 0 0 12 parsing failed [ 203.623902][ T10] hid-generic 0005:0458:000E.0002: probe with driver hid-generic failed with error -22 [ 204.286505][T10509] gtp0: entered promiscuous mode [ 204.463998][T10518] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 204.538588][T10522] netlink: zone id is out of range [ 204.546748][T10522] netlink: zone id is out of range [ 204.564098][T10522] netlink: get zone limit has 8 unknown bytes [ 204.863037][T10536] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.872006][T10536] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.881185][T10536] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.890191][T10536] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.934583][T10539] netlink: 'syz.2.1321': attribute type 16 has an invalid length. [ 204.976597][T10539] netlink: 'syz.2.1321': attribute type 17 has an invalid length. [ 205.144688][T10544] __nla_validate_parse: 9 callbacks suppressed [ 205.144707][T10544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1324'. [ 205.185201][T10548] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 205.508998][T10564] xt_l2tp: v2 doesn't support IP mode [ 205.553202][T10569] team0: No ports can be present during mode change [ 205.585345][T10570] netlink: 'syz.2.1331': attribute type 3 has an invalid length. [ 207.153609][T10639] netlink: 'syz.2.1350': attribute type 4 has an invalid length. [ 207.171839][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 207.192685][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 207.393979][T10645] netlink: 'syz.0.1352': attribute type 13 has an invalid length. [ 207.620928][T10656] xt_CT: You must specify a L4 protocol and not use inversions on it [ 207.634311][T10660] netlink: 'syz.1.1358': attribute type 16 has an invalid length. [ 207.653989][T10660] netlink: 'syz.1.1358': attribute type 17 has an invalid length. [ 207.735332][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1359'. [ 207.775581][T10665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1359'. [ 207.854369][T10669] netlink: 'syz.0.1361': attribute type 2 has an invalid length. [ 207.864053][T10672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1362'. [ 207.869546][T10669] IPv4: Oversized IP packet from 127.202.26.0 [ 207.882592][T10672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1362'. [ 207.893749][T10672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1362'. [ 207.906431][T10672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1362'. [ 207.920232][T10672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1362'. [ 207.963574][T10674] netlink: 'syz.0.1363': attribute type 1 has an invalid length. [ 208.197607][T10681] netlink: 'syz.0.1366': attribute type 10 has an invalid length. [ 208.288148][T10651] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 208.353607][T10688] Unsupported ieee802154 address type: 0 [ 208.690316][T10709] netlink: 'syz.2.1374': attribute type 10 has an invalid length. [ 208.704644][T10712] smc: net device bond0 applied user defined pnetid SYZ2 [ 208.723703][T10712] smc: net device bond0 erased user defined pnetid SYZ2 [ 208.835461][T10716] netlink: 'syz.0.1379': attribute type 1 has an invalid length. [ 208.925854][T10719] netlink: 'syz.2.1378': attribute type 1 has an invalid length. [ 209.205891][ T5957] IPVS: starting estimator thread 0... [ 209.301047][T10742] IPVS: using max 23 ests per chain, 55200 per kthread [ 209.527136][ T24] IPVS: starting estimator thread 0... [ 209.542047][T10762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.562162][T10762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.582375][T10762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.608040][T10762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.629882][T10763] IPVS: using max 28 ests per chain, 67200 per kthread [ 209.649609][T10762] batadv0 (unregistering): left promiscuous mode [ 209.877990][T10778] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.176187][ T30] audit: type=1800 audit(1751448287.368:2): pid=10796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1402" name="memory.events" dev="tmpfs" ino=1420 res=0 errno=0 [ 210.184232][T10796] syz.2.1402: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 210.215447][T10799] C: renamed from lo (while UP) [ 210.242231][T10796] ,cpuset=/,mems_allowed=0-1 [ 210.261673][T10796] CPU: 1 UID: 0 PID: 10796 Comm: syz.2.1402 Not tainted 6.16.0-rc3-syzkaller-00133-g42fd432fe6d3 #0 PREEMPT(full) [ 210.261704][T10796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.261725][T10796] Call Trace: [ 210.261734][T10796] [ 210.261745][T10796] dump_stack_lvl+0x189/0x250 [ 210.261789][T10796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.261823][T10796] ? __pfx__printk+0x10/0x10 [ 210.261847][T10796] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 210.261871][T10796] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 210.261896][T10796] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 210.261936][T10796] warn_alloc+0x214/0x310 [ 210.261960][T10796] ? stack_depot_save_flags+0x40/0x900 [ 210.261991][T10796] ? __pfx_warn_alloc+0x10/0x10 [ 210.262017][T10796] ? kasan_save_track+0x4f/0x80 [ 210.262066][T10796] ? xskq_create+0x56/0x170 [ 210.262095][T10796] ? xsk_init_queue+0xb0/0x110 [ 210.262121][T10796] ? xsk_setsockopt+0x43f/0x710 [ 210.262146][T10796] ? do_sock_setsockopt+0x257/0x3e0 [ 210.262169][T10796] ? __x64_sys_setsockopt+0x18b/0x220 [ 210.262192][T10796] ? do_syscall_64+0xfa/0x3b0 [ 210.262209][T10796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.262239][T10796] __vmalloc_node_range_noprof+0x125/0x12f0 [ 210.262297][T10796] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 210.262328][T10796] ? __kasan_kmalloc+0x93/0xb0 [ 210.262351][T10796] vmalloc_user_noprof+0xad/0xf0 [ 210.262375][T10796] ? xskq_create+0xbf/0x170 [ 210.262405][T10796] xskq_create+0xbf/0x170 [ 210.262446][T10796] xsk_init_queue+0xb0/0x110 [ 210.262479][T10796] xsk_setsockopt+0x43f/0x710 [ 210.262514][T10796] ? __pfx_xsk_setsockopt+0x10/0x10 [ 210.262542][T10796] ? __lock_acquire+0xab9/0xd20 [ 210.262583][T10796] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 210.262610][T10796] ? __pfx_xsk_setsockopt+0x10/0x10 [ 210.262641][T10796] do_sock_setsockopt+0x257/0x3e0 [ 210.262669][T10796] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 210.262699][T10796] ? __fget_files+0x2a/0x420 [ 210.262732][T10796] __x64_sys_setsockopt+0x18b/0x220 [ 210.262765][T10796] do_syscall_64+0xfa/0x3b0 [ 210.262782][T10796] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.262813][T10796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.262833][T10796] ? clear_bhb_loop+0x60/0xb0 [ 210.262860][T10796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.262880][T10796] RIP: 0033:0x7f2fefb8e929 [ 210.262904][T10796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.262921][T10796] RSP: 002b:00007f2ff099a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 210.262944][T10796] RAX: ffffffffffffffda RBX: 00007f2fefdb5fa0 RCX: 00007f2fefb8e929 [ 210.262959][T10796] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 210.262972][T10796] RBP: 00007f2fefc10b39 R08: 0000000000000004 R09: 0000000000000000 [ 210.262985][T10796] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.262998][T10796] R13: 0000000000000000 R14: 00007f2fefdb5fa0 R15: 00007fffa89f54b8 [ 210.263032][T10796] [ 210.333830][T10796] Mem-Info: [ 210.647890][T10796] active_anon:5522 inactive_anon:0 isolated_anon:0 [ 210.647890][T10796] active_file:1286 inactive_file:39905 isolated_file:0 [ 210.647890][T10796] unevictable:768 dirty:78 writeback:0 [ 210.647890][T10796] slab_reclaimable:10421 slab_unreclaimable:102801 [ 210.647890][T10796] mapped:30727 shmem:3213 pagetables:994 [ 210.647890][T10796] sec_pagetables:0 bounce:0 [ 210.647890][T10796] kernel_misc_reclaimable:0 [ 210.647890][T10796] free:1332094 free_pcp:12753 free_cma:0 [ 210.713730][T10796] Node 0 active_anon:22188kB inactive_anon:0kB active_file:5144kB inactive_file:159416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122908kB dirty:308kB writeback:0kB shmem:11316kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12448kB pagetables:3808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 210.782925][T10811] __nla_validate_parse: 65 callbacks suppressed [ 210.782949][T10811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1407'. [ 210.818466][T10796] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 210.917821][T10796] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 211.008057][T10796] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 211.013992][T10796] Node 0 DMA32 free:1416004kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15340kB inactive_anon:0kB active_file:5144kB inactive_file:157600kB unevictable:1536kB writepending:308kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:37784kB local_pcp:20724kB free_cma:0kB [ 211.114065][T10796] lowmem_reserve[]: 0 0 1 1 1 [ 211.150216][T10823] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1410'. [ 211.172258][T10796] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 211.277789][T10796] lowmem_reserve[]: 0 0 0 0 0 [ 211.282632][T10796] Node 1 Normal free:3898784kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19584kB local_pcp:11008kB free_cma:0kB [ 211.357246][T10796] lowmem_reserve[]: 0 0 0 0 0 [ 211.370403][T10796] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 211.388991][T10796] Node 0 DMA32: 871*4kB (UM) 498*8kB (UME) 383*16kB (UME) 522*32kB (UME) 158*64kB (UME) 91*128kB (UM) 68*256kB (UM) 33*512kB (UME) 10*1024kB (UME) 2*2048kB (M) 321*4096kB (M) = 1415516kB [ 211.408194][T10796] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 211.421468][T10796] Node 1 Normal: 188*4kB (UME) 46*8kB (UME) 48*16kB (UME) 108*32kB (UME) 29*64kB (UME) 7*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3898784kB [ 211.442869][T10796] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 211.453295][T10796] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 211.464618][T10796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 211.474908][T10796] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 211.484575][T10796] 42578 total pagecache pages [ 211.491603][T10796] 0 pages in swap cache [ 211.495976][T10796] Free swap = 124996kB [ 211.502506][T10796] Total swap = 124996kB [ 211.506930][T10796] 2097051 pages RAM [ 211.515663][T10796] 0 pages HighMem/MovableOnly [ 211.521505][T10796] 424694 pages reserved [ 211.525733][T10796] 0 pages cma reserved [ 211.541998][T10816] team0 (unregistering): Port device team_slave_0 removed [ 211.568852][T10816] team0 (unregistering): Port device team_slave_1 removed [ 211.678690][T10831] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.694642][T10833] macvlan0: entered promiscuous mode [ 211.704683][T10833] macvlan0: entered allmulticast mode [ 211.712551][T10833] bond4: entered promiscuous mode [ 211.729541][T10833] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 211.750606][T10833] bond4: left promiscuous mode [ 211.980813][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.986944][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 212.071742][ T30] audit: type=1800 audit(1751448289.268:3): pid=10847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1417" name="memory.events" dev="tmpfs" ino=1431 res=0 errno=0 [ 212.198700][T10853] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1420'. [ 212.221459][T10853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1420'. [ 212.233173][T10853] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1420'. [ 212.342324][T10863] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1421'. [ 212.389715][T10855] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1421'. [ 212.598723][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 213.274961][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'. [ 213.315410][T10925] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 213.376273][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1443'. [ 213.512640][T10939] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 213.758182][T10952] xt_TCPMSS: Only works on TCP SYN packets [ 213.819725][T10961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.833010][T10964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.172818][T10982] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.370077][T10997] xt_hashlimit: size too large, truncated to 1048576 [ 215.063689][T11037] validate_nla: 2 callbacks suppressed [ 215.063708][T11037] netlink: 'syz.4.1477': attribute type 10 has an invalid length. [ 215.086732][T11038] netlink: 'syz.0.1475': attribute type 2 has an invalid length. [ 215.374089][T11052] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:1024 [ 215.498711][ T43] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 215.854786][T11076] __nla_validate_parse: 7 callbacks suppressed [ 215.854808][T11076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1491'. [ 216.046582][T11089] netlink: 'syz.0.1494': attribute type 1 has an invalid length. [ 216.067088][T11089] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1494'. [ 216.150832][T11095] IPv6: addrconf: prefix option has invalid lifetime [ 216.272188][T11099] netlink: 'syz.0.1500': attribute type 29 has an invalid length. [ 216.291744][T11099] netlink: 'syz.0.1500': attribute type 29 has an invalid length. [ 216.344467][T11101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'. [ 216.470128][T11109] tipc: Enabled bearer , priority 0 [ 216.503146][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.524898][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.546614][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.577083][T11116] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 216.588741][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.611639][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.633355][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.653291][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.681164][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.700010][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.740835][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.778536][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.787583][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.810084][T11125] smc: removing ib device syz0 [ 216.818530][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.828014][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.837192][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.857566][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.889899][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.931403][T11109] tipc: Enabling of bearer rejected, already enabled [ 216.986668][T11109] tipc: Enabling of bearer rejected, already enabled [ 217.010979][T11109] tipc: Enabling of bearer rejected, already enabled [ 217.034331][T11109] tipc: Enabling of bearer rejected, already enabled [ 217.056783][T11109] tipc: Enabling of bearer rejected, already enabled [ 217.079337][T11109] tipc: Enabling of bearer rejected, already enabled [ 217.100311][T11109] tipc: Enabling of bearer rejected, already enabled [ 217.118205][T11109] tipc: Enabling of bearer rejected, already enabled [ 217.143795][T11109] tipc: Enabling of bearer rejected, already enabled [ 217.155710][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1511'. [ 217.185366][T11141] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 217.215087][T11141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.251895][T11109] tipc: Enabling of bearer rejected, already enabled [ 217.265611][T11109] tipc: Enabling of bearer rejected, already enabled [ 217.284828][T11143] vlan1: entered allmulticast mode [ 217.291272][T11143] veth0_vlan: entered allmulticast mode [ 217.486124][T11157] x_tables: duplicate underflow at hook 1 [ 217.775456][T11161] bridge0: port 1(batadv1) entered blocking state [ 217.802423][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1520'. [ 217.808518][T11161] bridge0: port 1(batadv1) entered disabled state [ 217.850551][T11161] batadv1: entered allmulticast mode [ 217.882482][T11161] batadv1: entered promiscuous mode [ 218.149414][T11172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1521'. [ 218.224848][ T7418] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 218.234513][ T7418] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 218.273346][T11175] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1522'. [ 218.356043][T11175] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1522'. [ 218.416523][T11186] raw_sendmsg: syz.0.1526 forgot to set AF_INET. Fix it! [ 219.001277][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1532'. [ 219.052898][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1532'. [ 219.055417][T11201] team0: Device xfrm1 is of different type [ 220.000911][T11250] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 220.024885][T11253] netlink: 'syz.1.1547': attribute type 1 has an invalid length. [ 220.042826][T11253] netlink: 'syz.1.1547': attribute type 3 has an invalid length. [ 220.200989][T11254] team0 (unregistering): left promiscuous mode [ 220.211706][T11254] team_slave_0: left promiscuous mode [ 220.231386][T11254] team_slave_0: left allmulticast mode [ 220.268594][T11254] team0 (unregistering): Port device team_slave_0 removed [ 220.386956][T11258] syzkaller1: entered promiscuous mode [ 220.392893][T11258] syzkaller1: entered allmulticast mode [ 220.622028][ T30] audit: type=1107 audit(1751448297.818:4): pid=11271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6ò' [ 221.204919][T11304] pimreg: entered allmulticast mode [ 221.537605][T11329] netlink: 'syz.3.1570': attribute type 1 has an invalid length. [ 221.539870][T11334] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 221.572887][T11337] __nla_validate_parse: 7 callbacks suppressed [ 221.572905][T11337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1571'. [ 221.589490][T11337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1571'. [ 221.701016][T11329] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.716368][T11342] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 221.780975][ T30] audit: type=1804 audit(1751448298.978:5): pid=11344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1573" name="/newroot/310/memory.events" dev="tmpfs" ino=1595 res=1 errno=0 [ 221.824071][ T30] audit: type=1800 audit(1751448298.998:6): pid=11344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1573" name="memory.events" dev="tmpfs" ino=1595 res=0 errno=0 [ 222.125932][T11360] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1578'. [ 222.836345][T11396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.920840][T11409] netlink: 'syz.3.1592': attribute type 33 has an invalid length. [ 222.933672][T11409] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1592'. [ 223.035528][T11411] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1593'. [ 223.078060][T11416] netlink: 'syz.4.1596': attribute type 1 has an invalid length. [ 223.086914][T11417] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1595'. [ 223.110405][T11415] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.293397][T11428] FAULT_INJECTION: forcing a failure. [ 223.293397][T11428] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 223.307585][T11428] CPU: 1 UID: 0 PID: 11428 Comm: syz.0.1600 Not tainted 6.16.0-rc3-syzkaller-00133-g42fd432fe6d3 #0 PREEMPT(full) [ 223.307613][T11428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.307626][T11428] Call Trace: [ 223.307634][T11428] [ 223.307643][T11428] dump_stack_lvl+0x189/0x250 [ 223.307688][T11428] ? __pfx____ratelimit+0x10/0x10 [ 223.307721][T11428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.307755][T11428] ? __pfx__printk+0x10/0x10 [ 223.307777][T11428] ? __might_fault+0xb0/0x130 [ 223.307809][T11428] should_fail_ex+0x414/0x560 [ 223.307841][T11428] _copy_from_user+0x2d/0xb0 [ 223.307863][T11428] __sys_sendto+0x25c/0x520 [ 223.307889][T11428] ? __pfx___sys_sendto+0x10/0x10 [ 223.307908][T11428] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 223.307955][T11428] ? __fget_files+0x3a0/0x420 [ 223.308006][T11428] ? rcu_is_watching+0x15/0xb0 [ 223.308044][T11428] __x64_sys_sendto+0xde/0x100 [ 223.308071][T11428] do_syscall_64+0xfa/0x3b0 [ 223.308088][T11428] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.308118][T11428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.308139][T11428] ? clear_bhb_loop+0x60/0xb0 [ 223.308190][T11428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.308216][T11428] RIP: 0033:0x7fa67118e929 [ 223.308235][T11428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.308252][T11428] RSP: 002b:00007fa672013038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 223.308274][T11428] RAX: ffffffffffffffda RBX: 00007fa6713b5fa0 RCX: 00007fa67118e929 [ 223.308289][T11428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 223.308301][T11428] RBP: 00007fa672013090 R08: 00002000000001c0 R09: 000000000000001c [ 223.308314][T11428] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 223.308327][T11428] R13: 0000000000000000 R14: 00007fa6713b5fa0 R15: 00007ffe4b6888c8 [ 223.308359][T11428] [ 223.634819][T11434] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1604'. [ 223.789920][T11445] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1606'. [ 223.817091][T11445] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1606'. [ 223.840195][T11449] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1607'. [ 224.226477][T11471] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 224.244044][T11471] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.606950][T11491] tipc: New replicast peer: 255.255.255.255 [ 224.614250][T11491] tipc: Enabled bearer , priority 10 [ 224.628062][T11491] netlink: 'syz.1.1620': attribute type 15 has an invalid length. [ 224.765459][T11495] netlink: 'syz.1.1623': attribute type 11 has an invalid length. [ 224.778238][T11496] netlink: 'syz.1.1623': attribute type 11 has an invalid length. [ 224.789232][T11495] netlink: 'syz.1.1623': attribute type 2 has an invalid length. [ 224.797006][T11495] netlink: 'syz.1.1623': attribute type 1 has an invalid length. [ 224.805221][T11496] netlink: 'syz.1.1623': attribute type 2 has an invalid length. [ 224.813195][T11496] netlink: 'syz.1.1623': attribute type 1 has an invalid length. [ 225.327523][T11529] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 225.371765][T11529] IPVS: Error joining to the multicast group [ 225.728755][ T10] tipc: Node number set to 1023552613 [ 225.789265][T11546] tipc: Started in network mode [ 225.829176][T11546] tipc: Node identity ac14140f, cluster identity 4711 [ 225.836281][T11546] tipc: New replicast peer: 255.255.255.255 [ 225.871062][T11546] tipc: Enabled bearer , priority 10 [ 226.074440][T11567] tipc: Enabling of bearer rejected, failed to enable media [ 226.896162][T11602] validate_nla: 1 callbacks suppressed [ 226.896182][T11602] netlink: 'syz.4.1656': attribute type 39 has an invalid length. [ 226.988367][T11609] __nla_validate_parse: 4 callbacks suppressed [ 226.988385][T11609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1657'. [ 226.989311][T11405] tipc: Node number set to 2886997007 [ 226.995276][T11609] netlink: 'syz.1.1657': attribute type 3 has an invalid length. [ 227.319501][T11626] Bluetooth: MGMT ver 1.23 [ 227.366463][T11631] vxcan1: entered allmulticast mode [ 227.384029][T11631] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1664'. [ 227.659433][T11650] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:65529 [ 227.679235][T11650] netlink: 'syz.1.1670': attribute type 1 has an invalid length. [ 227.688963][T11650] xt_cgroup: xt_cgroup: no path or classid specified [ 227.702900][T11650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1670'. [ 227.917621][T11659] netlink: 625 bytes leftover after parsing attributes in process `syz.3.1675'. [ 227.953814][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1675'. [ 227.967072][T11659] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1675'. [ 228.041176][T11669] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1679'. [ 228.082933][T11669] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 228.124740][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'. [ 228.337458][T11684] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.1684'. [ 228.504665][T11685] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 229.293527][T11744] netlink: 'syz.3.1700': attribute type 7 has an invalid length. [ 229.340123][T11744] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1700'. [ 229.842090][T11764] netlink: 'syz.0.1706': attribute type 1 has an invalid length. [ 229.887041][T11767] netlink: 'syz.4.1707': attribute type 10 has an invalid length. [ 229.887892][T11764] netlink: 'syz.0.1706': attribute type 1 has an invalid length. [ 229.907350][T11767] batman_adv: batadv0: Removing interface: team0 [ 230.189735][T11781] netlink: 'syz.0.1713': attribute type 10 has an invalid length. [ 230.269952][T11788] FAULT_INJECTION: forcing a failure. [ 230.269952][T11788] name failslab, interval 1, probability 0, space 0, times 1 [ 230.283237][T11788] CPU: 1 UID: 0 PID: 11788 Comm: syz.1.1715 Not tainted 6.16.0-rc3-syzkaller-00133-g42fd432fe6d3 #0 PREEMPT(full) [ 230.283265][T11788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 230.283278][T11788] Call Trace: [ 230.283287][T11788] [ 230.283303][T11788] dump_stack_lvl+0x189/0x250 [ 230.283342][T11788] ? __pfx____ratelimit+0x10/0x10 [ 230.283374][T11788] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.283407][T11788] ? __pfx__printk+0x10/0x10 [ 230.283435][T11788] ? __lock_acquire+0xab9/0xd20 [ 230.283476][T11788] should_fail_ex+0x414/0x560 [ 230.283508][T11788] should_failslab+0xa8/0x100 [ 230.283533][T11788] kmem_cache_alloc_noprof+0x73/0x3c0 [ 230.283567][T11788] ? __inet_hash_connect+0x151e/0x2310 [ 230.283599][T11788] __inet_hash_connect+0x151e/0x2310 [ 230.283643][T11788] ? __inet_hash_connect+0x4fa/0x2310 [ 230.283679][T11788] ? __pfx___inet_hash_connect+0x10/0x10 [ 230.283704][T11788] ? sk_setup_caps+0x850/0xac0 [ 230.283737][T11788] ? inet6_hash_connect+0xd8/0x170 [ 230.283766][T11788] tcp_v6_connect+0xf2e/0x1880 [ 230.283786][T11788] ? stack_depot_save_flags+0x40/0x900 [ 230.283828][T11788] ? __pfx_tcp_v6_connect+0x10/0x10 [ 230.283847][T11788] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 230.283866][T11788] ? __sock_sendmsg+0xe5/0x270 [ 230.283894][T11788] ? __sys_sendto+0x3bd/0x520 [ 230.283949][T11788] __inet_stream_connect+0x298/0xf10 [ 230.283998][T11788] ? __pfx___inet_stream_connect+0x10/0x10 [ 230.284038][T11788] ? __kasan_kmalloc+0x93/0xb0 [ 230.284062][T11788] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 230.284087][T11788] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 230.284129][T11788] tcp_sendmsg_locked+0x4dd9/0x56f0 [ 230.284150][T11788] ? aa_label_sk_perm+0x413/0x560 [ 230.284175][T11788] ? tcp_sendmsg_locked+0x2a1/0x56f0 [ 230.284234][T11788] ? __lock_acquire+0xab9/0xd20 [ 230.284277][T11788] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 230.284301][T11788] ? __local_bh_enable_ip+0x12d/0x1c0 [ 230.284337][T11788] ? __local_bh_enable_ip+0x12d/0x1c0 [ 230.284384][T11788] tcp_sendmsg+0x2f/0x50 [ 230.284404][T11788] __sock_sendmsg+0xe5/0x270 [ 230.284438][T11788] __sys_sendto+0x3bd/0x520 [ 230.284484][T11788] ? __pfx___sys_sendto+0x10/0x10 [ 230.284503][T11788] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 230.284552][T11788] ? __fget_files+0x3a0/0x420 [ 230.284588][T11788] ? ksys_write+0x22a/0x250 [ 230.284610][T11788] ? __pfx_ksys_write+0x10/0x10 [ 230.284626][T11788] ? rcu_is_watching+0x15/0xb0 [ 230.284664][T11788] __x64_sys_sendto+0xde/0x100 [ 230.284691][T11788] do_syscall_64+0xfa/0x3b0 [ 230.284707][T11788] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.284737][T11788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.284756][T11788] ? clear_bhb_loop+0x60/0xb0 [ 230.284782][T11788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.284802][T11788] RIP: 0033:0x7fbc1638e929 [ 230.284822][T11788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.284839][T11788] RSP: 002b:00007fbc171f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 230.284861][T11788] RAX: ffffffffffffffda RBX: 00007fbc165b5fa0 RCX: 00007fbc1638e929 [ 230.284876][T11788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 230.284888][T11788] RBP: 00007fbc171f8090 R08: 00002000000001c0 R09: 000000000000001c [ 230.284901][T11788] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 230.284914][T11788] R13: 0000000000000000 R14: 00007fbc165b5fa0 R15: 00007ffface0df18 [ 230.284948][T11788] [ 231.105637][ T7418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.226783][ T7418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.340659][T11824] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.347616][T11824] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.424933][ T7418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.480930][T11829] batadv_slave_1: entered promiscuous mode [ 231.509681][T11822] batadv_slave_1: left promiscuous mode [ 231.616796][ T7418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.748016][T11843] No such timeout policy "syz0" [ 231.997017][ T7418] gretap0: left allmulticast mode [ 232.003243][ T7418] gretap0: left promiscuous mode [ 232.009186][ T7418] bridge0: port 3(gretap0) entered disabled state [ 232.022197][ T7418] bridge_slave_1: left allmulticast mode [ 232.028934][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.036175][ T7418] bridge_slave_1: left promiscuous mode [ 232.045918][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.046042][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.065947][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.078914][ T7418] bridge_slave_0: left allmulticast mode [ 232.083061][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.084613][ T7418] bridge_slave_0: left promiscuous mode [ 232.094336][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.098298][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.497384][ T7418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.514140][ T7418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.525691][ T7418] bond0 (unregistering): Released all slaves [ 232.542532][ T7418] bond1 (unregistering): Released all slaves [ 232.560785][ T7418] bond2 (unregistering): Released all slaves [ 232.580971][T11849] tipc: Started in network mode [ 232.586276][T11849] tipc: Node identity 080211, cluster identity 4711 [ 232.593623][T11849] tipc: Enabled bearer , priority 0 [ 232.702809][ T7418] tipc: Disabling bearer [ 232.716689][ T7418] tipc: Disabling bearer [ 232.738976][ T7418] tipc: Left network mode [ 232.937786][T11871] netlink: 'syz.4.1738': attribute type 4 has an invalid length. [ 233.174138][T11884] __nla_validate_parse: 7 callbacks suppressed [ 233.174158][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1745'. [ 233.193669][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1742'. [ 233.271909][T11889] tc_dump_action: action bad kind [ 233.281057][T11882] xt_hashlimit: overflow, rate too high: 0 [ 233.302296][ T7418] hsr_slave_0: left promiscuous mode [ 233.332617][ T7418] hsr_slave_1: left promiscuous mode [ 233.403852][ T7418] veth0_macvtap: left promiscuous mode [ 233.429968][ T7418] veth1_vlan: left promiscuous mode [ 233.435426][ T7418] veth0_vlan: left promiscuous mode [ 233.492428][T11903] sctp: [Deprecated]: syz.1.1746 (pid 11903) Use of int in max_burst socket option. [ 233.492428][T11903] Use struct sctp_assoc_value instead [ 233.589263][ T10] tipc: Node number set to 134353152 [ 234.143338][ T5836] Bluetooth: hci1: command tx timeout [ 234.476764][T11919] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1751'. [ 234.505154][T11851] chnl_net:caif_netlink_parms(): no params data found [ 234.717404][T11929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'. [ 234.747236][T11851] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.758541][T11851] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.765933][T11851] bridge_slave_0: entered allmulticast mode [ 234.775639][T11929] nbd: must specify a device to reconfigure [ 234.789794][T11851] bridge_slave_0: entered promiscuous mode [ 234.822436][T11851] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.838745][T11851] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.846151][T11851] bridge_slave_1: entered allmulticast mode [ 234.878785][T11851] bridge_slave_1: entered promiscuous mode [ 234.978927][T11851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.997323][ T7418] IPVS: stop unused estimator thread 0... [ 235.001417][T11851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.090782][T11940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1759'. [ 235.205331][T11851] team0: Port device team_slave_0 added [ 235.249005][T11851] team0: Port device team_slave_1 added [ 235.269738][T11957] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20004 [ 235.380113][T11962] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1765'. [ 235.424256][T11851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.436784][T11851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.470195][T11851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.481456][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1766'. [ 235.506588][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1767'. [ 235.526541][T11851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.540779][T11851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.574745][T11851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.646525][T11971] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 235.706810][T11979] netlink: 'syz.4.1770': attribute type 1 has an invalid length. [ 235.927555][T11979] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.928356][T11992] netlink: 'syz.2.1772': attribute type 1 has an invalid length. [ 235.942889][T11992] netlink: 'syz.2.1772': attribute type 4 has an invalid length. [ 235.951556][T11992] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1772'. [ 236.016162][T11981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.038557][T11981] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 236.054538][T11981] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 236.112775][T11851] hsr_slave_0: entered promiscuous mode [ 236.126650][T11851] hsr_slave_1: entered promiscuous mode [ 236.164507][T11979] veth9: entered promiscuous mode [ 236.181289][T11979] bond2: (slave veth9): Enslaving as an active interface with a down link [ 236.209028][T11998] vlan2: entered allmulticast mode [ 236.214320][T11998] bond2: entered allmulticast mode [ 236.228937][ T5836] Bluetooth: hci1: command tx timeout [ 236.267586][T12008] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 236.425961][T12010] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 236.444895][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1779'. [ 236.594679][T12022] netlink: 'syz.1.1783': attribute type 10 has an invalid length. [ 236.715105][T12024] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 236.961519][T12038] sctp: [Deprecated]: syz.3.1789 (pid 12038) Use of int in max_burst socket option. [ 236.961519][T12038] Use struct sctp_assoc_value instead [ 236.986877][T12041] netlink: 'syz.1.1790': attribute type 13 has an invalid length. [ 236.996351][T12041] veth0_macvtap: left promiscuous mode [ 237.014060][T12041] macvtap0: entered allmulticast mode [ 237.071980][T12041] macvtap0: refused to change device tx_queue_len [ 237.361051][T12058] netlink: 'syz.1.1795': attribute type 15 has an invalid length. [ 237.435285][T11851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 237.446511][T12060] x_tables: duplicate underflow at hook 3 [ 237.456203][T11851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 237.481703][T11851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 237.511541][T11851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 237.832635][T11851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.851806][T12086] sctp: [Deprecated]: syz.4.1802 (pid 12086) Use of int in max_burst socket option. [ 237.851806][T12086] Use struct sctp_assoc_value instead [ 237.889147][T11851] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.937693][ T7405] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.944939][ T7405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.000017][ T7413] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.007295][ T7413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.163838][T11851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.258849][T12092] __nla_validate_parse: 3 callbacks suppressed [ 238.258869][T12092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1805'. [ 238.298442][ T5836] Bluetooth: hci1: command tx timeout [ 238.580869][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1809'. [ 238.613070][T12109] netlink: 'syz.3.1811': attribute type 1 has an invalid length. [ 238.687569][T12109] netlink: 'syz.3.1811': attribute type 2 has an invalid length. [ 238.751489][T12117] netlink: 'syz.3.1811': attribute type 1 has an invalid length. [ 238.783870][T12117] netlink: 'syz.3.1811': attribute type 2 has an invalid length. [ 238.866778][T11851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.920427][T12124] netlink: 'syz.2.1812': attribute type 1 has an invalid length. [ 238.997075][T12125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1812'. [ 239.015290][T12124] 8021q: adding VLAN 0 to HW filter on device bond6 [ 239.042047][T12133] sctp: [Deprecated]: syz.4.1813 (pid 12133) Use of int in max_burst socket option. [ 239.042047][T12133] Use struct sctp_assoc_value instead [ 239.072386][T11851] veth0_vlan: entered promiscuous mode [ 239.079435][T12131] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1815'. [ 239.117073][T12123] bond6: (slave veth11): Enslaving as an active interface with a down link [ 239.145081][T12131] tc_dump_action: action bad kind [ 239.156095][T12135] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1814'. [ 239.162919][T11851] veth1_vlan: entered promiscuous mode [ 239.175912][T12132] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1814'. [ 239.230228][T11851] veth0_macvtap: entered promiscuous mode [ 239.256324][T11851] veth1_macvtap: entered promiscuous mode [ 239.345469][T11851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.395293][T11851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.435433][T12144] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 239.471043][T11851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.506931][T11851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.520690][T11851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.530805][T11851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.981153][ T7418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.014607][ T7418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.085044][T12178] netlink: 'syz.2.1828': attribute type 64 has an invalid length. [ 240.102921][T12178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1828'. [ 240.146104][ T7409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.168883][ T7409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.301522][T12186] syzkaller1: entered promiscuous mode [ 240.316936][T12186] syzkaller1: entered allmulticast mode [ 240.385740][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1833'. [ 240.418479][T12191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1833'. [ 240.710896][T12206] netlink: 'syz.4.1837': attribute type 7 has an invalid length. [ 241.102215][ T8948] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.241310][ T8948] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.365373][T12234] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1844'. [ 241.522752][ T8948] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.589511][T12241] tls_set_device_offload: netdev not found [ 241.726710][ T8948] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.836894][T12255] tipc: Enabled bearer , priority 0 [ 241.844565][T12255] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 241.858876][T12255] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 242.008979][T12259] Unsupported Adiantum instantiation: (cbc(twofish),sm4,blake2b-256) [ 242.020650][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.037017][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.045828][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.056201][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.063175][T12264] IPVS: set_ctl: invalid protocol: 44 172.20.20.55:20000 [ 242.079978][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.201848][T12263] pim6reg1: entered promiscuous mode [ 242.207318][T12263] pim6reg1: entered allmulticast mode [ 242.296197][T12268] vlan2: entered allmulticast mode [ 242.302426][T12268] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 242.374883][ T8948] bridge_slave_1: left allmulticast mode [ 242.381683][ T8948] bridge_slave_1: left promiscuous mode [ 242.390332][ T8948] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.427494][ T8948] bridge_slave_0: left allmulticast mode [ 242.450099][ T8948] bridge_slave_0: left promiscuous mode [ 242.466158][ T8948] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.932521][ T8948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.945665][ T8948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.956802][ T8948] bond0 (unregistering): Released all slaves [ 242.984630][T12275] team0: Device gtp2 is of different type [ 243.057066][T12288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.073319][T12290] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 243.412630][T12302] __nla_validate_parse: 1 callbacks suppressed [ 243.412651][T12302] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1865'. [ 243.530858][T12307] netlink: 212208 bytes leftover after parsing attributes in process `syz.3.1864'. [ 243.629981][T12258] chnl_net:caif_netlink_parms(): no params data found [ 243.814285][ T8948] hsr_slave_0: left promiscuous mode [ 243.821977][ T8948] hsr_slave_1: left promiscuous mode [ 243.828608][ T8948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.836247][ T8948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.844926][ T8948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.853580][ T8948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.889393][ T8948] veth1_macvtap: left promiscuous mode [ 243.895132][ T8948] veth0_macvtap: left promiscuous mode [ 243.901780][ T8948] veth1_vlan: left promiscuous mode [ 243.907330][ T8948] veth0_vlan: left promiscuous mode [ 244.142358][ T5836] Bluetooth: hci1: command tx timeout [ 244.452538][ T8948] team0 (unregistering): Port device team_slave_1 removed [ 244.496708][ T8948] team0 (unregistering): Port device team_slave_0 removed [ 244.715853][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1871'. [ 244.725345][T12335] openvswitch: netlink: nsh attr 16130 is out of range max 3 [ 244.737933][T12335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.748878][T12335] openvswitch: netlink: Message has -1 unknown bytes. [ 245.014979][T12328] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 245.340877][T12258] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.385397][T12258] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.395031][T12258] bridge_slave_0: entered allmulticast mode [ 245.406860][T12258] bridge_slave_0: entered promiscuous mode [ 245.423423][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 245.443549][T12359] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1879'. [ 245.460689][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 245.473836][T12258] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.496222][T12258] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.516357][T12258] bridge_slave_1: entered allmulticast mode [ 245.562081][T12258] bridge_slave_1: entered promiscuous mode [ 245.716339][T12367] openvswitch: netlink: Unknown key attributes 2 [ 245.821222][T12258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.867930][T12258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.949430][T12370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1883'. [ 245.998723][T12258] team0: Port device team_slave_0 added [ 246.064215][T12375] xt_CT: No such helper "snmp" [ 246.085032][T12258] team0: Port device team_slave_1 added [ 246.136323][T12386] netlink: 'syz.2.1887': attribute type 2 has an invalid length. [ 246.216486][T12386] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1887'. [ 246.226088][ T5832] Bluetooth: hci1: command tx timeout [ 246.250297][T12258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.257314][T12258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.331143][T12394] netlink: 'syz.1.1888': attribute type 10 has an invalid length. [ 246.339625][T12258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.352509][T12394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1888'. [ 246.468691][T12258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.475715][T12258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.535374][T12258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.576162][T12394] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 246.615568][T12403] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 246.792474][T12412] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1894'. [ 246.803623][T12258] hsr_slave_0: entered promiscuous mode [ 246.835682][T12258] hsr_slave_1: entered promiscuous mode [ 247.285548][T12435] netlink: 'syz.3.1900': attribute type 5 has an invalid length. [ 247.314100][T12437] netlink: 'syz.3.1900': attribute type 5 has an invalid length. [ 247.818888][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 248.046071][T12258] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 248.067443][T12258] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 248.104517][T12258] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 248.123946][T12258] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.167865][T12475] sctp: [Deprecated]: syz.3.1914 (pid 12475) Use of int in max_burst socket option. [ 248.167865][T12475] Use struct sctp_assoc_value instead [ 248.302762][ T5836] Bluetooth: hci1: command tx timeout [ 248.417272][T12258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.470931][T12258] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.483558][T12489] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 248.524977][ T7405] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.532232][ T7405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.580931][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.588264][ T7440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.630998][ T5836] Bluetooth: hci0: command tx timeout [ 248.703063][T12258] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.714103][T12258] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.863617][T12509] __nla_validate_parse: 80 callbacks suppressed [ 248.863642][T12509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1925'. [ 248.932134][T12508] delete_channel: no stack [ 249.110889][T12523] netlink: 'syz.4.1928': attribute type 2 has an invalid length. [ 249.189151][T12523] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 249.239431][T12528] sctp: [Deprecated]: syz.1.1930 (pid 12528) Use of int in max_burst socket option. [ 249.239431][T12528] Use struct sctp_assoc_value instead [ 249.333232][T12523] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1928'. [ 249.359975][T12258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.446976][T12531] vlan3: entered promiscuous mode [ 249.457023][T12531] bridge0: entered promiscuous mode [ 249.553699][T12258] veth0_vlan: entered promiscuous mode [ 249.592573][T12539] sit2: entered promiscuous mode [ 249.603484][T12539] sit2: entered allmulticast mode [ 249.631620][T12258] veth1_vlan: entered promiscuous mode [ 249.735881][T12258] veth0_macvtap: entered promiscuous mode [ 249.772718][T12258] veth1_macvtap: entered promiscuous mode [ 249.787132][T12545] netlink: 'syz.2.1935': attribute type 1 has an invalid length. [ 249.828761][T12258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.852682][T12549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1937'. [ 249.880814][T12258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.936667][T12258] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.957750][T12258] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.978778][T12258] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.987556][T12258] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.173875][T12565] delete_channel: no stack [ 250.301121][T12564] delete_channel: no stack [ 250.352343][ T7409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.366660][ T7409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.387886][ T5836] Bluetooth: hci1: command tx timeout [ 250.493992][T12576] xfrm0: entered promiscuous mode [ 250.500641][T12576] xfrm0: entered allmulticast mode [ 250.510851][T12573] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1942'. [ 250.523663][T12577] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1943'. [ 250.534275][ T7418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.554049][ T7418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.806275][T12584] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1947'. [ 251.026561][T12599] x_tables: duplicate underflow at hook 2 [ 251.046258][T12599] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.182173][T12605] netlink: 'syz.1.1954': attribute type 21 has an invalid length. [ 251.216945][T12605] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1954'. [ 251.230603][T12605] netlink: 'syz.1.1954': attribute type 5 has an invalid length. [ 251.239740][T12605] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1954'. [ 251.394694][ T7418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.647058][ T7418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.858916][ T7418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.037218][ T7418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.094760][T12636] netlink: 'syz.4.1965': attribute type 1 has an invalid length. [ 252.143706][T12639] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1967'. [ 252.197540][T12643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1967'. [ 252.239094][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.249580][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.258779][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.269183][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.277148][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.461502][ T7418] bridge_slave_1: left allmulticast mode [ 252.467245][ T7418] bridge_slave_1: left promiscuous mode [ 252.495348][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.529000][ T7418] bridge_slave_0: left allmulticast mode [ 252.534747][ T7418] bridge_slave_0: left promiscuous mode [ 252.547506][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.200462][ T7418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.214703][ T7418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.226262][ T7418] bond0 (unregistering): Released all slaves [ 253.293344][T12680] bridge: RTM_NEWNEIGH with invalid ether address [ 253.305477][T12681] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 253.341941][T12681] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 253.587631][T12691] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 253.600438][T12691] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 253.609415][T12691] gretap1: entered promiscuous mode [ 253.614802][T12691] gretap1: entered allmulticast mode [ 253.863778][T12706] sctp: [Deprecated]: syz.1.1986 (pid 12706) Use of int in max_burst socket option. [ 253.863778][T12706] Use struct sctp_assoc_value instead [ 253.982633][ T7418] hsr_slave_0: left promiscuous mode [ 253.994016][ T7418] hsr_slave_1: left promiscuous mode [ 254.001015][ T7418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.010169][ T7418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.022195][ T7418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.052478][ T7418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.109137][ T7418] veth1_macvtap: left promiscuous mode [ 254.118353][ T7418] veth0_macvtap: left promiscuous mode [ 254.142239][ T7418] veth1_vlan: left promiscuous mode [ 254.153233][ T7418] veth0_vlan: left promiscuous mode [ 254.389549][ T5836] Bluetooth: hci1: command tx timeout [ 254.620942][T12733] __nla_validate_parse: 7 callbacks suppressed [ 254.620963][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1996'. [ 254.703230][T12735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1996'. [ 254.863255][ T7418] team0 (unregistering): Port device team_slave_1 removed [ 254.912263][ T7418] team0 (unregistering): Port device team_slave_0 removed [ 255.364391][T12708] batadv_slave_1: entered promiscuous mode [ 255.373138][T12716] batadv_slave_1: left promiscuous mode [ 255.602106][T12644] chnl_net:caif_netlink_parms(): no params data found [ 255.799738][T12751] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2002'. [ 255.911330][T12644] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.927991][T12644] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.946651][T12644] bridge_slave_0: entered allmulticast mode [ 255.956216][T12644] bridge_slave_0: entered promiscuous mode [ 255.966158][T12644] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.978637][T12644] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.986446][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.986748][T12644] bridge_slave_1: entered allmulticast mode [ 255.993226][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.003911][T12644] bridge_slave_1: entered promiscuous mode [ 256.071941][T12644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.102265][T12644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.243034][T12644] team0: Port device team_slave_0 added [ 256.264448][T12644] team0: Port device team_slave_1 added [ 256.336161][T12644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.348268][T12644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.404930][T12644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.430910][T12644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.447846][T12644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.479505][ T5836] Bluetooth: hci1: command tx timeout [ 256.487460][T12771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2008'. [ 256.520169][T12644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.588708][T12773] sctp: [Deprecated]: syz.3.2009 (pid 12773) Use of int in max_burst socket option. [ 256.588708][T12773] Use struct sctp_assoc_value instead [ 256.733062][T12782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.744896][T12644] hsr_slave_0: entered promiscuous mode [ 256.762935][T12644] hsr_slave_1: entered promiscuous mode [ 256.779988][T12782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.836003][T12786] ip6t_srh: unknown srh invflags 5F00 [ 256.970860][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2014'. [ 256.987783][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2014'. [ 257.290537][T12807] netlink: 'syz.1.2018': attribute type 1 has an invalid length. [ 257.330534][T12807] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.384495][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'. [ 257.680123][T12644] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 257.705322][T12644] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 257.749427][T12644] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 257.774625][T12644] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 258.032974][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2028'. [ 258.068872][T12644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.122391][T12644] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.172663][ T7405] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.179947][ T7405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.214931][ T7405] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.222276][ T7405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.260503][T12851] netlink: 'syz.4.2031': attribute type 1 has an invalid length. [ 258.268885][T12851] netlink: 'syz.4.2031': attribute type 2 has an invalid length. [ 258.545507][ T5836] Bluetooth: hci1: command tx timeout [ 258.657052][T12870] netlink: 'syz.3.2034': attribute type 29 has an invalid length. [ 258.670926][T12872] netlink: 'syz.3.2034': attribute type 29 has an invalid length. [ 258.993285][T12644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.080768][T12644] veth0_vlan: entered promiscuous mode [ 259.104152][T12892] bond3: (slave bridge5): Releasing active interface [ 259.133733][T12892] batadv1: left allmulticast mode [ 259.146697][T12892] batadv1: left promiscuous mode [ 259.157304][T12894] netlink: 'syz.3.2041': attribute type 39 has an invalid length. [ 259.158331][T12892] bridge0: port 1(batadv1) entered disabled state [ 259.177206][T12892] bond6: (slave veth11): Releasing active interface [ 259.244643][T12644] veth1_vlan: entered promiscuous mode [ 259.291009][T12897] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2042'. [ 259.313378][T12897] 0ªX¹¦D: renamed from gretap0 [ 259.330545][T12897] 0ªX¹¦D: entered allmulticast mode [ 259.341040][T12897] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 259.378196][T12644] veth0_macvtap: entered promiscuous mode [ 259.448503][T12644] veth1_macvtap: entered promiscuous mode [ 259.490319][T12644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.530997][T12644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.556826][T12899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2043'. [ 259.558370][T12644] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.583018][T12644] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.593503][T12644] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.602351][T12644] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.781033][ T7413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.805452][ T7413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.816649][T12917] IPv6: Can't replace route, no match found [ 259.871723][T12917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2046'. [ 259.944065][T12917] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 259.955869][T12917] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2046'. [ 259.984274][ T8948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.025936][ T8948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.148302][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'. [ 260.165270][T12927] netlink: 'syz.2.2050': attribute type 3 has an invalid length. [ 260.323084][T12938] xt_socket: unknown flags 0x3c [ 260.423638][T12943] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 260.485266][T12947] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2055'. [ 260.576573][T12951] sctp: [Deprecated]: syz.3.2059 (pid 12951) Use of int in max_burst socket option. [ 260.576573][T12951] Use struct sctp_assoc_value instead [ 260.735106][T12957] netlink: 'syz.3.2061': attribute type 10 has an invalid length. [ 260.964258][T12961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2062'. [ 261.137572][ T7440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.605097][ T7440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.826030][T12971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2065'. [ 262.012643][T12978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2067'. [ 262.113088][T12972] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2065'. [ 262.127561][T12981] netlink: 'syz.1.2067': attribute type 39 has an invalid length. [ 262.187533][ T7440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.225742][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.242194][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.259122][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.277485][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.288944][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.411027][ T7440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.651245][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2073'. [ 262.692661][T12997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2073'. [ 262.758266][T13002] netlink: 'syz.4.2075': attribute type 1 has an invalid length. [ 262.781185][T12998] netlink: 'syz.3.2073': attribute type 1 has an invalid length. [ 262.781191][T12997] netlink: 'syz.3.2073': attribute type 1 has an invalid length. [ 262.844154][T12998] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.922600][T13002] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.995373][T13011] bond3: (slave veth11): Enslaving as an active interface with a down link [ 263.028156][ T7440] bridge_slave_1: left allmulticast mode [ 263.033895][ T7440] bridge_slave_1: left promiscuous mode [ 263.066565][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.093106][ T7440] bridge_slave_0: left allmulticast mode [ 263.105123][ T7440] bridge_slave_0: left promiscuous mode [ 263.119282][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.704519][ T7440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.718156][ T7440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.729577][ T7440] bond0 (unregistering): Released all slaves [ 263.761120][T13030] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 263.788772][T13030] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 264.262707][T13066] xt_bpf: check failed: parse error [ 264.378264][ T5836] Bluetooth: hci1: command tx timeout [ 264.432774][ T7440] hsr_slave_0: left promiscuous mode [ 264.440711][ T7440] hsr_slave_1: left promiscuous mode [ 264.447135][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.455969][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.464921][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.472966][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.543060][ T7440] veth1_macvtap: left promiscuous mode [ 264.550138][ T7440] veth0_macvtap: left promiscuous mode [ 264.556060][ T7440] veth1_vlan: left promiscuous mode [ 264.562210][ T7440] veth0_vlan: left promiscuous mode [ 265.266814][ T7440] team0 (unregistering): Port device team_slave_1 removed [ 265.313481][ T7440] team0 (unregistering): Port device team_slave_0 removed [ 265.813280][T12983] chnl_net:caif_netlink_parms(): no params data found [ 265.994443][T13082] netlink: 'syz.3.2097': attribute type 1 has an invalid length. [ 266.003337][T13083] netlink: 'syz.3.2097': attribute type 1 has an invalid length. [ 266.292365][T13097] xt_CT: No such helper "pptp" [ 266.323233][T12983] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.342146][T12983] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.349952][T12983] bridge_slave_0: entered allmulticast mode [ 266.363625][T12983] bridge_slave_0: entered promiscuous mode [ 266.376612][T12983] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.398661][T13105] __nla_validate_parse: 6 callbacks suppressed [ 266.398685][T13105] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2102'. [ 266.403259][T12983] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.407028][T13105] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2102'. [ 266.430980][T13105] netlink: 'syz.3.2102': attribute type 5 has an invalid length. [ 266.438533][T12983] bridge_slave_1: entered allmulticast mode [ 266.439169][T13105] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2102'. [ 266.458397][ T5836] Bluetooth: hci1: command tx timeout [ 266.475560][T12983] bridge_slave_1: entered promiscuous mode [ 266.515432][T13110] sctp: [Deprecated]: syz.4.2103 (pid 13110) Use of int in max_burst socket option deprecated. [ 266.515432][T13110] Use struct sctp_assoc_value instead [ 266.552490][T12983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.570137][T12983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.636572][T12983] team0: Port device team_slave_0 added [ 266.656603][T12983] team0: Port device team_slave_1 added [ 266.731024][T12983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.747787][T12983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.782445][T12983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.796830][T12983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.807169][T12983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.854169][T12983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.011014][T13128] netlink: 'syz.2.2109': attribute type 21 has an invalid length. [ 267.030654][T13128] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2109'. [ 267.062363][T13128] netlink: 'syz.2.2109': attribute type 4 has an invalid length. [ 267.070740][T13129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2108'. [ 267.077923][T13128] netlink: 'syz.2.2109': attribute type 5 has an invalid length. [ 267.088970][T13128] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2109'. [ 267.089202][T13136] netlink: 'syz.2.2109': attribute type 21 has an invalid length. [ 267.110257][T13136] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2109'. [ 267.151854][T13129] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2108'. [ 267.162585][T13136] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2109'. [ 267.191741][T12983] hsr_slave_0: entered promiscuous mode [ 267.205484][T12983] hsr_slave_1: entered promiscuous mode [ 267.850569][T13168] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 267.975425][T13177] validate_nla: 3 callbacks suppressed [ 267.975446][T13177] netlink: 'syz.2.2123': attribute type 1 has an invalid length. [ 268.013858][T13177] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2123'. [ 268.025220][T13182] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 268.095795][T13186] vlan0: entered promiscuous mode [ 268.347090][T13203] sctp: [Deprecated]: syz.2.2131 (pid 13203) Use of int in max_burst socket option. [ 268.347090][T13203] Use struct sctp_assoc_value instead [ 268.450753][T13205] netlink: 'syz.3.2130': attribute type 11 has an invalid length. [ 268.488244][T13205] netlink: 'syz.3.2130': attribute type 11 has an invalid length. [ 268.548878][ T5836] Bluetooth: hci1: command tx timeout [ 268.605796][T12983] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 268.639589][T12983] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.678503][T12983] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.707314][T12983] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.097263][T13246] xt_HMARK: spi-set and port-set can't be combined [ 269.120366][T12983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.143669][T13244] blkio.reset_stats is deprecated [ 269.169016][T12983] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.227395][ T7405] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.234714][ T7405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.256633][ T8948] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.263989][ T8948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.842013][T12983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.016628][T13278] pim6reg: entered allmulticast mode [ 270.024517][T12983] veth0_vlan: entered promiscuous mode [ 270.074108][T13278] No such timeout policy "syz0" [ 270.094078][T12983] veth1_vlan: entered promiscuous mode [ 270.147748][T13278] pim6reg: left allmulticast mode [ 270.248453][T13283] netlink: 'syz.3.2152': attribute type 1 has an invalid length. [ 270.331686][T12983] veth0_macvtap: entered promiscuous mode [ 270.385280][T12983] veth1_macvtap: entered promiscuous mode [ 270.442522][T12983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.469790][T13294] netlink: 'syz.4.2158': attribute type 1 has an invalid length. [ 270.542019][T12983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.628971][ T5836] Bluetooth: hci1: command tx timeout [ 270.636570][T12983] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.649733][T12983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.659526][T12983] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.669672][T12983] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.745992][T13300] netlink: 'syz.4.2161': attribute type 1 has an invalid length. [ 270.785343][T13304] wg2: entered allmulticast mode [ 270.893330][ T7440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.909752][ T7440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.959014][ T7440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.974729][ T7440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.162922][T13314] gtp0: entered promiscuous mode [ 271.188778][T13314] gtp0: entered allmulticast mode [ 271.570339][T13336] __nla_validate_parse: 11 callbacks suppressed [ 271.570362][T13336] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2173'. [ 271.619078][T13336] netlink: 'syz.2.2173': attribute type 1 has an invalid length. [ 271.831691][T13350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2178'. [ 271.866983][T13350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2178'. [ 271.877458][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2178'. [ 272.134330][ T7440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.480637][ T7440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.694099][ T7440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.826186][ T7440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.018623][T13369] xt_TCPMSS: Only works on TCP SYN packets [ 273.042489][T13371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2184'. [ 273.074484][T13371] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 273.093260][T13373] netlink: 'syz.1.2181': attribute type 64 has an invalid length. [ 273.121120][ T7440] bridge_slave_1: left allmulticast mode [ 273.126947][ T7440] bridge_slave_1: left promiscuous mode [ 273.137456][T13373] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2181'. [ 273.150314][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.184204][ T7440] bridge_slave_0: left allmulticast mode [ 273.196892][ T7440] bridge_slave_0: left promiscuous mode [ 273.210583][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.210776][T13382] netlink: 'syz.3.2186': attribute type 1 has an invalid length. [ 273.247750][T13382] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2186'. [ 273.286012][T13382] nbd: couldn't find device at index 1048576 [ 273.665282][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.680733][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.689714][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.699455][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.707189][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 273.801319][T13396] netlink: 'syz.3.2188': attribute type 1 has an invalid length. [ 273.817505][T13396] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2188'. [ 274.053981][ T7440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.065217][ T7440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.075870][ T7440] bond0 (unregistering): Released all slaves [ 274.285471][T13410] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2189'. [ 274.473217][T13423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2193'. [ 274.760379][T13431] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 274.793106][T13438] netlink: 'syz.1.2198': attribute type 2 has an invalid length. [ 274.846739][ T7440] hsr_slave_0: left promiscuous mode [ 274.858921][ T7440] hsr_slave_1: left promiscuous mode [ 274.865230][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.879977][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.895283][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.905260][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.941097][ T7440] veth1_macvtap: left promiscuous mode [ 274.947082][ T7440] veth0_macvtap: left promiscuous mode [ 274.953336][ T7440] veth1_vlan: left promiscuous mode [ 274.960185][ T7440] veth0_vlan: left promiscuous mode [ 275.552058][T13458] openvswitch: netlink: Key type 272 is out of range max 32 [ 275.701840][ T7440] team0 (unregistering): Port device team_slave_1 removed [ 275.742166][ T5836] Bluetooth: hci1: command tx timeout [ 275.792284][ T7440] team0 (unregistering): Port device team_slave_0 removed [ 276.367337][T13400] chnl_net:caif_netlink_parms(): no params data found [ 276.655711][T13475] __nla_validate_parse: 4 callbacks suppressed [ 276.655731][T13475] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2203'. [ 276.690988][T13472] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2204'. [ 276.778364][T13400] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.785582][T13400] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.815273][T13400] bridge_slave_0: entered allmulticast mode [ 276.839860][T13400] bridge_slave_0: entered promiscuous mode [ 276.858348][T13400] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.888490][T13400] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.895828][T13400] bridge_slave_1: entered allmulticast mode [ 276.928662][T13400] bridge_slave_1: entered promiscuous mode [ 277.015410][T13400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.032897][T13400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.122926][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2210'. [ 277.150334][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'. [ 277.161549][T13400] team0: Port device team_slave_0 added [ 277.187580][T13400] team0: Port device team_slave_1 added [ 277.194680][T13494] netlink: 'syz.4.2211': attribute type 12 has an invalid length. [ 277.197400][T13497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2212'. [ 277.279528][T13400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.286555][T13400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.323452][T13400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.336659][T13400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.345193][T13499] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 277.362133][T13400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.410299][T13400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.566419][T13400] hsr_slave_0: entered promiscuous mode [ 277.574124][T13400] hsr_slave_1: entered promiscuous mode [ 277.832837][ T5836] Bluetooth: hci1: command tx timeout [ 278.120353][T13535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2224'. [ 278.224494][T13538] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2225'. [ 278.254474][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'. [ 278.324293][T13541] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2226'. [ 278.794454][T13551] 8021q: VLANs not supported on ip6gre0 [ 279.068146][T13565] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2234'. [ 279.087392][T13566] openvswitch: netlink: Flow key attr not present in new flow. [ 279.228542][T13400] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 279.258674][T13400] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 279.291810][T13400] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 279.467815][T13400] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 279.741753][T13600] No such timeout policy "syz0" [ 279.898611][ T5836] Bluetooth: hci1: command tx timeout [ 280.046815][T13400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.290724][T13400] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.330683][ T7435] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.337961][ T7435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.403796][ T7435] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.411086][ T7435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.681847][T13641] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.906620][T13650] vxcan3: entered allmulticast mode [ 280.964567][T13400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.014863][T13655] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 281.116222][T13400] veth0_vlan: entered promiscuous mode [ 281.132805][T13661] openvswitch: netlink: Flow actions attr not present in new flow. [ 281.153119][T13400] veth1_vlan: entered promiscuous mode [ 281.243176][T13400] veth0_macvtap: entered promiscuous mode [ 281.257622][T13400] veth1_macvtap: entered promiscuous mode [ 281.300589][T13400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.332054][T13400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.380856][T13400] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.410344][T13400] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.420840][T13400] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.430136][T13400] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.588871][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.620780][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.651604][T13676] netlink: 'syz.4.2267': attribute type 16 has an invalid length. [ 281.656868][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.668830][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.700678][T13676] netlink: 'syz.4.2267': attribute type 3 has an invalid length. [ 281.725250][T13676] __nla_validate_parse: 6 callbacks suppressed [ 281.725270][T13676] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2267'. [ 281.814511][T13684] netlink: 'syz.3.2270': attribute type 1 has an invalid length. [ 281.834444][T13684] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2270'. [ 282.089175][T13699] tipc: Enabled bearer , priority 10 [ 282.240140][T13706] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2277'. [ 282.455933][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2281'. [ 282.524792][ T7425] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.776858][ T7425] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.144321][ T7425] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.483674][T13726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2283'. [ 283.511006][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2282'. [ 283.536085][T13726] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 283.538446][T13730] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 283.567065][T13730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.570219][T13726] hsr1: entered promiscuous mode [ 283.731128][ T7425] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.118192][ T7425] bridge_slave_1: left allmulticast mode [ 284.125761][ T7425] bridge_slave_1: left promiscuous mode [ 284.138366][ T7425] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.146731][T13759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2294'. [ 284.173779][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2294'. [ 284.196102][ T7425] bridge_slave_0: left allmulticast mode [ 284.202446][ T7425] bridge_slave_0: left promiscuous mode [ 284.218970][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.293617][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 284.303849][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 284.313001][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 284.323259][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.335234][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.414761][T13763] "syz.2.2296" (13763) uses obsolete ecb(arc4) skcipher [ 284.696630][ T7425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.708640][ T7425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.720407][ T7425] bond0 (unregistering): Released all slaves [ 284.899759][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2299'. [ 284.923267][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2299'. [ 285.250776][T13802] Cannot find del_set index 17 as target [ 285.510683][ T7425] hsr_slave_0: left promiscuous mode [ 285.519166][ T7425] hsr_slave_1: left promiscuous mode [ 285.530359][ T7425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.530364][T13823] netlink: 'syz.1.2307': attribute type 1 has an invalid length. [ 285.549763][ T7425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.558352][ T7425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.565840][ T7425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.590758][ T7425] veth1_macvtap: left promiscuous mode [ 285.596359][ T7425] veth0_macvtap: left promiscuous mode [ 285.603221][ T7425] veth1_vlan: left promiscuous mode [ 285.608798][ T7425] veth0_vlan: left promiscuous mode [ 285.820897][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 286.122371][ T7425] team0 (unregistering): Port device team_slave_1 removed [ 286.167448][ T7425] team0 (unregistering): Port device team_slave_0 removed [ 286.384142][ T5836] Bluetooth: hci1: command tx timeout [ 286.633641][T13823] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 286.644651][T13825] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 286.796670][T13771] chnl_net:caif_netlink_parms(): no params data found [ 286.850273][T13840] __nla_validate_parse: 9 callbacks suppressed [ 286.850294][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2313'. [ 287.055333][T13840] hsr_slave_1 (unregistering): left promiscuous mode [ 287.094397][T13846] tipc: Enabling of bearer rejected, media not registered [ 287.106808][T13853] netlink: 'syz.2.2317': attribute type 10 has an invalid length. [ 287.115680][T13853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2317'. [ 287.168276][T13853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.183672][T13853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.194294][T13853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.207334][T13853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.235949][T13857] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2319'. [ 287.268886][T13853] team0: Port device geneve0 added [ 287.302126][T13859] delete_channel: no stack [ 287.390141][T13771] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.397429][T13771] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.421110][T13771] bridge_slave_0: entered allmulticast mode [ 287.442452][T13771] bridge_slave_0: entered promiscuous mode [ 287.467609][T13771] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.477611][T13771] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.486857][T13771] bridge_slave_1: entered allmulticast mode [ 287.504980][T13771] bridge_slave_1: entered promiscuous mode [ 287.576395][T13870] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2323'. [ 287.632530][T13870] xt_CT: You must specify a L4 protocol and not use inversions on it [ 287.679853][T13771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.722352][T13771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.824066][T13879] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2327'. [ 287.844716][T13881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2328'. [ 287.855441][T13879] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2327'. [ 287.934805][T13771] team0: Port device team_slave_0 added [ 287.959879][T13771] team0: Port device team_slave_1 added [ 288.018183][T13888] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 288.111748][T13771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.131657][T13771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.171617][T13771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.198999][T13771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.216357][T13771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.230554][T13902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2335'. [ 288.254430][T13771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.355384][T13902] netlink: 'syz.2.2335': attribute type 1 has an invalid length. [ 288.371477][T13902] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2335'. [ 288.377296][T13771] hsr_slave_0: entered promiscuous mode [ 288.398313][T13771] hsr_slave_1: entered promiscuous mode [ 288.457840][ T5832] Bluetooth: hci1: command tx timeout [ 289.029057][T13939] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 289.045567][T13939] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 289.352462][T13952] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2350'. [ 289.448666][T13771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 289.482506][T13771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 289.526606][T13771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 289.579137][T13771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 289.754259][T13771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.822995][T13771] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.950633][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.957952][ T7440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.015782][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.023061][ T7440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.196730][T14010] netlink: 'syz.4.2362': attribute type 10 has an invalid length. [ 290.266733][T14010] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 290.340931][T14015] netlink: 'syz.2.2365': attribute type 1 has an invalid length. [ 290.363971][T14015] netlink: 'syz.2.2365': attribute type 1 has an invalid length. [ 290.443293][T14018] netlink: 'syz.1.2366': attribute type 39 has an invalid length. [ 290.494800][T14024] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 290.543128][ T5832] Bluetooth: hci1: command 0x040f tx timeout [ 290.756597][T14029] vxcan1: MTU too low for tipc bearer [ 290.768301][T14029] tipc: Enabling of bearer rejected, failed to enable media [ 290.833890][T13771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.950220][T13771] veth0_vlan: entered promiscuous mode [ 290.988817][T14039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.029161][T13771] veth1_vlan: entered promiscuous mode [ 291.081495][T14047] openvswitch: netlink: IPv6 tunnel dst address is zero [ 291.162888][T13771] veth0_macvtap: entered promiscuous mode [ 291.227535][T13771] veth1_macvtap: entered promiscuous mode [ 291.313451][T13771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.395254][T13771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.450854][T13771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.466637][T13771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.497897][T13771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.507203][T13771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.787339][ T7413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.795416][ T7413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.910188][ T7440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.924359][ T7440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.158235][T14094] __nla_validate_parse: 5 callbacks suppressed [ 292.158251][T14094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2384'. [ 292.217723][T14093] tap0: tun_chr_ioctl cmd 2148553947 [ 292.328056][ T30] audit: type=1800 audit(1751448369.518:7): pid=14077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2377" name="cgroup.controllers" dev="tmpfs" ino=2592 res=0 errno=0 [ 292.572069][T14103] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2387'. [ 292.632108][T14103] tipc: Trying to set illegal importance in message [ 292.721853][T14105] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 292.734063][T14106] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2388'. [ 292.772188][T14105] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.782635][T14105] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 292.804957][T14115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2390'. [ 292.810013][T14111] vlan2: entered allmulticast mode [ 292.822481][T14111] bond4: entered allmulticast mode [ 292.850552][T14105] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 292.878099][T14105] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 292.878846][T14115] netlink: 'syz.2.2390': attribute type 10 has an invalid length. [ 292.886376][T14105] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 292.903565][T14105] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 292.911953][T14105] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 292.921431][T14105] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 292.930524][T14105] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 292.956042][T14111] vlan2: entered allmulticast mode [ 292.983913][T14118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.132854][ T7413] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.206252][T14111] vlan2: entered allmulticast mode [ 293.366626][T14111] vlan2: entered allmulticast mode [ 293.462301][ T7413] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.492673][T14111] vlan2: entered allmulticast mode [ 293.686137][ T7413] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.740667][ T7413] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.850357][ T7413] bridge_slave_1: left allmulticast mode [ 293.856054][ T7413] bridge_slave_1: left promiscuous mode [ 293.862224][ T7413] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.874960][ T7413] bridge_slave_0: left allmulticast mode [ 293.881658][ T7413] bridge_slave_0: left promiscuous mode [ 293.887600][ T7413] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.289860][T14131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2392'. [ 294.322794][ T7413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.353955][ T7413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.390616][ T7413] bond0 (unregistering): Released all slaves [ 294.452714][T14135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2394'. [ 294.472077][T14132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2393'. [ 294.823381][T14146] pimreg: entered allmulticast mode [ 294.848597][T14153] pimreg: left allmulticast mode [ 294.973801][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 294.983735][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 294.992605][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 295.006489][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 295.016876][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 295.161624][ T7413] hsr_slave_0: left promiscuous mode [ 295.176852][ T7413] hsr_slave_1: left promiscuous mode [ 295.186758][ T7413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.194756][ T7413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.203489][ T7413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.211132][ T7413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.233798][ T7413] veth1_macvtap: left promiscuous mode [ 295.240419][ T7413] veth0_macvtap: left promiscuous mode [ 295.246144][ T7413] veth1_vlan: left promiscuous mode [ 295.251710][ T7413] veth0_vlan: left promiscuous mode [ 295.664800][T14169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2405'. [ 295.677004][T14169] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2405'. [ 295.919949][T14176] openvswitch: netlink: Key type 29 is not supported [ 296.071741][ T7413] team0 (unregistering): Port device team_slave_1 removed [ 296.117199][ T7413] team0 (unregistering): Port device team_slave_0 removed [ 296.690147][T14185] ipt_REJECT: TCP_RESET invalid for non-tcp [ 296.927426][T14191] ip6gre2: entered allmulticast mode [ 297.011432][T14196] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2413'. [ 297.055959][ T7440] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.070285][ T7440] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.078582][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.118122][T14159] chnl_net:caif_netlink_parms(): no params data found [ 297.127081][ T5836] Bluetooth: hci1: command tx timeout [ 297.346549][T14208] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 297.377819][T14208] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 297.460962][T14216] tc_dump_action: action bad kind [ 297.471828][T14214] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 297.480552][T14216] __nla_validate_parse: 1 callbacks suppressed [ 297.480572][T14216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2419'. [ 297.518118][ T5936] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 297.521738][T14216] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2419'. [ 297.556765][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2419'. [ 297.602068][T14159] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.628066][T14159] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.635426][T14159] bridge_slave_0: entered allmulticast mode [ 297.663176][T14159] bridge_slave_0: entered promiscuous mode [ 297.682640][T14159] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.701191][T14159] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.711003][T14159] bridge_slave_1: entered allmulticast mode [ 297.726572][T14159] bridge_slave_1: entered promiscuous mode [ 297.738610][T14230] validate_nla: 29 callbacks suppressed [ 297.738632][T14230] netlink: 'syz.2.2423': attribute type 1 has an invalid length. [ 297.777607][T14230] 8021q: adding VLAN 0 to HW filter on device bond7 [ 297.837127][T14230] ip6erspan0: entered promiscuous mode [ 297.862645][T14230] bond7: (slave ip6erspan0): making interface the new active one [ 297.873092][T14230] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 297.954662][T14239] netlink: 'syz.4.2426': attribute type 1 has an invalid length. [ 297.965400][T14159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.980541][ T5936] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 298.090495][T14239] 8021q: adding VLAN 0 to HW filter on device bond5 [ 298.115740][T14159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.169755][T14250] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2429'. [ 298.200396][T14240] 8021q: adding VLAN 0 to HW filter on device bond5 [ 298.209299][T14240] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 298.222833][T14240] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 298.267583][T14239] gretap2: entered promiscuous mode [ 298.273902][T14251] SET target dimension over the limit! [ 298.279672][T14239] bond5: (slave gretap2): making interface the new active one [ 298.280293][T14239] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 298.300001][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2431'. [ 298.374460][T14159] team0: Port device team_slave_0 added [ 298.405304][T14159] team0: Port device team_slave_1 added [ 298.544599][T14159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.568457][T14159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.625764][T14159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.646870][T14268] netlink: 'syz.3.2435': attribute type 1 has an invalid length. [ 298.655169][T14268] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2435'. [ 298.671177][T14159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.688947][T14267] netlink: 'syz.3.2435': attribute type 1 has an invalid length. [ 298.696899][T14159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.729762][T14267] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2435'. [ 298.736516][T14159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.755198][T14266] 8021q: VLANs not supported on ip6_vti0 [ 298.787891][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2437'. [ 298.930716][T14284] netlink: 'syz.2.2439': attribute type 4 has an invalid length. [ 298.949552][T14286] sctp: [Deprecated]: syz.3.2440 (pid 14286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.949552][T14286] Use struct sctp_sack_info instead [ 298.985784][T14159] hsr_slave_0: entered promiscuous mode [ 298.994548][T14159] hsr_slave_1: entered promiscuous mode [ 299.124968][T14297] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2443'. [ 299.179080][ T5836] Bluetooth: hci1: command 0x041b tx timeout [ 299.455399][T14306] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2446'. [ 299.684400][T14303] netlink: 'syz.2.2444': attribute type 1 has an invalid length. [ 299.707173][T14303] netlink: 'syz.2.2444': attribute type 1 has an invalid length. [ 299.728602][T14303] netlink: 'syz.2.2444': attribute type 2 has an invalid length. [ 299.814923][T14159] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 299.847166][T14159] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 299.865720][T14159] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 299.898086][T14159] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 300.107257][T14159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.176605][T14159] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.244925][ T7425] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.252135][ T7425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.303157][ T7435] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.310440][ T7435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.690436][ T7425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.696092][T14352] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 300.723326][ T7425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.750428][ C0] ------------[ cut here ]------------ [ 300.756034][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 300.767317][ C0] WARNING: CPU: 0 PID: 14356 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 300.777546][ C0] Modules linked in: [ 300.781590][ C0] CPU: 0 UID: 0 PID: 14356 Comm: syz.1.2461 Not tainted 6.16.0-rc3-syzkaller-00133-g42fd432fe6d3 #0 PREEMPT(full) [ 300.787972][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 300.793724][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.811645][ C0] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 300.817981][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 52 18 a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 300.837708][ C0] RSP: 0000:ffffc90000007758 EFLAGS: 00010246 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 300.843832][ C0] RAX: 5d696dbee4a65900 RBX: 000000000000000c RCX: ffff88807e0b8000 [ 300.851967][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 300.860039][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 300.868111][ C0] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff8880535fe2a8 [ 300.876150][ C0] R13: 0000000000000000 R14: ffff88806f158e40 R15: ffff88806f15b0d8 [ 300.884235][ C0] FS: 000055557ec4e500(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 300.893370][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 300.900047][ C0] CR2: 00007fbc165b20c0 CR3: 00000000351e4000 CR4: 00000000003526f0 [ 300.908129][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 300.916162][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 300.924238][ C0] Call Trace: [ 300.927564][ C0] [ 300.930539][ C0] rate_control_send_low+0x194/0x7a0 [ 300.935904][ C0] rate_control_get_rate+0x20b/0x5d0 [ 300.941321][ C0] ieee80211_beacon_get_finish+0x38c/0x6b0 [ 300.947197][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 300.953685][ C0] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 300.959340][ C0] ? __ieee80211_beacon_get+0xfc9/0x17b0 [ 300.965033][ C0] ? __ieee80211_beacon_get+0x36/0x17b0 [ 300.970696][ C0] ? __ieee80211_beacon_get+0x36/0x17b0 [ 300.976314][ C0] __ieee80211_beacon_get+0x1033/0x17b0 [ 300.981997][ C0] ? __ieee80211_beacon_get+0x36/0x17b0 [ 300.987622][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 300.993185][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 300.999380][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 301.005003][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 301.012319][ C0] __iterate_interfaces+0x2ab/0x590 [ 301.017575][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 301.023768][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 301.031096][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 301.037244][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 301.044456][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 301.049762][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 301.055628][ C0] __hrtimer_run_queues+0x529/0xc60 [ 301.061012][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 301.066803][ C0] ? read_tsc+0x9/0x20 [ 301.070977][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 301.076857][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 301.082074][ C0] handle_softirqs+0x286/0x870 [ 301.086917][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 301.091798][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 301.097166][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 301.102492][ C0] __irq_exit_rcu+0xca/0x1f0 [ 301.107157][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 301.112504][ C0] irq_exit_rcu+0x9/0x30 [ 301.116805][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 301.122571][ C0] [ 301.125543][ C0] [ 301.128560][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.134608][ C0] RIP: 0010:__page_table_check_ptes_set+0x153/0x2f0 [ 301.141323][ C0] Code: 00 00 6c 49 39 c7 75 1d e8 fa 55 91 ff eb 10 e8 f3 55 91 ff 90 0f 0b 90 eb 10 e8 e8 55 91 ff 90 0f 0b 90 eb 05 e8 dd 55 91 ff <31> ff 89 ee e8 14 5a 91 ff 41 89 ef 85 ed 0f 84 a6 00 00 00 48 89 [ 301.161122][ C0] RSP: 0000:ffffc900043ef9d0 EFLAGS: 00000293 [ 301.167246][ C0] RAX: ffffffff822ef7e3 RBX: 800000006c590867 RCX: ffff88807e0b8000 [ 301.175347][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 301.183437][ C0] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 301.191538][ C0] R10: dffffc0000000000 R11: fffffbfff335b024 R12: 000000006c590801 [ 301.192247][T14362] ieee802154 phy0 wpan0: encryption failed: -22 [ 301.199582][ C0] R13: 800000006c590867 R14: ffff88807c4dbd90 R15: ffff8880770e6000 [ 301.213932][ C0] ? __page_table_check_ptes_set+0xa3/0x2f0 [ 301.219955][ C0] ? folio_add_lru+0x2d0/0x3d0 [ 301.224785][ C0] do_wp_page+0x481a/0x5800 [ 301.229439][ C0] ? do_wp_page+0x161d/0x5800 [ 301.234199][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 301.239283][ C0] ? do_raw_spin_lock+0x121/0x290 [ 301.244462][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 301.249972][ C0] __handle_mm_fault+0x1144/0x5620 [ 301.255148][ C0] ? __lock_acquire+0xab9/0xd20 [ 301.260126][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 301.265645][ C0] ? lock_vma_under_rcu+0xf8/0x710 [ 301.269147][ T5151] Bluetooth: hci1: command 0x041b tx timeout [ 301.270866][ C0] ? lock_vma_under_rcu+0xf8/0x710 [ 301.281994][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 301.287636][ C0] handle_mm_fault+0x40a/0x8e0 [ 301.292539][ C0] do_user_addr_fault+0xa81/0x1390 [ 301.297759][ C0] ? rcu_is_watching+0x15/0xb0 [ 301.302597][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 301.308091][ C0] exc_page_fault+0x76/0xf0 [ 301.312652][ C0] asm_exc_page_fault+0x26/0x30 [ 301.317544][ C0] RIP: 0033:0x7fbc16261865 [ 301.322065][ C0] Code: c3 0f 1f 40 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 b0 00 00 00 48 c1 e2 04 48 8d 0d 5e 08 35 00 48 01 ca 02 01 48 89 42 08 49 8d 6c 24 10 4c 8d 74 24 08 49 bd 00 00 00 [ 301.341801][ C0] RSP: 002b:00007ffface0e030 EFLAGS: 00010206 [ 301.347963][ C0] RAX: 0000000000000003 RBX: 00000000000496a8 RCX: 00007fbc165b20c0 [ 301.355988][ C0] RDX: 00007fbc165b20c0 RSI: 0000000000000080 RDI: 00007fbc165b5fa0 [ 301.364090][ C0] RBP: 0000000000000032 R08: 00007fbc165b5fa0 R09: 00000001ace0e36f [ 301.372172][ C0] R10: 00007ffface0e170 R11: 0000000000000246 R12: 00007fbc165b5fa0 [ 301.380267][ C0] R13: 00007fbc165b5fa0 R14: 00000000000496da R15: 00007ffface0e190 [ 301.388417][ C0] [ 301.391504][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 301.398821][ C0] CPU: 0 UID: 0 PID: 14356 Comm: syz.1.2461 Not tainted 6.16.0-rc3-syzkaller-00133-g42fd432fe6d3 #0 PREEMPT(full) [ 301.410924][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.421024][ C0] Call Trace: [ 301.424612][ C0] [ 301.427529][ C0] dump_stack_lvl+0x99/0x250 [ 301.432182][ C0] ? __asan_memcpy+0x40/0x70 [ 301.436823][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.442074][ C0] ? __pfx__printk+0x10/0x10 [ 301.446726][ C0] panic+0x2db/0x790 [ 301.450692][ C0] ? __pfx_panic+0x10/0x10 [ 301.455197][ C0] __warn+0x31b/0x4b0 [ 301.459234][ C0] ? __rate_control_send_low+0x5df/0x820 [ 301.464912][ C0] ? __rate_control_send_low+0x5df/0x820 [ 301.470588][ C0] report_bug+0x2be/0x4f0 [ 301.474964][ C0] ? __rate_control_send_low+0x5df/0x820 [ 301.480639][ C0] ? __rate_control_send_low+0x5df/0x820 [ 301.486322][ C0] ? __rate_control_send_low+0x5e1/0x820 [ 301.492104][ C0] handle_bug+0x84/0x160 [ 301.496390][ C0] exc_invalid_op+0x1a/0x50 [ 301.500955][ C0] asm_exc_invalid_op+0x1a/0x20 [ 301.505845][ C0] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 301.512226][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 52 18 a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 301.531890][ C0] RSP: 0000:ffffc90000007758 EFLAGS: 00010246 [ 301.538015][ C0] RAX: 5d696dbee4a65900 RBX: 000000000000000c RCX: ffff88807e0b8000 [ 301.546041][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 301.554067][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 301.562096][ C0] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff8880535fe2a8 [ 301.570133][ C0] R13: 0000000000000000 R14: ffff88806f158e40 R15: ffff88806f15b0d8 [ 301.578217][ C0] ? __rate_control_send_low+0x5de/0x820 [ 301.583911][ C0] rate_control_send_low+0x194/0x7a0 [ 301.589250][ C0] rate_control_get_rate+0x20b/0x5d0 [ 301.594558][ C0] ieee80211_beacon_get_finish+0x38c/0x6b0 [ 301.600405][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 301.606775][ C0] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 301.612364][ C0] ? __ieee80211_beacon_get+0xfc9/0x17b0 [ 301.618019][ C0] ? __ieee80211_beacon_get+0x36/0x17b0 [ 301.623606][ C0] ? __ieee80211_beacon_get+0x36/0x17b0 [ 301.629189][ C0] __ieee80211_beacon_get+0x1033/0x17b0 [ 301.634767][ C0] ? __ieee80211_beacon_get+0x36/0x17b0 [ 301.640345][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 301.645827][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 301.651928][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 301.657498][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 301.664722][ C0] __iterate_interfaces+0x2ab/0x590 [ 301.669942][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 301.676033][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 301.683249][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 301.689334][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 301.696408][ C0] mac80211_hwsim_beacon+0xbb/0x1c0 [ 301.701631][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 301.707455][ C0] __hrtimer_run_queues+0x529/0xc60 [ 301.712699][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 301.718446][ C0] ? read_tsc+0x9/0x20 [ 301.722533][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 301.728362][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 301.733491][ C0] handle_softirqs+0x286/0x870 [ 301.738277][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 301.743067][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 301.748386][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 301.753709][ C0] __irq_exit_rcu+0xca/0x1f0 [ 301.758326][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 301.763557][ C0] irq_exit_rcu+0x9/0x30 [ 301.767818][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 301.773473][ C0] [ 301.776417][ C0] [ 301.779363][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.785361][ C0] RIP: 0010:__page_table_check_ptes_set+0x153/0x2f0 [ 301.791968][ C0] Code: 00 00 6c 49 39 c7 75 1d e8 fa 55 91 ff eb 10 e8 f3 55 91 ff 90 0f 0b 90 eb 10 e8 e8 55 91 ff 90 0f 0b 90 eb 05 e8 dd 55 91 ff <31> ff 89 ee e8 14 5a 91 ff 41 89 ef 85 ed 0f 84 a6 00 00 00 48 89 [ 301.811591][ C0] RSP: 0000:ffffc900043ef9d0 EFLAGS: 00000293 [ 301.817680][ C0] RAX: ffffffff822ef7e3 RBX: 800000006c590867 RCX: ffff88807e0b8000 [ 301.825663][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 301.833651][ C0] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 301.841637][ C0] R10: dffffc0000000000 R11: fffffbfff335b024 R12: 000000006c590801 [ 301.849626][ C0] R13: 800000006c590867 R14: ffff88807c4dbd90 R15: ffff8880770e6000 [ 301.857630][ C0] ? __page_table_check_ptes_set+0xa3/0x2f0 [ 301.863561][ C0] ? folio_add_lru+0x2d0/0x3d0 [ 301.868345][ C0] do_wp_page+0x481a/0x5800 [ 301.872886][ C0] ? do_wp_page+0x161d/0x5800 [ 301.877594][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 301.882465][ C0] ? do_raw_spin_lock+0x121/0x290 [ 301.887506][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 301.892905][ C0] __handle_mm_fault+0x1144/0x5620 [ 301.898049][ C0] ? __lock_acquire+0xab9/0xd20 [ 301.902949][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 301.908432][ C0] ? lock_vma_under_rcu+0xf8/0x710 [ 301.913573][ C0] ? lock_vma_under_rcu+0xf8/0x710 [ 301.918702][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 301.924267][ C0] handle_mm_fault+0x40a/0x8e0 [ 301.929064][ C0] do_user_addr_fault+0xa81/0x1390 [ 301.934201][ C0] ? rcu_is_watching+0x15/0xb0 [ 301.938987][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 301.944378][ C0] exc_page_fault+0x76/0xf0 [ 301.948904][ C0] asm_exc_page_fault+0x26/0x30 [ 301.953770][ C0] RIP: 0033:0x7fbc16261865 [ 301.958199][ C0] Code: c3 0f 1f 40 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 b0 00 00 00 48 c1 e2 04 48 8d 0d 5e 08 35 00 48 01 ca 02 01 48 89 42 08 49 8d 6c 24 10 4c 8d 74 24 08 49 bd 00 00 00 [ 301.977818][ C0] RSP: 002b:00007ffface0e030 EFLAGS: 00010206 [ 301.983903][ C0] RAX: 0000000000000003 RBX: 00000000000496a8 RCX: 00007fbc165b20c0 [ 301.991889][ C0] RDX: 00007fbc165b20c0 RSI: 0000000000000080 RDI: 00007fbc165b5fa0 [ 301.999881][ C0] RBP: 0000000000000032 R08: 00007fbc165b5fa0 R09: 00000001ace0e36f [ 302.007864][ C0] R10: 00007ffface0e170 R11: 0000000000000246 R12: 00007fbc165b5fa0 [ 302.015848][ C0] R13: 00007fbc165b5fa0 R14: 00000000000496da R15: 00007ffface0e190 [ 302.023848][ C0] [ 302.027212][ C0] Kernel Offset: disabled [ 302.031556][ C0] Rebooting in 86400 seconds..