last executing test programs: 18.909092669s ago: executing program 0 (id=9157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x8}, 0x408c1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 5.193487575s ago: executing program 4 (id=9257): r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) accept4(r0, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000000)=0x80, 0x80800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000040)=0x2, 0x4) 5.186358558s ago: executing program 4 (id=9260): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x8c, 0x4, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x6b7}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000680040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x60388}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0x5e}, 0xfffffffffffffffd, 0x0, 0x480000000, 0x42, 0x29, 0x100000001, 0x5, 0x9}}], 0x58}, 0x0) 4.268174882s ago: executing program 4 (id=9265): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a0000000000000000000000000000000000ffffac1e00010000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000ff02000000000000000000479e00a84bb27c00000000000005001900000000000a"], 0xc8}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x3, 0x7, 0x3, 0x7, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_ident={0x2, 0xa, 0x4, 0x0, 0x4}, @sadb_sa={0x2, 0x1, 0x4d6, 0xb1, 0xc0, 0x4f, 0x3, 0x60000001}]}, 0x38}}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 4.153567469s ago: executing program 4 (id=9266): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r1, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0x5}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3f}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) vmsplice(r2, &(0x7f0000002500)=[{&(0x7f0000000040)="f153d78eddeb6604f5ff57c1077032a726fec4b94848febfed8dccaea6f9872d29a2311fd03c66d8c2a0ccd7ad2ad158c8c3a101c5bea9a503db166e329ca03ad8bcdea3f010a89644df1ebfcd25ad29bb60701a26680417d878e9faf95b79bfb73391733abbbeafa883a2917a645399a35c3ccc7034e8d5bda8", 0x7a}, {&(0x7f0000000100)="e0783cc51db5cb432b4376cbbbabea1f4fe0eeb7dc75a3e0bb29ab947caff464c83bf92c8935188a2b56cd2b9a502660bf88d8a5d4db59491ab426536bd7e1fd5e6de0d4b99ad836ac8ba85b53b79f2df336e1c1b18851d08175ef34a9d9f8ba843583325100fec8069de39b8c11555483d65e8df2a6c157e265e26f", 0x7c}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000180)="ed2e44f5f4175158a640a427ac622410753ec3d313b09cdfbcf4a3b1acb22e28d1c4c7abf91f500c3cfd298975f388a963231d67e4613c982a1ca72e5fe983c1228a109a602059ea849d20f0047aa52d112d5f1bbb36217da78559cbfb81681eba3fbd3f14522be1ddbad6c58734c348ff0978dce5c79db658dc3cde", 0x7c}, {&(0x7f0000001280)="39cd0f54d3ca403e0f51298aa4592507cf61b9357ecd032878a75fee0bd95983209ff75fd13314f6bc6b7af510a93b8fe2adcedfedf032ffe70a2e9d0119421c7b04310574187aa75fcb88f193f59dceab2746f8bbaa8f9d87e382527d4c543cee2dbe125d131052c90b48b3b733670a1a42ae93aaf6a8e86833b70e52953fd135a0cf3b758335f4f1a893ceae4c01a1700b59fd458330b8eb38d60aaab4824c7ed0f18412b1170aa57a92aa315fcd0d6ee5b0891016e00dea0743c93d87ad2ed18a40ed0dc2", 0xc6}, {&(0x7f0000001380)="1876d1b2a9cecc02589993899126e9eb9857a01d0eb86844ab3d434a51de3de1c719ed224591a9e39075343fbd10de025bf0287600b4287d22408bf8ee70fd217c4ca29d398a9a1123c9fce0d7c62a54bb85105f9892df718c7b337688f0848199e0bf52d69b528deb0ac49ef1fcee2f48eea5cd054416d5e32bd7e3e38460736fa34f20f566b4384736bb5219b239de7977a8cdc2b94495f30c26a723d5af4a29adaedc", 0xa4}, {&(0x7f0000001440)="0e2729209034129e88a693766801db25ca80b971fa6bd44b7719864f420614d92d9014c0904879c5bb051359a76f4393c8c9d2252511798012e2f91fb5b471ff3527372143a2a028df97e6ed6e", 0x4d}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="9dece0898f254a0ddab5217e3eaea5b3c8f8c15be15e113bd514924c09c114244f42314f493e32a020aa6aaf25a319df6580d6be8d77fc", 0x37}], 0x9, 0x6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000000a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30"], 0xfc}}, 0x0) 3.706248799s ago: executing program 3 (id=9272): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30}, {0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x24, 0x0, 0x0, 0xff, 0x11, 0x0, @remote, @broadcast=0xe0000001}, {0x4e21, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x0, @val=0x80}}}}}}}, 0x0) 3.675869415s ago: executing program 4 (id=9273): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000013c0)={0xffff, 0x7, 0x0, 0xfffff164, 0x7, 0xef2, 0x6, 0x5, 0x0}, &(0x7f0000001400)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001440)={0x0, 0xd}, &(0x7f0000001480)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000014c0)={0x1000, 0x1000, 0x1, 0xfffffffd, 0xc, 0xd6, 0x1, 0x5, 0x0}, &(0x7f0000001500)=0x20) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={r6, 0x1}, 0x8) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000004c0)={r8, 0x3, 0x3, "2a9a9e"}, 0xb) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x3374, 0x6, r11}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001dc0)={0x0, 0x8, 0x3}, &(0x7f0000001e00)=0x8) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r13, 0x84, 0x83, &(0x7f0000000000)={r14, 0x2}, 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f00000002c0)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000340)="0dbfe15649a9d65da39277c0a55c3e6b4ab99e4d", 0x14}, {&(0x7f0000000480)="2cadf9dae28566c6e0aac071dc9a27279418a5c152fdff448aa5bee2d8881a759a7131aef88f2d1549ff19d5726df2eadad86edee053a633e7ac89498dbae2b1d16afdac37377f8675b6c748af54b3f28958dd1fa3c40c3f093233ba5b3aa15aef161860e42a5c03f926681e9eac4a547a0d6add4f95c1b7b5bbe3ac5f0a67ef10bf87a5d38e093a5217537746545668418e47d6ccc22fd7ba7c56360b889705eecc1e1e33b30bf3d5f55f4adbd7ef7197424083de1e4985b165752d35991714f525f065da", 0xc5}, {&(0x7f0000000580)="0807352937e70edac0372a50b6a74ff610d8177f2e90518a69ea4c03dccbe9e7601e9afb66d18478327f0bf07a9a19d34eca0a010d5d73b51d96293589f59a49f4727c523767ce914328d3bfe49a6669a747453d0b166d2033eac20c22bd83166e2f515fe2cd5824dec0ba97495559f50cf896e61d1b3843a2d508aa38203fba2edbc649e04310770782f7c88ed7dffb35499e038a27b9f508d847b7360404ff136b142bc6ce050847e6a869f2e5d6eeda2f33a3a394c0343a8032da56344d067f10446bfe0ee62740d62b16307fa3fa3e5434a7891d73d62a2f79d3a324ab62", 0xe0}, {&(0x7f0000000380)="f8504e3aa1edca96faca7dfca58725bf03db768d13a78d9bc4a8b503bef77fa583f596cb8dea72d991d2d2c7e4570865a525fc38b5a137f69bffe4801e67dbce6156528f306fc9a865afa1e05c25850a90539aa16c7ffe5e675c710cb2934b8e07fba7303214f01130b3c212b855f50acb62b49446e27e4f682b3d11f2626f", 0x7f}, {&(0x7f0000000680)="c6bb989e668ff4a349510e03306611d7e88373d33279dc08f9216e03cbd9ed30c7f195e6344cc850955faa05e77a13367d083d25005dd94ef59ec0a6f6bb7a9db24f4e0eae9a99b435488ea4d14dedb4e044a07a7894a0f820fa20edf404a511957f9b0ca95e122efc6835b2095ad125e1c0b7913e83634db00619b0069de4fc3c0ffd2f084e1c98b063b5959acfda32f2a82ab7062a7b242681f6ccf0435db026cb0720116beb596a6cb97adb2b", 0xae}], 0x5, 0x0, 0x0, 0x4004010}, {&(0x7f0000000400)=@in6={0xa, 0x4e24, 0x8b1, @remote, 0x6}, 0x1c, &(0x7f0000000a80)=[{&(0x7f00000007c0)="19bb94b65184d0e667430b39afc0813c85a5f6bd180979c4a113bc26580555eb614da21ac08a1e42b3708e557d0dcf06107a3422ca7aee7e4a00512483ea6a6cbf8c31b12c9e2bcde35b61b5f3de23f37722cc6f380dcde64aa47d0e2b1069d6beeade541d813ab17b050e4c66f8bf4173b45e4608eb33c7910ad28239d0bbbd57384cb6bdf53030ba0c052261340fdef55215071884da22c149d82270155397336db7961079533a143659c83a8806113a2dab3c634e09270cb63218d676c084209caf7620aac695a938fbf01160701d60fb155b25ff94e6f2705b", 0xdb}, {&(0x7f00000008c0)="ecc11fa770ecc9be462a137384c5b27888482dc3d64a6d315208c86d528fa9bdbdb1e70991234f1ab66328248f46479388b25815601cdb1088ac5df556b3c64a852af18964ee3cbe8c6e5a6ca1a698329628", 0x52}, {&(0x7f0000000940)="fa232530433eeb25308c73a8ceeb91989bfe99db45d1da30c1ee2b501a0da0e85637372e7f6885c8e1b351457f6583d560bb", 0x32}, {&(0x7f0000000980)="8e7bd692ff3d401d98d0a33349284c9c650f4cf1cbb661eb7f85a7c0b557a5e28d4ca370e9c9c55e06a8464fe7240707193d80d854da1118d717c119d2f2710beab2dfbf57bcdea42c9317bc7e8a8d8ab71d737ec998625406d9ed51321ec9a7d95b0440c7701074ba692b54486d987a76edd97568a500693d5b1c03502aa5a57b720c67afe7651abe87dc22f624906b0bd42b150335dcd5f834dd86510b164f45d86a8198f7d955614bbe27be1ef4e856d14e474c720eadd9da0b2c0d1e6e38d228fc77c53135df94", 0xc9}], 0x4, &(0x7f0000000b40)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @sndrcv={0x30, 0x84, 0x1, {0xfffe, 0x2c4, 0xb, 0x2, 0x9, 0x61c5, 0x7fffffff, 0x2}}, @sndinfo={0x20, 0x84, 0x2, {0xfffc, 0x2, 0x3, 0xf}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x375b}}, @init={0x18, 0x84, 0x0, {0x3a4, 0x9, 0xffff, 0x144}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x6f}}], 0xf8, 0x4004881}, {&(0x7f0000000c40)=@in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffe}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000c80)="dc53322518caaa9c7e611651ff857c4696260e7fca733df1f4514f3ace3c1da515ad460e8abcea14d79e1b47238b4b7c0a8e95e289799372f49ecd65ab5bf5f2f292e34fdc7f053516f6db7fc236d07c15e054dde44ff6399af03dbea2aafe1b9dd2e98890d13cda72b4d8f58365e297643f7f747c7ca45ff090773f9c1ca812d241fa972e39c5889045342304c61c344b73ae4a10", 0x95}, {&(0x7f0000000d40)="b89cf59cc82c25d78e8f3e62c071604449c77c6421653a62935efce9ffaca42f0eedb6e33c7ade597b8f5b2ac5f0a31b234bf0629f7ae3ab4f119fe1620ed4a58328d974bc7717c981f34393e98c8e8294728c2e4e4a758620b06ce5c036ff4d72d0f52d55549716d0160a01afd717946cb26386ec16024568ec3ef053c3b13805eac64c1f70005b90d60c80cb2f8846bc933de91a757f856ba7a05118659d26d091b02ccac8de3396cf1d0980f9ebbb97a00e69b8cc5970d9a1824402dae4a2f1af955859b9d60ed719d1226fd309d3d36730ed64cb13527db2e3ccd3baa01af1ab7b8e45c9b095b50cb08131", 0xed}], 0x2, 0x0, 0x0, 0x4890}, {&(0x7f0000000e80)=@in={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000ec0)="d6dc474b63724e51bf3629b21c1378c0680f696e6ab028c79aad513149768d1a08ea17ab36e8149f2d24c27b69904de73e3569201dbf3f93704f9ff568bb55fcf348", 0x42}, {&(0x7f0000000f40)="e96b80a437684d9f89545e9fca4f185d93c3c64698e9bd4710ace274b29c61265778672ec85b58c93f49b2ea267184efecf066d6a1b53d8d3429b0fa31370b88945850a3fe567935f631c6fb109d23a43aabd520c181d157b6af961d19073769b087b6f3eede19cd194e08cc8a6235c30cc79a0fad776204080195ded5006d34e5999c96ac", 0x85}, {&(0x7f0000001000)="23a1fe2981712900c4c06d89bdce77b80df29f1a9046bb234aef3afbc5b943a5de17eead", 0x24}, {&(0x7f0000001040)="2a95bbc6fdb94d88d2a63db85d42009e685e42a40ef1f6d382e018afecd4f7e51d4cfbdf22fb119c67f409fb264ba7cdaeea24a4443f0c41c2c1b52936b1fce9ec308042d8f2ad52c09db452ad5b69b494cb0a4f60393d58915e571e291920448dc34c2bf2047bb2141bee76c3d92de2765a7cc373eac8f7aafdf4e95c530b17f181813d58d1e3", 0x87}, {&(0x7f0000001100)="a1e92cced1c1958fce5275ab46386566a9e52712fab8ffcc2742dd3181eaecc12580117196bdd411206c0c1f0ff3a14de405ebb530d84e74b1368d0b824acc319f3a1fcfcfca2202fc1b5ec0e67d4dca542005de319043416565cb1ef28191620cbc74a807dcd0a015d8d326e49f096939bc67f9c3dd8a40546f33e68150e3b348cfba06987d29acdabea1e15c3e3867ff96713350d7b83980b27717c5c93bb3cd7c7b002775970019cf99c2150348e3834ec4d7e05dda5e6b56", 0xba}, {&(0x7f00000011c0)="1df30512e8dacb48af55d7ad345a4bce7810b6c425d536e3731a538a050c99cbe0b29da02dfa716483b7dc150b621cb798c68ddc57862c4897939e211770c51b116d3718fc", 0x45}], 0x6, &(0x7f00000020c0)=ANY=[@ANYBLOB="18000000000000008400000005000000300000000600000030000000000000008400000001000000feff02000200000003000000050000000100010005000000ffff0000", @ANYRES32=0x0, @ANYBLOB="200000000000000084000000020000002f080c8008000000cd050000", @ANYRES32=r2, @ANYBLOB="200000000000000084000000080000000000000000000000000000000000000030000000000000008400000001000000ffff97000b000000010000800e00000026ffffffff0f000003000000", @ANYRES32=r3, @ANYBLOB="20000000000000008400000008000000200100000000000000000000000000022000000000000000840000000200000005000a000300000009000000fed8627f32699c067461f5fc592437817eba22d4c11f9e7a1ba1c19a6c91c4332f0a101aee247d4e740069ebaf3e90293745b2682702867616cc93ad3fdf3dfe4262590ac756709bab48a07cc6608a338691c8f8dbf788fabd70cb911ec328bac2687968c20f8986f417a7bdef2eb74328f03714cfe6f526fb59653fff286afc5b796087dfee767b1961f198f1d61325ad2b6e65c7b7e0514809f657b653c8ce11f5443b5e0d34", @ANYRES32=r4], 0xf8, 0x40004}, {&(0x7f0000001640)=@in={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001680)="cfa0bc38e98255a9489a883abeeb0c06477fa13f488453e05ccc7f096ddbe329e75d5e860ca6a95196922c9b5902bb9e02e4c721b7a03551bca74cf998269f06c9fbc74e3041c97107443749f7ea97a2e81d45fc3acc4d9df4ba9e44d9afc6a8fc7c", 0x62}, {&(0x7f0000001700)="3f8c4be60c081de4e055b8ac8c84530f6fb0bbcba8018e47c88e2a67ed82e98154fa1c760002101e4dda838bd555ed0e2dfa9c9bfae3e60b3b1af57fb2c220b5a24570877dc4aeea19851efb64d64590301c44c01fd0ae79d3fd1ad2d97958faf85a888dbf2119ba3d10e60fd69f70e4cb106cdf5bbf6bf50affaa05a00df960664eff2f7af8a80b1da54722d3bd72c507f420b1401d3df78a8070cc9854d31857b5b90680c509618e9b04561f38949fee7732ff4de8b7937673235c77457c20476db72ce6e26394ce6c36e99e70c8", 0xcf}, {&(0x7f0000001800)="a7c54808a6eaab40a6582780592a1bc2ce79346b750265386bb2e1773e83ca96c1ad5dfd37a0cd59c9cf762f3c4498de4deb5eec5b5833cc0204856d67093b58d1ac2d4505fa5052f63e69de5a6a6dabc6a5b884b38546b5b851a045f08b0ebd34eb863b85affd586c88339fef542ad2d1879704d7a61cba6e68c5c360cba3491a10a5cb32cf52ee5a69cdc1cede8632899382ea1d3c7cc5549ca28b3490016b13a81a8ea91c5d6c0bdd918ee2d63b481749b37e20baa2db5b96", 0xba}, {&(0x7f00000018c0)="f30275bb0c193e3cf746a5efcadd5ee2f63ee76152bf8cf5c9aed8a20d1087ea11e84dae4d43e37cedff06df04a5ec92e0f0bc65b953451f434039132b35294ab0d22ad7bf3311e173ed02bf1f3823d5a7d8ca060a", 0x55}], 0x4, &(0x7f0000000ac0)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x20c, 0xd, 0x80000001, r6}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x1e}}, @authinfo={0x18, 0x84, 0x6, {0x8}}], 0x78, 0x20002000}, {&(0x7f0000001a00)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000001a40)="ae445e877a165fa38f62a35857beaacd971c81a85a4bf7a8fd4d560e5c5a1d8d199b1061d648a9775bf07d65ed27f0c1", 0x30}], 0x1, &(0x7f0000001b40)=ANY=[@ANYBLOB="2000000000000002000000000001000600000002ec0492", @ANYRES32=r8, @ANYBLOB="20000000000000008400000002000000000006000000000007000000", @ANYRES32=r11, @ANYBLOB="1800000000000000840000000500000000000000d10f000020000000000000008400000008000000fc000000000000000000000000000001"], 0x78, 0x40040}, {&(0x7f0000001ac0)=@in={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001d80)=[{&(0x7f0000001bc0)="ee23b82bde82f7a74fdc7d8f737c7b224b1e4993e55d22fd64f4982297893dddf013467996807a3779f09152bda09711484b8bd80e7d6916ba0f0e1376f3a25391bb6ccc6f850025a0cc8bc2b9e1b79280322c3ab05b50c715ccca1044b876a393afc10af3af701e2d3a1a3129eb289695b23ae53781cda5096f24db83821d73105cb0bda09ef7cf912884394963ae2cb0102391e0972da5f341135824d5fbda3360743e903a71eb1bb85b7c15e614c6439ad42d69f93e246ec281aa83b2647b", 0xc0}, {&(0x7f0000001c80)="ddfc1c750c7557f68613329961993eb0f25d32a9117552f9c9edc5774aba5abdee0834fde8a443e157d057b26a53faebfe60a190590c63f558ca63f5a2e066708da676e0dee6a5c9d87a525c26a45605d846047305f8a3eff3eb17932bd0ab3649eef0920a0aec42c331d13696ac1814df992aae47b88abcd76922c0825ae967112e814c2422273f4767a8dcc32c8ac17c595192b69fff89eb8342a66ba093739e14df1ccc64b4", 0xa7}, {&(0x7f0000001d40)="5376334bb1110e18caf78abb56ba457bc41e5b350f087a5cf13d2d6b4078d7c4080e507375cb2b3f52", 0x29}], 0x3, &(0x7f0000001e40)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @authinfo={0x18, 0x84, 0x6, {0x10}}, @sndrcv={0x30, 0x84, 0x1, {0x81, 0x3, 0x8, 0xd8, 0x7, 0x9, 0x4, 0x5ac8, r12}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}], 0x80, 0x800}], 0x7, 0x8000) r15 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r16}]}, 0x3c}}, 0x880) 3.434828382s ago: executing program 3 (id=9276): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000340)={0x3, 0x80000001}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x48, 0x2c, 0x42f, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xc, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000003c0)={r4, r10, 0x5, 0x1000, &(0x7f0000000b40)="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", 0xdc, 0x5, 0xfff8, 0x5, 0x7, 0x1, 0xffffffff, 'syz0\x00'}) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) accept4$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14, 0x80000) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r13}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 3.37080262s ago: executing program 2 (id=9277): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) poll(&(0x7f00000009c0)=[{r0, 0x8011}, {0xffffffffffffffff, 0x402}], 0x2, 0x1ff) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xffffffffffffff19, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r7, &(0x7f0000000100), &(0x7f0000000080)=@tcp=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r7, &(0x7f0000000280), &(0x7f00000002c0)=""/60}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000680)={r4, 0x66, 0x1}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r0, 0x1, 0x1, 0x2}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000b00)={{0xffffffffffffffff, &(0x7f0000000740)='\'\xf5*\\^\x00', 0x24000, &(0x7f0000000780)={@align=0x5, {0x9, 0x9, 0x7, 0xff}}, 0x80000001, &(0x7f00000007c0), &(0x7f0000000940)=0x2}, 0x2, &(0x7f0000000ac0)=[{0x3, 0x8, &(0x7f0000000980)='/dev/ppp\x00', &(0x7f0000000a00)="0ab4a76aa4b59347bd2f1f5ff9a41443358ede20817fc84a51e53a51e1b5fda62e0eba81a6a2f35f2a558595c6ff97fd9b", 0x31, 0x12}, {0x1, 0x1ff, &(0x7f0000000a40)='/dev/ppp\x00', &(0x7f0000000a80)="9f32a5f1299813df84d4", 0xa, 0x1a}]}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x34, 0x28, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000003000000000000181100000d6a5b8537f73d233e4ba90d161cc45a7fb84e1f63b33ffd05caa14b9181b5034f1ee6923e3dea0730a8e618fe3bb94cd637dd336ea4c958cb2b7c9b3c7c41fec81170d46cc996c7cfa4d9c1576d82eb98f36859b9b7232987663ceef83d463e133a5fc20e5a1f2814399e18deb7a5f4c87f8342c571eaeb1dc66a4b3403a351a778e60b000000000000008290e0d7e1186cfc47075e2f", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000ad9750000000000018270000", @ANYRES32, @ANYBLOB="00000000b100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x57, &(0x7f00000005c0)=""/87, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, r5, 0x8, &(0x7f0000000400)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x2, 0x200, 0x1000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000b80)=[r7, r8, r9, r10, r11], &(0x7f0000000bc0)=[{0x2, 0x5, 0x4, 0xb}, {0x2, 0x5, 0x7, 0xa}, {0x0, 0x3, 0xd, 0x8}, {0x3, 0x5, 0x5, 0x3}, {0x1, 0x5, 0x2, 0x4}, {0x1, 0x1, 0x10, 0xa}, {0x2, 0x3, 0xc, 0x4}], 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x42}, [@NFTA_SET_ELEM_LIST_TABLE={0xfffffe68, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 3.044037336s ago: executing program 2 (id=9280): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)="fc") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000500)="d7") ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'xfrm0\x00', &(0x7f0000000000)=@ethtool_rx_ntuple={0x35, {0xc, @hdata="b2e44e6c7d544eeeab11460c870780ae54156eae11ed63db18705ef2470f37724c7681e9f66be736b3ce25bcbc27ea3077abee83a0d0ffacf0f721a63728fa8c338c0e80e72472b5", @usr_ip4_spec={@private=0xa010101, @multicast2, 0x100, 0x1, 0x1, 0xa}, 0xb, 0x3, 0x9, 0x0, 0xfffffffffffffffe}}}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r2, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x300, 0x70bd29, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x17, 0x5, @l2={'ib', 0x3a, 'pimreg1\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 2.90145742s ago: executing program 2 (id=9281): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0xa0}}], 0x1, 0xff04) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x58, 0x0, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x11}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x58}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4, 0x8}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x4}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x2, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) r5 = socket(0x11, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000001040)='bond0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0xc9ba, 0x4) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) 2.644864882s ago: executing program 4 (id=9282): socket$kcm(0xa, 0x3, 0x87) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000080), 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pselect6(0x40, &(0x7f0000000040)={0x800000000, 0x100000000, 0xff, 0xfffeffffffffffff, 0x4, 0xb, 0x2880040000000009, 0x1}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.475156611s ago: executing program 2 (id=9283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newaddr={0x18, 0x14, 0x1}, 0x18}}, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x1c17}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 2.466064408s ago: executing program 3 (id=9284): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711215000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000003c0)={{r0, &(0x7f00000000c0)='/\x00', 0x210100, &(0x7f0000000200)={@_ha_fsid={[0x5, 0x1]}, {0xc99, 0x9, 0xba, 0x1}}, 0x10001, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x3}, {[0x7, 0x5, 0x80000001, 0x9]}, 0x8, 0xc8, &(0x7f00000002c0)=""/200}) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000500)={0x7ff, 0x3}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a010200e5000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c000140000000000000000808000540"], 0xf0}}, 0x24000080) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000240)="a9050000000074640001000000010000", 0x10}, {&(0x7f0000000180)="82d903bf", 0x4}], 0x2}}], 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000100fcff0000000000001c"], 0x18}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="2b696f204b4d4ec3971a3521f7a951764873786609019759240087ef551ddfe1f9a2a7d8e20c4d46a363863902c018f8b20be5a1dcf645777487551de7ed486acf342de98f069821832e3cc232c049771733a433ab64887abf40a26dbdd27e5c3a127e6762b1077abfd75cb6cbc429d3066291f1dd3c7aa467405c19eaba918a93"], 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000200000000000000000000071107300a28d5f27ef88828839dfa08e5e34aedab9a4f8ee71ee025bcab1ca01b5a6ec9263b6f18dae8d0aa02802a9e49c75162ffffb1fba0673ed449bb152d45c420d3d697de31141ea804d0f0434b552ecfa4128718c570c7e069facf28515ebf4bea4e0983c30f23beabcd03a2941cdf149fdbe59c2b876c309294dfabf7cb1bdf4b37ba6356c0a2a3e1ca647"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2.297316344s ago: executing program 2 (id=9285): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x20048084) r2 = socket(0x29, 0x6, 0xffff0000) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000140)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x44}) bind$pptp(r2, 0xfffffffffffffffc, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x17}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)=0x0) r6 = gettid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000340)=0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1dc, 0x11, 0xb, 0x101, 0x70bd2b, 0x25dfdbfc, {0x2}, [@generic="9347d37dc085fe7ce98a73aab35964a5f3768356535cc9b7254b555c63d03af9913b53a379960cff310ed1465d1cefcb2f44cb5d2b3f89cb2476967c7dae03a4bd8947c47b9459d8701847f037f1f98971116d1fce22", @generic="da487012d57ff8e32b1873593e07484783b124e29c1e88c9748da390b53724af0f57777b46ec53f56296214818d2b1b6d7f952848c7cfd5306e94a5e6c47961515ac0e3268e18ce330df90c35713a3e07760", @nested={0x4, 0x22}, @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @nested={0x40, 0x2a, 0x0, 0x1, [@typed={0x8, 0x34, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x15a}, @typed={0xc, 0xda, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0x63}, @typed={0x11, 0x7, 0x0, 0x0, @str='802.15.4 MAC\x00'}, @nested={0x4, 0x15c}, @typed={0x8, 0xe3, 0x0, 0x0, @pid=r5}]}, @nested={0x8, 0x11e, 0x0, 0x1, [@nested={0x4, 0x52}]}, @generic="83cb2a114ee7e2dec5b3b4fe144854734d795ab2db7ed7da2adee330f17a232034dd2b39bd72fe51f5295c6a933444f8d7098334784fe50219e48c31b0e8e2a52ec88814da3f4f81cf510faef0287d33bea93d06ca7381005cbd2e766738e0178f7ee2e66c39836784aefb99ed93fde2631c6985577a11d257acdc667a95b5c255d400ffe2521280d3fd7ed864396f1c37df2be6fcd0f5f889f104dc6aa32c915cb95f51f5913bdc39f9b35cc00fa94f6d7a1e211cf1ed52d6c4", @typed={0x8, 0x22, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x145, 0x0, 0x0, @pid=r7}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8000}, 0x10010) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f0000000600)) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4021800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x2, 0x9, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000880)={'gretap0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x8, 0x80, 0x5, 0x7ff, {{0x6, 0x4, 0x1, 0x38, 0x18, 0x65, 0x0, 0x4, 0x2f, 0x0, @remote, @loopback, {[@end]}}}}}) sendto$packet(r2, &(0x7f0000000740)="941af462d7db078ecfabb2c6b1d801fd596beaac0d14bbf30cb72e5e68279083c017568c0c9b1365efad7447be8d21bcfe14e69686204de55fd64a4cf1310a4449c43dde1537d90c89f09fbd29270bc6d4c3b978407822b92dfd6e4209972e1eeec62690031d7620c3d11572d7dbf1804636f788c2eda21bc37c23466115693070a45f0a1ebe35322a2421c98f598adbae616f3924d9d747590ac8d1289c4616235cf80af7613d4cc41b2c16512857a44ae3b87cfcf4bda9af3ab7e7cd8dd696d9d17b15858757c30945702d560d273b", 0xd0, 0x845, &(0x7f00000008c0)={0x11, 0xf7, r8, 0x1, 0x7, 0x6, @random="146e60b34a94"}, 0x14) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000900)={0xffffffffffffffff}) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x1e0, 0x39, 0x2, 0x70bd2c, 0x25dfdbfe, {0x1d}, [@nested={0x1ca, 0x10a, 0x0, 0x1, [@typed={0xc2, 0xa1, 0x0, 0x0, @binary="ec6d20f823556c5feb619f0cff43e45fea2cd5761d34fe3e9f0c1a6c929b2cf597c9f95968ab688eeabd968bda424af9c6e80615e16d7c7a38aa38354001a37185a431713754204fd82f328703b14207c92d95a01ce53ff0ea047b4a2a2d87ce5e2f284cba13b2909dffcafce3721cf39c6bac68562fe2bae713b169b305b2002c103dc1428869ed6cd65559ed49cf0f2e269654db3ed36cb6e0efc81c593b4f79424ba4ee2a6e8cbfa8885516217061b6d9dc6c2c08f255dc43cc8680d1"}, @generic="0a3efa0cfc747d55a6b8bd745f06ae860f6c0c37c06b62213b0e0d67e42ab15fc3ca15614eae9ce86ddbb2d5189afc968c28363a9c8bb566688143549ff5baad0d97e26020f4b3f39f067d79dfaf3f356bfb305de031989795c231867aaea9f9bd7e49686f0fb07a77b0596228c1ed1b22f705f26a991e06c4fe1b22401ff2cfe60909c3915b0731403762e0be4abf5e88897d77f42213eb0300a5ffb178674c88e9721687c4d6f75fafb5de92687499791120d9cb6d9aba5998b5159ddbe0fc77e20f1b4905d4445b6c6d7edaae3fef52b20026a16bad0e625a4b574aac93ec77127ceb8eac", @generic="c9b574c513592f48b52a9c0f99c0d6c2c8de4f82", @typed={0x8, 0x40, 0x0, 0x0, @u32=0x7ff}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c40)={[{0x2d, 'blkio'}, {0x2b, 'perf_event'}, {0x3b, 'pids'}, {0x0, 'net_prio'}, {0x2b, 'rlimit'}]}, 0x2b) sendmsg$nl_generic(r2, &(0x7f0000000fc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x298, 0x16, 0x100, 0x70bd29, 0x25dfdbfb, {0x2}, [@nested={0x17a, 0x12b, 0x0, 0x1, [@typed={0x5, 0xcb, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x3a}, @generic="3168928ca54da88bc1dd44e29f0b9762f875fca3917bfda4f0c16af45d47c6813b1445fedef3220c2077437202d856d4f2b0bfa4621484e04dafd1b60267ef0af672959b9814a4ed5f1343fa45c89cd995a448dfbc7aba2f918ce9b2958284370cd851fe6c5a564e4d639b6e7f912cb1835fe546b574807ad6001135fbc191d7c469b7af5b92d7851c734c063079d257057708ee29b995e33f2b5ca335e46367bee0", @typed={0x14, 0x80, 0x0, 0x0, @ipv6=@local}, @generic="18d3735e9a28788659c2b8bf070e3b122d9217a42614efe94bf276d75ddc030c52a748d5046bb51d165f8b6a48997df1e0144b83d8992df817fd792c0565510a100ebdd6fe8e14aedee352c89a712bc4d4606eda3ed580ad03caef9721d31ca819eceecd0f96a6e4d54ad409a5b568bd7318c6d29bef74d7cb74b8efa3ceb27b4ca8df9c3de26ba800c1eaf6fb69bff6b065a4138cec2cd59844cc8a2cc60156214a7a2a7d1987d92563d410353694ef3cfef559"]}, @nested={0xfa, 0x51, 0x0, 0x1, [@typed={0x14, 0x86, 0x0, 0x0, @ipv6=@remote}, @generic, @nested={0x4, 0xb4}, @typed={0x8, 0x40, 0x0, 0x0, @u32=0x7dbe}, @generic="06f814bb8788b4094d77f9cba6630a", @typed={0xc, 0x11d, 0x0, 0x0, @u64=0x10000}, @generic="546cb01e4527511cac35868d051b4586bfc280d455644fa704bf66fd1e7f27a2a8127f25b45195da7929ae8127943f4b14c566090fa137c8757bc92fdd80fde37190b074955cd06a63575dc18c792eb1c04a111cd5575deca083d036a206b9202e153ab457fba552866f8eefd684694d0ed843be42f72e7a80c51f9de82ac38a2a7ceede0ff5d19b7b71ad5cc155ef2c5d2e94e3c69822b63ff6cbbbc46f6b722eab9093ce7af2fe465c96fdcd41955fc46cc26623b29f54290c82"]}, @typed={0xc, 0xa2, 0x0, 0x0, @str='net_prio'}]}, 0x298}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r10) socket$pppoe(0x18, 0x1, 0x0) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, r11, 0x8, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20044040}, 0x4040005) r12 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCDELRT(r12, 0x890c, &(0x7f00000011c0)={0x0, @ethernet={0x306, @remote}, @hci, @l2={0x1f, 0xff, @any, 0xfff7}, 0x1, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001180)='veth0_to_team\x00', 0x5, 0x8000, 0x3}) sendmsg$SEG6_CMD_SET_TUNSRC(r9, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x30, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) 2.2108436s ago: executing program 3 (id=9286): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x400000, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7000000010000104000000000001000000000000", @ANYRES32=r4, @ANYBLOB="000100006c300000500012800b000100697036746e6c000040000280140002002001fa9e56b97d91bf9f0dc3000000000000000000000000000206000f0003000000050006000100000008000700000100000500060007000000080014000400b04b"], 0x70}}, 0xeb64d656001f6f32) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="7000000010000104000000000001000000000000", @ANYRES32=r4, @ANYBLOB="000100006c300000500012800b000100697036746e6c000040000280140002002001fa9e56b97d91bf9f0dc3000000000000000000000000000206000f0003000000050006000100000008000700000100000500060007000000080014000400b04b"], 0x70}}, 0xeb64d656001f6f32) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) (async) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$tun(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) sendmsg$rds(r6, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) (async) sendmsg$rds(r6, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x44011}, 0xc000) 1.907426676s ago: executing program 3 (id=9288): syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r4, 0x0, 0x32, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000180)={r8, 0x200}, 0x8) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="18005e800800020000efff000c0001"], 0x34}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="b7e59d3cabe2"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048000) 1.851751208s ago: executing program 2 (id=9289): syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x8, &(0x7f0000000180)=""/129, &(0x7f0000000040)=0x81) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x8000000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES16=r4], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80480c0}, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x42180000, 0x3b}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc88}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0xd0) 1.699713838s ago: executing program 1 (id=9290): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, 'vlan0\x00'}}, 0x1e) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000040000100fcff0700fedbdf250100000004004780100001800c00108008000200", @ANYRES32=0x0, @ANYBLOB="16000200", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) (async) r4 = socket$inet(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) (async) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async, rerun: 64) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0xfcbe}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010) (async, rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000200)=ANY=[@ANYBLOB="00000071b1fdc1f792e76300"], 0x8) (async) writev(r0, &(0x7f00000000c0), 0xffffe3b) 1.640576647s ago: executing program 3 (id=9291): syz_emit_ethernet(0xce, &(0x7f00000008c0)=ANY=[@ANYRES64=0x0], 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @private2, 0xb}, 0x1c) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r3}, 0x14) socket$can_bcm(0x1d, 0x2, 0x2) 1.593969323s ago: executing program 0 (id=9161): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf1, 0xf1, 0x8, [@datasec={0x5, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x7, 0xffffffff}], "05"}, @enum64={0x10, 0x6, 0x0, 0x13, 0x1, 0x8, [{0xe, 0x8, 0xb}, {0x5, 0x310669dc, 0x1}, {0xe, 0x2, 0x1}, {0x3, 0x1}, {0x7, 0x1ff, 0x5}, {0x1, 0x1000, 0x2af0}]}, @const={0xa}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x4}, @union={0x7, 0x7, 0x0, 0x5, 0x1, 0x0, [{0x3, 0x4, 0xfffff2af}, {0xa, 0x5, 0x3}, {0x1, 0x4, 0x8}, {0x9, 0x4, 0xc}, {0xc, 0x3, 0x40}, {0x5, 0x3, 0x3b}, {0xa, 0x5, 0x6b75}]}, @const={0x5, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x30, 0x5f, 0x2e, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000280)=""/139, 0x114, 0x8b, 0x0, 0x7}, 0x28) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf1, 0xf1, 0x8, [@datasec={0x5, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x7, 0xffffffff}], "05"}, @enum64={0x10, 0x6, 0x0, 0x13, 0x1, 0x8, [{0xe, 0x8, 0xb}, {0x5, 0x310669dc, 0x1}, {0xe, 0x2, 0x1}, {0x3, 0x1}, {0x7, 0x1ff, 0x5}, {0x1, 0x1000, 0x2af0}]}, @const={0xa}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x4}, @union={0x7, 0x7, 0x0, 0x5, 0x1, 0x0, [{0x3, 0x4, 0xfffff2af}, {0xa, 0x5, 0x3}, {0x1, 0x4, 0x8}, {0x9, 0x4, 0xc}, {0xc, 0x3, 0x40}, {0x5, 0x3, 0x3b}, {0xa, 0x5, 0x6b75}]}, @const={0x5, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x30, 0x5f, 0x2e, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000280)=""/139, 0x114, 0x8b, 0x0, 0x7}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x400, '\x00', r1, r2, 0x4, 0x4, 0x4}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x400, '\x00', r1, r2, 0x4, 0x4, 0x4}, 0x50) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x891b, 0x0) socket$netlink(0x10, 0x3, 0xd2f8802c8e129fd4) 1.206680803s ago: executing program 1 (id=9292): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@mcast1, 0x0}, &(0x7f0000000180)=0x14) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="a9b70a15adfdd03bbd67ae9d873bc96dd18a", 0x12}, {&(0x7f00000000c0)="38da12b673b287d162bff9008cacf37c4db0bbc8ec3ad1ff63300db284a406f276c5e3cfaa015af45d073076f8763fd0", 0x30}, {&(0x7f0000000540)="312f0495ad5f21140f40e7b08e0033f5e79e56aa7df7af25130f621eeb1d77c92ffae6611edf1734337e3d3784dbb3d5d67d73bec3b7c5cd13e9c38fe8dc1d024dcc8f6e711c74abf7150a20a9d1fe3fad4476d0663d9aef25d8b0d5194a1b3b11319d57f1cfc56a7e03435efc190db573c0fbabd63d31928c693ec840545a39b514368460f0034cc1cdbfd9f8eb96e803da99597558bd69afda3c97f94f724c34592477dbf13008dd6f67275f252e91870d0456b03ca649e8d9166201c6d0df0c1add5146f9be31e0b7f74961c68b1047e5c8dcbdea63309ac543561c0f6184de2e2c64d382044e6c9192", 0xeb}], 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000000000000000000000100000008000000000000008c000000000000000000000007000000441035367dc5a2ecdda8735dc1542282443cc051ac14141e000000090a010101000000076401010200000005e000000100000001ac1414aa000000017f00000100010000ac1414bb0000000389139de0000002ac1414bb7f0000017f000001831b26ac1414aaac1414aa7f000001ffffffff64010101ac1e000100000000000054000000000000000000000007000000440cfd93ac1e000100000009441c7301ac1e0001000000a5e000000200000001ffffffff0000000744142923e000000200000000e0000002000000094408bc8000000001000000001400000000000000000000000100000008000000000000001c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="ac1e01017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac013448867dbb103b654115fea68914000000000000000200"], 0x158}, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e24, @multicast1}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@loopback}, {@in, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00050064000000000000000c0002"], 0x3c}}, 0x20000000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r7, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x64}, 0x8000) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@mcast1}, &(0x7f0000000180)=0x14) (async) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="a9b70a15adfdd03bbd67ae9d873bc96dd18a", 0x12}, {&(0x7f00000000c0)="38da12b673b287d162bff9008cacf37c4db0bbc8ec3ad1ff63300db284a406f276c5e3cfaa015af45d073076f8763fd0", 0x30}, {&(0x7f0000000540)="312f0495ad5f21140f40e7b08e0033f5e79e56aa7df7af25130f621eeb1d77c92ffae6611edf1734337e3d3784dbb3d5d67d73bec3b7c5cd13e9c38fe8dc1d024dcc8f6e711c74abf7150a20a9d1fe3fad4476d0663d9aef25d8b0d5194a1b3b11319d57f1cfc56a7e03435efc190db573c0fbabd63d31928c693ec840545a39b514368460f0034cc1cdbfd9f8eb96e803da99597558bd69afda3c97f94f724c34592477dbf13008dd6f67275f252e91870d0456b03ca649e8d9166201c6d0df0c1add5146f9be31e0b7f74961c68b1047e5c8dcbdea63309ac543561c0f6184de2e2c64d382044e6c9192", 0xeb}], 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="ac1e01017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac013448867dbb103b654115fea68914000000000000000200"], 0x158}, 0x5) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e24, @multicast1}}) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@loopback}, {@in, 0x0, 0x33}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00050064000000000000000c0002"], 0x3c}}, 0x20000000) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r7, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x64}, 0x8000) (async) 1.189133522s ago: executing program 0 (id=9293): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9dc9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0x60}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={r3, 0x7af, 0xfffffffffffffffa, 0xf000000000000000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b80)={0x320, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x147}, @nested={0x308, 0x1, 0x0, 0x1, [@nested={0x304, 0xd, 0x0, 0x1, [@typed={0x6, 0x5a, 0x0, 0x0, @str='\xeb\x00'}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}, @nested={0x2e1, 0xa4, 0x0, 0x1, [@nested={0x4, 0x83}, @nested={0x4, 0x3e}, @typed={0x8, 0xf, 0x0, 0x0, @pid}, @generic="c32bf4a76b6d80d958b215d5722da11c3329fb931578bb94bdac6efb3a00428c5b7404768247da10169e3fe65c76e1b51778a24bed80b227bf25b1161d57219ff2c4f158c59eda45c55c14cc646f0bafd0872aed47c21e0619da153ca82efda184309747037183322bb0ed24ed78cbfd93f34b3e6462177ebdfef8ef35ad495044ba2ec56d1abf6df83a157c705c7b0791d7897d2e89f3f759", @nested={0x234, 0xe3, 0x0, 0x1, [@nested={0x10, 0x51, 0x0, 0x1, [@nested={0x8, 0xb8, 0x0, 0x1, [@nested={0x4, 0xef}]}, @nested={0x4, 0xcd}]}, @nested={0x21f, 0x93, 0x0, 0x1, [@generic="c3f5c72cd0fa27fd1c6812ef8e1befc6dd66baf5ffb4010bfed22627401146e7362051466d419863ff93", @generic="7925f7688169ace0cfecc23d527792f6b6a7dfe6814c3ee36fcdb8fe9325ff82d35e2dce7f5147adf53307102b43dd61927df8018decd7cd814e7fe1e20c26be1a6955e1db3230ae1febf44420e698437ea4f25385ab85b2332bc76b3e869874ecb86162ced3d690c075cd44e816e360194eadc984cbdd5e66b0b9c1b7b9db2f73469ece210d75d94e1acf6148c065b424146eccba9b59d95846d0d3799317d807e5ee8f218b482c1a480d4ed62d5e45941e335b9d", @nested={0x13c, 0x142, 0x0, 0x1, [@generic="352c67d5fc6fd9d898304b8fe2df42dd8add262d407a3b1e1ee8e1e806524e78c2557cf46a858819aaa7764e598cca6810d40c23597951909e8ad7054b916a31d649da23375477de43bf7dd115ea89729088681f0de11c79f4045d945728135678d570382ed4370e0bf9a99d567c05d20b0bfb2fc53c2e4f216c0af47c0e", @nested={0x4, 0x2a}, @generic="c7cf100e376fb37d2f0d5a2f57e36a36d627c64421fe11e61a0b012c0fa5905bd7b65b9439a2969a8e5ee440e3f43c38a813a5859d4b22fddfd850b4bc30152976fa710e8ab96100ecee9042eaa9d6983009c3103f263c67b3063bafadfaac3fbb9558bb194d32cfef71c926772ccf28740d1e53581e16fed2dd1ba34f7f6785298a94215ee89cc2c228cd0bbe451348090f36dde427c3fe307a", @typed={0x8, 0x102, 0x0, 0x0, @fd}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback}]}]}]}]}]}]}]}, 0x320}}, 0xc000) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30000000001400000011000100"], 0xf0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}, @IFLA_IFNAME={0x14}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 893.921528ms ago: executing program 1 (id=9295): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@flowinfo={{0x14, 0x29, 0xb, 0x14}}], 0x18}, 0x922bac8556bda5ce) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4) recvmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)}, 0x62) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 603.542439ms ago: executing program 0 (id=9296): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff0000000071107100000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x51, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="a081250000000000300012800b00010062726964676500002000028005000700080000000000070004000000080001001400000000001400ffffffffffff0000"], 0x50}}, 0x0) 483.741974ms ago: executing program 1 (id=9297): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRES32=r2, @ANYBLOB="08001f009100f1ff"], 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) 396.47879ms ago: executing program 0 (id=9298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000080000000c0000000200000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="00000000010000000000b900b50a00"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40200fa0000000061194c000000000085000000270000002b50cc40950000000435c64511a5c88f5e4de8dd20f7e0de6f02fe40e55a099d5ea75a8c48771cf05c027436124138ea8f51cdb4", @ANYRES32=r0, @ANYRES16=0x0], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x75, 0x0, &(0x7f0000000080)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x8}, 0x8) getpeername$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) 224.69503ms ago: executing program 1 (id=9299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48c241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01676e05d7ad75147ad500180000000000005e5eb8839455819f71f6000c0000000c0000"], 0x0, 0x26}, 0x28) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xffffff9b}], 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x11, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xfa3b6b2883b6fee3) 167.621769ms ago: executing program 0 (id=9300): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0) (async) syz_emit_ethernet(0x37, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="86082b9827c1", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7fa727", 0x1, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, @local, {[], '3'}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2a, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x73, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x14, 0x6, "bfe03adc55c504336d8907e2bf2b2f00"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_ifreq(r1, 0x8994, &(0x7f0000000000)={'batadv_slave_1\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}) 0s ago: executing program 1 (id=9301): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x94, 0x10, 0x503, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'xfrm0\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}, {0x14, 0x35, 'vlan1\x00'}, {0x14, 0x35, 'team0\x00'}, {0x14, 0x35, 'sit0\x00'}]}, @IFLA_ADDRESS={0xa, 0x3, @remote}]}, 0x94}, 0x1, 0x0, 0x0, 0x84000}, 0x4000) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000180)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): ][T29078] inactive_file 0 [ 774.300608][T29078] active_file 0 [ 774.304112][T29078] unevictable 0 [ 774.336312][T29078] hierarchical_memory_limit 314572800 [ 774.359334][T29078] hierarchical_memsw_limit 9223372036854771712 [ 774.390362][T29078] total_cache 0 [ 774.393872][T29078] total_rss 0 [ 774.397181][T29078] total_rss_huge 0 [ 774.401258][T29078] total_shmem 0 [ 774.404754][T29078] total_mapped_file 0 [ 774.408753][T29078] total_dirty 0 [ 774.418217][T29078] total_writeback 0 [ 774.429255][T29078] total_workingset_refault_anon 32 [ 774.446328][T29078] total_workingset_refault_file 26 [ 774.456466][T29078] total_swap 45056 [ 774.466628][T29078] total_swapcached 180224 [ 774.480325][T29078] total_pgpgin 121590 [ 774.489250][T29078] total_pgpgout 121579 [ 774.493896][T29078] total_pgfault 238561 [ 774.508273][T29078] total_pgmajfault 39 [ 774.518408][T29078] total_inactive_anon 0 [ 774.528544][T29078] total_active_anon 32768 [ 774.538693][T29078] total_inactive_file 0 [ 774.550329][T29078] total_active_file 0 [ 774.554368][T29078] total_unevictable 0 [ 774.558358][T29078] anon_cost 0 [ 774.579438][T29078] file_cost 0 [ 774.582914][T29078] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7389,pid=1506,uid=0 [ 774.618425][T29078] Memory cgroup out of memory: OOM victim 1506 (syz.2.7389) is already exiting. Skip killing the task [ 774.761721][ T1583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7406'. [ 774.780484][ T1583] IPv6: NLM_F_CREATE should be specified when creating new route [ 774.959695][T32154] Bluetooth: hci3: command 0x041b tx timeout [ 775.223295][ T1549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.033752][ T1560] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 776.036057][ T1553] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 776.064606][ T1570] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7402'. [ 776.090810][ T6518] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.119341][T18387] vxcan1 speed is unknown, defaulting to 1000 [ 776.125521][T18387] syz2: Port: 1 Link DOWN [ 776.139235][ T6518] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.179044][ T6518] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 776.188458][ T6518] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.234004][ T6518] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.264157][ T6518] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 776.284264][T16227] vxcan1 speed is unknown, defaulting to 1000 [ 776.323416][ T6518] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.332797][ T6518] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.355327][ T6518] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 776.368795][ T6518] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.398410][ T6518] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.410946][ T6518] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 776.462432][ T1592] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7409'. [ 776.517473][ T1608] validate_nla: 1 callbacks suppressed [ 776.517491][ T1608] netlink: 'syz.1.7413': attribute type 16 has an invalid length. [ 776.548517][ T1608] netlink: 'syz.1.7413': attribute type 17 has an invalid length. [ 776.677661][ T1608] bond0: left allmulticast mode [ 776.698184][ T1608] bond_slave_0: left allmulticast mode [ 776.706236][ T1608] bond_slave_1: left allmulticast mode [ 776.717329][ T1608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.727261][ T1608] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.750368][ T1608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 776.767696][ T1610] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.7413'. [ 776.905954][ T1631] tipc: Enabling of bearer rejected, failed to enable media [ 777.274167][ T1658] syz_tun: entered allmulticast mode [ 777.390645][ T1662] netlink: 492 bytes leftover after parsing attributes in process `syz.0.7428'. [ 777.585687][ T1682] syzkaller0: entered promiscuous mode [ 777.592522][ T1682] syzkaller0: entered allmulticast mode [ 777.628281][ T1685] netlink: 'syz.0.7433': attribute type 12 has an invalid length. [ 777.770766][ T1685] bond7: option primary_reselect: invalid value (255) [ 777.780799][ T1685] bond7 (unregistering): Released all slaves [ 779.972563][ T1637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 780.187764][ T1717] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7444'. [ 780.232967][ T1718] pim6reg: entered allmulticast mode [ 780.270472][ T1716] team0: Device ip6gre2 is of different type [ 780.331521][ T1726] netlink: 'syz.4.7447': attribute type 2 has an invalid length. [ 780.424998][ T1726] 9: entered promiscuous mode [ 780.477144][ T1737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7449'. [ 780.551841][ T1743] syzkaller0: entered promiscuous mode [ 780.579553][ T1743] syzkaller0: entered allmulticast mode [ 780.603208][ T1742] 0: reclassify loop, rule prio 0, protocol 800 [ 781.137937][ T1782] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7461'. [ 781.177036][ T1782] bridge_slave_1: default FDB implementation only supports local addresses [ 781.234718][ T1796] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.7464'. [ 781.344057][ T1801] xt_l2tp: v2 doesn't support IP mode [ 781.468256][ T1808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 781.563162][ T1811] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.7469'. [ 781.574507][ T1811] netlink: 3648 bytes leftover after parsing attributes in process `syz.1.7469'. [ 781.914787][ T1824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7472'. [ 782.023187][ T1824] syzkaller0: entered promiscuous mode [ 782.044304][ T1824] syzkaller0: entered allmulticast mode [ 782.140851][ T1834] openvswitch: netlink: IP tunnel dst address not specified [ 782.380959][ T1847] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7479'. [ 782.781594][ T1869] x_tables: duplicate underflow at hook 4 [ 782.856756][ T1871] netlink: 408 bytes leftover after parsing attributes in process `syz.0.7489'. [ 782.867725][ T1871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7489'. [ 784.676913][ T1896] x_tables: duplicate underflow at hook 4 [ 784.712218][ T1896] x_tables: duplicate underflow at hook 4 [ 784.735296][ T1896] x_tables: duplicate underflow at hook 4 [ 784.751623][ T1896] x_tables: duplicate underflow at hook 4 [ 784.765931][ T1904] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 784.770877][ T1896] x_tables: duplicate underflow at hook 4 [ 784.783395][ T1904] bridge0: entered allmulticast mode [ 784.824805][ T1896] x_tables: duplicate underflow at hook 4 [ 784.858831][ T1896] x_tables: duplicate underflow at hook 4 [ 784.889288][ T1896] x_tables: duplicate underflow at hook 4 [ 784.915998][ T1896] x_tables: duplicate underflow at hook 4 [ 784.999105][ T1916] netlink: 'syz.4.7500': attribute type 32 has an invalid length. [ 785.203103][T32154] Bluetooth: hci0: command 0x0401 tx timeout [ 785.374245][ T1935] __nla_validate_parse: 134 callbacks suppressed [ 785.374268][ T1935] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7504'. [ 786.445513][ T2000] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7525'. [ 786.565564][ T2006] netlink: 'syz.3.7529': attribute type 11 has an invalid length. [ 786.656607][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880abe40800: rx timeout, send abort [ 786.909502][ T2016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7531'. [ 787.075064][ T2020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7533'. [ 787.086706][ T2020] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 787.106407][ T2020] : entered promiscuous mode [ 787.156732][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880abe40400: rx timeout, send abort [ 787.165961][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880abe40800: abort rx timeout. Force session deactivation [ 787.258334][ T2025] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7535'. [ 787.305529][ T2022] netlink: 'syz.0.7534': attribute type 13 has an invalid length. [ 787.313772][ T2025] syzkaller0: entered promiscuous mode [ 787.313796][ T2025] syzkaller0: entered allmulticast mode [ 787.326788][ T2022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7534'. [ 787.327763][ T2025] netlink: 'syz.1.7535': attribute type 1 has an invalid length. [ 787.345004][ T2025] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7535'. [ 787.356621][ T2026] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7535'. [ 787.366574][ T2026] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7535'. [ 787.563959][ T2033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7537'. [ 787.665104][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880abe40400: abort rx timeout. Force session deactivation [ 788.043226][T23013] IPVS: starting estimator thread 0... [ 788.161159][ T2051] IPVS: using max 26 ests per chain, 62400 per kthread [ 788.355981][ T2057] netlink: 'syz.4.7544': attribute type 13 has an invalid length. [ 789.485719][ T2057] ªªªªª9: entered promiscuous mode [ 789.493230][ T2057] ªªªªª9: entered allmulticast mode [ 789.522203][ T2057] tunl0: entered promiscuous mode [ 789.527300][ T2057] tunl0: entered allmulticast mode [ 789.548624][ T2057] gre0: entered promiscuous mode [ 789.554184][ T2057] gre0: entered allmulticast mode [ 789.561027][ T2057] gretap0: entered promiscuous mode [ 789.568659][ T2057] gretap0: entered allmulticast mode [ 789.578188][ T2057] erspan0: entered promiscuous mode [ 789.583932][ T2057] erspan0: entered allmulticast mode [ 789.592195][ T2057] ip_vti0: entered promiscuous mode [ 789.597427][ T2057] ip_vti0: entered allmulticast mode [ 789.604053][ T2057] ip6_vti0: entered promiscuous mode [ 789.609503][ T2057] ip6_vti0: entered allmulticast mode [ 789.615672][ T2057] sit0: entered promiscuous mode [ 789.622378][ T2057] sit0: entered allmulticast mode [ 789.628370][ T2057] ip6tnl0: entered promiscuous mode [ 789.633868][ T2057] ip6tnl0: entered allmulticast mode [ 789.640478][ T2057] ip6gre0: entered promiscuous mode [ 789.645706][ T2057] ip6gre0: entered allmulticast mode [ 789.652927][ T2057] syz_tun: entered promiscuous mode [ 789.661210][ T2057] ip6gretap0: entered promiscuous mode [ 789.666684][ T2057] ip6gretap0: entered allmulticast mode [ 789.674064][ T2057] vcan0: entered promiscuous mode [ 789.680393][ T2057] vcan0: entered allmulticast mode [ 789.686660][ T2057] team0: entered promiscuous mode [ 789.692464][ T2057] team0: entered allmulticast mode [ 789.700359][ T2057] nlmon0: entered promiscuous mode [ 789.705534][ T2057] nlmon0: entered allmulticast mode [ 789.713044][ T2057] caif0: entered promiscuous mode [ 789.718105][ T2057] caif0: entered allmulticast mode [ 789.723390][ T2057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 789.740209][ T2059] netlink: 'syz.3.7545': attribute type 12 has an invalid length. [ 789.896801][ T2073] netlink: 'syz.2.7549': attribute type 10 has an invalid length. [ 789.913035][ T2073] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 789.960205][ T2077] netlink: 'syz.4.7550': attribute type 1 has an invalid length. [ 790.107347][ T2077] bond6: entered promiscuous mode [ 790.113220][ T2077] 8021q: adding VLAN 0 to HW filter on device bond6 [ 790.175921][ T2077] bond6: (slave bridge0): making interface the new active one [ 790.183798][ T2077] bridge0: entered promiscuous mode [ 790.246804][ T2077] bridge0: left promiscuous mode [ 790.805479][ T2120] netlink: 'syz.3.7566': attribute type 29 has an invalid length. [ 790.831507][ T2120] netlink: 'syz.3.7566': attribute type 29 has an invalid length. [ 790.855216][ T2120] __nla_validate_parse: 4 callbacks suppressed [ 790.855234][ T2120] netlink: 500 bytes leftover after parsing attributes in process `syz.3.7566'. [ 791.257426][ T2146] veth0_to_bond: entered allmulticast mode [ 791.486821][ T2148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.502234][ T2148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.682230][T28525] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.693401][T28525] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.709567][T28525] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.719514][T28525] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.756766][T28525] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.782958][T28525] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.810417][T28525] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.821274][T28525] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.870870][ T2160] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7579'. [ 791.880418][ T2160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7579'. [ 791.890117][ T2160] netlink: 31 bytes leftover after parsing attributes in process `syz.3.7579'. [ 791.899719][ T2160] netlink: 'syz.3.7579': attribute type 3 has an invalid length. [ 791.907482][ T2160] netlink: 'syz.3.7579': attribute type 2 has an invalid length. [ 791.916352][ T2160] netlink: 31 bytes leftover after parsing attributes in process `syz.3.7579'. [ 791.947990][ T2168] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 792.012926][ T2160] tipc: Enabling of bearer rejected, failed to enable media [ 792.097045][ T2177] wg1: entered promiscuous mode [ 792.102509][ T2177] wg1: entered allmulticast mode [ 792.165685][ T2184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7586'. [ 792.448966][ T2199] netlink: 'syz.2.7591': attribute type 1 has an invalid length. [ 792.538557][ T2199] 8021q: adding VLAN 0 to HW filter on device bond3 [ 792.615180][ T2211] bond3: (slave gretap2): making interface the new active one [ 792.626662][ T2211] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 792.788902][ T2199] syzkaller0: entered promiscuous mode [ 792.797973][ T2199] syzkaller0: entered allmulticast mode [ 792.846803][ T2224] netlink: 'syz.3.7596': attribute type 4 has an invalid length. [ 792.922687][ T2235] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20000 [ 793.060266][ T2247] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7599'. [ 793.108655][ T2248] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7598'. [ 794.773868][ T2261] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7604'. [ 794.863886][ T2264] syzkaller0: entered promiscuous mode [ 794.883940][ T2264] syzkaller0: entered allmulticast mode [ 795.035611][ T2266] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7606'. [ 795.361176][ T2282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 795.601453][ T2294] bridge2: entered promiscuous mode [ 795.606724][ T2294] bridge2: entered allmulticast mode [ 795.619529][ T2294] team0: Port device bridge2 added [ 795.750806][ T2299] : entered promiscuous mode [ 796.106015][ T2320] tipc: Enabled bearer , priority 10 [ 796.177036][ T2320] netlink: 'syz.4.7622': attribute type 1 has an invalid length. [ 796.220155][ T2320] __nla_validate_parse: 2 callbacks suppressed [ 796.220175][ T2320] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7622'. [ 796.264034][ T2331] netlink: 'syz.0.7626': attribute type 21 has an invalid length. [ 796.292449][ T2331] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7626'. [ 796.725745][ T2331] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7626'. [ 796.910201][ T2347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7631'. [ 796.933118][ T2348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7632'. [ 797.143418][ T2360] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7635'. [ 797.224573][T23014] tipc: Node number set to 1491655330 [ 808.712880][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.727935][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 813.909249][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 813.917415][ C1] lec:lec_tx_timeout: lec0 [ 814.460549][T12540] lec:lec_start_xmit: lec0:No lecd attached [ 819.909279][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5450 ms [ 819.917328][ C1] lec:lec_tx_timeout: lec0 [ 845.326121][ T2443] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 845.387218][ T2447] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7638'. [ 845.514276][ T2457] netlink: 'syz.2.7644': attribute type 1 has an invalid length. [ 845.591449][ T2457] 8021q: adding VLAN 0 to HW filter on device bond4 [ 845.620848][ T2468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.634020][ T2457] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 845.677195][ T2472] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7649'. [ 845.696526][ T2465] bond4: entered promiscuous mode [ 845.714839][ T2465] bond4: entered allmulticast mode [ 845.891559][ T2489] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7652'. [ 846.111442][ T2506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 846.172297][ T2513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7659'. [ 846.181702][ T2513] netlink: 'syz.4.7659': attribute type 5 has an invalid length. [ 846.190519][ T2513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7659'. [ 846.215073][ T2513] geneve3: entered promiscuous mode [ 846.239582][ T2513] geneve3: entered allmulticast mode [ 846.252700][ T135] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 846.269621][ T135] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 846.278054][ T135] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 846.304178][ T135] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 846.516174][ T2533] team0: No ports can be present during mode change [ 846.581176][ T2539] netlink: 'syz.4.7668': attribute type 10 has an invalid length. [ 846.611027][ T2539] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7668'. [ 846.773100][ T2550] netlink: 'syz.1.7669': attribute type 4 has an invalid length. [ 846.883215][ T2564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7671'. [ 847.021806][ T2576] netlink: 412 bytes leftover after parsing attributes in process `syz.1.7674'. [ 847.131477][ T2585] 8021q: VLANs not supported on ip6tnl0 [ 847.142101][ T2582] 8021q: VLANs not supported on ip6tnl0 [ 847.460579][ T2607] netlink: 'syz.0.7681': attribute type 21 has an invalid length. [ 847.500075][ T2610] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7682'. [ 847.500299][ T2607] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 847.533762][ T2607] bond7 (unregistering): Released all slaves [ 847.947685][ T2643] netlink: 'syz.0.7690': attribute type 1 has an invalid length. [ 848.027852][ T2658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7688'. [ 848.147697][ T2641] syzkaller0: entered promiscuous mode [ 848.153531][ T2641] syzkaller0: entered allmulticast mode [ 848.452237][ T2674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.472043][ T2674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.538198][ T2676] dvmrp0: entered allmulticast mode [ 849.728924][T18392] IPVS: starting estimator thread 0... [ 849.738935][ T2776] bond0: option ad_select: unable to set because the bond device is up [ 849.841015][ T2777] IPVS: using max 27 ests per chain, 64800 per kthread [ 849.865450][ T2782] bond7 (unregistering): Released all slaves [ 850.056331][ T2776] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 850.144306][ T2797] vlan3: entered promiscuous mode [ 850.155213][ T2797] vlan3: entered allmulticast mode [ 850.454636][ T2825] netlink: 'syz.4.7732': attribute type 4 has an invalid length. [ 850.587188][ T2840] __nla_validate_parse: 7 callbacks suppressed [ 850.587209][ T2840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7734'. [ 850.671602][ T2853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7735'. [ 850.682232][ T2840] 8021q: adding VLAN 0 to HW filter on device bond7 [ 850.696690][ T2853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7735'. [ 850.720505][ T2853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7735'. [ 850.740789][ T2853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7735'. [ 850.934047][ T2875] netlink: 'syz.0.7740': attribute type 1 has an invalid length. [ 851.011387][ T2881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.108786][ T2875] 8021q: adding VLAN 0 to HW filter on device bond7 [ 851.119546][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.149315][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.194101][ T2885] syzkaller0: entered promiscuous mode [ 851.199688][ T2885] syzkaller0: entered allmulticast mode [ 851.306727][ T2895] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7746'. [ 851.566871][ T2906] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 851.785080][ T2919] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7754'. [ 852.193107][ T2930] erspan0: entered promiscuous mode [ 852.284017][ T2944] netlink: 'syz.3.7761': attribute type 10 has an invalid length. [ 852.293119][ T2945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 852.300393][ T2945] IPv6: NLM_F_CREATE should be set when creating new route [ 852.307740][ T2945] IPv6: NLM_F_CREATE should be set when creating new route [ 852.315063][ T2945] IPv6: NLM_F_CREATE should be set when creating new route [ 852.328579][ T2946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 852.513170][ T2958] bond0: entered promiscuous mode [ 852.518273][ T2958] bond_slave_0: entered promiscuous mode [ 852.524358][ T2958] bond_slave_1: entered promiscuous mode [ 852.530501][ T2958] bond0: entered allmulticast mode [ 852.535744][ T2958] bond_slave_0: entered allmulticast mode [ 852.541971][ T2958] bond_slave_1: entered allmulticast mode [ 852.552319][ T2958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.778607][ T2972] syzkaller0: entered promiscuous mode [ 852.785496][ T2972] syzkaller0: entered allmulticast mode [ 852.795613][ T2973] netlink: 'syz.1.7771': attribute type 4 has an invalid length. [ 852.804123][ T2972] netlink: 'syz.1.7771': attribute type 4 has an invalid length. [ 853.080329][ T2991] netlink: 'syz.4.7776': attribute type 1 has an invalid length. [ 853.090642][ T2991] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7776'. [ 853.226754][ T2998] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7777'. [ 853.551698][ T3028] tunl0: Caught tx_queue_len zero misconfig [ 853.563478][ T3026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 853.608646][ T3029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7786'. [ 853.641217][ T3026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 853.698355][ T3034] syzkaller1: entered promiscuous mode [ 853.712707][ T3034] syzkaller1: entered allmulticast mode [ 854.155598][ T3058] syzkaller0: entered promiscuous mode [ 854.168158][ T3058] syzkaller0: entered allmulticast mode [ 854.203759][ T3064] netlink: 'syz.1.7796': attribute type 1 has an invalid length. [ 854.302688][ T3075] netlink: 'syz.0.7798': attribute type 5 has an invalid length. [ 854.692575][ T3100] batman_adv: batadv0: Adding interface: dummy0 [ 854.701825][ T3100] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.729013][ T3100] batman_adv: batadv0: Interface activated: dummy0 [ 854.777669][ T3100] batadv0: mtu less than device minimum [ 854.787512][ T3100] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 854.799777][ T3100] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 854.811646][ T3100] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 854.823386][ T3100] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 854.835255][ T3100] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 854.846826][ T3108] netlink: 'syz.0.7809': attribute type 1 has an invalid length. [ 854.847369][ T3100] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 854.866570][ T3100] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 854.875953][ T3108] netlink: 'syz.0.7809': attribute type 1 has an invalid length. [ 854.880929][ T3100] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 854.896586][ T3100] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 855.396690][ T3134] netlink: 'syz.3.7817': attribute type 1 has an invalid length. [ 855.437567][ T3134] 8021q: adding VLAN 0 to HW filter on device bond3 [ 855.457917][ T3134] vlan2: entered promiscuous mode [ 855.463507][ T3134] bond3: entered promiscuous mode [ 855.468861][ T3134] vlan2: entered allmulticast mode [ 855.484009][ T3134] bond3: entered allmulticast mode [ 855.951201][ T3160] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 855.994265][ T3160] bond8 (unregistering): Released all slaves [ 856.396496][ T3179] tipc: MTU too low for tipc bearer [ 856.755573][ T3199] netlink: 'syz.1.7836': attribute type 13 has an invalid length. [ 856.768137][ T3205] wireguard0: entered promiscuous mode [ 856.773963][ T3205] wireguard0: entered allmulticast mode [ 856.785834][ T3205] team0: Port device wireguard0 added [ 856.868811][ T3199] veth1_to_team: Caught tx_queue_len zero misconfig [ 857.167558][ T3234] __nla_validate_parse: 13 callbacks suppressed [ 857.167581][ T3234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7849'. [ 857.211949][ T3234] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7849'. [ 857.293640][ T3238] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7851'. [ 857.352946][ T3240] bond8: entered promiscuous mode [ 857.359715][ T3240] bond8: entered allmulticast mode [ 857.366049][ T3240] 8021q: adding VLAN 0 to HW filter on device bond8 [ 857.497132][ T3253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7853'. [ 857.658944][ T30] audit: type=1107 audit(1772234326.908:10): pid=3263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='é[8’ÍnÈèŸñ«íÁƒ°}å›h™B•YP˜Ùþ ±òÙŽ6ïüNÖwü´$³µ‚Çp˜H&Ú¤Œp­Ý %xó' [ 857.801446][ T3274] syzkaller0: entered promiscuous mode [ 857.806977][ T3274] syzkaller0: entered allmulticast mode [ 857.928614][ T3282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7863'. [ 857.939022][ T3282] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7863'. [ 858.226212][ T3292] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 858.236120][ T3292] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 858.267424][T19600] tipc: Subscription rejected, illegal request [ 858.432882][ T3308] netlink: 'syz.3.7871': attribute type 1 has an invalid length. [ 858.449971][ T3312] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7873'. [ 858.470794][ T3312] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7873'. [ 858.571092][ T3315] gretap1: entered promiscuous mode [ 858.594762][ T3315] bond5: (slave gretap1): making interface the new active one [ 858.606868][ T3315] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 858.626901][ T3317] macvlan1: entered promiscuous mode [ 858.633062][ T3317] macvlan1: entered allmulticast mode [ 858.639366][ T3317] bond5: entered promiscuous mode [ 858.645133][ T3317] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 858.654087][ T3317] bond5: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 858.670416][ T3317] bond5: left promiscuous mode [ 858.742700][ T3322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.852006][ T3333] netlink: 'syz.3.7879': attribute type 1 has an invalid length. [ 858.877351][ T3333] 8021q: adding VLAN 0 to HW filter on device bond6 [ 858.918762][ T3333] bond6: (slave gretap2): making interface the new active one [ 858.928437][ T3333] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 858.937535][ T3332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7880'. [ 859.062767][ T3339] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7882'. [ 859.146052][ T3346] netlink: 'syz.0.7885': attribute type 29 has an invalid length. [ 859.170406][ T3348] netlink: 'syz.0.7885': attribute type 29 has an invalid length. [ 859.558320][ T3369] netlink: 'syz.1.7894': attribute type 10 has an invalid length. [ 859.571261][ T3369] batman_adv: batadv0: Adding interface: netdevsim0 [ 859.578591][ T3369] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.611395][ T3369] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 859.869884][ T3399] bridge0: port 1(veth0_to_bridge) entered blocking state [ 859.904440][ T3399] bridge0: port 1(veth0_to_bridge) entered disabled state [ 859.931421][ T3399] veth0_to_bridge: entered allmulticast mode [ 859.940987][ T3399] veth0_to_bridge: entered promiscuous mode [ 860.480129][ T3443] syzkaller0: entered promiscuous mode [ 860.511081][ T3443] syzkaller0: entered allmulticast mode [ 860.651300][ T3454] net_ratelimit: 13 callbacks suppressed [ 860.651321][ T3454] openvswitch: netlink: Flow actions attr not present in new flow. [ 860.704444][ T3464] Cannot find set identified by id 65534 to match [ 860.911559][ T3452] veth11: entered allmulticast mode [ 860.951855][ T3471] IPVS: sh: FWM 3 0x00000003 - no destination available [ 860.959432][ T3472] IPVS: sh: FWM 3 0x00000003 - no destination available [ 860.987006][ T3471] IPVS: sh: FWM 3 0x00000003 - no destination available [ 861.070600][ T3479] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ1 [ 861.079104][ T3466] syzkaller0: entered promiscuous mode [ 861.113030][ T3466] syzkaller0: entered allmulticast mode [ 863.009868][ T3506] tipc: Enabling of bearer rejected, failed to enable media [ 863.111507][ T3518] bond4: (slave ip6gretap2): making interface the new active one [ 863.122001][ T3518] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 863.132905][ T3522] netlink: 'syz.1.7935': attribute type 7 has an invalid length. [ 863.334579][ T3537] netlink: 'syz.3.7940': attribute type 6 has an invalid length. [ 863.376036][ T3537] netlink: 'syz.3.7940': attribute type 6 has an invalid length. [ 863.412028][ T3536] __nla_validate_parse: 10 callbacks suppressed [ 863.412047][ T3536] netlink: 110 bytes leftover after parsing attributes in process `syz.1.7939'. [ 863.630216][ T3554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7945'. [ 863.767730][ T3559] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 863.778374][ T3559] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 863.801295][ T3559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7950'. [ 863.828618][ T3564] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7947'. [ 864.220998][ T3586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7955'. [ 864.447986][ T3592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7956'. [ 864.462094][ T3592] netlink: zone id is out of range [ 864.470580][ T3592] netlink: zone id is out of range [ 864.478041][ T3592] netlink: zone id is out of range [ 864.486784][ T3592] netlink: zone id is out of range [ 864.498990][ T3592] netlink: zone id is out of range [ 864.574522][ T3566] vxcan1 speed is unknown, defaulting to 1000 [ 864.885799][ T3600] team0: Caught tx_queue_len zero misconfig [ 864.892205][ T3600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7958'. [ 865.058678][ T3610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7962'. [ 865.171000][ T3618] xt_check_table_hooks: 56 callbacks suppressed [ 865.171021][ T3618] x_tables: duplicate underflow at hook 2 [ 865.491234][ T3632] tipc: Enabled bearer , priority 0 [ 865.558289][ T3638] syzkaller0: entered promiscuous mode [ 865.573226][ T3638] syzkaller0: entered allmulticast mode [ 865.627244][ T3632] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 865.830180][ T3659] syzkaller0: entered promiscuous mode [ 865.835878][ T3659] syzkaller0: entered allmulticast mode [ 865.931092][ T3659] netlink: 'syz.2.7974': attribute type 8 has an invalid length. [ 865.939180][ T3659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7974'. [ 866.098001][ T3668] netlink: 'syz.0.7976': attribute type 33 has an invalid length. [ 866.107036][ T3668] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7976'. [ 866.248504][ T3631] tipc: Resetting bearer [ 866.314393][ T3631] tipc: Disabling bearer [ 866.705839][ T3687] team0 (unregistering): Port device team_slave_1 removed [ 866.911875][ T3701] syzkaller0: entered promiscuous mode [ 866.917486][ T3701] syzkaller0: entered allmulticast mode [ 867.029945][ T3711] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 867.456483][ T3741] vcan0: entered allmulticast mode [ 867.887108][ T3762] netlink: 'syz.2.8004': attribute type 1 has an invalid length. [ 867.920362][ T3765] netlink: 'syz.4.8003': attribute type 21 has an invalid length. [ 867.987858][ T3762] 8021q: adding VLAN 0 to HW filter on device bond5 [ 868.026757][ T3769] bond4: (slave veth0_to_bond): Releasing active interface [ 868.051800][ T3769] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 868.318118][ T3744] vxcan1 speed is unknown, defaulting to 1000 [ 868.607389][ T3791] __nla_validate_parse: 15 callbacks suppressed [ 868.607409][ T3791] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8009'. [ 868.631231][ T3791] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8009'. [ 868.912523][ T3807] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8014'. [ 868.950287][ T3808] netlink: 'syz.4.8016': attribute type 7 has an invalid length. [ 868.970838][ T3813] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8014'. [ 868.991011][ T3813] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8014'. [ 869.065375][ T3808] netlink: 81 bytes leftover after parsing attributes in process `syz.4.8016'. [ 869.238849][ T3831] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 869.551375][ T3843] syzkaller0: entered promiscuous mode [ 869.564631][ T3843] syzkaller0: entered allmulticast mode [ 869.585044][ T3843] tipc: Started in network mode [ 869.596918][ T3843] tipc: Node identity ded4471c675c, cluster identity 4711 [ 869.611242][ T3843] tipc: Enabled bearer , priority 0 [ 869.639455][ T3846] netlink: 'syz.3.8023': attribute type 25 has an invalid length. [ 869.656037][ T3842] tipc: Resetting bearer [ 869.704492][ T3842] tipc: Disabling bearer [ 869.960178][ T3859] netlink: 'syz.3.8027': attribute type 1 has an invalid length. [ 869.968128][ T3859] netlink: 'syz.3.8027': attribute type 1 has an invalid length. [ 869.977157][ T3859] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.8027'. [ 870.037366][ T3862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8028'. [ 870.057153][ T3862] net_ratelimit: 52 callbacks suppressed [ 870.057174][ T3862] openvswitch: netlink: IP tunnel dst address not specified [ 870.116199][ T3864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8029'. [ 870.155549][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.167945][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 870.736084][ T3895] netlink: 'syz.1.8039': attribute type 1 has an invalid length. [ 870.771831][ T3895] bond10: entered promiscuous mode [ 870.778819][ T3895] 8021q: adding VLAN 0 to HW filter on device bond10 [ 870.821136][ T3895] bond10: (slave bridge8): making interface the new active one [ 870.828867][ T3895] bridge8: entered promiscuous mode [ 870.835899][ T3895] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 870.864690][ T3895] macvlan2: entered promiscuous mode [ 870.870655][ T3895] macvlan2: entered allmulticast mode [ 870.877742][ T3895] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 870.906852][ T1163] nci: nci_rx_work: unknown MT 0x7 [ 871.099834][ T3916] bond11: option miimon: invalid value (18446744073709551585) [ 871.107426][ T3916] bond11: option miimon: allowed values 0 - 2147483647 [ 871.116966][ T3916] bond11 (unregistering): Released all slaves [ 871.256480][ T3924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8048'. [ 871.637547][ T3947] netlink: 'syz.0.8054': attribute type 1 has an invalid length. [ 871.685789][ T3947] bond8: entered promiscuous mode [ 871.706521][ T3947] 8021q: adding VLAN 0 to HW filter on device bond8 [ 871.796482][ T3947] bond8: (slave bridge5): making interface the new active one [ 871.812845][ T3947] bridge5: entered promiscuous mode [ 871.820749][ T3947] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 872.323309][ T3975] netlink: 'syz.4.8064': attribute type 1 has an invalid length. [ 872.440813][ T3986] syzkaller1: entered promiscuous mode [ 872.446349][ T3986] syzkaller1: entered allmulticast mode [ 872.726639][ T4004] tipc: Enabled bearer , priority 0 [ 872.736059][ T4004] mac80211_hwsim hwsim86 syzkaller0: entered promiscuous mode [ 872.747981][ T4004] mac80211_hwsim hwsim86 syzkaller0: entered allmulticast mode [ 872.885327][ T4016] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.893740][ T4016] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.433948][ T4048] netlink: 'syz.2.8085': attribute type 2 has an invalid length. [ 873.679670][ T4056] __nla_validate_parse: 80 callbacks suppressed [ 873.679691][ T4056] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8089'. [ 874.097260][ T4081] netlink: 'syz.0.8096': attribute type 33 has an invalid length. [ 874.160210][ T4081] bond9: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 874.204077][ T4081] bond9 (unregistering): Released all slaves [ 874.294224][ T4094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8099'. [ 874.356310][ T4089] gre2: entered promiscuous mode [ 874.382388][ T4089] gre2: entered allmulticast mode [ 874.574344][ T4109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8103'. [ 874.604119][ T4107] bond7: Removing last ns target with arp_interval on [ 874.990507][ T4142] netlink: 'syz.1.8113': attribute type 1 has an invalid length. [ 875.008617][ T4142] netlink: 'syz.1.8113': attribute type 4 has an invalid length. [ 875.044741][ T4142] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8113'. [ 875.473140][ T4170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8119'. [ 875.530978][ T4172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8120'. [ 875.552364][ T4173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8120'. [ 875.572469][ T4173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8120'. [ 875.684378][ T4178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8121'. [ 875.767189][ T4184] netlink: 288 bytes leftover after parsing attributes in process `syz.3.8123'. [ 875.909412][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 875.917546][ C1] lec:lec_tx_timeout: lec0 [ 876.580723][ T4217] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 876.661054][ T4217] IPv6: sit1: Disabled Multicast RS [ 876.714345][ T4213] vlan2: entered promiscuous mode [ 876.733371][ T4213] gretap0: entered promiscuous mode [ 876.818995][ T4229] netlink: 'syz.2.8131': attribute type 4 has an invalid length. [ 877.265867][ T4253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 877.273204][ T4253] IPv6: NLM_F_CREATE should be set when creating new route [ 877.280542][ T4253] IPv6: NLM_F_CREATE should be set when creating new route [ 877.287807][ T4253] IPv6: NLM_F_CREATE should be set when creating new route [ 877.331864][ T4253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 877.568253][ T4277] 8021q: VLANs not supported on ip_vti0 [ 877.579655][ T4276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 877.600657][ T4276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 878.051445][T12540] lec:lec_start_xmit: lec0:No lecd attached [ 878.476559][ T4323] netlink: 'syz.3.8167': attribute type 1 has an invalid length. [ 878.526340][ T4323] 8021q: adding VLAN 0 to HW filter on device bond8 [ 878.594421][ T4329] bond8: (slave geneve2): making interface the new active one [ 878.603139][ T4323] netlink: 'syz.3.8167': attribute type 1 has an invalid length. [ 878.615515][ T4329] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 878.660185][ T4333] IPv6: NLM_F_CREATE should be specified when creating new route [ 878.699986][ T4333] __nla_validate_parse: 4 callbacks suppressed [ 878.700004][ T4333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8168'. [ 878.757588][ T135] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.791539][ T135] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.814294][ T135] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.845690][ T135] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.886666][ T4339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8171'. [ 878.915953][ T4339] netlink: 'syz.0.8171': attribute type 7 has an invalid length. [ 878.973809][ T4339] netlink: 'syz.0.8171': attribute type 8 has an invalid length. [ 878.982971][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8171'. [ 879.006258][ T4343] netlink: 'syz.4.8175': attribute type 1 has an invalid length. [ 879.248845][ T4360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8178'. [ 879.294863][ T4364] netlink: 'syz.1.8179': attribute type 1 has an invalid length. [ 879.345561][ T4364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8179'. [ 879.407667][ T4367] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8179'. [ 879.441163][ T4367] openvswitch: netlink: Flow key attr not present in new flow. [ 879.823102][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8186'. [ 879.857337][ T4388] team0: No ports can be present during mode change [ 880.052960][ T4402] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8191'. [ 880.065968][ T4403] openvswitch: netlink: IP tunnel dst address not specified [ 880.073907][ T4402] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8191'. [ 880.094113][ T4402] netlink: 'syz.4.8191': attribute type 6 has an invalid length. [ 880.105027][ T4403] syzkaller0: entered promiscuous mode [ 880.110781][ T4403] syzkaller0: entered allmulticast mode [ 880.116505][ T4402] netlink: 'syz.4.8191': attribute type 5 has an invalid length. [ 880.130226][ T4402] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8191'. [ 880.178837][ T4406] netlink: 'syz.1.8192': attribute type 21 has an invalid length. [ 880.383844][ T4417] bridge1: entered promiscuous mode [ 880.391890][ T4417] bridge1: entered allmulticast mode [ 880.412150][ T4415] bond0: Error: Cannot enslave bond to itself. [ 880.512560][ T4415] team0 (unregistering): Port device wireguard0 removed [ 880.532482][ T4426] xt_hashlimit: size too large, truncated to 1048576 [ 880.590352][ T4430] –: renamed from vxcan1 [ 881.018625][ T4449] netlink: 'syz.0.8204': attribute type 13 has an invalid length. [ 881.037581][ T4449] macvtap0: entered allmulticast mode [ 881.059590][ T4449] macvtap0: refused to change device tx_queue_len [ 881.322404][ T4462] netlink: 'syz.3.8210': attribute type 25 has an invalid length. [ 881.332949][ T4462] netlink: 'syz.3.8210': attribute type 25 has an invalid length. [ 881.499427][ T4473] netlink: 'syz.3.8213': attribute type 2 has an invalid length. [ 881.527741][ T4473] netlink: 'syz.3.8213': attribute type 1 has an invalid length. [ 881.577320][ T4475] netlink: 'syz.0.8215': attribute type 20 has an invalid length. [ 881.592713][ T4475] IPv6: NLM_F_CREATE should be specified when creating new route [ 881.881408][ T4495] bridge0: Caught tx_queue_len zero misconfig [ 882.076943][ T4505] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 882.083065][ T4505] syzkaller1: Linktype set failed because interface is up [ 882.225691][ T4507] syzkaller0: entered promiscuous mode [ 882.260304][ T4507] syzkaller0: entered allmulticast mode [ 882.405085][ T4526] veth0: entered promiscuous mode [ 882.530059][ T4524] veth0: left promiscuous mode [ 882.787613][ T4539] bond6: entered promiscuous mode [ 882.793734][ T4539] 8021q: adding VLAN 0 to HW filter on device bond6 [ 882.845739][ T4539] 8021q: adding VLAN 0 to HW filter on device bond6 [ 882.869890][ T4539] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 882.880239][ T4539] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 882.895317][ T4539] bond6: (slave vcan1): making interface the new active one [ 882.905851][ T4539] vcan1: entered promiscuous mode [ 882.918854][ T4539] bond6: (slave vcan1): Enslaving as an active interface with an up link [ 883.059180][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 883.067317][ C1] lec:lec_tx_timeout: lec0 [ 884.004168][ T4615] __nla_validate_parse: 19 callbacks suppressed [ 884.004189][ T4615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8253'. [ 884.979909][ T4669] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 884.991380][ T4669] gre0: entered promiscuous mode [ 884.996379][ T4669] gre0: entered allmulticast mode [ 887.465272][ T4638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 887.476188][ T4669] validate_nla: 5 callbacks suppressed [ 887.476206][ T4669] netlink: 'syz.1.8262': attribute type 1 has an invalid length. [ 887.497192][ T4669] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8262'. [ 887.739713][ T4708] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 887.866777][ T4727] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 887.867209][ T4715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 887.985265][ T4710] syzkaller1: entered promiscuous mode [ 888.008134][ T4710] syzkaller1: entered allmulticast mode [ 888.278858][ T4746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8279'. [ 888.294805][ T4749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8280'. [ 888.333934][ T4753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8281'. [ 888.505089][ T4763] x_tables: duplicate underflow at hook 2 [ 888.540944][ T4767] netlink: 11 bytes leftover after parsing attributes in process `syz.4.8286'. [ 888.594257][ T4767] netlink: 11 bytes leftover after parsing attributes in process `syz.4.8286'. [ 888.654986][ T4772] bond7: option miimon: invalid value (18446744073709551585) [ 888.676443][ T4774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8287'. [ 888.685826][ T4772] bond7: option miimon: allowed values 0 - 2147483647 [ 888.701471][ T4772] bond7 (unregistering): Released all slaves [ 888.752071][ T4774] netlink: 1308 bytes leftover after parsing attributes in process `syz.1.8287'. [ 888.882178][ T4784] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8291'. [ 888.983804][ T4792] x_tables: duplicate underflow at hook 2 [ 889.108379][ T4802] xt_bpf: check failed: parse error [ 890.144742][ T4854] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 892.242462][ T4810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 892.673076][ T4886] netlink: 'syz.1.8316': attribute type 18 has an invalid length. [ 892.696165][ T4886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8316'. [ 892.711799][ T4895] netlink: 'syz.3.8318': attribute type 2 has an invalid length. [ 892.725890][ T4895] netlink: 'syz.3.8318': attribute type 8 has an invalid length. [ 892.730680][ T4886] netlink: 'syz.1.8316': attribute type 18 has an invalid length. [ 892.747487][ T4895] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8318'. [ 892.760008][ T4896] syzkaller1: entered promiscuous mode [ 892.765512][ T4896] syzkaller1: entered allmulticast mode [ 892.767412][ T4886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8316'. [ 892.783911][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8318'. [ 892.806932][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8318'. [ 892.816966][ T4897] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8318'. [ 892.989781][ T4904] netlink: 'syz.2.8321': attribute type 18 has an invalid length. [ 893.037802][ T4908] x_tables: duplicate underflow at hook 1 [ 893.427874][ T4933] netlink: 'syz.0.8330': attribute type 9 has an invalid length. [ 893.437233][ T4933] netlink: 'syz.0.8330': attribute type 11 has an invalid length. [ 893.451045][ T4933] netlink: 'syz.0.8330': attribute type 12 has an invalid length. [ 893.481191][ T4933] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.8330'. [ 893.521064][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8331'. [ 893.529950][ T4933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8330'. [ 893.545073][ T4933] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8330'. [ 893.557290][ T4935] netlink: 'syz.1.8331': attribute type 1 has an invalid length. [ 893.606108][ T4941] veth0: entered promiscuous mode [ 893.627436][ T4946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 893.663820][ T4938] veth0: left promiscuous mode [ 893.906930][ T4961] sctp: [Deprecated]: syz.4.8341 (pid 4961) Use of int in maxseg socket option. [ 893.906930][ T4961] Use struct sctp_assoc_value instead [ 894.338263][ T4986] bond9: option mode: invalid value (133) [ 894.352360][ T4986] bond9 (unregistering): Released all slaves [ 894.567268][ T5009] netlink: 'syz.1.8352': attribute type 1 has an invalid length. [ 894.936727][ T5034] bond0: entered promiscuous mode [ 894.943821][ T5034] bond_slave_0: entered promiscuous mode [ 894.966868][ T5034] bond_slave_1: entered promiscuous mode [ 894.973160][ T5034] bridge_slave_1: entered promiscuous mode [ 894.985137][ T5034] batadv0: entered promiscuous mode [ 895.006321][ T5034] debugfs: 'hsr1' already exists in 'hsr' [ 895.019388][ T5034] Cannot create hsr debugfs directory [ 895.025145][ T5034] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 895.063761][ T5034] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 895.098221][ T5034] hsr1: entered promiscuous mode [ 895.125101][ T5034] hsr1: entered allmulticast mode [ 895.152067][ T5056] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 895.157346][ T5034] bond0: entered allmulticast mode [ 895.205431][ T5034] bond_slave_0: entered allmulticast mode [ 895.216844][ T5034] bond_slave_1: entered allmulticast mode [ 895.230834][ T5034] bridge_slave_1: entered allmulticast mode [ 895.282813][ T5034] batadv0: entered allmulticast mode [ 895.297790][ T5034] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 895.324827][ T5034] bond0: left promiscuous mode [ 895.334115][ T5034] bond_slave_0: left promiscuous mode [ 895.340301][ T5034] bond_slave_1: left promiscuous mode [ 895.346209][ T5034] bridge_slave_1: left promiscuous mode [ 895.356728][ T5034] batadv0: left promiscuous mode [ 895.491478][ T5066] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 895.502607][ T5067] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 895.609351][ T5076] openvswitch: netlink: IP tunnel dst address not specified [ 895.988950][ T5085] syzkaller0: entered promiscuous mode [ 896.010407][ T5085] syzkaller0: entered allmulticast mode [ 896.026203][ T5097] sch_tbf: burst 0 is lower than device lo mtu (32783) ! [ 897.810288][ T5104] veth0: entered promiscuous mode [ 897.816491][ T5104] veth0: left promiscuous mode [ 897.822171][ T5113] __nla_validate_parse: 19 callbacks suppressed [ 897.822188][ T5113] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8379'. [ 897.890008][ T5124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8382'. [ 897.919040][ T5124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8382'. [ 897.925040][ T135] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.949357][ T135] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.996044][ T135] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 898.035193][ T135] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 898.184372][ T5142] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.8387'. [ 898.222929][ T5145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8386'. [ 898.683761][ T5185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8393'. [ 898.753386][ T5185] openvswitch: netlink: Duplicate key (type 32). [ 899.153279][ T5204] ip6gre2: entered allmulticast mode [ 899.334974][ T5226] validate_nla: 3 callbacks suppressed [ 899.334995][ T5226] netlink: 'syz.1.8398': attribute type 1 has an invalid length. [ 899.441397][ T5223] bond2: (slave veth0_to_bond): Releasing active interface [ 899.461536][ T5223] bond2: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 899.577530][ T5226] 8021q: adding VLAN 0 to HW filter on device bond11 [ 899.646413][ T5230] 8021q: adding VLAN 0 to HW filter on device bond12 [ 899.656933][ T5230] bond11: (slave bond12): Enslaving as an active interface with a down link [ 899.769713][ T5239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8400'. [ 901.322809][ T5270] netlink: 9 bytes leftover after parsing attributes in process `syz.2.8409'. [ 901.868944][ T5200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 901.933657][ T5226] netlink: 788 bytes leftover after parsing attributes in process `syz.1.8398'. [ 902.090943][ T5275] delete_channel: no stack [ 902.184585][ T5281] ipt_REJECT: TCP_RESET invalid for non-tcp [ 902.430251][ T5308] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 902.672102][ T5318] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8423'. [ 902.729298][ T5318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 902.784428][ T5321] netlink: 'syz.3.8424': attribute type 1 has an invalid length. [ 902.840640][ T5325] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8424'. [ 902.906911][ T5320] tipc: Enabled bearer , priority 11 [ 903.148793][ T5321] 8021q: adding VLAN 0 to HW filter on device bond9 [ 903.415245][ T5347] netlink: 'syz.0.8428': attribute type 10 has an invalid length. [ 903.423616][ T5347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8428'. [ 903.514358][ T5343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8428'. [ 903.532188][ T5343] sit1: entered promiscuous mode [ 903.738967][ T5362] netlink: 'syz.1.8434': attribute type 1 has an invalid length. [ 903.756686][ T5354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8430'. [ 903.790620][ T5354] SET target dimension over the limit! [ 903.812408][ T5354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8430'. [ 903.941866][ T5374] netlink: 'syz.3.8438': attribute type 1 has an invalid length. [ 903.950025][ T5374] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8438'. [ 903.961027][ T5374] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8438'. [ 903.970960][ T5374] netlink: 'syz.3.8438': attribute type 1 has an invalid length. [ 903.978832][ T5374] netlink: 'syz.3.8438': attribute type 8 has an invalid length. [ 904.009843][ T5374] netlink: 606 bytes leftover after parsing attributes in process `syz.3.8438'. [ 904.020066][T23014] tipc: Node number set to 3699275405 [ 904.176604][ T5389] netlink: 'syz.1.8442': attribute type 21 has an invalid length. [ 904.185447][ T5389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8442'. [ 904.595248][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8449'. [ 907.329845][ T5402] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 907.552039][ T5438] bond10: entered promiscuous mode [ 907.570454][ T5438] macvlan1: entered promiscuous mode [ 907.587455][ T5438] macvlan1: entered allmulticast mode [ 907.610586][ T5438] bond10: (slave macvlan1): Opening slave failed [ 907.755060][ T5450] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 907.767354][ T5450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 907.882496][ T5463] __nla_validate_parse: 2 callbacks suppressed [ 907.882517][ T5463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8463'. [ 907.915619][ T5460] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.8461'. [ 907.918145][ T5463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8463'. [ 908.034886][ T5471] netlink: 'syz.1.8465': attribute type 4 has an invalid length. [ 908.806581][ T5490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8469'. [ 908.839528][ T5495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8471'. [ 909.470414][ T5526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.526216][ T5530] bond11: option fail_over_mac: invalid value (16) [ 909.536733][ T5530] bond11 (unregistering): Released all slaves [ 909.545500][ T5536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8482'. [ 909.809847][ T5546] nbd9: detected capacity change from 0 to 127 [ 909.822957][ T51] block nbd9: Receive control failed (result -32) [ 909.823547][ T4199] block nbd9: Send control failed (result -32) [ 909.838631][ T4199] block nbd9: Request send failed, requeueing [ 909.853664][ T1766] block nbd9: Dead connection, failed to find a fallback [ 909.861853][ T1766] block nbd9: shutting down sockets [ 909.867283][ T1766] blk_print_req_error: 138 callbacks suppressed [ 909.867301][ T1766] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 909.885840][ T1766] buffer_io_error: 138 callbacks suppressed [ 909.885857][ T1766] Buffer I/O error on dev nbd9, logical block 0, async page read [ 909.902016][ T4199] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 909.911858][ T4199] Buffer I/O error on dev nbd9, logical block 1, async page read [ 909.919949][ T4199] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 909.929514][ T4199] Buffer I/O error on dev nbd9, logical block 2, async page read [ 909.937313][ T4199] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 909.947150][ T4199] Buffer I/O error on dev nbd9, logical block 3, async page read [ 909.955107][ T4199] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 909.964881][ T4199] Buffer I/O error on dev nbd9, logical block 0, async page read [ 909.973092][ T4199] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 909.982745][ T4199] Buffer I/O error on dev nbd9, logical block 1, async page read [ 909.991017][ T4199] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 910.001523][ T4199] Buffer I/O error on dev nbd9, logical block 2, async page read [ 910.009544][ T4199] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 910.019046][ T4199] Buffer I/O error on dev nbd9, logical block 3, async page read [ 910.027036][ T4199] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 910.036619][ T4199] Buffer I/O error on dev nbd9, logical block 0, async page read [ 910.044603][ T4199] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 910.054332][ T4199] Buffer I/O error on dev nbd9, logical block 1, async page read [ 910.075674][ T4199] ldm_validate_partition_table(): Disk read failed. [ 910.104537][ T4199] Dev nbd9: unable to read RDB block 0 [ 910.120133][ T4199] nbd9: unable to read partition table [ 910.135291][ T5562] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 910.183018][ T4199] ldm_validate_partition_table(): Disk read failed. [ 910.205652][ T4199] Dev nbd9: unable to read RDB block 0 [ 910.212733][ T5569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 910.231371][ T4199] nbd9: unable to read partition table [ 910.247208][ T5571] tipc: Enabled bearer , priority 0 [ 910.255447][ T5570] tipc: Enabling of bearer rejected, already enabled [ 910.285916][ T5568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8492'. [ 910.395466][ T5571] syzkaller0: entered promiscuous mode [ 910.401772][ T5571] syzkaller0: entered allmulticast mode [ 910.408777][ T5571] tipc: Resetting bearer [ 910.473028][ T5571] tipc: Resetting bearer [ 910.505801][ T5586] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8495'. [ 912.314141][ T5571] tipc: Disabling bearer [ 912.366008][ T5602] tipc: Enabled bearer , priority 0 [ 912.413173][ T5606] syzkaller0: entered promiscuous mode [ 912.418698][ T5606] syzkaller0: entered allmulticast mode [ 912.445978][ T5617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8501'. [ 912.467059][ T5610] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 912.467314][T23014] tipc: Node number set to 3112716060 [ 912.510683][ T5625] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8500'. [ 912.570812][ T5623] netlink: 'syz.4.8503': attribute type 2 has an invalid length. [ 912.664661][ T5610] tipc: Resetting bearer [ 912.828342][ T5610] tipc: Disabling bearer [ 913.454007][ T5686] __nla_validate_parse: 2 callbacks suppressed [ 913.454028][ T5686] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8518'. [ 913.542199][ T5692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8519'. [ 915.965791][ T5654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 916.171322][ T5711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8525'. [ 916.264689][ T5722] netlink: 'syz.2.8526': attribute type 1 has an invalid length. [ 916.351661][ T5727] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8530'. [ 916.361004][ T5722] 8021q: adding VLAN 0 to HW filter on device bond8 [ 916.393373][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8530'. [ 916.478190][ T5722] vlan0: entered promiscuous mode [ 916.488158][ T5722] bond8: entered promiscuous mode [ 916.497434][ T5722] vlan0: entered allmulticast mode [ 916.503767][ T5722] bond8: entered allmulticast mode [ 916.532899][ T5722] bond8: (slave bridge2): making interface the new active one [ 916.541648][ T5722] bridge2: entered promiscuous mode [ 916.547154][ T5722] bridge2: entered allmulticast mode [ 916.591912][ T5722] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 917.136089][ T5766] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 917.142904][ T5766] syzkaller1: Refused to change device type [ 917.211736][ T5772] netlink: 'syz.4.8543': attribute type 1 has an invalid length. [ 918.123634][ T5812] netlink: 'syz.4.8552': attribute type 1 has an invalid length. [ 918.376811][ T5829] netlink: 'syz.4.8555': attribute type 6 has an invalid length. [ 920.359124][ T5781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 920.585560][ T5841] dvmrp0: entered allmulticast mode [ 920.616551][ T5846] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8559'. [ 920.753114][ T5860] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 920.760419][ T5860] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 920.773438][ T5868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8564'. [ 921.000604][ T5894] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8567'. [ 921.031913][ T5894] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8567'. [ 921.076016][ T5868] bond9: option arp_interval: invalid value (18446744071947944180) [ 921.084526][ T5894] netlink: 'syz.3.8567': attribute type 6 has an invalid length. [ 921.084563][ T5894] netlink: 'syz.3.8567': attribute type 5 has an invalid length. [ 921.084580][ T5894] netlink: 43 bytes leftover after parsing attributes in process `syz.3.8567'. [ 921.117245][ T5868] bond9: option arp_interval: allowed values 0 - 2147483647 [ 921.143433][ T5868] bond9 (unregistering): Released all slaves [ 921.344599][ T5919] netlink: set zone limit has 4 unknown bytes [ 921.419564][ T5915] bond9: option all_slaves_active: invalid value (222) [ 921.446539][ T5915] bond9 (unregistering): Released all slaves [ 921.488859][ T5920] ip6tnl0: Caught tx_queue_len zero misconfig [ 921.632820][ T5935] syzkaller0: entered promiscuous mode [ 921.647435][ T5935] syzkaller0: entered allmulticast mode [ 921.686797][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8576'. [ 921.698718][ T5935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 921.828780][ T5949] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 921.838016][ T5949] IPVS: set_ctl: invalid protocol: 32423 14.41.45.117:45765 [ 921.846815][ T5949] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 921.877078][ T5952] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20003 [ 921.918163][ T5952] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 922.022631][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8583'. [ 922.090396][ T5961] tipc: Enabled bearer , priority 0 [ 922.100744][ T5961] +: renamed from syzkaller0 [ 922.111724][ T5961] tipc: Disabling bearer [ 922.682615][ T5994] block nbd10: Unsupported socket: should be TCP or UNIX. [ 922.838911][ T6004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 923.202190][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8603'. [ 923.293687][ T6021] syzkaller0: entered promiscuous mode [ 923.301306][ T6021] syzkaller0: entered allmulticast mode [ 923.310534][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8603'. [ 923.328510][ T6024] bridge0: port 2(ipvlan3) entered blocking state [ 923.339268][ T6024] bridge0: port 2(ipvlan3) entered disabled state [ 923.347266][ T6024] ipvlan3: entered allmulticast mode [ 923.368961][ T6024] bridge0: entered allmulticast mode [ 923.377726][ T6024] ipvlan3: left allmulticast mode [ 923.383151][ T6024] bridge0: left allmulticast mode [ 925.334442][ T6030] vcan1: entered promiscuous mode [ 925.341185][ T6030] vcan1: entered allmulticast mode [ 925.357033][ T6041] netlink: 368 bytes leftover after parsing attributes in process `syz.0.8607'. [ 925.413441][ T6001] – speed is unknown, defaulting to 1000 [ 925.560650][ T6054] netlink: 'syz.3.8609': attribute type 11 has an invalid length. [ 925.605733][ T6053] bond8: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 925.641796][ T6053] __nla_validate_parse: 1 callbacks suppressed [ 925.641813][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8610'. [ 925.715443][ T6065] netlink: 'syz.0.8612': attribute type 39 has an invalid length. [ 926.254689][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8622'. [ 926.284614][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8622'. [ 926.386526][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8624'. [ 926.655829][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8625'. [ 926.666668][ T6110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8625'. [ 926.894306][ T6123] netlink: 'syz.4.8629': attribute type 1 has an invalid length. [ 926.940210][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8629'. [ 927.129378][ T6136] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8632'. [ 927.503629][ T6136] bond13: option fail_over_mac: invalid value (16) [ 927.581634][ T6136] bond13 (unregistering): Released all slaves [ 927.908544][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8641'. [ 928.010509][ T6178] netlink: 'syz.0.8642': attribute type 1 has an invalid length. [ 928.092753][ T6185] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8642'. [ 928.275663][ T6178] 8021q: adding VLAN 0 to HW filter on device bond9 [ 928.534283][ T6208] netlink: 'syz.3.8646': attribute type 11 has an invalid length. [ 928.871495][ T6218] syzkaller1: entered promiscuous mode [ 928.877540][ T6218] syzkaller1: entered allmulticast mode [ 928.929554][ T6218] tipc: Enabled bearer , priority 0 [ 928.942775][ T6218] syzkaller0: entered promiscuous mode [ 928.953706][ T6218] syzkaller0: entered allmulticast mode [ 929.013950][ T6218] tipc: Resetting bearer [ 929.043443][ T6217] tipc: Resetting bearer [ 929.057002][ T6236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 929.099737][ T6217] tipc: Disabling bearer [ 929.813370][ T6271] tun0: tun_chr_ioctl cmd 1074025673 [ 929.818990][ T6271] tun0: tun_chr_ioctl cmd 1074025675 [ 929.825059][ T6271] tun0: persist disabled [ 929.888009][ T6276] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 930.112923][ T6287] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 930.518879][ T6301] sock: sock_timestamping_bind_phc: sock not bind to device [ 931.251444][ T6333] netlink: 'syz.2.8685': attribute type 2 has an invalid length. [ 931.303538][ T6333] __nla_validate_parse: 8 callbacks suppressed [ 931.303557][ T6333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8685'. [ 931.517182][ T6341] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.597155][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.608381][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 931.898695][ T6336] – speed is unknown, defaulting to 1000 [ 932.523088][ T6370] syzkaller0: entered promiscuous mode [ 932.541179][ T6370] syzkaller0: entered allmulticast mode [ 932.569481][ T6361] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 933.222072][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8702'. [ 933.298285][ T6389] xfrm1: entered promiscuous mode [ 933.304094][ T6389] xfrm1: entered allmulticast mode [ 934.090036][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8713'. [ 934.253485][ T6441] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 934.400793][ T6448] bond13: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 934.450189][ T6448] bond13: (slave lo): Enslaving as an active interface with an up link [ 934.458903][ T6448] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 934.574905][ T6460] IPv6: Can't replace route, no match found [ 934.810177][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8720'. [ 934.854413][ T6471] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8720'. [ 934.919853][ T6475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8723'. [ 935.025857][ T6478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8724'. [ 935.187503][ T6483] openvswitch: netlink: Missing key (keys=40, expected=80) [ 935.632397][ T6507] netlink: 'syz.2.8731': attribute type 2 has an invalid length. [ 935.678934][ T6510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8730'. [ 935.813105][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8730'. [ 935.852678][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8733'. [ 936.178887][ T6538] netlink: 'syz.4.8737': attribute type 1 has an invalid length. [ 936.332393][ T6538] 8021q: adding VLAN 0 to HW filter on device bond9 [ 936.372928][ T6540] bond9: (slave bridge0): making interface the new active one [ 936.385583][ T6540] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 936.577482][ T6566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8744'. [ 936.587292][ T6566] openvswitch: netlink: Flow key attr not present in new flow. [ 936.615241][ T6567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.773756][ T6584] IPVS: set_ctl: invalid protocol: 51 172.30.1.3:20004 [ 936.869760][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 936.877863][ C1] lec:lec_tx_timeout: lec0 [ 936.955663][T28525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.974943][T28525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.013397][ T6597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8751'. [ 937.129390][ T6590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 937.248775][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8753'. [ 937.282710][ T6613] bond13: option mode: unable to set because the bond device has slaves [ 937.309033][ T6613] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 937.871302][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8764'. [ 937.957082][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8766'. [ 938.016363][ T6654] netlink: 'syz.2.8766': attribute type 11 has an invalid length. [ 938.211012][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8769'. [ 938.220801][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8769'. [ 938.410500][ T6672] bond10: (slave ªªªªª9): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 938.424883][ T6672] A link change request failed with some changes committed already. Interface ªªªªª9 may have been left with an inconsistent configuration, please check. [ 938.561123][ T6680] netlink: 'syz.1.8773': attribute type 1 has an invalid length. [ 938.650772][ T6680] bond14: entered promiscuous mode [ 938.655968][ T6680] bond14: entered allmulticast mode [ 938.693399][ T6680] 8021q: adding VLAN 0 to HW filter on device bond14 [ 938.752972][ T6680] bridge12: entered promiscuous mode [ 938.770199][ T49] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 938.784452][ T6680] bridge12: entered allmulticast mode [ 938.803252][ T6680] bond14: (slave bridge12): Enslaving as an active interface with an up link [ 938.847120][ T6688] bridge13: entered promiscuous mode [ 938.853912][ T6688] bridge13: entered allmulticast mode [ 938.863122][ T6688] bond14: (slave bridge13): Enslaving as a backup interface with a down link [ 938.909834][T19600] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 939.078252][ T6716] syzkaller0: entered promiscuous mode [ 939.089903][ T6716] syzkaller0: entered allmulticast mode [ 939.275653][ T6731] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8786'. [ 939.287991][ T6731] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 939.616777][ T6745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8789'. [ 939.831156][ T6753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 939.851240][ T6755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 940.091847][ T6768] netlink: 'syz.0.8797': attribute type 4 has an invalid length. [ 940.116221][ T6768] netlink: 240 bytes leftover after parsing attributes in process `syz.0.8797'. [ 940.620426][ T6789] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 940.657352][T32154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 940.671019][T32154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 940.679349][T32154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 940.702654][ T6789] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 940.721241][T32154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 940.729250][ T6789] gretap3: entered promiscuous mode [ 940.734580][T32154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 940.742374][ T6789] gretap3: entered allmulticast mode [ 941.612957][T12540] lec:lec_start_xmit: lec0:No lecd attached [ 941.844704][ T6844] netlink: 'syz.3.8818': attribute type 9 has an invalid length. [ 942.183789][ T6861] syzkaller1: entered promiscuous mode [ 942.209928][ T6861] syzkaller1: entered allmulticast mode [ 942.312608][ T6792] – speed is unknown, defaulting to 1000 [ 942.687025][ T6883] xt_TCPMSS: Only works on TCP SYN packets [ 942.789704][T32154] Bluetooth: hci2: command tx timeout [ 943.055813][ T6792] chnl_net:caif_netlink_parms(): no params data found [ 943.096096][ T6906] __nla_validate_parse: 4 callbacks suppressed [ 943.096116][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8832'. [ 943.247036][ T6913] bond11: Unable to set up delay as MII monitoring is disabled [ 943.260933][ T6913] bond11 (unregistering): Released all slaves [ 943.363021][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.372720][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.382151][ T6792] bridge_slave_0: entered allmulticast mode [ 943.393524][ T6792] bridge_slave_0: entered promiscuous mode [ 943.404628][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.412594][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.420000][ T6792] bridge_slave_1: entered allmulticast mode [ 943.427998][ T6792] bridge_slave_1: entered promiscuous mode [ 943.483510][ T6792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.496808][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8835'. [ 943.506766][ T6792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.565461][ T6792] team0: Port device team_slave_0 added [ 943.575429][ T6792] team0: Port device team_slave_1 added [ 943.643859][ T6928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8837'. [ 943.677241][ T6928] IPVS: Error connecting to the multicast addr [ 943.690093][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 943.711436][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.740242][ T6792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 943.756009][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.765213][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 943.851309][ T6792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.010991][ T6792] hsr_slave_0: entered promiscuous mode [ 944.017952][ T6792] hsr_slave_1: entered promiscuous mode [ 944.033662][ T6792] debugfs: 'hsr0' already exists in 'hsr' [ 944.041044][ T6792] Cannot create hsr debugfs directory [ 944.160111][ T6951] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8844'. [ 944.478727][ T6967] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8849'. [ 944.515855][ T6967] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.8849'. [ 944.684725][ T6979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8853'. [ 944.824805][ T6792] batman_adv: batadv0: Removing interface: netdevsim0 [ 944.873193][T32154] Bluetooth: hci2: command tx timeout [ 945.051049][ T6994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8858'. [ 945.182767][ T6994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8858'. [ 945.245203][ T7002] xt_hashlimit: size too large, truncated to 1048576 [ 945.365378][ T7006] gre0: entered promiscuous mode [ 945.370740][ T7006] gre0: entered allmulticast mode [ 945.392249][ T6792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 945.420673][ T6792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 945.441611][ T6792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 945.468870][ T6792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 945.882520][ T6792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.964431][ T6792] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.988061][T28525] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.995269][T28525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.036811][T28525] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.044122][T28525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.101534][ T7044] syz_tun: entered promiscuous mode [ 946.118514][ T7044] macvtap1: entered promiscuous mode [ 946.128563][ T7044] syz_tun: left promiscuous mode [ 946.168262][ T7048] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8872'. [ 946.344527][ T7055] netlink: 'syz.3.8873': attribute type 23 has an invalid length. [ 946.464386][ T7051] netlink: 'syz.3.8873': attribute type 23 has an invalid length. [ 946.786564][ T6792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.802644][ T7073] netlink: 'syz.2.8880': attribute type 3 has an invalid length. [ 946.811085][ T7073] netlink: 'syz.2.8880': attribute type 3 has an invalid length. [ 946.869312][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 946.877391][ C1] lec:lec_tx_timeout: lec0 [ 946.959719][T32154] Bluetooth: hci2: command tx timeout [ 946.984761][ T6792] veth0_vlan: entered promiscuous mode [ 947.009029][ T6792] veth1_vlan: entered promiscuous mode [ 947.072047][ T7090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.111676][ T6792] veth0_macvtap: entered promiscuous mode [ 947.132121][ T6792] veth1_macvtap: entered promiscuous mode [ 947.222074][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.262722][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.291664][T19600] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.316493][T19600] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.337030][T19600] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.367865][T19600] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.547098][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.557008][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.654305][ T7109] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 947.698837][ T7109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 947.745909][T30353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.783264][T30353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.247278][ T7135] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 948.346124][ T7139] __nla_validate_parse: 5 callbacks suppressed [ 948.346143][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8895'. [ 948.466517][ T7144] netlink: 'syz.2.8896': attribute type 32 has an invalid length. [ 948.484970][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8896'. [ 948.528281][ T7146] netlink: 'syz.0.8897': attribute type 50 has an invalid length. [ 948.595591][ T7144] bond9: option coupled_control: invalid value (52) [ 948.624061][ T7144] bond9 (unregistering): Released all slaves [ 948.839923][ T7154] syzkaller0: entered promiscuous mode [ 948.845460][ T7154] syzkaller0: entered allmulticast mode [ 948.892075][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 948.902834][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 948.912065][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 948.921230][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 948.932365][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 949.029452][ T51] Bluetooth: hci2: command tx timeout [ 949.623501][ T7172] netdevsim0: mtu less than device minimum [ 949.695173][ T7176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8905'. [ 949.843994][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8907'. [ 950.010244][ T7189] Cannot find add_set index 65532 as target [ 951.029267][ T51] Bluetooth: hci1: command tx timeout [ 951.208016][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8915'. [ 951.429655][ T7155] – speed is unknown, defaulting to 1000 [ 951.486332][T28525] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.527537][T28525] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.563626][T28525] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.584725][T28525] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.032378][ T7155] chnl_net:caif_netlink_parms(): no params data found [ 952.168754][ T7155] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.177108][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.186703][ T7155] bridge_slave_0: entered allmulticast mode [ 952.198031][ T7155] bridge_slave_0: entered promiscuous mode [ 952.207815][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.216139][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.224687][ T7155] bridge_slave_1: entered allmulticast mode [ 952.232946][ T7155] bridge_slave_1: entered promiscuous mode [ 952.274468][ T7155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.289902][ T7155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.337657][ T7155] team0: Port device team_slave_0 added [ 952.348107][ T7155] team0: Port device team_slave_1 added [ 952.396424][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.405081][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.433568][ T7155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.447409][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.455766][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.485825][ T7155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.562821][ T7155] hsr_slave_0: entered promiscuous mode [ 952.572004][ T7155] hsr_slave_1: entered promiscuous mode [ 952.578546][ T7155] debugfs: 'hsr0' already exists in 'hsr' [ 952.585497][ T7155] Cannot create hsr debugfs directory [ 952.766874][ T7155] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.778364][ T7155] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.791958][ T7155] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 952.862228][ T7155] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.873624][ T7155] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.884282][ T7155] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 952.949857][ T7155] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.969931][ T7155] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.980206][ T7155] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 953.038874][ T7155] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.050182][ T7155] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.060675][ T7155] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 953.123739][ T51] Bluetooth: hci1: command tx timeout [ 953.217234][ T7199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 953.357403][ T7155] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 953.455862][ T7155] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 953.498299][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8917'. [ 953.524999][ T7155] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 953.543936][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8919'. [ 953.592813][ T7274] xt_TCPMSS: Only works on TCP SYN packets [ 953.664903][ T7155] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 954.386941][ T7155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.453120][ T7155] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.472652][ T7336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8934'. [ 954.577399][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.584653][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.606493][ T7341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8935'. [ 954.622431][ T7341] IPVS: Unknown mcast interface: vcan0 [ 954.661770][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.668960][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.973443][ T7351] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 954.996216][ T7351] bond1 (unregistering): Released all slaves [ 955.191413][ T51] Bluetooth: hci1: command tx timeout [ 955.314123][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8943'. [ 955.367503][ T7376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 955.439439][ T7155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.584364][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8947'. [ 955.611441][ T7391] netlink: 'syz.3.8947': attribute type 2 has an invalid length. [ 955.671694][ T7391] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8947'. [ 955.800081][ T7403] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8950'. [ 955.872475][ T7403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 955.896963][ T7403] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8950'. [ 956.015150][ T7403] delete_channel: no stack [ 956.022995][ T7403] delete_channel: no stack [ 956.428232][ T7441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8959'. [ 956.475238][ T7155] veth0_vlan: entered promiscuous mode [ 956.507452][ T7155] veth1_vlan: entered promiscuous mode [ 956.585365][ T7155] veth0_macvtap: entered promiscuous mode [ 956.593408][ T7447] netlink: 'syz.1.8961': attribute type 15 has an invalid length. [ 956.615486][ T7155] veth1_macvtap: entered promiscuous mode [ 956.626055][ T7453] netlink: 'syz.1.8961': attribute type 15 has an invalid length. [ 956.687141][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.732693][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.782819][T28525] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.837522][T28525] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.865462][T28525] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.888037][T28525] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.066825][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.103620][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.269288][ T51] Bluetooth: hci1: command tx timeout [ 957.299851][ T7467] ip6t_srh: unknown srh invflags 4000 [ 957.315918][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 957.355156][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.476936][ T7474] Cannot find add_set index 0 as target [ 957.671709][ T7451] – speed is unknown, defaulting to 1000 [ 957.735763][ T7481] netlink: 'syz.2.8969': attribute type 39 has an invalid length. [ 958.732972][ T7520] __nla_validate_parse: 10 callbacks suppressed [ 958.732992][ T7520] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8983'. [ 958.762495][ T7520] netlink: 'syz.4.8983': attribute type 26 has an invalid length. [ 958.812185][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8984'. [ 958.823100][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8984'. [ 958.833592][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8984'. [ 958.904203][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8985'. [ 959.484521][ T7549] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 959.546943][T18392] IPVS: starting estimator thread 0... [ 959.555550][ T7553] IPVS: ip_vs_edit_dest(): server weight less than zero [ 959.572301][ T7557] xt_socket: unknown flags 0xe4 [ 959.663300][ T7554] IPVS: using max 29 ests per chain, 69600 per kthread [ 959.811984][ T7572] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8998'. [ 960.880414][ T7584] – speed is unknown, defaulting to 1000 [ 993.034395][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.044250][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 998.060071][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 998.068146][ C1] lec:lec_tx_timeout: lec0 [ 1006.254530][T12540] lec:lec_start_xmit: lec0:No lecd attached [ 1011.909584][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 1011.917677][ C1] lec:lec_tx_timeout: lec0 [ 1017.223077][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9019'. [ 1017.305605][ T7658] C: renamed from lo (while UP) [ 1017.315479][ T7658] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1017.325934][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9020'. [ 1017.343785][ T7658] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.9021'. [ 1017.437455][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9019'. [ 1017.574156][ T7682] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9023'. [ 1017.686347][ T7689] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9026'. [ 1017.826326][ T7697] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.9031'. [ 1017.863096][ T7695] batadv1: entered allmulticast mode [ 1017.876828][ T7701] netlink: 'syz.1.9032': attribute type 3 has an invalid length. [ 1017.997722][ T7704] x_tables: duplicate entry at hook 3 [ 1018.007120][ T7704] netlink: 'syz.1.9034': attribute type 4 has an invalid length. [ 1018.017845][ T7704] netlink: 112 bytes leftover after parsing attributes in process `syz.1.9034'. [ 1018.111538][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9035'. [ 1018.125195][ T7713] netlink: 'syz.3.9036': attribute type 8 has an invalid length. [ 1018.332244][ T7725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9040'. [ 1018.460159][ T7738] netlink: 'syz.4.9043': attribute type 39 has an invalid length. [ 1019.228274][ T7783] veth0_to_team: entered promiscuous mode [ 1019.237690][ T7783] veth0_to_team: left promiscuous mode [ 1019.282559][ T1163] nci: nci_rsp_packet: unknown rsp opcode 0x300 [ 1019.308723][ T7779] syz_tun: entered promiscuous mode [ 1019.317783][ T7779] macvtap1: entered promiscuous mode [ 1019.327111][ T7779] syz_tun: left promiscuous mode [ 1019.534248][ T7800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1019.808573][T32154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1019.820615][T32154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1019.828931][T32154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1019.841942][T32154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1019.852394][T32154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1019.882090][ T7774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1019.905092][ T7788] netlink: 'syz.4.9055': attribute type 1 has an invalid length. [ 1020.260942][ T7812] syzkaller0: entered promiscuous mode [ 1020.286952][ T7812] syzkaller0: entered allmulticast mode [ 1020.367111][ T7812] vlan2: entered promiscuous mode [ 1020.387320][ T7812] geneve1: entered promiscuous mode [ 1020.400758][ T7812] vlan2: entered allmulticast mode [ 1020.405934][ T7812] geneve1: entered allmulticast mode [ 1020.490502][ T7825] xt_ipcomp: unknown flags 1D [ 1020.521610][ T7828] xt_ipcomp: unknown flags 1D [ 1020.590473][ T7830] xt_socket: unknown flags 0xe4 [ 1020.999987][ T7845] !: renamed from dummy0 (while UP) [ 1021.201101][ T7806] – speed is unknown, defaulting to 1000 [ 1021.875862][ T7819] – speed is unknown, defaulting to 1000 [ 1021.910253][ T51] Bluetooth: hci5: command tx timeout [ 1021.982488][ T7900] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1021.995501][ T7900] bond11 (unregistering): Released all slaves [ 1022.190994][ T7806] chnl_net:caif_netlink_parms(): no params data found [ 1022.345434][ T7806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.352976][ T7806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.360764][ T7806] bridge_slave_0: entered allmulticast mode [ 1022.370101][ T7806] bridge_slave_0: entered promiscuous mode [ 1022.379982][ T7806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.387277][ T7806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.394898][ T7806] bridge_slave_1: entered allmulticast mode [ 1022.403378][ T7806] bridge_slave_1: entered promiscuous mode [ 1022.577014][ T7806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.597443][ T7888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1022.599927][ T7806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.627347][ T7902] netlink: 'syz.1.9092': attribute type 1 has an invalid length. [ 1022.640950][ T7902] __nla_validate_parse: 14 callbacks suppressed [ 1022.640969][ T7902] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9092'. [ 1022.702436][ T7902] netlink: 'syz.1.9092': attribute type 1 has an invalid length. [ 1022.767017][ T7902] netlink: 'syz.1.9092': attribute type 8 has an invalid length. [ 1022.782092][ T7902] netlink: 606 bytes leftover after parsing attributes in process `syz.1.9092'. [ 1022.997077][ T7915] xt_TCPMSS: Only works on TCP SYN packets [ 1023.048907][ T7806] team0: Port device team_slave_0 added [ 1023.072859][ T7806] team0: Port device team_slave_1 added [ 1023.135337][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9095'. [ 1023.195578][ T7806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.219245][ T7806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.292716][ T7806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.326000][ T7806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.356027][ T7806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.398116][ T7806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.418271][ T7922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9097'. [ 1023.428916][ T7922] netlink: 6 bytes leftover after parsing attributes in process `syz.0.9097'. [ 1023.627346][ T7806] hsr_slave_0: entered promiscuous mode [ 1023.641955][ T7806] hsr_slave_1: entered promiscuous mode [ 1023.658620][ T7806] debugfs: 'hsr0' already exists in 'hsr' [ 1023.670631][ T7806] Cannot create hsr debugfs directory [ 1023.733269][ T7934] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9101'. [ 1023.742607][ T7936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9100'. [ 1023.758569][ T7928] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9098'. [ 1023.785082][ T7937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9100'. [ 1023.800714][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9100'. [ 1023.812474][ T7934] netlink: 'syz.4.9101': attribute type 3 has an invalid length. [ 1023.817187][ T7936] xt_TCPMSS: Only works on TCP SYN packets [ 1023.990188][ T51] Bluetooth: hci5: command tx timeout [ 1024.107014][ T7806] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.122134][ T7806] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.135430][ T7806] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 33811 - 0 [ 1024.388325][ T7806] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.423943][ T7806] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.441135][ T7806] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 33811 - 0 [ 1024.630886][ T7806] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.650629][ T7806] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.672371][ T7806] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 33811 - 0 [ 1024.712013][ T7965] syzkaller1: entered promiscuous mode [ 1024.717798][ T7965] syzkaller1: entered allmulticast mode [ 1024.782986][ T7806] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1024.804177][ T7806] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.830343][ T7806] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 33811 - 0 [ 1025.723659][ T7806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1025.777348][ T7806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1025.834893][ T7806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1026.074045][ T51] Bluetooth: hci5: command tx timeout [ 1026.201136][ T7806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1026.387468][ T8053] xt_hashlimit: size too large, truncated to 1048576 [ 1026.478962][ T8056] ip6t_srh: unknown srh match flags 4000 [ 1026.616761][ T7806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.718510][ T7806] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.750088][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.757407][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.802838][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.810149][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.094476][ T8084] syzkaller0: entered promiscuous mode [ 1027.131043][ T8084] syzkaller0: entered allmulticast mode [ 1027.164239][ T8086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1027.293618][ T8093] netlink: 'syz.4.9137': attribute type 1 has an invalid length. [ 1027.412297][ T8093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1027.467549][ T7806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.596999][ T8110] netlink: 'syz.0.9140': attribute type 2 has an invalid length. [ 1027.646977][ T8111] pimreg3: entered allmulticast mode [ 1027.717988][ T7806] veth0_vlan: entered promiscuous mode [ 1027.775329][ T7806] veth1_vlan: entered promiscuous mode [ 1027.860241][ T7806] veth0_macvtap: entered promiscuous mode [ 1027.891104][ T7806] veth1_macvtap: entered promiscuous mode [ 1027.916982][ T8121] __nla_validate_parse: 7 callbacks suppressed [ 1027.917018][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9144'. [ 1027.965409][ T7806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1028.005188][ T7806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.051874][T28530] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.082329][T28530] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.104688][T28530] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.131756][T19600] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.154808][ T51] Bluetooth: hci5: command tx timeout [ 1028.435420][ T8145] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9151'. [ 1028.448948][T28530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.483807][T28530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.610598][T28530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.622079][T28530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.947041][ T8172] netlink: 'syz.1.9159': attribute type 1 has an invalid length. [ 1028.966639][ T8170] bond11: option packets_per_slave: invalid value (18446744073709551615) [ 1028.969693][ T8172] netlink: 96 bytes leftover after parsing attributes in process `syz.1.9159'. [ 1028.978004][ T8170] bond11: option packets_per_slave: allowed values 0 - 65535 [ 1028.996980][ T8170] bond11 (unregistering): Released all slaves [ 1029.020528][ T8172] netlink: 'syz.1.9159': attribute type 1 has an invalid length. [ 1029.085213][ T8172] netlink: 'syz.1.9159': attribute type 8 has an invalid length. [ 1029.124618][ T8172] netlink: 606 bytes leftover after parsing attributes in process `syz.1.9159'. [ 1029.246164][ T8180] netlink: 'syz.2.9162': attribute type 5 has an invalid length. [ 1029.428684][T32154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1029.451954][T32154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1029.461367][T32154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1029.471591][T32154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1029.482400][T32154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1029.555155][ T8190] netlink: 284 bytes leftover after parsing attributes in process `syz.2.9165'. [ 1029.627478][ T8190] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1029.638452][ T8194] netlink: 'syz.1.9166': attribute type 8 has an invalid length. [ 1029.684016][ T8190] bond1 (unregistering): Released all slaves [ 1030.123552][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9170'. [ 1030.150628][ T8205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1030.433644][ T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.500103][ T1163] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.544765][ T1163] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1030.546665][ T8219] netlink: 'syz.2.9175': attribute type 83 has an invalid length. [ 1030.585672][ T8219] team0: No ports can be present during mode change [ 1030.595036][ T8221] veth0: entered promiscuous mode [ 1030.624289][ T49] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.026213][T19600] dvmrp6 (unregistering): left allmulticast mode [ 1031.167479][T19600] team0: Port device bridge2 removed [ 1031.336972][T19600] bond8 (unregistering): (slave bridge5): Releasing backup interface [ 1031.358893][T19600] bridge5 (unregistering): left promiscuous mode [ 1031.547407][T19600] bond0 (unregistering): Released all slaves [ 1031.563303][T19600] bond1 (unregistering): Released all slaves [ 1031.589839][ T51] Bluetooth: hci0: command tx timeout [ 1031.613648][T19600] bond2 (unregistering): Released all slaves [ 1031.688046][T19600] bond3 (unregistering): (slave vcan1): Releasing backup interface [ 1031.710355][T19600] bond3 (unregistering): Released all slaves [ 1031.772794][T19600] bond4 (unregistering): Released all slaves [ 1031.841365][T19600] bond5 (unregistering): Released all slaves [ 1031.906845][T19600] bond6 (unregistering): Released all slaves [ 1031.928129][T19600] bond7 (unregistering): Released all slaves [ 1031.966321][T19600] bond8 (unregistering): Released all slaves [ 1031.995889][T19600] bond9 (unregistering): Released all slaves [ 1032.014890][T19600] bond10 (unregistering): Released all slaves [ 1032.040612][ T8220] veth0: left promiscuous mode [ 1032.065230][ T8187] – speed is unknown, defaulting to 1000 [ 1032.353892][ T8233] syzkaller0: entered promiscuous mode [ 1032.386712][ T8233] syzkaller0: entered allmulticast mode [ 1032.395049][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9181'. [ 1032.432377][T19600] : left promiscuous mode [ 1032.599702][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9181'. [ 1033.516120][ T8272] netlink: 'syz.2.9185': attribute type 1 has an invalid length. [ 1033.680761][ T51] Bluetooth: hci0: command tx timeout [ 1034.739806][T19600] tipc: Left network mode [ 1035.325365][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9187'. [ 1035.376686][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9187'. [ 1035.751171][ T51] Bluetooth: hci0: command tx timeout [ 1036.300070][ T8187] chnl_net:caif_netlink_parms(): no params data found [ 1036.493482][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9200'. [ 1036.857449][ T8377] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1036.922589][ T8187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.931782][ T8379] netlink: 'syz.1.9207': attribute type 32 has an invalid length. [ 1036.940990][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.948195][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9207'. [ 1036.973985][ T8187] bridge_slave_0: entered allmulticast mode [ 1036.987993][ T8187] bridge_slave_0: entered promiscuous mode [ 1037.096288][ T8379] bond2: option coupled_control: invalid value (17) [ 1037.110988][ T8379] bond2 (unregistering): Released all slaves [ 1037.152218][ T8187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.167670][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.240061][ T8187] bridge_slave_1: entered allmulticast mode [ 1037.257617][ T8187] bridge_slave_1: entered promiscuous mode [ 1037.694025][ T8187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1037.789726][ T8187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.833374][ T51] Bluetooth: hci0: command tx timeout [ 1038.187089][ T8187] team0: Port device team_slave_0 added [ 1038.388829][ T8187] team0: Port device team_slave_1 added [ 1038.860770][T19600] hsr_slave_0: left promiscuous mode [ 1038.968334][T19600] pimreg (unregistering): left allmulticast mode [ 1039.073390][ T8451] netlink: 292 bytes leftover after parsing attributes in process `syz.1.9223'. [ 1039.107241][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9223'. [ 1039.134691][ T8451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9223'. [ 1039.228808][T19600] vlan1 (unregistering): left allmulticast mode [ 1039.237943][T19600] veth0_vlan (unregistering): left allmulticast mode [ 1039.406036][ T8458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9225'. [ 1039.496233][T19600] vcan0 (unregistering): left allmulticast mode [ 1039.538910][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.546185][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.577714][ T8187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.618793][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9223'. [ 1039.639965][ T8187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.651962][ T8187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.670123][ T8451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9223'. [ 1039.703090][ T8187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.732673][ T8025] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.762334][ T8025] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.815355][ T8025] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.860740][ T8025] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1039.995903][ T8187] hsr_slave_0: entered promiscuous mode [ 1040.014846][ T8187] hsr_slave_1: entered promiscuous mode [ 1040.021954][ T8187] debugfs: 'hsr0' already exists in 'hsr' [ 1040.027815][ T8187] Cannot create hsr debugfs directory [ 1040.117948][ T8479] netem: incorrect gi model size [ 1040.134284][ T8479] netem: change failed [ 1040.378827][ T8493] __nla_validate_parse: 1 callbacks suppressed [ 1040.378845][ T8493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9236'. [ 1040.628040][T19600] IPVS: stop unused estimator thread 0... [ 1040.686320][ T8187] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1040.872872][ T8187] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1040.885397][ T8508] openvswitch: netlink: Flow actions attr not present in new flow. [ 1041.027992][ T8516] netlink: 924 bytes leftover after parsing attributes in process `syz.1.9240'. [ 1041.140406][ T8187] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1041.264464][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9242'. [ 1041.330806][ T8536] netlink: 'syz.4.9245': attribute type 1 has an invalid length. [ 1041.343078][ T8187] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1041.368026][ T8532] veth0: entered promiscuous mode [ 1041.423528][ T8537] bond2: (slave geneve2): making interface the new active one [ 1041.432382][ T8537] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1041.466057][ T8531] veth0: left promiscuous mode [ 1041.483272][ T6518] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1041.522180][ T6518] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1041.547859][ T6518] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1041.594017][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9247'. [ 1041.607279][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9247'. [ 1041.631424][ T135] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1041.898169][ T8187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1041.933996][ T8187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1041.948931][ T8562] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9251'. [ 1041.970708][ T8187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1041.984373][ T8187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1042.178418][ T8585] netlink: 'syz.2.9255': attribute type 17 has an invalid length. [ 1042.213843][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9255'. [ 1042.241612][ T8585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9255'. [ 1042.314271][ T8585] gretap0: entered promiscuous mode [ 1042.334960][ T8585] gretap0: left promiscuous mode [ 1042.464989][ T8187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.514486][ T8187] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.547600][T19600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.554829][T19600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.609937][ T8602] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9261'. [ 1042.657499][T19600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.664801][T19600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.701471][ T8605] openvswitch: netlink: IP tunnel dst address not specified [ 1043.271549][ T8607] veth11: entered allmulticast mode [ 1043.296711][ T8187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1043.390335][ T8628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1043.721117][ T8653] netlink: 'syz.4.9266': attribute type 2 has an invalid length. [ 1043.728981][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9266'. [ 1043.827126][ T51] block nbd11: Receive control failed (result -32) [ 1044.105593][ T8187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.177686][ T8675] netlink: 'syz.1.9275': attribute type 2 has an invalid length. [ 1044.314510][ T8187] veth0_vlan: entered promiscuous mode [ 1044.371617][ T8187] veth1_vlan: entered promiscuous mode [ 1044.420703][ T8682] netlink: 'syz.3.9276': attribute type 1 has an invalid length. [ 1044.553268][ T8682] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1044.593286][ T8187] veth0_macvtap: entered promiscuous mode [ 1044.618042][ T8688] vlan4: entered promiscuous mode [ 1044.623959][ T8688] bond11: entered promiscuous mode [ 1044.630878][ T8688] vlan4: entered allmulticast mode [ 1044.636230][ T8688] bond11: entered allmulticast mode [ 1044.692284][ T8187] veth1_macvtap: entered promiscuous mode [ 1044.791756][ T8682] bond11: (slave bridge4): making interface the new active one [ 1044.801138][ T8682] bridge4: entered promiscuous mode [ 1044.806542][ T8682] bridge4: entered allmulticast mode [ 1044.832779][ T8682] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 1044.880369][ T8187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.912080][ T8702] netlink: 'syz.2.9281': attribute type 2 has an invalid length. [ 1044.951790][ T8702] netlink: 'syz.2.9281': attribute type 1 has an invalid length. [ 1045.054667][ T8187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.085686][ T6518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.121322][ T6518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.161859][ T6518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.212712][ T6518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.520476][ T8723] __nla_validate_parse: 3 callbacks suppressed [ 1045.520496][ T8723] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9286'. [ 1045.549468][ T8724] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9286'. [ 1045.698865][T30353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.727647][T30353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.866466][ T8025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.887393][ T8025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.073698][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9290'. [ 1046.093238][ T8742] openvswitch: netlink: Flow actions attr not present in new flow. [ 1046.601679][ T8765] netlink: zone id is out of range [ 1046.637144][ T8765] netlink: zone id is out of range [ 1046.663471][ T8765] netlink: zone id is out of range [ 1046.703256][ T8765] netlink: zone id is out of range [ 1046.708442][ T8765] netlink: zone id is out of range [ 1046.737678][ T51] block nbd12: Receive control failed (result -32) [ 1046.775734][ T8713] – speed is unknown, defaulting to 1000 [ 1046.832687][ T8765] netlink: zone id is out of range [ 1046.877238][ T8765] netlink: zone id is out of range [ 1047.137874][ T8782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1047.164256][ T8784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9296'. [ 1047.183777][ T8782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1047.201037][ T8784] bridge1: entered promiscuous mode [ 1047.206857][ T8782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1047.232167][ T8782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1047.249583][ T8782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1047.299764][ T8786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9297'. [ 1047.913257][ T5061] ================================================================== [ 1047.921408][ T5061] BUG: KASAN: use-after-free in __mutex_lock+0x812/0x1300 [ 1047.928568][ T5061] Read of size 8 at addr ffff8880793340a8 by task khidpd_00031012/5061 [ 1047.936832][ T5061] [ 1047.939188][ T5061] CPU: 0 UID: 0 PID: 5061 Comm: khidpd_00031012 Not tainted syzkaller #0 PREEMPT(full) [ 1047.939215][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1047.939231][ T5061] Call Trace: [ 1047.939240][ T5061] [ 1047.939250][ T5061] dump_stack_lvl+0xe8/0x150 [ 1047.939288][ T5061] print_report+0xba/0x230 [ 1047.939316][ T5061] ? __mutex_lock+0x812/0x1300 [ 1047.939338][ T5061] kasan_report+0x117/0x150 [ 1047.939367][ T5061] ? __mutex_lock+0x812/0x1300 [ 1047.939394][ T5061] __mutex_lock+0x812/0x1300 [ 1047.939419][ T5061] ? __mutex_lock+0x5ac/0x1300 [ 1047.939443][ T5061] ? l2cap_unregister_user+0x6a/0x1b0 [ 1047.939476][ T5061] ? __pfx___mutex_lock+0x10/0x10 [ 1047.939506][ T5061] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1047.939540][ T5061] ? lockdep_hardirqs_on+0x7a/0x110 [ 1047.939578][ T5061] l2cap_unregister_user+0x6a/0x1b0 [ 1047.939603][ T5061] hidp_session_thread+0x3cb/0x440 [ 1047.939632][ T5061] ? __pfx_hidp_session_thread+0x10/0x10 [ 1047.939659][ T5061] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1047.939689][ T5061] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1047.939717][ T5061] ? __kthread_parkme+0x7a/0x1f0 [ 1047.939750][ T5061] ? __kthread_parkme+0x19c/0x1f0 [ 1047.939787][ T5061] kthread+0x388/0x470 [ 1047.939809][ T5061] ? __pfx_hidp_session_thread+0x10/0x10 [ 1047.939834][ T5061] ? __pfx_kthread+0x10/0x10 [ 1047.939855][ T5061] ret_from_fork+0x51e/0xb90 [ 1047.939888][ T5061] ? __pfx_ret_from_fork+0x10/0x10 [ 1047.939916][ T5061] ? __switch_to+0xc7d/0x1450 [ 1047.939943][ T5061] ? __pfx_kthread+0x10/0x10 [ 1047.939965][ T5061] ret_from_fork_asm+0x1a/0x30 [ 1047.940021][ T5061] [ 1047.940030][ T5061] [ 1048.102017][ T5061] The buggy address belongs to the physical page: [ 1048.108459][ T5061] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888079337a80 pfn:0x79334 [ 1048.118537][ T5061] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1048.125663][ T5061] raw: 00fff00000000000 ffffea000089e508 ffff8880b8640c40 0000000000000000 [ 1048.134279][ T5061] raw: ffff888079337a80 0000000000000000 00000000ffffffff 0000000000000000 [ 1048.142893][ T5061] page dumped because: kasan: bad access detected [ 1048.149334][ T5061] page_owner tracks the page as freed [ 1048.154748][ T5061] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 29536, tgid 29536 (syz-executor), ts 666673450671, free_ts 1047912919229 [ 1048.173082][ T5061] post_alloc_hook+0x231/0x280 [ 1048.177868][ T5061] get_page_from_freelist+0x24dc/0x2580 [ 1048.183445][ T5061] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1048.189271][ T5061] alloc_pages_mpol+0x232/0x4a0 [ 1048.194156][ T5061] ___kmalloc_large_node+0x4e/0x150 [ 1048.199383][ T5061] __kmalloc_large_node_noprof+0x18/0x90 [ 1048.205032][ T5061] __kmalloc_noprof+0x3e8/0x760 [ 1048.209891][ T5061] hci_alloc_dev_priv+0x28/0x2060 [ 1048.214946][ T5061] vhci_create_device+0x120/0x650 [ 1048.219991][ T5061] vhci_write+0x3ce/0x4a0 [ 1048.224375][ T5061] vfs_write+0x61d/0xb90 [ 1048.228663][ T5061] ksys_write+0x150/0x270 [ 1048.233021][ T5061] do_syscall_64+0x14d/0xf80 [ 1048.237639][ T5061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.243572][ T5061] page last free pid 29536 tgid 29536 stack trace: [ 1048.250089][ T5061] __free_frozen_pages+0xc2b/0xdb0 [ 1048.255324][ T5061] bt_host_release+0x82/0x90 [ 1048.259931][ T5061] device_release+0x9e/0x1d0 [ 1048.264534][ T5061] kobject_put+0x228/0x560 [ 1048.268962][ T5061] vhci_release+0x15a/0x1a0 [ 1048.273487][ T5061] __fput+0x44f/0xa70 [ 1048.277502][ T5061] task_work_run+0x1d9/0x270 [ 1048.282111][ T5061] do_exit+0x69b/0x2320 [ 1048.286282][ T5061] do_group_exit+0x21b/0x2d0 [ 1048.290886][ T5061] get_signal+0x1284/0x1330 [ 1048.295432][ T5061] arch_do_signal_or_restart+0xbc/0x830 [ 1048.301181][ T5061] exit_to_user_mode_loop+0x86/0x480 [ 1048.306494][ T5061] do_syscall_64+0x32d/0xf80 [ 1048.311112][ T5061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.317019][ T5061] [ 1048.319354][ T5061] Memory state around the buggy address: [ 1048.324992][ T5061] ffff888079333f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1048.333077][ T5061] ffff888079334000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1048.341168][ T5061] >ffff888079334080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1048.349240][ T5061] ^ [ 1048.354618][ T5061] ffff888079334100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1048.362693][ T5061] ffff888079334180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1048.370769][ T5061] ================================================================== [ 1048.381892][ T5061] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1048.389142][ T5061] CPU: 0 UID: 0 PID: 5061 Comm: khidpd_00031012 Not tainted syzkaller #0 PREEMPT(full) [ 1048.398970][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1048.409040][ T5061] Call Trace: [ 1048.412359][ T5061] [ 1048.415329][ T5061] vpanic+0x56c/0xa60 [ 1048.419353][ T5061] ? __pfx_vpanic+0x10/0x10 [ 1048.423920][ T5061] panic+0xc5/0xd0 [ 1048.427676][ T5061] ? __pfx_panic+0x10/0x10 [ 1048.432132][ T5061] ? __mutex_lock+0x812/0x1300 [ 1048.436921][ T5061] ? __mutex_lock+0x812/0x1300 [ 1048.441720][ T5061] check_panic_on_warn+0x89/0xb0 [ 1048.446775][ T5061] ? __mutex_lock+0x812/0x1300 [ 1048.451562][ T5061] end_report+0x73/0x180 [ 1048.455841][ T5061] ? __mutex_lock+0x812/0x1300 [ 1048.460635][ T5061] kasan_report+0x128/0x150 [ 1048.465157][ T5061] ? __mutex_lock+0x812/0x1300 [ 1048.469938][ T5061] __mutex_lock+0x812/0x1300 [ 1048.474548][ T5061] ? __mutex_lock+0x5ac/0x1300 [ 1048.479337][ T5061] ? l2cap_unregister_user+0x6a/0x1b0 [ 1048.484745][ T5061] ? __pfx___mutex_lock+0x10/0x10 [ 1048.489810][ T5061] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1048.495677][ T5061] ? lockdep_hardirqs_on+0x7a/0x110 [ 1048.500920][ T5061] l2cap_unregister_user+0x6a/0x1b0 [ 1048.506167][ T5061] hidp_session_thread+0x3cb/0x440 [ 1048.511311][ T5061] ? __pfx_hidp_session_thread+0x10/0x10 [ 1048.516980][ T5061] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1048.523240][ T5061] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 1048.529503][ T5061] ? __kthread_parkme+0x7a/0x1f0 [ 1048.534462][ T5061] ? __kthread_parkme+0x19c/0x1f0 [ 1048.539511][ T5061] kthread+0x388/0x470 [ 1048.543595][ T5061] ? __pfx_hidp_session_thread+0x10/0x10 [ 1048.549274][ T5061] ? __pfx_kthread+0x10/0x10 [ 1048.553900][ T5061] ret_from_fork+0x51e/0xb90 [ 1048.558512][ T5061] ? __pfx_ret_from_fork+0x10/0x10 [ 1048.563649][ T5061] ? __switch_to+0xc7d/0x1450 [ 1048.568351][ T5061] ? __pfx_kthread+0x10/0x10 [ 1048.572961][ T5061] ret_from_fork_asm+0x1a/0x30 [ 1048.577762][ T5061] [ 1048.581388][ T5061] Kernel Offset: disabled [ 1048.585715][ T5061] Rebooting in 86400 seconds..