last executing test programs: 2m10.422938867s ago: executing program 1 (id=4587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0xfffffffe}, 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff080009"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)="5c318abbf2f650a92636bce8fced2192cce5e18e09ad2de3e48870324a1714fc76d1f0271f7f8214266c3ab547a94864cc", &(0x7f0000000740), 0x1003, r2}, 0x38) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000000006c000000ffffffff000000000000000000000000040000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000ffffffffffffffff0000000000000000040000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000200000025000000000000000500000005000000"], 0xf8}, 0x1, 0x0, 0x0, 0x40011}, 0x0) socket(0x10, 0x80002, 0x0) r3 = socket(0x2b, 0x1, 0x0) listen(r3, 0x0) bind$rds(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x2, {{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in6=@empty, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x1000000000000, 0x363}, {}, 0xfffffffd, 0xffffffff, 0x2, 0x4, 0xfd}, 0x5, 0x5}}, 0xf8}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000000000000008000100010000020900020000000000020300008d04e9156ade55f759688a5ad4d15408156da0a00b55716de3ac71c3cd1bf863718c14bfa0759678a66a3f12cb7479ef6a7e97834bae63723d0630ab1e60602ebb9fa5b60000000000000089e73c63ce8b98af3bdaee3a822682a5fc3af229030060af7e9ac27d5eee7e685c2c63d23423a1ec1e25bcd624242802b0bbe783f8c70c2792bdb5407098bdd6796872d6a87af7e6f1bc7f1ccd34b338aa90e340f5000000001f00000000000000"], 0x28}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001980)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x14c, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x13e, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12a, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000200)={0x11, @multicast1, 0x4e23, 0x0, 'sh\x00', 0xa, 0x7, 0x6a}, 0x2c) 2m9.545428286s ago: executing program 1 (id=4593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r1) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000800)="bad386dd", 0x5dc, 0x40, &(0x7f0000000840)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3b6, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x300, 0x2000000, [{0x5, 0xa, "a78ce5400659808000000000004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000001991319c00"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde27a5b85b9d930914625d8a049b4cf0d129806a610ad8467a6b2600000000000055a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef5523e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18989f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b01b9387f85932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000900000001000000000000080400000000edf430611e"], 0x0, 0x2d, 0x0, 0x1, 0x7}, 0x28) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) write$tun(r5, &(0x7f0000000040)={@val={0x0, 0x88be}, @val={0x3, 0xc94a93580e268548, 0xff, 0xc4, 0x401, 0x7}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @loopback, @remote, @broadcast}}, 0x2a) 2m7.546117359s ago: executing program 1 (id=4601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001640)={0x1, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001680)=r2, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={r3, 0x20, &(0x7f0000001700)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/182, 0xb6}}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001800)=ANY=[@ANYBLOB="e90c098c8009578d506df657c687f60f610faca2bbbbbbbb28ac0900450000240000e000031190780000000000000000000040ddfd41dcdeaaa27813fdb48f9183dc2e8cf501000000000000b3c5"], 0x0) sendmsg$can_bcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000020800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05000000900f0000000000000000e4ff", @ANYRES32=r4, @ANYRES64=0x0, @ANYBLOB="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", @ANYRES64=r5, @ANYBLOB="000000400100000000000080fc"], 0x80}}, 0x4044) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f00000015c0)={{0x2, 0x5, 0x4d2, 0x10001}, [{0x0, 0x4, 0x3, 0x3}, {0xc, 0x80000000, 0x7, 0x8}]}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1e0000002900090000bdbbecd8e596a22a2f4e29a197ab0e7926bc0f"], 0x24}, 0x1, 0x0, 0x0, 0x46854}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xe, 0xc, &(0x7f00000014c0)=ANY=[@ANYBLOB="180800000000000000000000000000002408000009000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007600000095"], &(0x7f0000001540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f00000001c0)={'wlan1\x00', @multicast}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000003a00010325bd20adba0e4a8804"], 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000004000)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYRES8=r8, @ANYRES32, @ANYRES64, @ANYRES64=r8], 0x3204}}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001580)=0x4000, 0x4) setsockopt$inet_tcp_TLS_TX(r9, 0x29, 0x1d, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000180)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fd}, 0xe) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000001880)={r10, r10, 0x8, 0x0, 0x0, 0x1, 0x61, 0x6, 0x1012, 0xc3, 0x2, 0x7, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r11, 0x800448d3, 0x0) socket$inet(0x2, 0x4, 0x9) 2m6.449359339s ago: executing program 2 (id=4604): r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000080)=@ethtool_channels={0x1d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) 2m5.998636543s ago: executing program 1 (id=4607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xc}]}}]}, 0x38}}, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r4, 0x8919, 0x0) (async) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @rand_addr, @loopback}, &(0x7f0000000480)=0xc) recvfrom$packet(r5, &(0x7f0000000340)=""/162, 0xa2, 0x12000, &(0x7f00000004c0)={0x11, 0x15, r6, 0x1, 0x9, 0x6, @local}, 0x14) (async) close(r0) (async) r7 = socket(0x10, 0x3, 0x0) (async) close(0x3) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x6) (async) close(0x3) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, 0x0, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r9, 0x0, 0x0, 0x40008c1, 0x0, 0x0) setsockopt$inet_tcp_buf(r8, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) (async) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r11, 0x118, 0x0, 0x0, 0x52) (async) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), r7) sendmsg$SMC_PNETID_FLUSH(r10, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r12, @ANYBLOB="000329bd7000fcdbdf25040000000900010073797a300000000014000200626f6e645f736c6176655f30000000000500040002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x4014}}, 0x40) 2m5.661701764s ago: executing program 2 (id=4608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001680), 0xffffffffffffff97, 0x10, &(0x7f00000016c0), 0xfffffffffffffd00}, 0x48) 2m5.351039819s ago: executing program 1 (id=4612): syz_emit_ethernet(0xaa, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x2, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x2b, 0xae, [@loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @multicast2, @loopback, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private=0x4}]}]}}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000480)=@qipcrtr={0x2a, 0xffffffff, 0x2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)="b3d413c9d6f33aa59062b9a05567f4846cecb54a33bf7cf8ee5aa5e0c4", 0x1d}, {&(0x7f0000000540)="a710c2cd8456264ea6c4f6868e3a3a7d02b604070c7d11986c64871e2a9528a28ff848bd074cdeca814872f37ae8d3d27215d7f0bc5803a2650ec7d706185b5074f238b466254a5f5b74659057e251776efb2c5b253fe1060a28b56a12ca69e039a781d1f1ca195c18ea9c512320891f", 0x70}], 0x2, &(0x7f0000000600)=[{0xd8, 0x84, 0x9, "be8329afe5c7d3ad9fa5afb6effd8f0dbfab7520cc8ff868382161f85357736c658768f2c733cc78d3d9e5c93d921b7d8148fe8adefae6f69eb9822d275ce40d75ee3a59e2403d85b1773d1d74190d5fe669697a350e1780163934cfe97946a06da50355703c7b7e2fbaed713a00af434cbd33637b1828b8d351861f7db4dde8c5f6faf6bdf6d73188c77dcc53a3240c31f03334dbcdbfef75c984768dff4ee22c72d835efd3b036d630eb9ca3804c92b304da5c3fbfe04d6c03bc10b9a860bb43ef77125e"}], 0xd8}, 0x14a6ac4caef1aca6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x1c, 0x37, 0x800, 0x70bd2d, 0x25dfd3fd, {0x17}, [@typed={0x8, 0x142, 0x0, 0x0, @ipv4=@empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24841}, 0x4840) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000740)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000780)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000800)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000840)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfe3d, 0x0, 0x0}, &(0x7f0000000880)=0x40) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xadb093008d8e070b}, 0x10) connect$inet6(r9, &(0x7f0000000f00)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m3.397140948s ago: executing program 1 (id=4615): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xfffffff7, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x38) accept4(r0, 0x0, 0x0, 0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x185, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x3, 0x0, 0x4, 0x3}, @generic={0x6, 0x0, 0x2, 0x5, 0x6}, @jmp={0x5, 0x0, 0x2, 0xb, 0x7, 0x20, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x35}, 0x94) 2m3.13109263s ago: executing program 2 (id=4617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}, 0x1, 0x0, 0x0, 0x4040080}, 0xc490) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r4, 0x6cc9d, 0x16ac1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GUARD={0x5}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x2000c8c3) 2m2.2762532s ago: executing program 2 (id=4619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000140), 0x12) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000180), 0x12) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002500010125bd7000fb5afffe08000000040003"], 0x18}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x1c, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000a80)=ANY=[], &(0x7f0000000ac0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000bc0)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x66}, @broadcast, @device_a, @from_mac=@device_b, {0x0, 0x5}}, 0x42, @void}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd0}, 0x4) ioctl$XFS_IOC_EXCHANGE_RANGE(r2, 0x40285881, &(0x7f00000001c0)={r1, 0x0, 0x5, 0xfffffffffffffff9, 0x3, 0x2}) close(r2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0xf0, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_USERDATA={0xda, 0x6, "c9458cb0340893a8c5746d3ebe4c2345da49e4f4872c51a39fdea09994a264de9f4e15627db4a5d94a19922614c0bc5fd4e0a8eecea0ca374e7b178f842b2d5cde3b4ffa72b7cf7227c7ff625ab55ff67a08acfffaf4ea917979c3caa60f1dd3816a396dca9bbb4bc1d8b8588f73749b780aa5c995781ab781c31f37bdadc869573155cb969050fe84c3a1c994a76f205839eb5d0d5b5f921f0981d7726efb3d1ebd4631398798da9a158572ec25c71750dc819224bbf2487dc7a151a04470c34fdfeda16760631ff8412f33024fe34fd3a2f3d92dc6"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x160}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) 1m59.064918857s ago: executing program 0 (id=4622): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) bind$inet6(r2, &(0x7f0000000580)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) r3 = socket$pptp(0x18, 0x1, 0x2) close(r3) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000600)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r4) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x3c, r9, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x52, 0x1f}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="e5ffffffffffffff0000", @ANYRES32=r8, @ANYBLOB="080026001b17000008009f0007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r10, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="00012cbd7000fddbdf2542919f47a21e9c2e39f165300dbfad4b034af7e52119", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) 1m57.221115224s ago: executing program 2 (id=4624): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x10010, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x8929, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4801000010000100feffffff00010000fc000000000000000000000000000000e00000020000000000000000000107164e230007000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="230000000800130002000000ffff000005"], 0x48) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/cgroup\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x80049367, &(0x7f0000000680)) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r7, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {0x3}, [@GTPA_VERSION={0x8}, @GTPA_FAMILY={0x5, 0xd, 0x1e}]}, 0x24}}, 0x1) 1m55.405355778s ago: executing program 3 (id=4626): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r1, 0x8941, &(0x7f0000000000)={'wg1\x00', @ifru_data=0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0x22, 0x0, &(0x7f0000000400)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000440)="010a", 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900090000000000000000001c140000fe0000010000000005000500000000001d1e580ab9e189b1c23956"], 0x24}}, 0x0) 1m55.093058192s ago: executing program 0 (id=4628): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000140)=0x120008c) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="002145001f2c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0xf, 0x8001) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="002145000b2c000b0000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x22, &(0x7f0000000780)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}}}}}, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000c80)={0x0, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRES32=r4], 0x44}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000bc0)={{r1, &(0x7f00000000c0)='raw\x00', 0x2041, &(0x7f0000000300)={@_ha_fsid={[0x2, 0x7]}, {0x0, 0xb502, 0x3, 0x43c}}, 0x5, &(0x7f0000000340), &(0x7f0000000380)=0x3}, 0x5, &(0x7f0000000b00)=[{0x2, 0x4, &(0x7f00000003c0)='/dev/ppp\x00', &(0x7f0000000400)="45fff03a4766ac4c333c31386ba18d7c5b2a16ce0949c0d05886394f469a46859e31560af7ae93270c987196d93303e7c330c8fb07c53343e1a1d2a363da05cd872c5845f19c7d750292142518b131c956b2a956e4eac67156f51d27aa880dcce2045da595b540ff91c42d47d6d7c1a440cf8f6ca6e7dab29496f7417cd079a0", 0x80, 0x10}, {0x2, 0x7, &(0x7f0000000480)=']@*^\x00', &(0x7f00000007c0)="804428b8a8774c0136c493de1a72d75a4b12855c3cc9f1107b67d501f4109033762686f98a99911d2ad99920271b8e44", 0x30, 0x20}, {0x1, 0xcd4, &(0x7f0000000800)='lo\x00', &(0x7f0000000840)="23d12b98b653bed69695200b0daa253f755f1672dc90d3a518764281570a58375a2cd8bcfa332c9cf2e366fee1321dc1373f2bc9ed7c2182ace25ed78a4fee7be6afdf6aee10277986d6dc8ed5922f78c16ae36920cfbb23619f8fee9b818014f7ceed33e31d11bdee7c0daa45dc3cd0e7f684c9708917ffe5c837a3dfb249572d44ec2a14b164bffd837220d59ac2a2d55f5ce10b7dcdcb6ad3a77794710808dab90479cf1135593c969800c287e983746bf6b28a28d0b18820703e5e2a776abb1a28fb5279153548539183fdb598b8", 0xd0, 0x59}, {0x1, 0x2, &(0x7f0000000940)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000980)="e9197ac79e5b345846e4de20fae7aa50a5920f5695fd55baa02205051186fcec6f4c54fd161dbd5fa2420e871364ccf684faf0b996d2e011af6d5f15320e627bc5e38982d1d10c6481d0ca1287c7e9194f1efecce84d822ff22d0ad99e7662ad28df1cfcdd94be00c063d801ab47b62cb70977cdffc5646211ad28c473569110780220612657ede44115b3d18163b00acf907d8b877099509516077a21b4fda75a146c3890e4f240fd9465db6dabd852a9db7d1cdf7e9c9862b28188357e378a7b979983a7e3537e835bde055a04cf816c87e2c5b1081f5c1992ede947c3fc465ce527125ae4aa52c0", 0xe9, 0x2}, {0x2, 0x4a, &(0x7f0000000a80)='macvlan0\x00', &(0x7f0000000ac0)="f9ed97d4448078998a8c430e4b1dd02aa7c372cb85d04ecfdc79", 0x1a, 0x10}]}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000c40)=0xd, 0x4) 1m54.425191057s ago: executing program 3 (id=4629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x6, 0x4, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'veth0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0xb4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xb4}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f00000003c0)="00112233445500aabbccddee080045000028000100004006f9d37f0000017f00000100500050000000000000000050022000b1a70000", 0x36, 0x0, &(0x7f0000000400)={0x11, 0x300, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000200), 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000040)={'wlan1\x00', @random="0100000000eb"}) 1m53.434901587s ago: executing program 4 (id=4630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x42201}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1138c32a1d0bbade, 0x2004}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x631bb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x40488c4}, 0x0) 1m53.301099978s ago: executing program 0 (id=4631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x801, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4, 0x2000}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0xc0010) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380008ef", @ANYRES16=r1, @ANYBLOB="00012cbd7000fddbdf25430000000c009900e8000000680000000c00580061000000000000000c0058003a00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x18, r5, 0xd574370038829967, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f00000003c0)={0x0, 0xffffffffffffff8c, &(0x7f0000000400)={&(0x7f0000000440)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000680)={0x3, 0x3}, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000800)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r10, 0x5, 0xb68, 0x560b0000, &(0x7f00000008c0)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r9, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x4e55}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000001) bind$bt_hci(r3, &(0x7f00000007c0)={0x1f, 0x0, 0x1}, 0x6) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r11, 0x400448ca, 0x0) 1m52.777954806s ago: executing program 3 (id=4632): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000640)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000680)={0x2}, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000008f000000000000000b00020018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000019500000000000000bd0a060000000000a500f4fffcfffcff180000000600000000000000090007004d90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x1c, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) 1m51.924178731s ago: executing program 4 (id=4633): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0x8, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x5, r1}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f00000002c0)}, 0x20) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c, 0x3, 0x0, 0x3}, {0x6}]}, 0x10) 1m51.781142276s ago: executing program 2 (id=4634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x21, @mcast2, 0x6}, 0x1c) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff0500000000000000000000000000014e204e20"], 0x9e) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0xf0, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x33, @ipv4=@empty, @ipv4=@rand_addr=0x64010102}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000c80)={'wlan1\x00', &(0x7f0000000c40)=@ethtool_modinfo={0x42, 0x51d}}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x3a000000, {0x0, 0x0, 0x0, 0x0, 0x1, 0x46000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x3c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) 1m51.430728905s ago: executing program 3 (id=4635): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000280)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) ioctl$sock_ifreq(r2, 0x89b1, &(0x7f00000001c0)={'macvlan0\x00', @ifru_names='rose0\x00'}) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRES32=r3, @ANYRES64=0x0, @ANYRESOCT=0x0], 0xbc}}, 0x0) 1m51.008701863s ago: executing program 4 (id=4636): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r2, 0x303, 0x4000, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4004010) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0xfffffffffffffcc0, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x0, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48090}, 0x20004000) 1m46.136674597s ago: executing program 32 (id=4615): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xfffffff7, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x38) accept4(r0, 0x0, 0x0, 0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x185, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x3, 0x0, 0x4, 0x3}, @generic={0x6, 0x0, 0x2, 0x5, 0x6}, @jmp={0x5, 0x0, 0x2, 0xb, 0x7, 0x20, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x35}, 0x94) 1m45.275468309s ago: executing program 0 (id=4638): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, 0x0, 0x8040) (async, rerun: 64) r6 = socket(0x10, 0x3, 0x0) (async, rerun: 64) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e23, 0x3, 'nq\x00', 0x1, 0x28c, 0x5c}, 0x2c) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f00000002c0)={{0x84, @multicast2, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x80, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x4e23, 0x10000, 0x2000007, 0x8, 0x12d58}}, 0x44) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x28}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c657230000018"], 0x48}}, 0x0) sendmmsg(r6, &(0x7f0000000480), 0x4000000000001f2, 0xfc) (async) sendmsg$kcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x1}, 0x18) bind$packet(r1, &(0x7f0000000240)={0x11, 0x3, r3, 0x1, 0xf, 0x6, @multicast}, 0x14) 1m44.904186033s ago: executing program 4 (id=4639): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000040)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x8, {0x2, 0x4e20, @rand_addr=0x64010101}, 'pim6reg1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="cd1b00001800010000000000000000000a04000000030005000000000800040001000000"], 0x24}}, 0x20000000) (async) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000002c0)=0x7ff, 0x4) (async, rerun: 64) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x8000002, 0x2004}, 0x1c) (rerun: 64) sendto$inet6(r3, 0x0, 0x0, 0x220080c1, &(0x7f00000005c0)={0xa, 0x2, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, 0x1c) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000004c0)=0x100000001, 0x4) (async) connect$inet(r4, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000540)=0xfefffff9, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000580)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000600), 0x1) (rerun: 32) sendto$inet6(r3, &(0x7f0000000380)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x1c}}, 0x11) 1m43.489084004s ago: executing program 3 (id=4640): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a44, 0x1700) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40086602, &(0x7f0000000140)={0xfff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000180)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600180003600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0800089e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) 1m40.173153302s ago: executing program 4 (id=4641): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async, rerun: 32) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) (async, rerun: 32) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x2, 0x1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r3, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 1m39.561418969s ago: executing program 0 (id=4642): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000300)={&(0x7f0000000240)=[{0x1, 0x0, 0xfffffffffffffffd, 0x5, 0xe, 0x9, 0x9, 0x2}, {0x1, 0x0, 0x9, 0x5, 0x3, 0x8, 0x5, 0xb}, {0x0, 0x0, 0x80000, 0x8, 0x7fffffff, 0x2, 0x2, 0x4}], 0x3, 0x38, 0x0, 0x5}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000340)={0x100, 0xffffff7e, 0x3, 0x4, 0x4}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_newroute={0x1c, 0x18, 0x104, 0x70bd28, 0x25dfdbfe, {0x2, 0x10, 0x80, 0x6, 0xfd, 0x0, 0x0, 0x5, 0x800}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) r2 = accept4(r1, &(0x7f00000004c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000540)=0x80, 0x80000) bind$x25(r2, &(0x7f0000000580), 0x12) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000005c0)=0x20000, 0x4) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000600)={r2}) close(r4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000001ec0)={{r2, &(0x7f0000000640)=' \x00', 0x400040, &(0x7f0000000680)={@align=0x200, {0x8, 0xad7, 0x6, 0x9}}, 0x0, &(0x7f00000006c0), &(0x7f0000000700)=0x3}, 0x8, &(0x7f0000001dc0)=[{0x2, 0x40, &(0x7f0000000740)='-+', &(0x7f0000000780)="e53fb141d7f578a4243a2ffc6e8310d8530021ea9d2ee7bd27cc4ce635494b11f0e54186f067c0603fac0c", 0x2b, 0x18}, {0x2, 0x4, &(0x7f00000007c0)='+^.!,^\x00', &(0x7f0000000800)="e28468e82974f751a115e594db75a84eec6938c8b80e5ed18063d9b893e22f35cf0b6ba68126805cf57bba8d98e06489925fdb17cd042e13ee8cb5342d399f260df0b3588be4503446ddcdb3973bbd1fad63a18c1e4374548e0c402f5ea18a697374729c1c42a61bd3b564488371c5d733b3e99c053eecaebfc39979357001a297ddc94beae980a3954010859f57ef1a39b9270a8925d467cebc3c533502ceb43adadb5e0f75aa5ee2a80d36bde3515c4e33a2bc43c51aef822b5419e37716843f4b13338392050d18e2a3d7ccd0419a257bda1396aa3282f0", 0xd9, 0x20}, {0x3, 0x5, &(0x7f0000000900)=' \x00', &(0x7f0000000940)="e2e3e5119e95e894206ae71ba3ca88b1608844d904c5e495ffb83e02e1e7435cdbca1d6622fee45f89f6decacdd3b81c5a95420d5837905da8d812ae44b8b306cf4d2fb1424f5f1f598056cbf5d9fe25064f0490c6", 0x55, 0x20}, {0x1, 0x3, &(0x7f00000009c0)=',\x00', &(0x7f0000000a00)="caedb819cdc017ae63b58d7b9b623821249204e192672396df4cf80f2f4b594eaa5194f1ad9575dad935c8b8b6719ad25a4ed4922a24b55426d26f2bb82739f4e7d165bf5e257f4b8526af5cb5fbb5f8eb71e8de7633934304a80ab5921bbfee156b7e7e40732d28483a75d6293a699e55deee6e43e4ae79b94702e9b4ed2fd0bf3210edc7c51f213f205185576e7478dcca45a71fe359dcd1f9061e150e0d19f96c736a080541f8706e885491c0390e2fa7f09e7f", 0xb5, 0x22}, {0x3, 0x7, &(0x7f0000000ac0)='\x00', &(0x7f0000000b00)="4651c3854595839f9e5f83f9d9833f684daabf56a4634fb6310995e0cb68dc8766a3717dd840f4c135e4cb785a6f2a967e7e1d39d3d9fba4f75c7d82fb16eb4d24f166f797bcb06a6ea3c8a5b9843e87e2", 0x51}, {0x0, 0x7000000, &(0x7f0000000b80)='\x00', &(0x7f0000000bc0)="212a0e066e67dec3624d2ae63325c671018307be0e2c4b658bda800614da13ed32c07be3c839c52870289507b48ffa49e9f78c8719d08dc6cfa98b1aa96b2c0036c7a17daa7779c01833ea40c76e12d924befe599ef104eea756da4958e45495815c747523203a92484fd6ec40f006028b66128fdd577a6341afd63d318e598a31951254e69ed9d10b4c41b23af5ab986b7527d08d5b124fbcafda", 0x9b, 0x12}, {0x3, 0xff, &(0x7f0000000c80)='\x00', &(0x7f0000000cc0)="33a66b57331887327fede0f42609f1fe0b479b7d68149ac7084e1fce4ac4cac27e3c9b3f62f2a5956ec157253cfd4f9ad9b37ce032333555055694aa5ba3002ac0b42648ffffca8dfd49fc847a188608e4737cbd2293bb4d6cbddb19a2143f5c9e07214d195aa6b134a2bf288e60fa5fe1396bc6bb6f1a55c8381fe19b2a9b9575085f639cfd4a94ba9ae947f61ee0c9438496491be6147afa200c", 0x9b, 0x10}, {0x3, 0x5, &(0x7f0000000d80)=' \x00', &(0x7f0000000dc0)="4b916d8456193de28f274008b60ad4e1078323d2d81bef8a33c1bfcbb62499468f0e1d446f733a52571a55bc720187b37acf882a0fd9436f612a30217eda591125bc29b9414941207be1ea5af2613e939870e0d1aeac4d3fe556e4d11beb1c837b953ac481654132819ff357e8fa6802626d939c2c3ea122ca6ff8ec9e571b14ce7f99b3c58037b97c15d85dd923f2ce20331bd763281f72f7e26c9754fca1f5c3b00549a9e79d5f4d87d7cc3bedc7c2465f88d7cb74549c502d3825b8a008b8b1d97748150e4f3f712a8f12e9be0cdf1798b412676ab2cc98d7c44f0a2ebf1b018d0dc510ce0aa11239731f27cfd9fc044170e0300bc61a79f251e211f122cbe8176bd215244b62be59b5e39963944b35099f9ad0bba41863953c1a1ca43d945ceb4b5d97008b17203b764ec5000e90d21728edd13543e3dd72c4c0e872384e55f87affa4d0f17659a2f29f3357ff18107f5a1abd2ff098fac439cfaf87e39b070e93000b40f59c16d196d5d71e7682960b72923fe4a7f009bfd182b1722bfe14b6543275fd4aee647da9ee9837c2913b9e0cf5c5153ce693e93f757c4a7c425d6c8a5aaf2a31aa1021de7459fba63d296a1c5c7dc26fcfde3a67cbf344dec6cd8dfa063fe00f1ca49f4d066f7c6bcb37ed74b6aa08b4e4ad3381b44ee60ea7b8ca1495459a9f08d1ee6c6faaae2feadcb6b355c40f99989f5b35f8994055e1e077be2e03c3c6138736ce6a8525317e6af039b8eb70cafc966018dd71f95df42c6f7465553fd6f9e19bb41eb5473fd30a654aaff9954a1fd2ba24bd45e3e0d7d456ad7108b84abddefd7e1ac08a4c494bc02fdbe8b86464f91874e432fb864aa97e03b134fb1280bf3bcdf0da8368ea1e2ae06c1cfbcb295ed59c4df970640691b34fe1067936fe0b5e7b43833826a6ce9de1640bb86dab19949e27c8f148e84d64574e3f0735b8c77d4332d7bade15b33e3e3807fd6a1601f5f2fa5f757e22d2632f9dc2bef5f16ed2924fc65b474134612a2744e002d98b9d8beb5d8b90394bd0a03a37e2c230f986915ad841b42edad4a178bd640c97eb3e85c06b4ca3f39ae2ff5d3d616fe71f762870e661029b40694e8aa3585f1741bf5c860a8edee258e1384fc73aaf3c262572019c7ed8758de182dcd0080c6ed1a6ebbf4c75634160172a5a7d03375d5946d94c8d1edfe4194537de7ccfd2c4af2fe08f0ce3563561b69244ff331a22bdaefc0e48c746bb534918d36dd8147515fc55e9941718c5d56988786ca813eb64d524614d0801361db9a02117495d1470cf1f64b6bc877b9e489c8535fd2fc74e0b33d27fc70a5867a87f157d309f307d014cf3b9ba56e524473f4a79fc9a81e798caca18d6f8142d45f66f8169affeb03f5443c1f1595cf78894a0258ecf6756348b2322201ccbd757c6665074c8551a39fb0da55483129b652f51a3ef0f1db8c9b2dfbc1289cc5eb63f7d1fad314d2186421bb5c527d0293b708d6ab27404b68ec5cc02755915cfcc98e3577b1f5d70a8dac1e7aa259140a176c7777011de5d3d15956d7c5f3ff7136def6a169cd6b98f3f728ce300c05cd8743ba142e25afa7e9965b53e61c0269a6f7eb4ca2fb183d58c6e07a6bb732ac8af6e1343d2f511ca1a0b30d3ea222a2018810db7c7e5a5899369442ddfd68dcb2ba9d962063b11efeadfee0306d33bcd23853d996128dfc2f066cd0512b3d66b5ab31090b05f6b4bf1267622a5741004b35b454426f85784e5c43b7ddd89c77d27fce8b868ba5c2c83d87ce89828f9d8eda059933ae8fcf55c53156b086a2f2fa5056d852d90d25e6bd2c8836a3751da9d364e0d051113abc412553b345c308d54013c149ea020b4d50876fd065b325462b46e6d8b00a1427a235793afa4e67007cfc51aac18e40102b2039cd90066e11a342c8407fc1ce3fe81e11170f921f771ab51d9febb4de10025d38f7f4129aa6217930059241a5704a4f39421b9a25fe936b9640756d6f6d628ece01b4854ada47f771fb2a39bfc89678093154a3a547b96854514212c7fd520882412f91bc5a9a778ac26b66af27ff7c344396789ce1223b858bb1fd7dcd0392d14c165fdef3fc78b2405c55bc135853e8fe77bde987c200358308acd7be633cc3cb4fb43689e3f4546ccd98a7b903a9503633670965e229d885a88f430c7db1b1fc37012af4523350cb6aa911f51258d1e688e7e90241633e88feda9dd76dde94e5062a126fcd66beb124fe075f797fad059fde4c6f488433dd5e2342c669d43745e86fcadd757438e6fc651df0fa70786af74669533bd233ca1c0c5cec2ba946bdeceb06075905882271f418ffcb5eafb5fa97c9938ccc9080510b2e023071a4da9f1863a4341b2d8c277feb1b7bed212725beacb741bef88fd10e1b192f7e4e0d30d5ea844e5ad221bcdb06bf2620388e46ed18f004bea5a0721340457353624055f01f94cc6ede8093ef4634ad8dfe888ec2eac5e520b5e1a178f75cc655928b2129bf71a8ad7cb3ed61461e52b60ac1242c76e1178a14c81dec9755b7e3d9bd69e04941b9cbbffb13a4be49695e12ed39adb6c6255b3e66c21f68246c8473393789332ec6a5b59e1e6718fa2b15ac6d717dfc822e58ed4a66f7b634d737f92f852d6d1664d1b7d25d1d891807b084cdf8eb6a1b245dd701e4224bdb2d72b72be004e03cb81cb284db46c8ae118f5c8c70e5b0462b1a5f72348d4179872b2f05791fddf4ea63a5508a6522d037b9ac9f290628d09095b5ef1a6790164ba5bac13d83d04ffa19ff78419f3df33740954d9f404cf5495bfabdd68aeb090c6f182c90e1833a7944c447e217839a84bc957dea7beea2f062bf43ee034cb8c37b9fb31dc99d22cd572be01b61419dd4df96f73ec66168ea0cfebed6a55ea816e4f73a52e0771168924c702ecd0486d1ec37602606c16b7d4f4771e89161c1dc3aaa394d0891a34ee7ab9abc7e22b0884572fae71111052f0c28ce4af6257c26eed0fc21b807d08682b5bad31eb0b9ee277e3c969e935f403d6760519019f6d9c9bccbcf13efbc5e852931baf6275e240f594003d91731afe6a5a16f792e267ca66452a693457dacd9db84703bdcbaf92430cee3c58f26791e40f383dd3b8ca47f0f950ee3d39e54d97ca24438688a96c410a20796d70c123dd41b74ae8b59ac7dfe7228a557960ac18e6cb1ff8aa667bc1512b46a85100709c515431019c40c398734864e1012be2dfed6c3d92ec8a5f4a2b571ca80eee1c5e70cee267a611c12dcc7cd195abfc3bc2ebb89dd5474c85f634e176be08bc00e42ce837f1287ea343c9d60459b9dda4bcfeb613ed61f4fdac328fc27de86d3f4c95d03b3daf9162ad09414a692b9b29bb0062f8104883231b0051898991f6a9b4ad3a77a7468adb7e4e81cefd04d1af0388b151fe98354eca6e66985ea05178cebeb41232a83d2a73890d946f7ddd76574b4188873493c2913d5d0932573d69a24428c2670a3f2f253b5ec50ebe3f830f0ae110ce5434d293cf880690f07fc2beb50d49003860d4de000b6f7d38f28c4c2bf624d4c9cd9090a7f67d8fb72b06a43b2e9f37901d196c19e32925f6f73bc6a4f8a75e0517db8c8a04aaf2eb0a8640d093e53ef6a7e50b5d039520a7af8e13e38ac1c29b1b1a1507c181a1e941bbe79f54674d660d3e08c042faaa659c0845624d61719a7347fa217095ee89bf0999fbdeebde7998aef9de0f2994aabee0fd4e4be5551afc8ad120f6a861f7cb6a14a86bb8e392b6d296c02e59fa9f1a1a70b79a0bbf14654d5281aeeee5b4d8c5272111c76d1c5bdff15e3ff0b2938fcc327a85973d3b2d955a21fa1ea4c16d9f023cfba3df49a381d15359de873abf68c5507513ce05edb612eea448fa02c216f91524e2af3bf1cf9e50c1c60255d9d156d9656fbee3785568df3d9ce397375de7622288063c9334d6ba102ad56a85c9beeb3feb6be62361255a553b1b8d88dc4afee1cb5f284d08d5dd7841e4d738a25165141a6ee762e9ef2bd77006e2ca8dcfcb2d72775c62fa02389216fb029659a2b3bf4d12b4e2cf903307ea4babd6385999944ffdb25d0cbb438552961a6b9ff7053870d768d8e2d950fab73782c61c50cc31b38b66dc2a574ef28b535d338d56cd4640003017ad067837ec61b7a0fe4759ef8b333eb7a816288508a7c25995c4dd34ff29611a08118121bdd820d2dc6102b5c346ce9eda9e9c6c644a3feb29a064350beb626dbf8122dde26f7de47316ffc71c5a58e16b0493bca24dcbb1c59eab66227ae58abc3e05e81f6753cda8900beb9818fc0eecdf7573ac19c00d8fa928eaaabd99fe257233c4438212d3270de6aea6f6aa15489d841f63fa5b1197e62b0eb02094fbe0d75ee40832639af6575eae1552cebc41e9fb9b54a9f96f16b8c5ef023c44ecf2a2f8b621ce26083b95d152f6dd30cd4ee8735d2ce143e69cdc5240f354158de996bfed783da1a0ac6f8beb77677f4ee340dce51a5ee711daffdb8df34ea681f23219cf947594191b2daa3594a70e6e1f6d4972e252fdbfe56194ba6025a785b2ca87bd739267ccf290a2c81378c10f13e620aab5679600d02aade70bde435970fb9544cd5c15aa00d10b1d189da1350380b07cd8828a98552bb00a8731bfa633ecb382a1562591d9e6b072d33fd6c47c1b7ef59bb3f620002215a229d34592680dd993186e876010cba4cccaf3611ad079cb114c7d417b987783fa7cace360273741cc1965bc710bac0a0ebeec116399319824e65e0c34f0d0bdce6df8cb24242026977eece1565679db4ef63fd079c2adb3238b8b53efc726d4bdbddc0191f2a83eaf78ba6a1f319bbe1da01ba11d63c60f01d1507643f21184a5595fc9683e0f174debfd2974e0a62d4d044fb1a1832ac430cb960ceebcceecf7474889ddfe537533be8d2835197ff6e3b81283b341f550d9548dfd06c3f8c913a07c50a4e964e0d7e2382eb3519d5b607371ba6eb1beee21982a8fa300ce184c1d48b54e3c7cb89ddd8f2289dfae1a3c3ec5e868bd5b71bc2964b0bb55b61baf9b3459dfd6fd3c3ccebb85d28202d8d9e9f7722030047a3edd5759b0017500b0b72d60219cf356ad81ca61b592983ea054d58d4f65bbf4e419e5178110b6122d89a376cda29e1ab88c3a2cb4c4fbbc55e66a06b7039a94d2b03ffa70007e63850c8f3df5ebf672f6a59e5f7afdadd57bb368f14a2e76c8a1a9d3cb01065da96f3e341682f4c1aa183434ea6d9b51bf99f7281b0b5239aa6cf7e46c402da696308a493ca4447ce0e5fef19e47848d20e2d57815d7c672b0a2150274c5126bbfe938cda06c4a00e3c817f62ea9764ee4407a1fca34e4c649fb36c94908b32c2a4faf1af3ada0cb8e83962d44abd0ab03acf42bb7d4bc85ef9aefda4e08eb74697a62e54b9b324519e54e9130a34bf87f2e285d446cc5f7a8f1a465bc56fd2feae3b72d51e21cc549479af30159820c92194e596264a14c6f2e300c63b6e042a2c5d1137cc03b193d953a3f77f068c129e56c5f68f3e82194b56b825a2cd6da9ee5292cfc6fc5dd2dac41379f0a3ca44a2d796eaa0d6eb608be74e61af8f280a7522797c919817043e2076545d7ae106b685b4f98b0b48de591764069db3d591f2d91c24c3f2c78d02958d83bc2b909f58c6f5ac2fe51f79f6c7151e1656e594adebfd70908800421285c7f22a560d1896005daea03335902b4188d3a20bbfaf33da044880843fb1335f8603d2aafe07a2f9e61bc77d764fb5919a21c0079bda34bf47d09b62831b8ae28", 0x1000, 0x30}]}) getsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000001f40), &(0x7f0000001f80)=0xe) getsockopt$SO_NETNS_COOKIE(r2, 0x1, 0x47, &(0x7f0000001fc0), &(0x7f0000002000)=0x8) connect$can_j1939(r2, &(0x7f0000002040)={0x1d, r3, 0x3, {0x2, 0x1, 0x7}, 0x2}, 0x18) r6 = getpid() write$cgroup_pid(r5, &(0x7f0000002080)=r6, 0x12) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000008, 0x11, r7, 0x80000000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f00000021c0)={&(0x7f00000020c0), 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x20, r8, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x13}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002240), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x4c, r9, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x6a5e8f95}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xcd}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0xd1156475182e08b3) pipe(&(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000023c0)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0x5, '\x00', r3, r11, 0x3, 0x3, 0x3}, 0x50) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000002480), r11) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x24, r12, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2d}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x40040) 1m38.938329219s ago: executing program 3 (id=4643): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002002000000008000500000000002c0004800800010000000002200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x18, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}]}, 0x40}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r5, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r5, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r6, 0x20, &(0x7f00000007c0)={&(0x7f0000000740)=""/51, 0x33, 0x0, 0x0}}, 0x10) 1m38.249134561s ago: executing program 0 (id=4644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0xfffffffc, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x20}}, 0x0) syz_emit_ethernet(0xc7, &(0x7f0000000380)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @icmp={{0x1b, 0x4, 0x0, 0x3, 0xb9, 0x64, 0x0, 0x80, 0x1, 0x0, @multicast2, @empty, {[@rr={0x7, 0x23, 0x9c, [@empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102, @rand_addr=0x64010100, @rand_addr=0x64010102, @multicast1]}, @timestamp_addr={0x44, 0x34, 0xe4, 0x1, 0x4, [{@empty, 0x5}, {@multicast2, 0x149e4ac9}, {@initdev={0xac, 0x1e, 0x6f, 0x0}, 0x7}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@local, 0x7f}]}]}}, @parameter_prob={0xc, 0x0, 0x0, 0x1, 0x41, 0x0, {0x10, 0x4, 0x1, 0x3e, 0x2, 0x65, 0x100, 0x1, 0xaf, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, {[@noop, @timestamp_prespec={0x44, 0x14, 0x4a, 0x3, 0x1, [{@local, 0xfff}, {@broadcast, 0x5}]}, @generic={0x1, 0x5, "db335f"}, @generic={0x44, 0xf, "7be2e2e4a10a05a2059a71b47c"}]}}, "0a11a30850"}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a001800030303030303000004005a80"], 0x2c}}, 0x0) 1m37.689795364s ago: executing program 4 (id=4645): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x10, 0x3f5, 0x8, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000300), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000340), 0x10) close(0x3) sendmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000071103500000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x198, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000006c0], 0x700, 0x0, &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x5, 0x8914, 'bridge_slave_1\x00', 'veth0_to_hsr\x00', 'pimreg1\x00', 'geneve0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @random="66cf8275df8b", [0x0, 0xff, 0x0, 0xff, 0xff], 0x0, 0x70, 0xa8, 0xd8, [], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}], @common=@STANDARD={'\x00', 0x8}}]}]}, 0x210) 1m35.961242066s ago: executing program 33 (id=4634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x21, @mcast2, 0x6}, 0x1c) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff0500000000000000000000000000014e204e20"], 0x9e) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0xf0, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x33, @ipv4=@empty, @ipv4=@rand_addr=0x64010102}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000c80)={'wlan1\x00', &(0x7f0000000c40)=@ethtool_modinfo={0x42, 0x51d}}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x3a000000, {0x0, 0x0, 0x0, 0x0, 0x1, 0x46000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x3c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) 0s ago: executing program 34 (id=4644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0xfffffffc, 0xfffffffe, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x20}}, 0x0) syz_emit_ethernet(0xc7, &(0x7f0000000380)={@local, @random="08c82553c54d", @void, {@ipv4={0x800, @icmp={{0x1b, 0x4, 0x0, 0x3, 0xb9, 0x64, 0x0, 0x80, 0x1, 0x0, @multicast2, @empty, {[@rr={0x7, 0x23, 0x9c, [@empty, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102, @rand_addr=0x64010100, @rand_addr=0x64010102, @multicast1]}, @timestamp_addr={0x44, 0x34, 0xe4, 0x1, 0x4, [{@empty, 0x5}, {@multicast2, 0x149e4ac9}, {@initdev={0xac, 0x1e, 0x6f, 0x0}, 0x7}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@local, 0x7f}]}]}}, @parameter_prob={0xc, 0x0, 0x0, 0x1, 0x41, 0x0, {0x10, 0x4, 0x1, 0x3e, 0x2, 0x65, 0x100, 0x1, 0xaf, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, {[@noop, @timestamp_prespec={0x44, 0x14, 0x4a, 0x3, 0x1, [{@local, 0xfff}, {@broadcast, 0x5}]}, @generic={0x1, 0x5, "db335f"}, @generic={0x44, 0xf, "7be2e2e4a10a05a2059a71b47c"}]}}, "0a11a30850"}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a001800030303030303000004005a80"], 0x2c}}, 0x0) kernel console output (not intermixed with test programs): ntered promiscuous mode [ 530.298784][T18972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.302681][T18972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.364476][T18972] team0: Port device team_slave_0 added [ 530.367988][T18972] team0: Port device team_slave_1 added [ 530.414128][T18972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.414147][T18972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.414171][T18972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.416325][T18972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.416339][T18972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.416365][T18972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.547967][T18972] hsr_slave_0: entered promiscuous mode [ 530.548993][T18972] hsr_slave_1: entered promiscuous mode [ 530.549838][T18972] debugfs: 'hsr0' already exists in 'hsr' [ 530.549858][T18972] Cannot create hsr debugfs directory [ 530.588039][T19140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 530.835837][T19191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3294'. [ 530.866407][T19193] bond0: Error: CAN devices cannot be enslaved [ 530.905381][T19197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3296'. [ 531.025331][T19191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3294'. [ 531.508404][T18972] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.508443][T18972] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 531.815950][ T30] audit: type=1107 audit(1793485063.346:5): pid=19222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='×÷éÖg¦Ÿ'2©rRÏÉu´ÆdrÛ}9f÷â0Ümª<áŽÎ_ŠjçÊvÉr³iV^æ~ò5ý®©°ÊZ¼Y؆•³}U#ÈXÔª°;Û–ôº¯ \[õÐxö|§›[dÏ©+{9:ع{>‘pÁo¶ôX¹ÈÇV·g [ 531.815950][ T30] ÓA–ò™÷í%?fuüÈHûÚæ7BaVÌ’¶‚𘠜˜P*‹æì:t„4æq‰í§fÞ„ªqãŽÜjAæs' [ 531.867458][T18972] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.867496][T18972] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 532.189790][T18972] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.189826][T18972] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 532.190512][T19231] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 532.387473][T19237] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3307'. [ 532.523112][T19236] syzkaller1: entered promiscuous mode [ 532.523137][T19236] syzkaller1: entered allmulticast mode [ 532.932336][T19260] __nla_validate_parse: 1 callbacks suppressed [ 532.932359][T19260] netlink: 5740 bytes leftover after parsing attributes in process `syz.2.3310'. [ 533.564613][T18972] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 533.589846][T18972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.590750][T18972] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 533.640226][T18972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.642751][T18972] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 533.668256][T18972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 533.670802][T18972] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 533.719457][T18972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 533.803396][T19285] tipc: Enabled bearer , priority 9 [ 533.810442][T19288] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3315'. [ 533.998625][T19301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3317'. [ 534.039567][T18972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.144324][T18972] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.179362][T17260] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.179469][T17260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.231634][T17231] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.231770][T17231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.284309][T18972] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 534.284336][T18972] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.914717][ T8000] tipc: Node number set to 3054239173 [ 537.139670][T18972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.327328][T18972] veth0_vlan: entered promiscuous mode [ 537.367687][T18972] veth1_vlan: entered promiscuous mode [ 537.661416][T18972] veth0_macvtap: entered promiscuous mode [ 537.714907][T18972] veth1_macvtap: entered promiscuous mode [ 537.853125][T18972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.919280][T18972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.034373][T17258] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.034791][T17258] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.034827][T17258] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.034873][T17258] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.767790][T17244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.767812][T17244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.941214][T19417] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3341'. [ 539.041337][T17262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.041360][T17262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.158861][T19421] netlink: 'syz.1.3342': attribute type 1 has an invalid length. [ 539.332668][T19421] bond1: entered promiscuous mode [ 539.336451][T19421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 540.161056][T19465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3346'. [ 540.310744][ T3309] IPVS: starting estimator thread 0... [ 540.346381][T19477] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3349'. [ 540.404205][T19479] IPVS: using max 33 ests per chain, 79200 per kthread [ 540.737399][T19487] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3352'. [ 540.789905][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3350'. [ 541.238393][ T5649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 541.242509][ T5649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 541.259675][ T5649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 541.262571][ T5649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 541.263169][ T5649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 541.628221][T19520] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3359'. [ 541.650595][T19517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3358'. [ 542.188510][T17229] IPVS: starting estimator thread 0... [ 542.189494][T19535] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 542.274747][T19537] IPVS: using max 26 ests per chain, 62400 per kthread [ 542.408834][T19544] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3362'. [ 542.618313][T19507] rxe_eth0 speed is unknown, defaulting to 1000 [ 543.159615][T19556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3366'. [ 543.365243][T19509] Bluetooth: hci2: command tx timeout [ 543.775023][T19582] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 543.881764][T19589] Bluetooth: MGMT ver 1.23 [ 543.881801][T19589] Bluetooth: hci0: unsupported parameter 5161 [ 543.881815][T19589] Bluetooth: hci0: unsupported parameter 8192 [ 543.881829][T19589] Bluetooth: hci0: unsupported parameter 5161 [ 543.881841][T19589] Bluetooth: hci0: unsupported parameter 8192 [ 543.939520][T19589] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 544.443682][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3374'. [ 544.443717][T19599] netlink: 'syz.1.3374': attribute type 5 has an invalid length. [ 544.443732][T19599] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3374'. [ 544.502630][T19599] geneve2: entered promiscuous mode [ 544.502654][T19599] geneve2: entered allmulticast mode [ 544.519475][T19507] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.519709][T19507] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.519872][T19507] bridge_slave_0: entered allmulticast mode [ 544.523132][T19507] bridge_slave_0: entered promiscuous mode [ 544.555439][T19507] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.555603][T19507] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.555731][T19507] bridge_slave_1: entered allmulticast mode [ 544.557482][T19507] bridge_slave_1: entered promiscuous mode [ 544.593302][T19601] tipc: Failed to remove unknown binding: 66,1,1/0:2610233108/2610233110 [ 544.630275][T19507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.646598][T19507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.708381][T19507] team0: Port device team_slave_0 added [ 544.712222][T19507] team0: Port device team_slave_1 added [ 544.759760][T19507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.759779][T19507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.759804][T19507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.761847][T19507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.761860][T19507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.761886][T19507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.912568][T19507] hsr_slave_0: entered promiscuous mode [ 544.919335][T19507] hsr_slave_1: entered promiscuous mode [ 544.920114][T19507] debugfs: 'hsr0' already exists in 'hsr' [ 544.920134][T19507] Cannot create hsr debugfs directory [ 544.925644][T17229] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 544.928037][ T3309] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 544.928129][ T3309] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 544.928162][ T3309] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 545.391795][T19507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.416212][T19507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.416254][T19507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 545.446173][T19509] Bluetooth: hci2: command tx timeout [ 545.541967][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3380'. [ 546.044675][T19507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.044711][T19507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.044737][T19507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 546.272215][T19639] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 546.495452][T19507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.495496][T19507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.495522][T19507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 546.591462][T19651] netlink: 'syz.3.3388': attribute type 4 has an invalid length. [ 546.772112][T19653] bond1: option lp_interval: invalid value (0) [ 546.772138][T19653] bond1: option lp_interval: allowed values 1 - 2147483647 [ 546.802244][T19653] bond1 (unregistering): Released all slaves [ 547.115344][T19507] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.115383][T19507] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.115409][T19507] netdevsim netdevsim2  (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 547.409374][T19680] ieee802154 phy0 wpan0: encryption failed: -22 [ 547.524683][T19509] Bluetooth: hci2: command tx timeout [ 547.855018][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3396'. [ 547.855960][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3396'. [ 547.856760][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3396'. [ 547.896882][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3396'. [ 547.897380][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3396'. [ 547.897870][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3396'. [ 547.898320][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3396'. [ 547.990933][T19698] Bluetooth: MGMT ver 1.23 [ 548.056502][T19695] netlink: 'syz.4.3394': attribute type 4 has an invalid length. [ 548.140424][T19684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 548.227826][T19695] .`: renamed from bond0 [ 548.274698][T19507] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 548.322917][T19507] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 548.338211][T19507] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 548.391779][T19507] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 548.467528][T19507] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 548.505639][T19507] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 548.512966][T19507] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 548.572207][T19507] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 548.706511][T19717] bond0: option miimon: invalid value (18446744071829782528) [ 548.706540][T19717] bond0: option miimon: allowed values 0 - 2147483647 [ 548.878033][T19719] netlink: 'syz.4.3402': attribute type 15 has an invalid length. [ 548.947385][T19736] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 549.079771][T19507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.157783][T19742] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 549.236372][T19507] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.280072][T17262] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.280181][T17262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.349995][T17229] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.350108][T17229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.498221][T19751] __nla_validate_parse: 35 callbacks suppressed [ 549.498243][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3409'. [ 549.610380][T19509] Bluetooth: hci2: command tx timeout [ 550.072461][T19776] netlink: 'syz.0.3416': attribute type 1 has an invalid length. [ 550.310766][T19787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3420'. [ 550.544513][T19795] xt_l2tp: v2 doesn't support IP mode [ 550.564978][T19798] xt_l2tp: v2 doesn't support IP mode [ 550.571461][T19796] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3422'. [ 551.461512][T19507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.698866][T19507] veth0_vlan: entered promiscuous mode [ 551.756543][T19507] veth1_vlan: entered promiscuous mode [ 552.021104][T19507] veth0_macvtap: entered promiscuous mode [ 552.072523][T19507] veth1_macvtap: entered promiscuous mode [ 552.074405][T17258] IPVS: starting estimator thread 0... [ 552.152080][T19854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3431'. [ 552.178295][T19855] IPVS: using max 31 ests per chain, 74400 per kthread [ 552.343391][T19507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.353220][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3434'. [ 552.409841][T19507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.494999][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.509150][T17260] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.509313][T17260] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.509348][T17260] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.726780][T19840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 554.731163][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3431'. [ 555.247402][T19894] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3439'. [ 555.299253][T17260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.299277][T17260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.337040][T19897] IPv6: NLM_F_CREATE should be specified when creating new route [ 555.516001][T19902] bond0: entered promiscuous mode [ 555.522579][T19902] bond0: left promiscuous mode [ 555.617463][T19911] netlink: 'syz.3.3442': attribute type 1 has an invalid length. [ 555.741469][T19917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3445'. [ 555.742901][T17262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.742921][T17262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.775954][T19921] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3446'. [ 555.888614][T19921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3446'. [ 556.303739][T19903] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 556.905830][T19960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3452'. [ 556.911565][T19969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3451'. [ 556.911605][T19969] netlink: 'syz.2.3451': attribute type 7 has an invalid length. [ 556.911617][T19969] netlink: 'syz.2.3451': attribute type 8 has an invalid length. [ 556.911628][T19969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3451'. [ 557.048526][T19974] openvswitch: netlink: nsh attr 0 has unexpected len 94 expected 0 [ 557.089134][T19969] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 557.215158][T19969] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 557.436788][T19969] erspan0: entered promiscuous mode [ 557.462361][T19969] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 557.590056][T19995] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3456'. [ 557.605531][T19509] Bluetooth: hci0: command 0x0c1a tx timeout [ 558.287348][T20012] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3463'. [ 558.474607][T20023] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 558.478281][T20005] syzkaller1: entered promiscuous mode [ 558.478303][T20005] syzkaller1: entered allmulticast mode [ 558.989284][T20048] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 558.989718][T17262] IPVS: starting estimator thread 0... [ 559.104783][T20050] IPVS: using max 34 ests per chain, 81600 per kthread [ 559.150638][T20055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.368837][T20061] syzkaller0: entered promiscuous mode [ 559.368877][T20061] syzkaller0: entered allmulticast mode [ 560.963611][T19509] Bluetooth: hci2: command tx timeout [ 561.453207][T20024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 561.626884][T20071] __nla_validate_parse: 3 callbacks suppressed [ 561.626905][T20071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3477'. [ 561.749286][T20075] tc action pedit offset 0 out of bounds [ 561.749309][T20075] tc action pedit offset 0 out of bounds [ 561.749320][T20075] tc action pedit offset 0 out of bounds [ 561.749330][T20075] tc action pedit offset 0 out of bounds [ 561.749341][T20075] tc action pedit offset 0 out of bounds [ 561.749352][T20075] tc action pedit offset 0 out of bounds [ 561.749362][T20075] tc action pedit offset 0 out of bounds [ 561.749373][T20075] tc action pedit offset 0 out of bounds [ 561.749383][T20075] tc action pedit offset 0 out of bounds [ 561.749394][T20075] tc action pedit offset 0 out of bounds [ 561.749417][T20075] 0: reclassify loop, rule prio 0, protocol 800 [ 562.142590][T20088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3478'. [ 562.507271][T20111] netlink: 'syz.4.3485': attribute type 2 has an invalid length. [ 562.571983][T20113] netlink: 'syz.4.3485': attribute type 2 has an invalid length. [ 562.721083][T20118] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3487'. [ 562.752734][T20118] netlink: 'syz.3.3487': attribute type 11 has an invalid length. [ 562.851246][T20131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3490'. [ 562.905036][T20136] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.015808][T20139] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3493'. [ 563.055518][T20129] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 563.056199][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.232211][T20144] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3494'. [ 563.596150][T20151] netlink: 'syz.0.3495': attribute type 12 has an invalid length. [ 563.596174][T20151] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3495'. [ 563.603115][T20164] Bluetooth: MGMT ver 1.23 [ 563.644760][T17232] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.671187][T17232] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.671268][T17232] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.674805][T17231] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.857739][T20169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3503'. [ 563.857764][T20169] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3503'. [ 563.857809][T20169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3503'. [ 564.263520][T20185] netlink: 'syz.1.3506': attribute type 4 has an invalid length. [ 564.286382][T20185] netlink: 'syz.1.3506': attribute type 4 has an invalid length. [ 564.428587][T20185] netlink: 'syz.1.3506': attribute type 4 has an invalid length. [ 564.428733][T20194] netlink: 'syz.1.3506': attribute type 4 has an invalid length. [ 564.857944][T20222] openvswitch: netlink: Key 24 has unexpected len 0 expected 4 [ 565.092940][T20230] tc action pedit offset must be on 32 bit boundaries [ 566.027243][T20281] netlink: 'syz.2.3530': attribute type 64 has an invalid length. [ 566.683724][T20304] batman_adv: batadv0: Adding interface: syzkaller0 [ 566.683742][T20304] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.683951][T20304] batman_adv: batadv0: Interface activated: syzkaller0 [ 566.980804][T20303] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 567.012670][T20303] batman_adv: batadv0: Removing interface: syzkaller0 [ 567.262236][T20318] syzkaller1: entered promiscuous mode [ 567.262260][T20318] syzkaller1: entered allmulticast mode [ 567.392320][T20330] __nla_validate_parse: 8 callbacks suppressed [ 567.392342][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3547'. [ 567.679930][T20337] netlink: 'syz.0.3549': attribute type 3 has an invalid length. [ 567.725873][T20339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3550'. [ 568.237091][T20355] ovs-dp0: entered promiscuous mode [ 568.961450][T20390] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 569.338920][T20413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3567'. [ 569.481864][T20416] netlink: 'syz.3.3568': attribute type 1 has an invalid length. [ 569.481902][T20416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3568'. [ 569.832901][T20422] Cannot find add_set index 65532 as target [ 570.052996][T20426] netlink: del zone limit has 4 unknown bytes [ 570.123073][T20428] xt_hashlimit: size too large, truncated to 1048576 [ 570.209358][T20431] xt_hashlimit: size too large, truncated to 1048576 [ 570.407156][T20437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3574'. [ 570.487374][T20440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3575'. [ 571.248521][T20457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3578'. [ 571.263793][T20461] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 571.386003][T20466] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3581'. [ 571.704586][T20473] sctp: [Deprecated]: syz.4.3582 (pid 20473) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.704586][T20473] Use struct sctp_sack_info instead [ 572.028928][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3586'. [ 572.409677][T20493] xt_TCPMSS: Only works on TCP SYN packets [ 572.462165][T20495] xt_TCPMSS: Only works on TCP SYN packets [ 573.069004][T20521] netlink: 408 bytes leftover after parsing attributes in process `syz.3.3599'. [ 573.216868][T20533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3603'. [ 573.881394][T20538] gretap0: entered promiscuous mode [ 573.946978][T17262] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 573.947216][T17262] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 574.427004][ T7998] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 574.822044][ T7998] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 574.831673][T20577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3615'. [ 574.879500][ T7998] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 574.892468][T20577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3615'. [ 575.179747][T20585] netlink: 'syz.0.3618': attribute type 1 has an invalid length. [ 575.252195][T20589] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3620'. [ 575.375682][T20585] bond1: entered promiscuous mode [ 575.383762][T20585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.551302][T20594] bond1: (slave bridge1): making interface the new active one [ 575.551330][T20594] bridge1: entered promiscuous mode [ 575.562208][T20594] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 575.675894][T20598] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 575.675922][T20598] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 575.789430][T20603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3621'. [ 575.789670][T20603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3621'. [ 575.789873][T20603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3621'. [ 575.790079][T20603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3621'. [ 575.790276][T20603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3621'. [ 578.083699][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 578.402828][T20682] netlink: 'syz.0.3643': attribute type 1 has an invalid length. [ 578.402851][T20682] __nla_validate_parse: 64 callbacks suppressed [ 578.402862][T20682] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.3643'. [ 578.549339][T20684] netlink: 'syz.0.3643': attribute type 1 has an invalid length. [ 578.549363][T20684] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.3643'. [ 578.800923][T20694] ipt_rpfilter: unknown options [ 579.100288][T20704] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 579.198949][T20706] syzkaller1: entered promiscuous mode [ 579.199141][T20706] syzkaller1: entered allmulticast mode [ 580.189990][T20735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3657'. [ 580.234910][T20740] netlink: 'syz.3.3659': attribute type 1 has an invalid length. [ 580.234935][T20740] netlink: 'syz.3.3659': attribute type 2 has an invalid length. [ 580.261190][T20740] Bluetooth: MGMT ver 1.23 [ 580.467851][T20748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3662'. [ 580.776026][T19509] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 580.936182][T20759] bond0: entered promiscuous mode [ 580.936250][T20759] bond0: entered allmulticast mode [ 580.937873][T20759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.107674][T20764] x_tables: duplicate underflow at hook 2 [ 581.391565][T20762] rxe_eth0 speed is unknown, defaulting to 1000 [ 581.540194][T20779] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 581.852397][T20790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3674'. [ 581.946549][T20792] netlink: 'syz.1.3676': attribute type 178 has an invalid length. [ 582.246109][T20798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3678'. [ 582.296449][T20798] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3678'. [ 582.296662][T20798] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3678'. [ 582.296845][T20798] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3678'. [ 582.297029][T20798] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3678'. [ 582.570806][T20807] netlink: 'syz.4.3679': attribute type 1 has an invalid length. [ 583.121417][T20813] openvswitch: netlink: Flow actions attr not present in new flow. [ 583.861033][T20825] __nla_validate_parse: 30 callbacks suppressed [ 583.861056][T20825] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3686'. [ 585.030150][T20855] netlink: 'syz.2.3695': attribute type 3 has an invalid length. [ 585.058319][T20855] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 585.058588][T20857] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 585.341581][T20866] netlink: 'syz.2.3699': attribute type 2 has an invalid length. [ 585.356662][T20866] netlink: 'syz.2.3699': attribute type 7 has an invalid length. [ 585.356684][T20866] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3699'. [ 585.369304][T20870] netlink: 'syz.2.3699': attribute type 7 has an invalid length. [ 585.369324][T20870] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3699'. [ 585.583377][T20869] netlink: 'syz.2.3699': attribute type 2 has an invalid length. [ 585.848439][T20882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3703'. [ 585.969345][T20875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3701'. [ 586.141339][T20894] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20002 [ 586.300398][T20893] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 586.312968][T20893] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 586.312985][T20893] IPv6: NLM_F_CREATE should be set when creating new route [ 586.723471][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 586.791616][T20905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3709'. [ 586.851221][T20920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3712'. [ 586.872475][T20905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3709'. [ 587.104451][T20927] netlink: 'syz.1.3714': attribute type 21 has an invalid length. [ 587.104476][T20927] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3714'. [ 587.167448][T20905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3709'. [ 587.620385][T20942] xfrm1: entered promiscuous mode [ 587.620409][T20942] xfrm1: entered allmulticast mode [ 588.272911][T20964] sctp: [Deprecated]: syz.0.3725 (pid 20964) Use of struct sctp_assoc_value in delayed_ack socket option. [ 588.272911][T20964] Use struct sctp_sack_info instead [ 588.564526][T19509] Bluetooth: hci3: command tx timeout [ 588.896556][T21003] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 589.236947][T21011] syzkaller0: entered promiscuous mode [ 589.237135][T21011] syzkaller0: entered allmulticast mode [ 590.372219][T21060] __nla_validate_parse: 7 callbacks suppressed [ 590.372241][T21060] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3740'. [ 590.553697][T21065] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3743'. [ 590.831402][T21075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3747'. [ 590.997425][T21087] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 591.246989][T21092] 8021q: VLANs not supported on ip6gre0 [ 591.377512][T21098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3754'. [ 591.377551][T21098] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3754'. [ 591.646044][T21111] sctp: [Deprecated]: syz.0.3759 (pid 21111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.646044][T21111] Use struct sctp_sack_info instead [ 591.770703][T21115] IPVS: set_ctl: invalid protocol: 22 172.30.1.1:20002 [ 592.092373][T21112] syzkaller1: entered promiscuous mode [ 592.092400][T21112] syzkaller1: entered allmulticast mode [ 592.368884][T21135] netlink: 'syz.0.3765': attribute type 1 has an invalid length. [ 592.695933][ T5658] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 592.879433][T21141] xt_CT: No such helper "pptp" [ 593.200468][T21165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3773'. [ 593.292784][T21165] syzkaller0: entered promiscuous mode [ 593.292808][T21165] syzkaller0: entered allmulticast mode [ 593.321299][ T3309] syzkaller0: tun_net_xmit 70 [ 593.336084][T21165] syzkaller0: tun_net_xmit 64997 [ 593.640005][T21171] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3775'. [ 593.764911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.813225][T21185] vlan1: entered allmulticast mode [ 593.814179][T21185] veth1_virt_wifi: entered allmulticast mode [ 594.114316][T21200] netlink: 'syz.0.3781': attribute type 21 has an invalid length. [ 594.114347][T21200] IPv6: NLM_F_CREATE should be specified when creating new route [ 594.250004][ T5649] Bluetooth: hci2: ISO packet too small [ 594.250532][T21206] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3785'. [ 594.328206][T19509] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 594.440974][T21211] netlink: 'syz.2.3790': attribute type 1 has an invalid length. [ 594.620997][T21212] smc: net device veth1_to_team erased user defined pnetid S [ 594.713281][T21218] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3787'. [ 594.857849][T21221] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 595.843482][T19509] Bluetooth: hci5: command 0x0406 tx timeout [ 596.022771][T21234] xt_CT: You must specify a L4 protocol and not use inversions on it [ 596.099186][T21243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 596.922438][T21246] bond0: entered promiscuous mode [ 596.922463][T21246] bond_slave_0: entered promiscuous mode [ 596.946276][T21246] bond_slave_1: entered promiscuous mode [ 597.204139][T21247] netlink: 'syz.3.3797': attribute type 1 has an invalid length. [ 597.420681][T21259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3797'. [ 598.386212][ T3309] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.387297][ T3309] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.387337][ T3309] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.387372][ T3309] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 598.602457][T21273] syz_tun: entered allmulticast mode [ 598.652973][T21272] syz_tun: left allmulticast mode [ 599.397745][T21291] netlink: 'syz.1.3807': attribute type 3 has an invalid length. [ 600.392526][T21311] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 600.417851][T21312] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 602.152309][T21343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3818'. [ 602.152346][T21343] netlink: 'syz.1.3818': attribute type 5 has an invalid length. [ 602.152359][T21343] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3818'. [ 602.212317][T21349] netlink: 9720 bytes leftover after parsing attributes in process `syz.4.3820'. [ 602.304876][T21347] ip_tunnel: non-ECT from 172.30.1.4 with TOS=0x3 [ 602.347122][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3818'. [ 602.347153][T21354] netlink: 'syz.1.3818': attribute type 5 has an invalid length. [ 602.347164][T21354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3818'. [ 602.364096][T21359] netlink: 9720 bytes leftover after parsing attributes in process `syz.4.3820'. [ 602.587206][T21365] block nbd0: not configured, cannot reconfigure [ 604.610304][T21386] netlink: 'syz.1.3827': attribute type 1 has an invalid length. [ 604.643944][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 604.924031][T21396] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 605.126001][T21400] netlink: 'syz.1.3827': attribute type 4 has an invalid length. [ 605.258912][T21386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 605.448356][T21392] bond2: (slave ip6erspan0): making interface the new active one [ 605.479881][T21392] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 609.318363][T21445] netlink: 'syz.3.3843': attribute type 11 has an invalid length. [ 609.318389][T21445] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3843'. [ 610.739814][T21463] netlink: 'syz.2.3849': attribute type 14 has an invalid length. [ 610.840591][T21466] tipc: Trying to set illegal importance in message [ 611.347779][T21472] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3851'. [ 612.190732][T21487] bond1: option lp_interval: invalid value (0) [ 612.190760][T21487] bond1: option lp_interval: allowed values 1 - 2147483647 [ 612.262268][T21487] bond1 (unregistering): Released all slaves [ 612.789904][T21491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3855'. [ 612.811380][T21511] netlink: 'syz.1.3857': attribute type 3 has an invalid length. [ 612.936591][T21506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3857'. [ 613.528405][T21524] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20001 [ 614.743657][T21532] vlan2: entered allmulticast mode [ 614.743681][T21532] bond0: entered allmulticast mode [ 614.743694][T21532] bond_slave_0: entered allmulticast mode [ 614.744053][T21532] bond_slave_1: entered allmulticast mode [ 615.476342][T21549] FAULT_INJECTION: forcing a failure. [ 615.476342][T21549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.476585][T21549] CPU: 1 UID: 0 PID: 21549 Comm: syz.1.3861 Not tainted syzkaller #0 PREEMPT(full) [ 615.476608][T21549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 615.476625][T21549] Call Trace: [ 615.476633][T21549] [ 615.476642][T21549] dump_stack_lvl+0xe8/0x150 [ 615.476681][T21549] should_fail_ex+0x3eb/0x540 [ 615.476712][T21549] _copy_to_user+0x31/0xb0 [ 615.476740][T21549] simple_read_from_buffer+0xe1/0x170 [ 615.476771][T21549] proc_fail_nth_read+0x1bb/0x230 [ 615.476805][T21549] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 615.476840][T21549] ? rw_verify_area+0x24a/0x4c0 [ 615.476869][T21549] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 615.476898][T21549] vfs_read+0x213/0xa80 [ 615.476930][T21549] ? __pfx___mutex_lock+0x10/0x10 [ 615.476956][T21549] ? __pfx_vfs_read+0x10/0x10 [ 615.476983][T21549] ? __fget_files+0x2a/0x420 [ 615.477005][T21549] ? __fget_files+0x3a2/0x420 [ 615.477027][T21549] ? __fget_files+0x2a/0x420 [ 615.477055][T21549] ? fdget+0x1ac/0x250 [ 615.477087][T21549] ksys_read+0x150/0x270 [ 615.477115][T21549] ? __pfx_ksys_read+0x10/0x10 [ 615.477161][T21549] do_syscall_64+0x166/0x520 [ 615.477182][T21549] ? trace_irq_disable+0x3b/0x140 [ 615.477208][T21549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.477230][T21549] ? clear_bhb_loop+0x70/0xc0 [ 615.477255][T21549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.477280][T21549] RIP: 0033:0x7f9c98f5fd8e [ 615.477300][T21549] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 615.477318][T21549] RSP: 002b:00007f9c99e2efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 615.477340][T21549] RAX: ffffffffffffffda RBX: 00007f9c99e2f6c0 RCX: 00007f9c98f5fd8e [ 615.477355][T21549] RDX: 000000000000000f RSI: 00007f9c99e2f0a0 RDI: 000000000000000a [ 615.477368][T21549] RBP: 00007f9c99e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 615.477379][T21549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.477391][T21549] R13: 00007f9c992263f8 R14: 00007f9c99226360 R15: 00007fff04592d48 [ 615.477426][T21549] [ 617.884649][T21568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3867'. [ 618.039286][T21572] netlink: 'syz.1.3870': attribute type 1 has an invalid length. [ 618.039311][T21572] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3870'. [ 618.101771][T21570] netlink: 'syz.4.3868': attribute type 1 has an invalid length. [ 618.839381][T21570] bond2: entered promiscuous mode [ 618.850012][T21570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 619.291547][T21575] bond2: (slave bridge2): making interface the new active one [ 619.291572][T21575] bridge2: entered promiscuous mode [ 619.307857][T21575] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 619.504345][T21601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3873'. [ 619.504372][T21601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3873'. [ 619.530559][T21585] Bluetooth: hci0: unsupported parameter 5135 [ 619.530581][T21585] Bluetooth: hci0: unsupported parameter 8192 [ 619.530593][T21585] Bluetooth: hci0: unsupported parameter 5135 [ 619.530605][T21585] Bluetooth: hci0: unsupported parameter 8192 [ 619.735663][T21582] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.297561][T21600] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 621.037163][T21610] netlink: 'syz.2.3875': attribute type 29 has an invalid length. [ 621.043183][T21618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3876'. [ 621.091402][T21617] netlink: 'syz.0.3877': attribute type 11 has an invalid length. [ 621.286203][T21618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3876'. [ 621.444147][T19509] Bluetooth: hci1: command 0x0419 tx timeout [ 621.848749][T21620] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 622.795275][T21642] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 623.293541][T14782] Bluetooth: hci0: command 0x0c1a tx timeout [ 623.423081][T21649] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3884'. [ 624.495287][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.026983][T21686] ip_tables: iptables: counters copy to user failed while replacing table [ 625.279982][T21691] netlink: 'syz.0.3895': attribute type 29 has an invalid length. [ 626.164344][T17260] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.165651][T17260] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.165691][T17260] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.165727][T17260] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 626.306369][T21702] netlink: 'syz.1.3896': attribute type 3 has an invalid length. [ 627.730828][T21713] netlink: 'syz.3.3899': attribute type 3 has an invalid length. [ 627.730851][T21713] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3899'. [ 636.813179][T19509] Bluetooth: hci3: command 0x0406 tx timeout [ 639.086347][T21735] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3904'. [ 639.264177][T21737] team0: Cannot enslave team device to itself [ 640.483584][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 640.904547][T21762] netlink: 'syz.3.3909': attribute type 1 has an invalid length. [ 641.146520][T21773] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3911'. [ 641.272224][T21777] netlink: 30 bytes leftover after parsing attributes in process `syz.4.3912'. [ 641.356609][T21775] netlink: 'syz.1.3913': attribute type 21 has an invalid length. [ 641.356696][T21775] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3913'. [ 642.121855][T21787] Unsupported ieee802154 address type: 0 [ 642.288901][T21793] netlink: 'syz.2.3918': attribute type 1 has an invalid length. [ 642.288926][T21793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3918'. [ 643.030139][T21796] ip_tables: iptables: counters copy to user failed while replacing table [ 643.037457][T21803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3921'. [ 643.194364][T21808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3923'. [ 643.595802][T21801] syzkaller0: entered promiscuous mode [ 643.598006][T21801] syzkaller0: entered allmulticast mode [ 644.202303][T21824] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3924'. [ 644.926260][T21825] udevd[21825]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 644.954870][T21820] udevd[21820]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 646.625450][T21848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3931'. [ 646.626665][T21847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3931'. [ 655.678108][T21851] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 656.851290][T21870] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3938'. [ 657.284161][T19509] Bluetooth: hci0: command 0x0c1a tx timeout [ 657.937295][T21883] tipc: Started in network mode [ 657.937328][T21883] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 657.945562][T21883] tipc: Enabled bearer , priority 10 [ 658.257719][T21884] vlan3: entered allmulticast mode [ 658.257746][T21884] veth1_vlan: entered allmulticast mode [ 658.930973][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804ec5b800: rx timeout, send abort [ 658.933335][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804ec5b800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 659.063783][ T24] tipc: Node number set to 4269801491 [ 659.063819][T21900] ip6t_rpfilter: unknown options [ 659.208296][T21905] netlink: 'syz.2.3948': attribute type 3 has an invalid length. [ 659.208319][T21905] netlink: 'syz.2.3948': attribute type 3 has an invalid length. [ 660.252531][T21922] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3950'. [ 661.059900][T21929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3953'. [ 661.059931][T21929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3953'. [ 661.425875][T21933] netlink: zone id is out of range [ 661.428190][T21931] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 661.429418][T21936] xt_hashlimit: size too large, truncated to 1048576 [ 661.429852][T21931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3954'. [ 661.442212][T21931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3954'. [ 661.444315][T21931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3954'. [ 662.522412][T21949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3961'. [ 662.744766][T21948] x_tables: duplicate underflow at hook 1 [ 663.200730][T21964] ip6t_frag: unknown flags 6 [ 664.032318][T21977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3967'. [ 664.946442][T21989] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 665.026590][T21989] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 665.816077][T22006] IPv6: addrconf: prefix option has invalid lifetime [ 666.468892][T22012] batman_adv: batadv0: Adding interface: veth0 [ 666.468912][T22012] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.468945][T22012] batman_adv: batadv0: Interface activated: veth0 [ 666.857580][T22016] pim6reg: entered allmulticast mode [ 666.858145][T22012] pim6reg: left allmulticast mode [ 667.101801][T22018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.102002][T22018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.115696][T22018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.115890][T22018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.189069][T22018] batman_adv: batadv0: Interface deactivated: veth0 [ 667.189269][T22018] batman_adv: batadv0: Removing interface: veth0 [ 668.691811][T22038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3983'. [ 668.691838][T22038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3983'. [ 668.752682][T22028] bond3 (unregistering): Released all slaves [ 669.427884][T22038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3983'. [ 669.427911][T22038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3983'. [ 669.562228][T22046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 669.562245][T22046] IPv6: NLM_F_CREATE should be set when creating new route [ 669.562270][T22046] IPv6: NLM_F_CREATE should be set when creating new route [ 669.669991][T22048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 669.848379][T17244] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.852726][T17232] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.852768][T17232] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.852802][T17232] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 670.222592][T22059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3988'. [ 671.176064][T22075] netlink: 'syz.2.3991': attribute type 1 has an invalid length. [ 671.176087][T22075] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3991'. [ 671.176598][T22075] netlink: 'syz.2.3991': attribute type 1 has an invalid length. [ 671.176611][T22075] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3991'. [ 671.177093][T22075] netlink: 'syz.2.3991': attribute type 1 has an invalid length. [ 671.177107][T22075] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3991'. [ 671.177571][T22075] netlink: 'syz.2.3991': attribute type 1 has an invalid length. [ 671.177585][T22075] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3991'. [ 671.178066][T22075] netlink: 'syz.2.3991': attribute type 1 has an invalid length. [ 671.178079][T22075] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3991'. [ 671.178569][T22075] netlink: 'syz.2.3991': attribute type 1 has an invalid length. [ 671.181396][T22075] netlink: 'syz.2.3991': attribute type 1 has an invalid length. [ 671.181894][T22075] netlink: 'syz.2.3991': attribute type 1 has an invalid length. [ 671.307986][T22075] netlink: 'syz.2.3991': attribute type 1 has an invalid length. [ 671.308489][T22075] netlink: 'syz.2.3991': attribute type 1 has an invalid length. [ 673.890729][T22115] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 674.307554][T22119] __nla_validate_parse: 29 callbacks suppressed [ 674.307577][T22119] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4005'. [ 674.345567][T22121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4004'. [ 675.471803][T22122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4006'. [ 675.471957][T22122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.719700][T22122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.964544][T22149] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 676.007875][T22149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4013'. [ 678.520591][T22180] veth1_to_hsr: entered allmulticast mode [ 678.549698][T22176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4022'. [ 678.608953][T22180] validate_nla: 23 callbacks suppressed [ 678.608976][T22180] netlink: 'syz.4.4023': attribute type 64 has an invalid length. [ 678.610252][T22180] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.610896][T22180] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.042287][T22187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.475294][T22191] batman_adv: batadv0: Adding interface: syzkaller0 [ 679.475317][T22191] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.475350][T22191] batman_adv: batadv0: Interface activated: syzkaller0 [ 679.571458][T22198] netlink: 'syz.4.4030': attribute type 2 has an invalid length. [ 679.571490][T22198] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4030'. [ 679.631989][T22197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4028'. [ 680.262621][T22190] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 680.760834][T22190] batman_adv: batadv0: Removing interface: syzkaller0 [ 681.787677][T22230] xt_CT: You must specify a L4 protocol and not use inversions on it [ 681.951003][T22231] ip_tables: iptables: counters copy to user failed while replacing table [ 682.257679][T22237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4041'. [ 682.257717][T22237] netlink: 'syz.3.4041': attribute type 5 has an invalid length. [ 682.257732][T22237] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4041'. [ 682.259473][T22238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4041'. [ 682.259497][T22238] netlink: 'syz.3.4041': attribute type 5 has an invalid length. [ 682.259511][T22238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4041'. [ 682.551154][T22237] geneve2: entered promiscuous mode [ 682.551353][T22237] geneve2: entered allmulticast mode [ 682.588174][T17253] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 682.612271][T17232] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 682.636936][T17231] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 682.643317][ T3309] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 684.499639][ T30] audit: type=1107 audit(1793485216.036:6): pid=22284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='^èÚk$…?f3•*OØ’4}AG&§½9U£’3‚aÌkçaÁk¢eÐd72o]«[Úû•à§ô`JÁûGsMqW3sÄnË5 zYsÕšÆáÓàÖ»¨öåì×Ù{KŽÌF™*1‡ç}ð>RYÄŠéòëŸþ' [ 684.499639][ T30] ¹èø"ãùÚOÙ¾ìWwo®2B(ÂÏVÑãjMɆ†Ð1Ïõ«®Kp°äj›òù‡ÙÑ3ó`Ë [ 698.350863][ T5920] tipc: Left network mode [ 700.111631][T22403] netlink: 'syz.3.4071': attribute type 21 has an invalid length. [ 700.610892][T22377] pimreg3: entered allmulticast mode [ 700.808713][T22403] netlink: 'syz.3.4071': attribute type 6 has an invalid length. [ 700.808737][T22403] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4071'. [ 702.278807][T22440] netlink: 'syz.2.4074': attribute type 2 has an invalid length. [ 702.962365][T22453] netlink: 'syz.2.4077': attribute type 1 has an invalid length. [ 703.041624][T22457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4077'. [ 703.046923][T22457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4077'. [ 703.055467][T22457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4077'. [ 703.564853][T22431] sch_fq: defrate 0 ignored. [ 703.812206][T22444] sch_fq: defrate 0 ignored. [ 703.841006][ T5298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 704.828003][T22469] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4079'. [ 705.677530][T22481] netlink: 'syz.0.4082': attribute type 11 has an invalid length. [ 705.982991][T22485] sctp: [Deprecated]: syz.3.4083 (pid 22485) Use of int in max_burst socket option. [ 705.982991][T22485] Use struct sctp_assoc_value instead [ 706.102115][T22489] sctp: [Deprecated]: syz.3.4083 (pid 22489) Use of int in max_burst socket option. [ 706.102115][T22489] Use struct sctp_assoc_value instead [ 706.200745][T22492] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4084'. [ 706.200792][T22492] netlink: 'syz.4.4084': attribute type 8 has an invalid length. [ 706.200805][T22492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4084'. [ 706.262971][T22498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4084'. [ 706.263010][T22498] netlink: 'syz.4.4084': attribute type 8 has an invalid length. [ 706.263023][T22498] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4084'. [ 707.213424][T22506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4087'. [ 707.374317][T22510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4088'. [ 707.374361][T22510] block nbd0: Unsupported socket: should be TCP or UNIX. [ 708.448526][T22506] hsr_slave_1 (unregistering): left promiscuous mode [ 708.466600][T22517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4090'. [ 710.026382][T22540] ieee802154 phy0 wpan0: encryption failed: -22 [ 710.064999][T22539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4095'. [ 711.419685][ T5920] batadv0: left promiscuous mode [ 711.507373][ T5920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.507620][ T5920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.523401][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 711.622237][ T5920] veth1_macvtap: left promiscuous mode [ 711.622828][ T5920] veth0_macvtap: left promiscuous mode [ 711.623970][ T5920] veth1_vlan: left promiscuous mode [ 711.625359][ T5920] veth0_vlan: left promiscuous mode [ 716.510004][T22608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4105'. [ 717.948818][ T5920] team0 (unregistering): Port device team_slave_1 removed [ 718.209844][ T5920] team0 (unregistering): Port device team_slave_0 removed [ 721.027972][T22606] geneve3: entered promiscuous mode [ 721.028172][T22606] geneve3: entered allmulticast mode [ 721.179648][ T43] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 721.184934][T17231] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 721.185281][T17231] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 721.185318][T17231] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 722.130514][T22622] ip_tables: iptables: counters copy to user failed while replacing table [ 723.038971][T22636] bridge3: entered allmulticast mode [ 723.459144][ T5920] IPVS: stop unused estimator thread 0... [ 723.607603][T22652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4120'. [ 723.780269][T22652] bridge2: entered promiscuous mode [ 723.780468][T22652] bridge2: entered allmulticast mode [ 723.951234][T22652] team0: Port device bridge2 added [ 723.958718][T22657] bridge0: port 3(team0) entered blocking state [ 723.959183][T22657] bridge0: port 3(team0) entered disabled state [ 723.959530][T22657] team0: entered allmulticast mode [ 723.959546][T22657] team_slave_0: entered allmulticast mode [ 723.959926][T22657] team_slave_1: entered allmulticast mode [ 724.098785][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.099252][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.099687][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.100111][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.156290][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.156758][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.157228][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.157677][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.158131][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.160221][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.161520][T22657] team0: entered promiscuous mode [ 724.161540][T22657] team_slave_0: entered promiscuous mode [ 724.242868][T22657] team_slave_1: entered promiscuous mode [ 724.255022][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.255490][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.255933][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.256370][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.256806][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.257239][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.257692][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.257986][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.258417][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.258776][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.261161][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.261567][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.263502][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.275524][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.275984][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.276422][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.276864][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.331686][T22657] bridge0: port 3(team0) entered blocking state [ 724.331848][T22657] bridge0: port 3(team0) entered forwarding state [ 724.458276][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.458716][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.459154][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.459580][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.460003][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.460435][T22653] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.501991][T22666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4122'. [ 725.454299][T22676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4123'. [ 725.460819][T22676] hsr_slave_0: left promiscuous mode [ 725.493335][T22676] hsr_slave_1: left promiscuous mode [ 726.850823][T22696] netlink: 'syz.0.4128': attribute type 1 has an invalid length. [ 727.282050][T22692] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4127'. [ 727.671465][T22696] 8021q: adding VLAN 0 to HW filter on device bond3 [ 727.738370][T22699] bond3: (slave geneve2): making interface the new active one [ 727.754690][T22699] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 728.162394][T22727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4133'. [ 728.402161][T22733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4135'. [ 728.655058][T22740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4136'. [ 728.896199][T22745] x_tables: duplicate underflow at hook 1 [ 729.323103][T22755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4140'. [ 730.059505][T22767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4144'. [ 730.170868][T22774] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 731.131095][T22781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4148'. [ 731.565876][T22784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4148'. [ 731.566843][T22784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4148'. [ 731.567734][T22784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4148'. [ 731.568549][T22784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4148'. [ 731.569442][T22784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4148'. [ 731.572651][T22784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4148'. [ 732.699523][T22797] pim6reg1: entered promiscuous mode [ 732.699725][T22797] pim6reg1: entered allmulticast mode [ 733.541099][T22820] syzkaller0: entered promiscuous mode [ 733.541284][T22820] syzkaller0: entered allmulticast mode [ 733.874369][T17260] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.888740][ T43] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.910920][T22831] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 734.137410][ T3309] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.142861][ T3309] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.314241][T22839] __nla_validate_parse: 30 callbacks suppressed [ 734.314375][T22839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4162'. [ 734.468082][T22828] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.468210][T22828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.468572][T22828] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.468732][T22828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.531421][T22828] 8021q: adding VLAN 0 to HW filter on device .` [ 734.583027][T22828] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check. [ 734.935661][T22843] vlan0: entered promiscuous mode [ 734.935687][T22843] .`: entered promiscuous mode [ 734.935700][T22843] bond_slave_0: entered promiscuous mode [ 734.939475][T22843] bond_slave_1: entered promiscuous mode [ 734.945127][T22843] vlan0: left allmulticast mode [ 734.958680][T22843] .`: left allmulticast mode [ 734.958701][T22843] bond_slave_0: left allmulticast mode [ 734.959032][T22843] bond_slave_1: left allmulticast mode [ 735.468477][T22854] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4167'. [ 735.537454][T22855] syzkaller1: entered promiscuous mode [ 735.537642][T22855] syzkaller1: entered allmulticast mode [ 735.541914][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4167'. [ 735.541934][T22857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4167'. [ 735.714799][T22859] 8021q: adding VLAN 0 to HW filter on device bond4 [ 735.841218][T22869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4171'. [ 736.108624][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4167'. [ 736.108647][T22857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4167'. [ 736.110127][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4167'. [ 736.110143][T22857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4167'. [ 736.148266][T22857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4167'. [ 736.476031][T22874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 740.917733][T22929] vlan0: entered promiscuous mode [ 742.509409][ T5920] bond8: left allmulticast mode [ 742.545429][ T5920] bond8: left promiscuous mode [ 742.550590][ T5920] bridge0: port 3(bond8) entered disabled state [ 742.622293][ T5920] bond7: left allmulticast mode [ 742.623067][ T5920] bond7: left promiscuous mode [ 742.646099][ T5920] bridge0: port 1(bond7) entered disabled state [ 742.671489][ T5920] bridge_slave_1: left allmulticast mode [ 742.671821][ T5920] bridge_slave_1: left promiscuous mode [ 742.692573][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.702339][T22953] __nla_validate_parse: 6 callbacks suppressed [ 742.702355][T22953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4185'. [ 742.756235][T22956] netlink: 'syz.0.4185': attribute type 1 has an invalid length. [ 742.952870][T22951] can: request_module (can-proto-4) failed. [ 743.271575][T22967] netlink: 'syz.0.4185': attribute type 10 has an invalid length. [ 743.271599][T22967] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4185'. [ 747.148101][ T5920] bond1 (unregistering): (slave gretap1): Releasing active interface [ 747.395059][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.658701][ T5920] bond4 (unregistering): (slave gretap3): Releasing active interface [ 748.341830][ T5920] bond3 (unregistering): (slave geneve2): Releasing active interface [ 749.013986][ T5920] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 749.014015][ T5920] bridge2 (unregistering): left promiscuous mode [ 749.119020][ T5920] bond1 (unregistering): Released all slaves [ 749.242878][ T5920] bond2 (unregistering): Released all slaves [ 749.394930][ T5920] bond3 (unregistering): Released all slaves [ 749.498414][ T5920] bond4 (unregistering): Released all slaves [ 749.681128][ T5920] bond5 (unregistering): Released all slaves [ 749.777631][ T5920] bond0 (unregistering): Released all slaves [ 749.893143][ T5920] bond6 (unregistering): Released all slaves [ 749.998755][ T5920] bond7 (unregistering): Released all slaves [ 750.121912][ T5920] bond8 (unregistering): Released all slaves [ 750.179554][T22953] hsr_slave_0: left promiscuous mode [ 750.181571][T22953] hsr_slave_1: left promiscuous mode [ 750.340330][T22956] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 750.616690][T22967] dummy0: entered promiscuous mode [ 750.761952][ T5920] tipc: Left network mode [ 751.104548][T22996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4192'. [ 751.175610][ T5920] IPVS: stopping master sync thread 9393 ... [ 751.718529][T23004] batman_adv: batadv0: Adding interface: syzkaller0 [ 751.718553][T23004] batman_adv: batadv0: Interface activated: syzkaller0 [ 752.557365][T23022] netlink: 'syz.4.4197': attribute type 1 has an invalid length. [ 754.226879][T23042] idletimer_tg_helper: 23 callbacks suppressed [ 754.227010][T23042] xt_IDLETIMER: label is empty or not nul-terminated [ 754.979541][T23064] netlink: 376 bytes leftover after parsing attributes in process `syz.2.4207'. [ 755.206923][T23064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4207'. [ 755.212971][T23069] x_tables: duplicate underflow at hook 1 [ 755.329084][T23064] ip6gre2: entered promiscuous mode [ 755.329269][T23064] ip6gre2: entered allmulticast mode [ 756.200915][T23084] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 756.301549][T23087] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4213'. [ 756.301577][T23087] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4213'. [ 756.563376][T19509] Bluetooth: hci2: command 0x0405 tx timeout [ 756.570703][T23092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4215'. [ 756.704906][ T5920] veth0_macvtap: left promiscuous mode [ 756.706274][ T5920] veth0_vlan: left promiscuous mode [ 761.405944][T23156] netlink: 'syz.3.4227': attribute type 16 has an invalid length. [ 761.405970][T23156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4227'. [ 761.408189][T23157] netlink: 'syz.3.4227': attribute type 16 has an invalid length. [ 761.408207][T23157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4227'. [ 764.357487][T23118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4220'. [ 766.095405][ T5920] IPVS: stop unused estimator thread 0... [ 766.801164][T23208] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20000 [ 767.242129][T23233] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4240'. [ 767.242247][T23233] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 767.280092][T23232] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 768.003588][T19509] Bluetooth: hci1: command 0x0419 tx timeout [ 769.386073][T23268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4248'. [ 770.066164][T23271] tipc: Failed to obtain node identity [ 770.066396][T23271] tipc: Enabling of bearer rejected, failed to enable media [ 771.663213][T23294] netlink: 'syz.3.4254': attribute type 3 has an invalid length. [ 772.150189][T23308] lo: left promiscuous mode [ 772.150912][T23308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 772.208177][T23308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4259'. [ 772.922028][T23326] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4264'. [ 773.024877][T23326] netlink: 'syz.0.4264': attribute type 4 has an invalid length. [ 773.034197][T23326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4264'. [ 773.688236][T23340] netlink: 'syz.3.4268': attribute type 4 has an invalid length. [ 773.688261][T23340] netlink: 5620 bytes leftover after parsing attributes in process `syz.3.4268'. [ 773.955904][T23340] netlink: 196 bytes leftover after parsing attributes in process `syz.3.4268'. [ 774.647174][T23354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4272'. [ 774.647704][T23357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4272'. [ 775.520406][T23371] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20004 [ 775.827902][T23380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4276'. [ 775.925590][T23378] IPv6: addrconf: prefix option has invalid lifetime [ 776.682523][T23386] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4279'. [ 777.601904][T23414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4284'. [ 777.601934][T23414] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4284'. [ 778.070636][T23421] sctp: [Deprecated]: syz.0.4285 (pid 23421) Use of int in maxseg socket option. [ 778.070636][T23421] Use struct sctp_assoc_value instead [ 778.526431][T23440] __nla_validate_parse: 1 callbacks suppressed [ 778.526453][T23440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4288'. [ 778.659062][T23445] netlink: 'syz.4.4288': attribute type 1 has an invalid length. [ 778.672753][T23440] netlink: 'syz.4.4288': attribute type 1 has an invalid length. [ 779.261454][T23454] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4293'. [ 779.489493][T23451] bond5: entered promiscuous mode [ 779.489585][T23451] bond5: entered allmulticast mode [ 779.504253][T23451] 8021q: adding VLAN 0 to HW filter on device bond5 [ 780.548713][T23467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4296'. [ 780.728277][T23473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 782.503028][T23476] veth4: entered allmulticast mode [ 783.287295][T23511] batadv_slave_1: entered promiscuous mode [ 783.290588][T23509] hsr0: entered promiscuous mode [ 783.309118][T23509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4307'. [ 783.309537][T23509] hsr_slave_0: left promiscuous mode [ 783.311853][T23509] hsr_slave_1: left promiscuous mode [ 783.485140][T23512] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4306'. [ 783.511782][T23509] hsr0 (unregistering): left promiscuous mode [ 783.550671][T23513] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4304'. [ 783.638495][T23515] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4304'. [ 783.726174][T23516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4305'. [ 783.748054][T23503] batadv_slave_1: left promiscuous mode [ 784.643463][T19509] Bluetooth: hci3: command 0x0406 tx timeout [ 787.600033][T23595] openvswitch: netlink: IP tunnel dst address not specified [ 787.941476][T23599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4320'. [ 787.941498][T23599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4320'. [ 787.974186][T23601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4320'. [ 787.974206][T23601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4320'. [ 788.324347][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 789.481606][T23632] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4331'. [ 790.105120][T23639] syzkaller0: left promiscuous mode [ 790.105291][T23639] syzkaller0: left allmulticast mode [ 790.213805][T23642] netlink: 'syz.3.4332': attribute type 3 has an invalid length. [ 790.214722][T23642] netlink: 'syz.3.4332': attribute type 3 has an invalid length. [ 790.301662][T23642] netlink: 360 bytes leftover after parsing attributes in process `syz.3.4332'. [ 791.469317][T23657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4336'. [ 791.482122][T23656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4336'. [ 792.228182][T23679] netlink: 'syz.1.4339': attribute type 1 has an invalid length. [ 792.636904][T23679] bond3: entered promiscuous mode [ 792.646093][T23679] 8021q: adding VLAN 0 to HW filter on device bond3 [ 792.681521][T23689] netlink: 284 bytes leftover after parsing attributes in process `syz.2.4341'. [ 792.897371][T23684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 792.898581][T23684] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 792.898602][T23684] bond3: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 793.113021][T23684] bond3: (slave wireguard1): making interface the new active one [ 793.113133][T23684] wireguard1: entered promiscuous mode [ 793.241606][T23684] bond3: (slave wireguard1): Enslaving as an active interface with an up link [ 793.809922][T23704] xt_ecn: cannot match TCP bits for non-tcp packets [ 794.992307][T23724] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4349'. [ 797.092118][T23734] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 797.437610][T23741] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4355'. [ 797.559843][T23744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4356'. [ 799.069008][T23758] netlink: 284 bytes leftover after parsing attributes in process `syz.0.4358'. [ 799.772551][T23783] netlink: 'syz.3.4363': attribute type 2 has an invalid length. [ 800.315818][T23795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4366'. [ 800.538464][T23803] netlink: 'syz.4.4367': attribute type 1 has an invalid length. [ 801.180019][T23806] bond3: (slave geneve4): making interface the new active one [ 801.192219][T23806] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 801.199217][T17246] netdevsim netdevsim4 netdevsim0: set [1, 3] type 2 family 0 port 20004 - 0 [ 801.221808][ T5918] netdevsim netdevsim4 netdevsim3: set [1, 3] type 2 family 0 port 20004 - 0 [ 801.221851][ T5918] netdevsim netdevsim4 netdevsim2: set [1, 3] type 2 family 0 port 20004 - 0 [ 801.305088][ T5920] netdevsim netdevsim4 netdevsim1: set [1, 3] type 2 family 0 port 20004 - 0 [ 802.484960][T19509] Bluetooth: hci0: command 0x0c1a tx timeout [ 802.532875][T14782] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 802.780867][T23835] netlink: 'syz.3.4376': attribute type 1 has an invalid length. [ 802.862780][T23841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4378'. [ 802.938612][T23841] netlink: 368 bytes leftover after parsing attributes in process `syz.2.4378'. [ 803.267030][T23835] bond3: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 803.507523][T23835] bond3 (unregistering): Released all slaves [ 803.606790][T23848] xt_CT: No such helper "pptp" [ 804.992273][T23870] netlink: 'syz.2.4381': attribute type 62 has an invalid length. [ 805.038282][T23870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.087109][ T3309] IPVS: starting estimator thread 0... [ 805.087585][T23871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4382'. [ 805.088248][T23873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4382'. [ 805.175543][T23882] IPVS: using max 28 ests per chain, 67200 per kthread [ 805.224445][T23871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4382'. [ 805.319734][T23871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.387662][T23884] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4385'. [ 805.648559][T23895] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4385'. [ 805.745747][T23871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.774362][T14782] Bluetooth: hci2: command 0x0405 tx timeout [ 805.941045][ T5298] veth1_vlan: left promiscuous mode [ 806.202670][T23897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.652098][T23932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4395'. [ 808.652127][T23932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4395'. [ 808.683781][T23932] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4395'. [ 808.683807][T23932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4395'. [ 808.807244][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.438570][T23943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4399'. [ 810.549461][T23972] syzkaller0: entered promiscuous mode [ 810.549656][T23972] syzkaller0: entered allmulticast mode [ 810.609577][T23968] netlink: 'syz.2.4405': attribute type 11 has an invalid length. [ 810.655410][T23970] xt_CT: You must specify a L4 protocol and not use inversions on it [ 813.255622][T24012] netlink: 'syz.2.4412': attribute type 1 has an invalid length. [ 814.189829][T24029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4415'. [ 814.212446][T24029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4415'. [ 815.513234][T24047] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4421'. [ 815.960002][T24043] 8021q: adding VLAN 0 to HW filter on device bond4 [ 816.343019][T24070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4427'. [ 817.489394][T24084] bond5 (unregistering): Released all slaves [ 818.105617][T24086] macsec1: entered promiscuous mode [ 819.915148][T24129] bond4: entered promiscuous mode [ 819.922345][T24129] bond4: entered allmulticast mode [ 819.924412][T24129] 8021q: adding VLAN 0 to HW filter on device bond4 [ 820.296115][T24131] bond5: entered promiscuous mode [ 820.296315][T24131] bond5: entered allmulticast mode [ 820.355196][T24131] 8021q: adding VLAN 0 to HW filter on device bond5 [ 821.438496][T24165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4449'. [ 821.738364][T24173] netlink: 'syz.3.4451': attribute type 64 has an invalid length. [ 821.738388][T24173] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4451'. [ 822.676979][T24190] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 823.651452][T24192] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4453'. [ 823.963186][T24210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 825.268758][T24231] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4462'. [ 825.762580][T24239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4464'. [ 825.762606][T24239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4464'. [ 826.212350][T24246] netlink: 'syz.1.4467': attribute type 1 has an invalid length. [ 826.213983][T24241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4465'. [ 827.876209][T24289] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4476'. [ 828.315235][T24304] netlink: 'syz.2.4481': attribute type 1 has an invalid length. [ 828.315261][T24304] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4481'. [ 829.373318][T19509] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 829.374047][T19509] Bluetooth: hci0: command 0x0c1a tx timeout [ 830.236471][T24336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4486'. [ 830.406405][T24335] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 830.896484][T24344] vcan0: tx address claim with different name [ 831.509006][T24335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.131094][T24401] netlink: 'syz.3.4498': attribute type 32 has an invalid length. [ 833.131118][T24401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4498'. [ 833.589171][T24401] bond3: option coupled_control: invalid value (78) [ 833.758181][T24401] bond3 (unregistering): Released all slaves [ 835.180301][T24420] --map-set only usable from mangle table [ 835.409496][T24420] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4500'. [ 837.341859][T24448] tc_dump_action: action bad kind [ 837.342746][T24448] tc_dump_action: action bad kind [ 837.344655][T24448] tc_dump_action: action bad kind [ 837.345558][T24448] tc_dump_action: action bad kind [ 837.388781][T24448] tc_dump_action: action bad kind [ 837.399351][T24448] tc_dump_action: action bad kind [ 837.423054][T24448] tc_dump_action: action bad kind [ 837.424481][T24448] tc_dump_action: action bad kind [ 837.425238][T24448] tc_dump_action: action bad kind [ 837.426103][T24448] tc_dump_action: action bad kind [ 837.467903][T24448] tc_dump_action: action bad kind [ 837.487792][T24448] tc_dump_action: action bad kind [ 837.488652][T24448] tc_dump_action: action bad kind [ 837.508473][T24448] tc_dump_action: action bad kind [ 837.509394][T24448] tc_dump_action: action bad kind [ 837.516575][T24448] tc_dump_action: action bad kind [ 837.517822][T24448] tc_dump_action: action bad kind [ 837.526732][T24448] tc_dump_action: action bad kind [ 837.527572][T24448] tc_dump_action: action bad kind [ 837.528386][T24448] tc_dump_action: action bad kind [ 837.529186][T24448] tc_dump_action: action bad kind [ 837.529996][T24448] tc_dump_action: action bad kind [ 837.530955][T24448] tc_dump_action: action bad kind [ 837.531721][T24448] tc_dump_action: action bad kind [ 837.535130][T24448] tc_dump_action: action bad kind [ 837.535945][T24448] tc_dump_action: action bad kind [ 837.536652][T24448] tc_dump_action: action bad kind [ 837.537450][T24448] tc_dump_action: action bad kind [ 837.538307][T24448] tc_dump_action: action bad kind [ 837.541789][T24448] tc_dump_action: action bad kind [ 837.542587][T24448] tc_dump_action: action bad kind [ 837.546064][T24448] tc_dump_action: action bad kind [ 837.546905][T24448] tc_dump_action: action bad kind [ 838.529016][T24475] syzkaller0: entered promiscuous mode [ 838.529230][T24475] syzkaller0: entered allmulticast mode [ 838.728044][T24487] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.4512'. [ 840.377200][T24501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4517'. [ 840.507165][T24503] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 842.535840][T24537] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4529'. [ 842.777057][T24540] x_tables: duplicate underflow at hook 1 [ 843.064915][T24545] openvswitch: netlink: Flow key attr not present in new flow. [ 843.192092][T24547] tipc: Started in network mode [ 843.192124][T24547] tipc: Node identity 460f4f028277, cluster identity 4711 [ 843.192439][T24547] tipc: Enabled bearer , priority 10 [ 843.345543][T24556] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4534'. [ 843.482740][T24567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4534'. [ 843.508528][T24564] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 843.549529][T24564] bond0: entered promiscuous mode [ 843.561031][T24564] bond0: left promiscuous mode [ 843.577704][T24547] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4533'. [ 844.304196][ T7998] tipc: Node number set to 3296218882 [ 844.378950][T24576] bridge0: port 3(veth1_to_bridge) entered blocking state [ 844.379396][T24576] bridge0: port 3(veth1_to_bridge) entered disabled state [ 844.379726][T24576] veth1_to_bridge: entered allmulticast mode [ 844.410873][T24576] veth1_to_bridge: entered promiscuous mode [ 844.412411][T24576] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 844.424488][T24576] bridge0: port 3(veth1_to_bridge) entered blocking state [ 844.424585][T24576] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 844.468389][T24582] netlink: 'syz.1.4538': attribute type 8 has an invalid length. [ 844.787209][T24581] bond6: entered promiscuous mode [ 844.788112][T24581] bond6: entered allmulticast mode [ 844.791456][T24581] 8021q: adding VLAN 0 to HW filter on device bond6 [ 846.145781][T24607] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4544'. [ 846.791029][T24611] lo: entered promiscuous mode [ 846.903101][T24611] netlink: 'syz.2.4546': attribute type 2 has an invalid length. [ 846.907886][T24611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 846.922584][T24615] netlink: 'syz.2.4546': attribute type 2 has an invalid length. [ 846.922604][T24615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 847.523885][T14782] Bluetooth: hci3: command 0x0406 tx timeout [ 847.835167][T24628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4550'. [ 847.928291][T24633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4550'. [ 848.109316][T24632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4552'. [ 848.898531][T24648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4556'. [ 849.278883][T24658] ªªªªª»: renamed from dummy0 (while UP) [ 849.519910][T24661] netlink: 'syz.1.4560': attribute type 21 has an invalid length. [ 849.520004][T24661] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4560'. [ 849.906931][T24674] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4564'. [ 850.949349][T24685] xt_hashlimit: size too large, truncated to 1048576 [ 851.414871][T24693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4572'. [ 853.426220][T24715] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 854.034622][T24726] netlink: 'syz.1.4583': attribute type 5 has an invalid length. [ 854.883361][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 855.522031][T24742] ip_tables: iptables: counters copy to user failed while replacing table [ 856.293219][T24757] netlink: 'syz.2.4592': attribute type 1 has an invalid length. [ 856.293403][T24757] block nbd296: server does not support multiple connections per device. [ 856.294506][T24757] block nbd296: shutting down sockets [ 856.561131][T24768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4594'. [ 856.561175][T24768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4594'. [ 856.568122][T24768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4594'. [ 856.568159][T24768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4594'. [ 856.582017][T24764] syzkaller0: entered promiscuous mode [ 856.582170][T24764] syzkaller0: entered allmulticast mode [ 857.158508][T24773] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4595'. [ 857.225011][T24775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4595'. [ 857.965557][T24791] netlink: 356 bytes leftover after parsing attributes in process `syz.4.4599'. [ 858.540976][T24801] netlink: 'syz.2.4602': attribute type 61 has an invalid length. [ 858.776201][T24794] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 858.776681][T24791] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 859.617987][T24816] lo: Caught tx_queue_len zero misconfig [ 859.676047][T24820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4607'. [ 860.174841][T14782] Bluetooth: hci0: command 0x0c1a tx timeout [ 860.418711][T24831] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4612'. [ 860.801270][T24831] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 862.152825][T24844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4613'. [ 862.252446][T14782] Bluetooth: hci0: command 0x0c1a tx timeout [ 865.527408][T24850] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 869.451448][T24887] macvlan0: entered promiscuous mode [ 869.505470][T24893] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4624'. [ 870.289060][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.670816][T24902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4627'. [ 870.740076][T24902] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 870.988836][T24906] ip_tables: iptables: counters copy to user failed while replacing table [ 871.120113][T24906] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4628'. [ 872.682109][ C1] sched: DL replenish lagged too much [ 873.142591][T24913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4631'. [ 874.459794][T24926] netlink: 'syz.3.4635': attribute type 15 has an invalid length. [ 874.459818][T24926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4635'. [ 876.052393][T24926] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4635'. [ 876.529282][T24923] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 878.130890][T24923] bond2 (unregistering): Released all slaves [ 881.997372][T24943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 882.594692][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.595170][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.595544][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.595894][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.596249][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.596587][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.596932][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.597283][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.597626][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.597968][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.598323][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.598660][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.599011][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.599368][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.599717][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.600071][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.600420][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.600770][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.601136][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.601485][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.601747][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.602043][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.602395][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 882.602745][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.053429][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 883.296240][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.296611][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.296852][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.297204][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.297516][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.297798][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.298154][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.301231][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.301487][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.301863][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.302006][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.345338][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.345693][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.346048][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.346399][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.346748][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.347020][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.347367][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.347716][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.348070][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.348420][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.348746][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.349102][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.349454][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.349804][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.350176][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.350526][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.350875][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.351228][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.351565][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.378108][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.378474][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.378822][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.391238][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.391609][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.391969][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.411775][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.421186][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.421551][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.421807][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 883.422201][T24944] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 884.675933][T24944] netlink: 'syz.0.4638': attribute type 21 has an invalid length. [ 884.675961][T24944] IPv6: NLM_F_CREATE should be specified when creating new route [ 884.676224][T24944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 884.676234][T24944] IPv6: NLM_F_CREATE should be set when creating new route [ 884.676279][T24944] IPv6: NLM_F_CREATE should be set when creating new route [ 884.676303][T24944] IPv6: NLM_F_CREATE should be set when creating new route [ 886.704176][T19509] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 886.710200][T19509] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 886.711559][T19509] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 886.766488][T19509] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 886.767887][T19509] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 888.466672][T24972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4643'. [ 888.893581][T14782] Bluetooth: hci4: command tx timeout [ 890.449818][T24977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4644'. [ 890.449857][T24977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4644'. [ 890.963446][T14782] Bluetooth: hci4: command tx timeout [ 893.082726][T14782] Bluetooth: hci4: command tx timeout [ 895.649654][T14782] Bluetooth: hci4: command tx timeout [ 932.016177][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 969.605954][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 969.608784][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 969.611679][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 969.614124][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 969.616453][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 969.618552][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 969.633438][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 969.635437][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 969.637664][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 969.639741][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.614430][ C0] net_ratelimit: 3280 callbacks suppressed [ 974.614553][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.615512][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.617414][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.618310][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.620087][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.620893][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.622543][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.623410][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.625166][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 974.626031][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.623943][ C0] net_ratelimit: 3662 callbacks suppressed [ 979.623975][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.624867][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.626585][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.627481][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.629275][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.630169][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.631893][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.632820][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.634566][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 979.635501][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.633423][ C0] net_ratelimit: 3835 callbacks suppressed [ 984.633449][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.635548][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.636516][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.638260][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.639224][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.640977][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.641979][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.643783][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.644765][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 984.646618][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.644402][ C0] net_ratelimit: 3623 callbacks suppressed [ 989.644426][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.645626][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.647538][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.648491][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.650252][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.651252][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.652958][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.653934][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.655857][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 989.656766][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 993.894648][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.653295][ C0] net_ratelimit: 3564 callbacks suppressed [ 994.653320][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 994.654237][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 994.655962][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 994.656854][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 994.658690][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 994.659578][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 994.661169][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 994.662087][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 994.663874][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 994.664773][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 999.664215][ C0] net_ratelimit: 3662 callbacks suppressed [ 999.664240][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 999.665119][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 999.666801][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 999.667672][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 999.669345][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 999.670230][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 999.673189][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 999.674163][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 999.675866][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 999.676756][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1004.673390][ C1] net_ratelimit: 4958 callbacks suppressed [ 1004.673414][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1004.674259][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1004.674395][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1004.675063][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1004.675375][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1004.676308][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1004.676817][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1004.677288][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1004.677613][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1004.678267][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1009.683616][ C1] net_ratelimit: 8902 callbacks suppressed [ 1009.683639][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1009.683806][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1009.684580][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1009.685370][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1009.685695][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1009.686253][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1009.686518][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1009.687162][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1009.688337][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1009.689031][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1014.693991][ C1] net_ratelimit: 8876 callbacks suppressed [ 1014.694015][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1014.694337][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1014.694991][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1014.695138][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1014.695965][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1014.696768][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1014.696982][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1014.697692][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1014.697929][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1014.698671][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1019.703372][ C0] net_ratelimit: 8891 callbacks suppressed [ 1019.703395][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1019.704182][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1019.704229][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1019.705051][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1019.705851][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1019.706050][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1019.706672][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1019.706925][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1019.707603][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1019.708418][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1024.713736][ C1] net_ratelimit: 8857 callbacks suppressed [ 1024.713760][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1024.714131][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1024.714743][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1024.714936][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1024.715763][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1024.716605][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1024.716742][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1024.717486][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1024.717719][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1024.718484][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1029.724251][ C0] net_ratelimit: 8514 callbacks suppressed [ 1029.724274][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1029.724405][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1029.725196][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1029.726249][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1029.727070][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1029.727904][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1029.728134][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1029.729661][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1029.730162][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1029.730581][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1034.733206][ C0] net_ratelimit: 6230 callbacks suppressed [ 1034.733231][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1034.733776][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1034.734217][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1034.735618][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:a7:94:96:96:22, vlan:0) [ 1034.736233][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1034.736274][ T32] INFO: task syz-executor:24961 blocked for more than 143 seconds. [ 1034.736293][ T32] Not tainted syzkaller #0 [ 1034.736304][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1034.736313][ T32] task:syz-executor state:D stack:26360 pid:24961 tgid:24961 ppid:24937 task_flags:0x400140 flags:0x00080000 [ 1034.736379][ T32] Call Trace: [ 1034.736468][ T32] [ 1034.736519][ T32] __schedule+0x17dd/0x5830 [ 1034.736730][ T32] ? __pfx___schedule+0x10/0x10 [ 1034.736795][ T32] ? schedule+0x90/0x2b0 [ 1034.736821][ T32] schedule+0x164/0x2b0 [ 1034.736844][ T32] schedule_preempt_disabled+0x13/0x30 [ 1034.736865][ T32] __mutex_lock+0x7c4/0x15a0 [ 1034.736893][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 1034.736921][ T32] ? inet_rtm_newaddr+0x470/0x19f0 [ 1034.737045][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1034.737083][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1034.737082][ T32] ? __nla_parse+0x40/0x60 [ 1034.737218][ T32] inet_rtm_newaddr+0x470/0x19f0 [ 1034.737253][ T32] ? kernel_text_address+0xa5/0xe0 [ 1034.737310][ T32] ? __pfx_hook_capable+0x10/0x10 [ 1034.737379][ T32] ? unwind_get_return_address+0x4d/0x90 [ 1034.737413][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1034.737451][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1034.737506][ T32] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1034.737535][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 1034.737573][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1034.737593][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1034.737614][ T32] ? __lock_acquire+0x747/0x2de0 [ 1034.737660][ T32] netlink_rcv_skb+0x226/0x4a0 [ 1034.737739][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1034.737761][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1034.737804][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1034.737832][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 1034.737865][ T32] netlink_unicast+0x8ef/0xa80 [ 1034.737912][ T32] netlink_sendmsg+0x7f0/0xb20 [ 1034.737947][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1034.737980][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 1034.738041][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 1034.738102][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1034.738129][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 1034.738244][ T32] __sys_sendto+0x408/0x5a0 [ 1034.738311][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 1034.738374][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 1034.738407][ T32] __x64_sys_sendto+0xde/0x100 [ 1034.738442][ T32] do_syscall_64+0x166/0x520 [ 1034.738493][ T32] ? trace_irq_disable+0x3b/0x140 [ 1034.738532][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.738577][ T32] ? clear_bhb_loop+0x70/0xc0 [ 1034.738601][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.738622][ T32] RIP: 0033:0x7feed6b5fd8e [ 1034.738681][ T32] RSP: 002b:00007ffcd2c8dfe8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1034.738735][ T32] RAX: ffffffffffffffda RBX: 000055558ec82500 RCX: 00007feed6b5fd8e [ 1034.738751][ T32] RDX: 0000000000000028 RSI: 00007feed7954670 RDI: 0000000000000003 [ 1034.738764][ T32] RBP: 0000000000000001 R08: 00007ffcd2c8e064 R09: 000000000000000c [ 1034.738776][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1034.738789][ T32] R13: 0000000000000000 R14: 00007feed7954670 R15: 0000000000000000 [ 1034.738822][ T32] [ 1034.738832][ T32] INFO: task syz.3.4643:24969 blocked for more than 143 seconds. [ 1034.738848][ T32] Not tainted syzkaller #0 [ 1034.738857][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1034.738867][ T32] task:syz.3.4643 state:D stack:26832 pid:24969 tgid:24963 ppid:18530 task_flags:0x400140 flags:0x00080002 [ 1034.738930][ T32] Call Trace: [ 1034.738937][ T32] [ 1034.738950][ T32] __schedule+0x17dd/0x5830 [ 1034.739003][ T32] ? __pfx___schedule+0x10/0x10 [ 1034.739031][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)