last executing test programs: 1m4.505552534s ago: executing program 3 (id=1136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vcan0\x00'}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8}}}}, 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vcan0\x00'}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8}}}}, 0xfdef) (async) 54.830499161s ago: executing program 3 (id=1136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vcan0\x00'}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8}}}}, 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vcan0\x00'}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8}}}}, 0xfdef) (async) 51.743798291s ago: executing program 4 (id=2146): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="8dff", 0x2, 0x40, &(0x7f0000000000)={0x2, 0x4e25, @loopback}, 0x10) r2 = accept(r0, &(0x7f0000000100)=@alg, &(0x7f00000001c0)=0x80) bind$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x2, 0x3, 0x8, 0x48406, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x6}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x7, 0xffffffff, 0x0, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x7800, 0x4, 0x3}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000700)={r5}, 0xffffffffffffff7d) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xc}, {0x0, [0x2e, 0x61, 0x2e, 0x2e, 0x2e, 0x5f, 0x30, 0x61, 0x2e, 0x61]}}, &(0x7f0000000380)=""/146, 0x24, 0x92, 0x0, 0x9}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x6, 0x0, r3, 0x6, '\x00', r4, r6, 0x2, 0x3, 0x5}, 0x50) 50.819579548s ago: executing program 4 (id=2151): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4e24, 0x0, 0x4e20, 0xd, 0x2, 0xa0, 0x10, 0x0, 0x0, r3}, {0x400, 0x7, 0x8, 0x2, 0x9, 0x7, 0x8, 0xffffffffffffffae}, {0x0, 0x7743a49c, 0x5, 0x9}, 0x5, 0x6e6bba, 0x0, 0x0, 0x4, 0x1}, {{@in6=@remote, 0x4d4, 0x32}, 0xa, @in=@empty, 0x3500, 0x1, 0x0, 0x2, 0x5, 0x0, 0x400}}, 0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x26c, 0x58}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x22, 0xbe, "e2b8c0d0f0d42a24ff2ad5c4e1558b021c7625627854ffcc0f10739849ce"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0xb}, {0x3d}, {0x12}, {0x5}, {0x16, 0x1}, {0x12, 0x1}, {0x6}, {0x4}, {0x12, 0x1}, {0x15}, {0x3}, {0x18, 0x1}, {0x5}, {0x6, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000084) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r2, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=@newneigh={0x74, 0x1c, 0x200, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x0, 0x0, r6, 0x0, 0x4, 0x7}, [@NDA_IFINDEX={0x8}, @NDA_VNI={0x8, 0x7, 0x515}, @NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_MASTER={0x8, 0x9, 0x96}, @NDA_FLAGS_EXT={0x8}, @NDA_IFINDEX={0x8, 0x8, r7}, @NDA_LINK_NETNSID={0x8, 0xa, 0x974}, @NDA_MASTER={0x8, 0x9, 0x5}, @NDA_CACHEINFO={0x14, 0x3, {0xfff, 0x7fff, 0x8df, 0x2}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x35) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELOBJ={0x144, 0x14, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x100, 0x8, "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"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x18c}, 0x1, 0x0, 0x0, 0x24000010}, 0x24004000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ac0)='./cgroup/syz0\x00', 0x1ff) (async) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000002780)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002740)={&(0x7f0000000b40)={0x1bd0, 0xd, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1b7c, 0x3, 0x0, 0x1, [{0x1158, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x38, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x30, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x43}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x10a8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9d, 0x1, "74fcad5df12dc4e6708ee811f998b48aa4e676ce557a2886d4d50cdc1324c6f1dfa28292d333342114fb1ba30a985d4e0e6d851540a742e50428072a80653c433ee7b0b066d3f6fdb714e8e63636a679cae2ed69cf3f8168052b80cd8bd6cd761dc07a7e0aafe470595023791226dda6102e092811ba1d6c0ec78cd7b2b9b9f3afb97033a59bd31e9d47f5b8f23c68c222b31686c641af0082"}, @NFTA_DATA_VALUE={0x1004, 0x1, "db0c95126bb23a916deec7574554ee439ee060295f8fd7cac79bbefd24a96c5b7bad650ba2be406b3037042a3a464e063e4e6c195dc2de9ce4ee840e45d7d5aadec829b81f29deb270069f0ec922fcd5f43c87ac29598c59610e12b2cf1b11bac8b4940a77c576fe9d87063e2f247238f9badfddf02e3c04ff75991729da68caa6afca8e8052d9506c0f305b976b5a32e20980d0cdc9f6fce9b359f42dab53f335556a84dd99791250e81d5b1fda213307be3529fc1f7432b948d62fefbb5a16c53aea72a400e4b72b9b3346b59a37ec42222af3ca91e60e7db3b191a2cee3dcd44aa64c5e74db127c3259e148654a2ee1e85900a04bb32f01c4901d9f7c00f284af2f762dc93669e3c515a8d461a1f4f15c0b34d5061a2b45e40f10f7601210bff47caec1ac47e19b6bb42348fb768d3b4da3bd7d6cb35fdf1dce13a8ea5af5910ff8c46cf5731d4cf82a2b3ba5656150974bb3e67d1cdb2605907167df569d7cb69ecfcc2ccebe9a8cdc267955e6439b19a9b1832a6ce4bf56994fa971f1d88eec76cc06571a7f1298a9ded2e08953fdfc4d97a8511e21cb8dca8accac4250659af49a1e3d6f163b7905493e1844763f8708d91d67efc48de2d3ff2d1c62baa7036c921b29e35aa24731e728886fe5baacb0b8c81e296b8c00a71059da6028cce4a5bcc7fdc6082278ce549c3b2b32eb41d0bb8d06b7c017a53a8362ada28d6cc99909667441b1e615ad7654d6227abd669c99466c4a9f6e0e46e334aa2f1712b2d6893f85ea8b84960788221e3eb921edfea5c07bcab3ef62f78bd501b56a3cf4bdd663183fd2fc26128706e5531c1744267f8bada473a0463571296618406ee5a9b766200e8acaee5dd5c55522f57ddde0fd5ea4f7965a598a00cfe6b061f101244c6fc4959c1bc381d396f7772f27fb05d48fe4f3ff6e97a6efb6a88b681b27b46cc087038f276a9c93acc982378ced471df3aa97d1254d2cd56450d20c2bd4917f9f93658c4c93200224a0555c7586e15dc0572ee3d03b5f5bc290521695853a310ba16e957bbc5b3f7cb40d43324cb57286befaafbb7c6cfcffef2e618756c5ae54071807a934005a5e83e1aa4ca1f29528daa6fbfabc459d32aeede7b4a7d840992b24753ba254fc7d6b97713a3da6a01b2693673e3527aa5705fb1204c73a5d199b8e46e648443ff12030965295f45e22174840968d43b20306d8d7cc46bb5348c1178839b5ef0ad3cb5a0a9d7a1a7fbd804b546edafe5436d865e2e9fa8ba2aaa58592010e7cd2fc4573ebae94bea1b9232475b9ead72abef0ed083f20bf71c9020240f798c2e1951b09db0067db9beadd632a94b7dc03720366feee2bbc144ac269325e0173a62a4b946e26d58515a90b7725e3e5e3ca731578e348ec52e7b4dbd7417b7919313b4ce35013e21ce3822ac23922454728ecbf0572de26e6d3aff6d53529c1c5ab1443666ee89030e21544cba5ea7c332e76c13e88aeb9340dbf0c3548432ba36d26a194a7946560a05ec296b076e3b2aed7de936356dff96d9ee22eb5e00d8ac3e58237e753d483c763d05ba5eb20cca6ed94ad9c60ec9f5bd264c82e56440498882681953d68e002bf92618597809823b503e36dbc74045904a80cd0ea75622073749187cfe89f4b1d745975f4f99a52d4b1afb0e06b6b22baf8f5209bcb71de0f110d044d659f4a1f6e76a3862d09eb48ad5c78c1aa1e41bbf9672e18f18da25895f8e3dbce281ab84158c38be801438cdbac856f4a21f5da3fa793e865b979c2ea45a0de4dc0e1cca8db45d82269d0d9c6b5ff77c84fdd6b86b9e9a4bed8f4f26ef7915f2643da7e46c7fa8355962afbe65092437a0fcf767bd017390b7e58cecc1db30e8f16f565edf00584a38766fe78b8292dce966c42cd57116dd2222e63e422c5af0c51802b9991e9314c0989b314e3bf3e1882d8ce7bd804d9ec7a2a2ace3efa3e5281c7367860c2ea9be23646760e353d16a9792de3089c27ec7c168e4c751daa62151f7f970f4a06121fb9266f86954e0945b9e6abbb3fbd39398c7204480246d5ca8e3902398caedf7e75e5e7e8d94b09b8e70c36f6b0587538ddb7a3b8f9f2dc29dbc2074dd5091646c37abe77e2de6770d3c03dd459d107bafe8800c75a1a2eecdb18feb4607dc08f786aaff384c09ebf89e4cfe8d3dd9a04feebe3a2b56653633abacfb04ea180c24bf7586de5bd1b3a8e9ce77825fbf7fbc1768f557767c990b9daeea0b4fd1cd5f26e47af669f6177cad13c2e6b7f9dd4c3b2e1c9cc0c4ab1199604077a56b4fa0eed685600ec96e0017600cfbbabf7f71dcd1a83cc4f6efb981c9a21c2810d1af1ec6857ecb3736040d46cc1a3ee8e0808d8db1da29b9db7083cc4947e80d99b53f422afcbfda4d0b301ad4def5890d6053c5e56d96ad2d1a88a4251a75f8adf262020a1a8efe5309cf2023090d1b277079c667d26422b0b787a6ebc8e30f199ede09a10746ef6362e83ced7384b6b37ba380c4547ca7eb28e471ab3c8536c5a8eaf38b0a7c68551a7d30e1f502cef9e9f8a77b340e960e9def75b726e00e7864cac485c646085941f3321fdc8402e231ae1ef3c49b3e536f2d0f5aa030dfd3a889c2215c5c189be6af982818919b79698ddb3e78eb45f434472ac82078ee96dae8967e141945c271c9f4feeab392fa8ec7de4fab62630715e483efb53104222f3041dacc6475f3e7214edb15bcd0065e8bd0a1b657cca69c62ec472454675f4078191054b713109f9d594d50150a208fe3816e85fd84f24fc4d93977e3c61198a19201d95f2ecaa9f2462472a93dab509f55f1ae0fb70ad661552c51b2bb3e8be7daa9cba3deba4395c830be37aac07283955b8bbd78316b6c59319de4b6a255e29bea194510f37993a025971028cf8cc93f73bf67c91138aaa0d9acd2faa6583877251ff4aa247f615ee0bcbe438c43df064424f408a61562781f707df87f29dd959d11ab024b8f730a44e7c0bc8fbc388637d2ff3ae64d769ade3ff49a92f0047d038a82d73e927135b7f5fa192e759922c1d4894f896e2ec4f9e902cfb7a9f45eac9b7d261be0e45c163f74a0c0398835a95148fd7191960b5a1af78a3f2d4306d70bbc6f3943a035d30f1e31b38a6e94a5d1196224aa0fedd0e2cb54bb1f5678f16d4f5b8509bfd1c4e4276347fe7a49ced6d04ee85c63a4524c938aecba1724c4bce535bb181d3d7f6b3a934bbc0999b4d3758f4f3e1fdf0028bbd1500fb4ae921b55fa73718631283716e216f62bc80980b6622b7c1dc8ba9b9fbe1b319ec349f2adbad2e068ddb9d6b7fa7b201ea0599932a551ac264d17c3bbc7e26a5d701d9b04576b8e425ffba427217412aa91ea09b9863b30011e36da1e86557abfc390a44b4445638e588fd0fefe849b978fb1122081752e18286ca804628df94a1ee917dce2918c904ea17debf4f165c8f81347d9d09548e03f0c570f585949fbb981f569d4e41129be23ebb660e3bcf8817fc241b093707e78564bedb51cac20eca8cf26dbe3fe9f0ed89475b5e382fda61453d04661699d9f86f5f8598278405516234cc42619ab4eca0f2c99e9789ac8eb2c898bc22e045451d3d299e3b3d519ee6be6862eec975d2f2522dc51438123349f90484a484acfb91bfd388ac8983d9168bf810c2dc2423b63d94b0eba87807149a9b8914445952f6c91f68652fac86bfd67ecf8f76456fb5f7e8c4a660fa8fbcb0335c2c7e783edd05ad98756be94bb2f2abd0fcee036b546f2de132eaa2382f87d5c8cf004580562dba546cd02cc9fa5bc54f0d68cf8e51afb90b65d0f9e33dd1082f7f3f4bfbf1f765b1edefb5619be4a256008432516dd039f1491d0338c812050126abbf7ee28865960e839fc0bf299804314b6366e50650c3ab5cef2b1321ea03a02c388e7db543d6fd7d1aa419179fc3745c5a3df0ba6b8830aade9a65f20be55cc14f569b1896bb72c7f61c4979bb2df7263d7537005862452488aeb07de1b302eca683ffa89edfbb7bc728073eb1551fa1a0fa3e07f4526f502570471a7a7ed7fc2149eceeec5f525ef5c4d668f64d0ae71b5006a0fedb28ffcaf9bd18cb72b08c6747fb720de8c0f1491c451b586a759090fcb04b271dfb31ec815719146392d87aad255051e1fa1f1f42630b3404cf5cdbe3ecd6d46c5656d5c65c24b1df1272394cc90e2ddfb03dd1d2948348c114a43e053e640ea7dc970e55fd344756561268a0f35536909c46560d7d7c575b390c33bd8ed271ae4f877eb0e3c841eae5b4d12de72b2f30574c4b80a9e14a02cda416506d3d0559328dff4e21b620f352784d1faee53f0028eb43fdf003414df8f7a48e120227d28bfadff3406483f235deaba2331252232453ef14a01d3b219df3da2fcb5a06d70f95dc0c660ca5c8eef99a0f5ac39f1bd674a288a4135cdb188ce8c23bb68c83e8feeca78c6e25192d502c388d2f3f3a187a9eb1b7267ab93b255f599a28372120d224921549a0fdee218c22bb83d3d3a67e0b020d4f2ad73fb6fc30eaba013c89722734ddff94484828afd2ad0b3f3a9c02dc959cdbf3405658e2ee44b1d2d33fabcd8e83c7e0753f8ce31b0aebfc8312c5e2c147a8054444597ebd0f2136697a3f7f85955345265b7f8c8aeb4926dd7f7c50780ca8174f52b54222dca036940050308952b110ca4218a00747d3eff249e7ee9a33c40d217785c9baf0e7d6891d2b240b10f60567f8b8768716779836552abb9e1dd869b43d984590a984d5fd7f147e03358b21db4dd68158e50e3103542939f62405d01a2548368ac9c64bd0c6b50e087baff9b89d67e284dad271ff4adf1b3621479c1c3f6bc56339e691845fa0294e2e99d97da6e1a95e013908f39ce8fb2cd1c79ebf9e8f1cca29b0d64324ccee521c87cd02d460ffe91fd719549a7f36fd9cd44c9f306478b572abe6673a66fb9aae684ea4cdbda0dd61519a93c589c712a9dc325505d08894673209f7b4ff473ada5c0b971dbe07a40d600230889982e291ca57148337637961c0b67d335442ad9dbd872ac28c020c310980e7d2d123c40c9a72246f801dde6b557acb8a573debcf7a1a6334e025bd10277772d07339a18867513e732c7604598725e8bdd3db9e665ec34f690fc52cbcd8b42d4acb9428e5808eef806326ef95ea68639153775bac45f922927268e56f09c674bc0ab3ff0bbcfcf2b041f5f48602a4fdf92ad25c9ba43ad1faeb0ef9758c09b6d84eb4ca6c69ba7770801174b90710178879f46238778f8cb9399e768ec9cbadb7c75492667962e68ebd223b9fac5a02538727c26cc1ed7aef5c9d05e4b1e5fee2d818b3c0282289ca2c173b069972ba65e91cdd5c4ad9207692f244173b05af76c001548904344a4e1aeff25e0e9d8ca3afcd5fe126139f3d32091084a0fa527f10eadf8991fdde82a47b46be04ddc092a05fa68ced0fb2b1529c28ca67d88d916d188593d4bf5fbdb29d34df4690f2b24ff9cef5ce8eadbe00b6614e8065a4650d4ce7467ead1505ac32a2cdf36db47d7a54e6d9f54ad008206a6ec284ddb14b7feeaa20b96670a75c2c59cc4693e49fe115c3f51024f5aa26c80c6b1f38f927b5c8ef350459786a407cb77e4b8989ca5752ea558e45074df2d9f683ea0b6540c26f19670992b4d5f0c3683cda999262c6cfd0426032ff4d7142fd0e11aba5e26ebd480a09de2de6b4bfd6ec7536449f0b27464c9aa6c86b738b18740f8c0ea26015eea4fa0978af935c1cf4ed7e2a7b64131edb570709ab4d030fc97862380cd9ad6a342e"}]}]}, {0x4f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa0000000000000}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x14c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "c33c506709886bbe253b1d9a51cc1a3c8043b86357d8839e2b474f9821202b22949108f5cd03532f4ef854c287306c38903378d3545f7f376ae47ec56b73e16ee1ec4e9cb9b81e1b5e612b24273ed53372024e569c15c5db8d3f52e2404366c9ffb20ea5cfb5ca58ec44dad918f4ae3562f52c0e9354d594b0061117497ce845208427158797c34e653487c3b14e09ebe5c09b35f1d0f779973d3e95c7ce89a3bb237ab5bf339c1a2c22a8b49fa1bbcc2da16aea0dd12e6bc16961fff7b35d89750a13fd8c66360e535cdeb9a7757efe3e6083d54e"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_USERDATA={0xb7, 0x6, 0x1, 0x0, "3d9ccae1d4210efe92e59adb4dee00f98311366ab251a6786cb9f50e99d8827aa2f9356d031aeb9aaefb0e596fb9d23a2cfde8f54ea946582db4b486e5d5e1a3f3bf9e991ca7633ed5c4d1d2815397a27905e6ed37b2d9bbebb234fc090950d2e838ac365b98a4ff5d46bc451994ac2d80ec7ef666e53f2b23f50e5e0922736c2f2cea68d7f6b02b57f7e85db474b745c57f53fdfbc0a13ad9c93c8b0709cc98b467c95d237d7ca6230a4f8f695f78a74264e5"}, @NFTA_SET_ELEM_KEY_END={0x2dc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x95, 0x1, "a68106f2f1a99c9d2a56ba7b14f09efec2b9a0a39995dbfb2ac29fe4db3fc44fcbd93013f0a37e9f932e14bf039069586bb061281d7d88063d6e968d0ac7a5476e05ace4aba5e04326a72287668979f35f239f9c9017e531693ec6bb5104033b4a561d352be463f02d7a3aaec8f2f8b109447585cd3c60f8bfd355e51caa0fa1bb79d2ea9154587ec9a320f5120e8c831c"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "b0a0840796731d55de585958a31379f3fbaee842aa25fbc83186f86e14ceac11a09514281b9c1c8f6c33bebef84ae42e9fafcdde995d3094264977ee070a78fe47bff93a48ee0d7c9b3e495ec427a14fb48e8413f718e54b8434e8d35e569e63322b202f2f010ea2ec7c87e1ae28b5871f3fbb04f7f96831b7ee32afa843fdfc304415c71c65d95e9df7edbe8f76889ebcc8f8194128ef97fe4c48b3f8eed5fb959cb5f68785ee3c716bb40d82529bf0312952406d05f5a72a37b4fb397a93ee0a393cfc74dfa195fb9fc5a56b"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x510, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0xcc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x89, 0x1, "9b8763e391cdcad486fa5a6ec73a9e3a6db10daedb3381f53af44a1152986ec8c9f4f17fc32b0446eab304a3ab31723317f9aae6e3b8ecb983c96ca50e87efbbbe7b47068f790848732f102176e2e449e5aa0cd8cbd008895ea3bfe4c9cc7798afd7a0e5e0b9002209c3fe74154e0517e47d9322b2e0a1fdab83e5d6ab6fee3d6d5fc320dd"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x3d4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf0, 0x1, "36676cf3a97bc2aae09395d008732defb5fd34fcb2af780d1032e59981e33c09620759617099edee31ea0043c2a7edfc956c56fcc5a6cab61a57fd01b324188ec82fcd1a92e036226e6cbc8ac4ef14cbda1a852c5f8194096f8841487e026c0eb636ced2af43cbf6dd9d2df099acf210484ddb644d82af53ad855147a9cf17a17943e4c79283e12a987e6a8af6f5b4e9cf4c604b6ae4b74e3afeb67ba3fee93336059cd3afcd1e9fbf583e1074c55332b606c5d815720deb03ef26fff1a894ebd944c511fe2ccd42cf9ea4973a04438aa7c078b45af34ecd709c7a9f2f6d317e31b0da6934fb724bc3d9cb2b"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xaf, 0x1, "911a303ecc4118c60b2bb669e1f5c0394a87085128c7ee55037b529f101440f3a55bd205c68bc21fa48230f4badf5673958aa15257707b5eb7c935e0dac86e14b718a960069c17878293a30e76ac22ac994f593b46eb2a34de42ce3078b993fbb7af60669a95a734e2cb07c8226adcfbb89c20b5626820b1fcea5eeef19f5e53eab4f721296fc0c22b827e2400314a9db77044c1b4f0b84cef4a1a822ff562adbf9d6adc23e61f34416f23"}, @NFTA_DATA_VALUE={0xf8, 0x1, "8083a1dcd56a3240d1548e95fa3aef5017bddfa3c49fe5547986764fe956925c52c2ee381b5dad8ff0cdabac4e5927db7f9b10940ada4585b5d490351ab5279387a729843e04a2ea7ee69adcde210305c75e10ba22eb63ef0191d22db5c7509426e1da3ccafb3f0d059aaf61799e3dd4e46312182bcc7703de8947b7fbde94cd2b7814a5926a36b6b0e624d57566fcba535ad535f38968951f35288a558b18f44aae79697ac9063d7fc8a0c026242fbdcc34f3bd29283497e59c2fa111a7812da2b0a3294282a4c94e22048dc9359316109922698680af792cb87980d1d680c2567082e518838b9c4607ab8381c5530c3fb28c40"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x978c3d939713fb1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4b, 0x1, "005dfe8708bbbf782dc5c89238e4fd02f4fba12f12bb6df6ce559ffda3344363c2412b011c3224897aba8241d532f3e9a995805f6fb6c51d5dbbab7f2cafea85ac43e1054cddff"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x1bd0}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002800)={r8, 0x0, 0x8000000000000000, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002840)={&(0x7f00000027c0)='ext4_sync_file_enter\x00', r9, 0x0, 0x80000001}, 0x18) (async) recvmsg(r2, &(0x7f0000003940)={&(0x7f0000002880)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003900)=[{&(0x7f0000002900)=""/4096, 0x1000}], 0x1}, 0x10120) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000039c0), r1) sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f0000003c00)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003a00)={0x19c, r10, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x803}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @mcast1, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x42d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x243e77b2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}]}]}, 0x19c}}, 0x880) (async) sendmsg$key(r9, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000003c40)={0x2, 0x16, 0x80, 0x9, 0x234, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_x_filter={0x5, 0x1a, @in6=@empty, @in6=@empty}, @sadb_key={0x19, 0x9, 0x5f0, 0x0, "3070c7cc996f764725c52cd4895da04743e50d8dae1c99cf54a1614bbb937cedefa4821889d2adb7d4375eb736b7e3c5372339cf6447d44be9213f802c4ffe2705556481980374b9b3ab54373ea5887fbd9c0724d7879fe4fa664f7c137aaf113857fd236ff5e6644cb7ab6b10b8636c5235cc1b43415ebb2b92eb38f7de7ff3f408d743c628195533b1c27454f99d4ce3b768e4e9c159672ae0573bebd62f3b700f648230ed1a6b6dc05633213e7160e260f56a6a3a9b00973b5a8eaedd"}, @sadb_x_sec_ctx={0x201, 0x18, 0x1, 0x2c, 0x1000, "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"}, @sadb_key={0xb, 0x9, 0x278, 0x0, "1504db56d6fd4a598a56ab590dafc27754d02fc60911d4aa1ed5c168858263f280c26f16f6270156cf456549272915b39ebe09cff3386400a96b87a6245176f9dfee7f442b8a438560cde3de5a86d5"}, @sadb_lifetime={0x4, 0x2, 0x2, 0x7, 0x6ce7, 0x100000000}, @sadb_lifetime={0x4, 0x4, 0x81, 0x6f, 0x6, 0xff}]}, 0x11a0}}, 0x10) r11 = openat$cgroup(r9, &(0x7f0000004e80)='syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000004ec0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000005040)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005000)={&(0x7f0000004f40)={0xb0, 0x9, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xa}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x2a}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x81}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) (async) r13 = accept4(r12, &(0x7f0000005080)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f0000005100)=0x80, 0x800) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000005180), r4) sendmsg$L2TP_CMD_SESSION_CREATE(r13, &(0x7f0000005280)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005240)={&(0x7f00000051c0)={0x60, r14, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x4800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000052c0)={@dev={0xfe, 0x80, '\x00', 0x1e}, 0x8, 0x1, 0x0, 0xa, 0x6, 0x9}, 0x20) 49.820190624s ago: executing program 4 (id=2162): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x20000010) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x50, r1, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]]}, 0x50}}, 0x0) 49.760623769s ago: executing program 4 (id=2164): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x5, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xf9, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x4, 0x7b, 0x11, 0x30}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000580)='GPL\x00', 0x4, 0xc3, &(0x7f0000000180)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) 49.654104626s ago: executing program 4 (id=2166): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fc", 0x39}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000080)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9b5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3}, 0xa) shutdown(r4, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000c00)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000c80)={r6, r2, 0x0, 0x7, &(0x7f0000000c40)='filter\x00'}, 0x30) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000400)=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000680)={'tunl0\x00', &(0x7f00000005c0)={'ip_vti0\x00', 0x0, 0x8, 0x8088, 0x0, 0x0, {{0x10, 0x4, 0x1, 0x3c, 0x40, 0x466, 0xfffc, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, {[@timestamp_prespec={0x44, 0x1c, 0xe3, 0x3, 0xf, [{@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x5}, {@loopback, 0x1}]}, @timestamp={0x44, 0x4, 0xce, 0x0, 0x5}, @generic={0x89, 0x7, "51d050a214"}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0xa, [@ptr={0x1}, @var={0x10, 0x0, 0x0, 0xe, 0x1}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x58, 0x0, 0xb, 0x6}, @float={0x808, 0x0, 0x0, 0x10, 0x4}, @union={0x100a, 0x8, 0x0, 0x5, 0x0, 0x400, [{0x2, 0x0, 0x6}, {0x8, 0x3, 0x2ec2}, {0x0, 0x1, 0x9}, {0xe, 0x2, 0x692}, {0x5}, {0x0, 0x3, 0xd30}, {0x9, 0x5, 0xe}, {0xe, 0x3, 0x9}]}]}, {0x0, [0x0, 0x7f, 0x5f, 0x30, 0x5f, 0x30, 0x2e, 0x2e]}}, &(0x7f00000006c0)=""/53, 0xc6, 0x35, 0x0, 0x8, 0x10000}, 0x28) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x14, &(0x7f0000000480)=@raw=[@alu={0x7, 0x1, 0xa, 0x5, 0x4, 0x50, 0x8}, @map_val={0x18, 0x2, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x6}, @generic={0x0, 0xe, 0x6, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @call={0x85, 0x0, 0x0, 0x21}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000580)='GPL\x00', 0x4, 0x1000, &(0x7f00000015c0)=""/4096, 0x41100, 0x4b, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000000740)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0xd, 0x400, 0xf92}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[r12, r13, r2, r1, r3, r14, r15], &(0x7f0000000b00)=[{0x2, 0x3, 0x2}], 0x10, 0x1}, 0x94) 48.519397528s ago: executing program 4 (id=2177): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x68}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r3, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffda0, 0x82}}]}, 0x3c}}, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000740)="f909bcce97ecd6286c5ce402c468dc6d4a3922e68f6543e418f3957ffc7738621a6c40f69a857f252458f77e71781032de8a5366705b7bf7ebb845fb1066d3e988385a5c", 0x44}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8004) (async) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048081) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=@newtfilter={0xca4, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xffe0, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x5}}, @filter_kind_options=@f_fw={{0x7}, {0xc24, 0x2, [@TCA_FW_POLICE={0xc18, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x10000, 0xb237, 0xf93, 0x7, 0x0, 0xff, 0x9, 0xffffffff, 0x400, 0xf5, 0x6, 0x9, 0x4, 0x3, 0x0, 0x3, 0xb87, 0x141d, 0x3, 0x3, 0x8000, 0x4, 0x1, 0x0, 0x1, 0x4, 0x800, 0x1, 0x1, 0x0, 0x7, 0x7, 0x0, 0xfd9, 0x5, 0x8b36, 0x7, 0x1b, 0x804, 0x2, 0x6, 0x0, 0x8, 0x0, 0xf9, 0x9, 0x5, 0x5, 0x7, 0x6, 0x5, 0x4, 0x7, 0x1, 0x1, 0x1000, 0xc343, 0xd, 0x0, 0x3, 0x7, 0xfff, 0xffff, 0x0, 0x8, 0x3, 0x5, 0x200, 0x80000001, 0x5, 0xb43, 0x400000, 0x9, 0x2, 0xffff63f4, 0x8, 0x100, 0x9, 0x0, 0x2, 0x7, 0xc0000000, 0x2, 0x9, 0x81, 0x5, 0x4, 0x5, 0x50, 0x13e24abf, 0x3, 0x24, 0x10000, 0xffffffff, 0x1, 0x81, 0x2, 0x7fffffff, 0x7, 0x6, 0x6, 0xff, 0xff, 0x2f, 0x7fffffff, 0x5da7, 0x7, 0xfffffffa, 0x3ff800, 0x3, 0x8, 0x2, 0xa08f, 0x9, 0xb98d, 0x1, 0x9, 0x1, 0x3, 0x0, 0x9, 0x0, 0x1, 0x9, 0xed42, 0x20, 0x7, 0xffffffff, 0xfff, 0x9, 0x9, 0x10001, 0x8, 0x401, 0x2, 0x8001, 0x9, 0xef, 0x1, 0xe3ad, 0x8a4, 0x0, 0x3, 0x57, 0xe, 0x50, 0x329, 0x5, 0x401, 0x800, 0x4, 0x0, 0xfff, 0x8000, 0xff, 0x4, 0x3, 0x4, 0x1, 0x1000, 0x6, 0x6, 0x7ff, 0x212, 0x5, 0x0, 0x9, 0x5153de3a, 0x4f, 0x6, 0x9, 0x200, 0x0, 0x5, 0x3, 0x4, 0x0, 0x6, 0x6, 0xa, 0x7fffffff, 0x1, 0x8, 0x3, 0xf74, 0x10, 0x5edec92d, 0x400, 0x5, 0x9, 0x1, 0x1, 0x401, 0x3b3f, 0x3, 0x0, 0xb646, 0x5c, 0x9, 0x3, 0x9, 0x2, 0x3, 0x0, 0x8, 0x8b2, 0x4, 0x9, 0xfffffffc, 0x8, 0x600000, 0x2, 0x6, 0x923a, 0x10000, 0x0, 0x6, 0x6, 0xe2a, 0xffff, 0x2, 0x3000, 0x7, 0xfffffffc, 0x7, 0x7ff, 0x843, 0x5, 0x0, 0xb980, 0x4, 0x1, 0xd814, 0x0, 0x5, 0x4, 0x1, 0x3, 0x1000, 0x1, 0xd, 0x10, 0x101, 0x1, 0x2, 0x3d9, 0x3, 0x0, 0xf2f, 0x8, 0x4, 0x1, 0x6, 0x8001, 0xffffff1a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x401, 0x2, 0x7a5, 0x1, 0x81, 0x80000000, 0x4, 0xffffffff, 0x10040000, 0x7a5, 0x7f, 0x8b7, 0x9, 0x3, 0x101, 0x2, 0x0, 0x6, 0xfffffffe, 0x9, 0x8001, 0x2, 0x3102, 0x5, 0xc7, 0x6, 0x8, 0x6, 0x4, 0x511, 0x7, 0xe, 0x10, 0x4, 0x1c00000, 0x3, 0x6, 0x7, 0x4, 0x6, 0x5, 0x2, 0xfffffff5, 0x8001, 0x7, 0x6, 0x7fff, 0x3, 0xb52, 0x1, 0x1, 0x8001, 0x9, 0x10, 0xd78e, 0xc8, 0xfffffffb, 0xb, 0x8, 0x6730, 0x3, 0x80, 0x7f, 0xf90, 0xfff, 0xa4b, 0x1, 0x7, 0x9, 0x6, 0x9, 0x80000000, 0x1ff, 0xffffffff, 0x4, 0x9, 0x6, 0x6, 0x3, 0x1, 0xefd, 0x8001, 0x2, 0x7fff, 0x9, 0x4, 0x5, 0x1, 0x7, 0x1, 0x7, 0x1, 0x401, 0x7, 0x1, 0x101, 0xe59, 0x5, 0x0, 0x979, 0x2, 0xd, 0x7fffffff, 0x56, 0x4, 0x9e, 0x0, 0x7fff, 0x498f96cc, 0x9, 0x4, 0x1, 0xc94, 0x3, 0x7, 0xf39, 0x1, 0x10, 0x7, 0x2, 0x37, 0x9a0a, 0x3, 0x0, 0x0, 0x800, 0xc, 0x80000000, 0x169c, 0x0, 0x7, 0x8, 0x5, 0x6, 0x36, 0xb2f, 0x8e7, 0x80, 0x8001, 0xa, 0x0, 0x10001, 0x9, 0x2, 0x0, 0x3cc9d38, 0x4, 0x6, 0x5a, 0x8, 0x7, 0x79d, 0xdbf, 0xa, 0x21, 0x400, 0x5, 0x9, 0x7, 0x10, 0x1da, 0x8, 0x1c, 0x2, 0x2, 0x0, 0x4f7d, 0x1, 0x6, 0x800, 0x74b6d895, 0xffffffff, 0x9, 0xffff0000, 0x1, 0x7, 0x100, 0xeb, 0x9, 0x0, 0x9, 0x10, 0x80, 0x5, 0x1, 0x9, 0x56b, 0x6, 0x81, 0x9, 0x1, 0x18, 0x64e, 0xa, 0xc, 0xfffffe5f, 0x5, 0x0, 0x3, 0x8, 0x6, 0x2, 0xb, 0x8, 0xfffffffa, 0x80, 0xffff, 0x2, 0x2, 0xaf54, 0x3bc, 0x2, 0x100, 0x2, 0x1, 0x7, 0x7, 0x0, 0x81, 0x7, 0x8, 0x6, 0x7fff, 0x7fffffff, 0x7, 0x6, 0x8c, 0x1, 0x6bbd, 0x9, 0x1, 0x2, 0x12d, 0xffffff95, 0x2e, 0x8, 0x9, 0x8, 0x2, 0x8, 0xffff, 0x2, 0x7, 0x9, 0x401, 0x4, 0x2, 0x80000000, 0x2, 0x2, 0x6, 0x4, 0xfffffffa, 0x8, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3f06, 0x3, 0x5, 0x6, 0x6, 0x30c00, 0x10, 0x7fff, 0x0, 0x1, 0x3, 0x81, 0xff, 0x1000, 0x5, 0x10, 0x8, 0x6, 0xfffffff8, 0x9, 0x5, 0x3, 0x6, 0x7aab, 0x1, 0x6d, 0x1000, 0x3, 0xafb, 0x81, 0x7f541b73, 0x4, 0x800, 0x8, 0xa, 0x1, 0x8, 0x6, 0x9, 0x1, 0x20c0, 0x9, 0x3, 0x5, 0xe00, 0xfffffff7, 0x0, 0x5, 0xfffffffb, 0xc, 0xd1e, 0x0, 0xffff3c42, 0x7, 0x9, 0x2, 0x7, 0x9, 0x10000, 0x9, 0x8, 0xc, 0x6, 0xc, 0xff, 0x5, 0x613, 0x1000, 0x4, 0x8000, 0x8, 0x2, 0x0, 0x1, 0xfffffffd, 0xfffffffc, 0x6, 0x10, 0xf, 0x8, 0xd8, 0x5, 0x0, 0x7fff, 0xea25, 0x6, 0x6dbe, 0x1545, 0x7, 0x200, 0x4, 0x3, 0x5, 0xd95, 0x4, 0x5, 0x1000, 0x1, 0x10, 0x4, 0xf, 0x4, 0xb558, 0x852, 0x5, 0x0, 0x6, 0x2, 0x9, 0x401, 0x1ff, 0xfffffff9, 0x7, 0x8000, 0x9, 0x80000001, 0x5a, 0x8, 0x9, 0xfffffff8, 0x8, 0x800, 0x4, 0x6, 0x0, 0x80000000, 0x4e3501f, 0x3, 0x8b1b, 0x9, 0x101, 0x0, 0xd, 0x6, 0x4, 0x3, 0x9, 0x0, 0x400, 0x9, 0x515d, 0x8e3, 0x8e, 0x81, 0x2, 0xd46, 0x8, 0x400, 0xfffff800, 0x6, 0x5, 0xe038, 0x3, 0x200, 0x7, 0x8, 0x0, 0xffff, 0xffff, 0x4, 0xfffffff7, 0x9, 0x8, 0x1, 0x80000000, 0x6, 0x0, 0x7, 0x7, 0x16978351, 0x5, 0x81, 0x0, 0x8, 0x0, 0x6, 0x500, 0x5, 0xd5, 0x2955, 0x101, 0x1ff, 0xc, 0xb, 0x3, 0x6, 0x0, 0x771, 0xa9bf, 0x9, 0x4, 0x8, 0x3, 0x8, 0x101, 0x5, 0x80, 0x4, 0x7, 0x7, 0xffff, 0x7, 0x6, 0x6, 0x4, 0x7, 0x2, 0x3, 0x5, 0x7, 0x7, 0x7, 0x3, 0xa3, 0x7, 0x4, 0x650da911, 0xfe9, 0x3, 0x2, 0x3ff, 0x5, 0x6, 0x5, 0x7ff, 0x3914, 0x9, 0x5, 0xa, 0xfffffffc, 0x400, 0x3, 0x80000000, 0x100, 0x6, 0x1, 0x7, 0x1, 0x1, 0x6, 0x1, 0x4, 0x7, 0x7, 0x4, 0xffffffff, 0x0, 0x4, 0x8, 0x8000, 0x7, 0x2, 0x8, 0x0, 0x7]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xfff2}}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x19}, @TCA_U32_LINK={0x8, 0x3, 0x8}, @TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_LINK={0x8, 0x3, 0x3}, @TCA_U32_DIVISOR={0x8, 0x4, 0xa4}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0xca4}, 0x1, 0xf0ffffffffffff, 0x0, 0x4092}, 0x854) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000001a240)=ANY=[@ANYBLOB="240000001900010000000000000000121c"], 0x24}}, 0x0) r7 = socket(0x2, 0x3, 0xff) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000f000000000000000000000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='contention_begin\x00', r8, 0x0, 0x5}, 0x18) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b667265657a050000006e0400000000000000"], 0x13) (async) ioctl$SIOCSIFHWADDR(r9, 0x8937, &(0x7f0000000000)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg$inet(r7, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)="7ca96e1548a71479959840a77cbef04000000037", 0x14}], 0x1}}], 0x1, 0x20008814) (async) socket$kcm(0x2, 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, 0x0, 0x4}, 0x94) 45.519052749s ago: executing program 3 (id=1136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vcan0\x00'}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8}}}}, 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vcan0\x00'}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8}}}}, 0xfdef) (async) 36.829714843s ago: executing program 3 (id=1136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vcan0\x00'}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8}}}}, 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vcan0\x00'}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8}}}}, 0xfdef) (async) 33.263466401s ago: executing program 32 (id=2177): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x68}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r3, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffda0, 0x82}}]}, 0x3c}}, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000740)="f909bcce97ecd6286c5ce402c468dc6d4a3922e68f6543e418f3957ffc7738621a6c40f69a857f252458f77e71781032de8a5366705b7bf7ebb845fb1066d3e988385a5c", 0x44}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8004) (async) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048081) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)=@newtfilter={0xca4, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xffe0, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x5}}, @filter_kind_options=@f_fw={{0x7}, {0xc24, 0x2, [@TCA_FW_POLICE={0xc18, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x10000, 0xb237, 0xf93, 0x7, 0x0, 0xff, 0x9, 0xffffffff, 0x400, 0xf5, 0x6, 0x9, 0x4, 0x3, 0x0, 0x3, 0xb87, 0x141d, 0x3, 0x3, 0x8000, 0x4, 0x1, 0x0, 0x1, 0x4, 0x800, 0x1, 0x1, 0x0, 0x7, 0x7, 0x0, 0xfd9, 0x5, 0x8b36, 0x7, 0x1b, 0x804, 0x2, 0x6, 0x0, 0x8, 0x0, 0xf9, 0x9, 0x5, 0x5, 0x7, 0x6, 0x5, 0x4, 0x7, 0x1, 0x1, 0x1000, 0xc343, 0xd, 0x0, 0x3, 0x7, 0xfff, 0xffff, 0x0, 0x8, 0x3, 0x5, 0x200, 0x80000001, 0x5, 0xb43, 0x400000, 0x9, 0x2, 0xffff63f4, 0x8, 0x100, 0x9, 0x0, 0x2, 0x7, 0xc0000000, 0x2, 0x9, 0x81, 0x5, 0x4, 0x5, 0x50, 0x13e24abf, 0x3, 0x24, 0x10000, 0xffffffff, 0x1, 0x81, 0x2, 0x7fffffff, 0x7, 0x6, 0x6, 0xff, 0xff, 0x2f, 0x7fffffff, 0x5da7, 0x7, 0xfffffffa, 0x3ff800, 0x3, 0x8, 0x2, 0xa08f, 0x9, 0xb98d, 0x1, 0x9, 0x1, 0x3, 0x0, 0x9, 0x0, 0x1, 0x9, 0xed42, 0x20, 0x7, 0xffffffff, 0xfff, 0x9, 0x9, 0x10001, 0x8, 0x401, 0x2, 0x8001, 0x9, 0xef, 0x1, 0xe3ad, 0x8a4, 0x0, 0x3, 0x57, 0xe, 0x50, 0x329, 0x5, 0x401, 0x800, 0x4, 0x0, 0xfff, 0x8000, 0xff, 0x4, 0x3, 0x4, 0x1, 0x1000, 0x6, 0x6, 0x7ff, 0x212, 0x5, 0x0, 0x9, 0x5153de3a, 0x4f, 0x6, 0x9, 0x200, 0x0, 0x5, 0x3, 0x4, 0x0, 0x6, 0x6, 0xa, 0x7fffffff, 0x1, 0x8, 0x3, 0xf74, 0x10, 0x5edec92d, 0x400, 0x5, 0x9, 0x1, 0x1, 0x401, 0x3b3f, 0x3, 0x0, 0xb646, 0x5c, 0x9, 0x3, 0x9, 0x2, 0x3, 0x0, 0x8, 0x8b2, 0x4, 0x9, 0xfffffffc, 0x8, 0x600000, 0x2, 0x6, 0x923a, 0x10000, 0x0, 0x6, 0x6, 0xe2a, 0xffff, 0x2, 0x3000, 0x7, 0xfffffffc, 0x7, 0x7ff, 0x843, 0x5, 0x0, 0xb980, 0x4, 0x1, 0xd814, 0x0, 0x5, 0x4, 0x1, 0x3, 0x1000, 0x1, 0xd, 0x10, 0x101, 0x1, 0x2, 0x3d9, 0x3, 0x0, 0xf2f, 0x8, 0x4, 0x1, 0x6, 0x8001, 0xffffff1a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x401, 0x2, 0x7a5, 0x1, 0x81, 0x80000000, 0x4, 0xffffffff, 0x10040000, 0x7a5, 0x7f, 0x8b7, 0x9, 0x3, 0x101, 0x2, 0x0, 0x6, 0xfffffffe, 0x9, 0x8001, 0x2, 0x3102, 0x5, 0xc7, 0x6, 0x8, 0x6, 0x4, 0x511, 0x7, 0xe, 0x10, 0x4, 0x1c00000, 0x3, 0x6, 0x7, 0x4, 0x6, 0x5, 0x2, 0xfffffff5, 0x8001, 0x7, 0x6, 0x7fff, 0x3, 0xb52, 0x1, 0x1, 0x8001, 0x9, 0x10, 0xd78e, 0xc8, 0xfffffffb, 0xb, 0x8, 0x6730, 0x3, 0x80, 0x7f, 0xf90, 0xfff, 0xa4b, 0x1, 0x7, 0x9, 0x6, 0x9, 0x80000000, 0x1ff, 0xffffffff, 0x4, 0x9, 0x6, 0x6, 0x3, 0x1, 0xefd, 0x8001, 0x2, 0x7fff, 0x9, 0x4, 0x5, 0x1, 0x7, 0x1, 0x7, 0x1, 0x401, 0x7, 0x1, 0x101, 0xe59, 0x5, 0x0, 0x979, 0x2, 0xd, 0x7fffffff, 0x56, 0x4, 0x9e, 0x0, 0x7fff, 0x498f96cc, 0x9, 0x4, 0x1, 0xc94, 0x3, 0x7, 0xf39, 0x1, 0x10, 0x7, 0x2, 0x37, 0x9a0a, 0x3, 0x0, 0x0, 0x800, 0xc, 0x80000000, 0x169c, 0x0, 0x7, 0x8, 0x5, 0x6, 0x36, 0xb2f, 0x8e7, 0x80, 0x8001, 0xa, 0x0, 0x10001, 0x9, 0x2, 0x0, 0x3cc9d38, 0x4, 0x6, 0x5a, 0x8, 0x7, 0x79d, 0xdbf, 0xa, 0x21, 0x400, 0x5, 0x9, 0x7, 0x10, 0x1da, 0x8, 0x1c, 0x2, 0x2, 0x0, 0x4f7d, 0x1, 0x6, 0x800, 0x74b6d895, 0xffffffff, 0x9, 0xffff0000, 0x1, 0x7, 0x100, 0xeb, 0x9, 0x0, 0x9, 0x10, 0x80, 0x5, 0x1, 0x9, 0x56b, 0x6, 0x81, 0x9, 0x1, 0x18, 0x64e, 0xa, 0xc, 0xfffffe5f, 0x5, 0x0, 0x3, 0x8, 0x6, 0x2, 0xb, 0x8, 0xfffffffa, 0x80, 0xffff, 0x2, 0x2, 0xaf54, 0x3bc, 0x2, 0x100, 0x2, 0x1, 0x7, 0x7, 0x0, 0x81, 0x7, 0x8, 0x6, 0x7fff, 0x7fffffff, 0x7, 0x6, 0x8c, 0x1, 0x6bbd, 0x9, 0x1, 0x2, 0x12d, 0xffffff95, 0x2e, 0x8, 0x9, 0x8, 0x2, 0x8, 0xffff, 0x2, 0x7, 0x9, 0x401, 0x4, 0x2, 0x80000000, 0x2, 0x2, 0x6, 0x4, 0xfffffffa, 0x8, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x3f06, 0x3, 0x5, 0x6, 0x6, 0x30c00, 0x10, 0x7fff, 0x0, 0x1, 0x3, 0x81, 0xff, 0x1000, 0x5, 0x10, 0x8, 0x6, 0xfffffff8, 0x9, 0x5, 0x3, 0x6, 0x7aab, 0x1, 0x6d, 0x1000, 0x3, 0xafb, 0x81, 0x7f541b73, 0x4, 0x800, 0x8, 0xa, 0x1, 0x8, 0x6, 0x9, 0x1, 0x20c0, 0x9, 0x3, 0x5, 0xe00, 0xfffffff7, 0x0, 0x5, 0xfffffffb, 0xc, 0xd1e, 0x0, 0xffff3c42, 0x7, 0x9, 0x2, 0x7, 0x9, 0x10000, 0x9, 0x8, 0xc, 0x6, 0xc, 0xff, 0x5, 0x613, 0x1000, 0x4, 0x8000, 0x8, 0x2, 0x0, 0x1, 0xfffffffd, 0xfffffffc, 0x6, 0x10, 0xf, 0x8, 0xd8, 0x5, 0x0, 0x7fff, 0xea25, 0x6, 0x6dbe, 0x1545, 0x7, 0x200, 0x4, 0x3, 0x5, 0xd95, 0x4, 0x5, 0x1000, 0x1, 0x10, 0x4, 0xf, 0x4, 0xb558, 0x852, 0x5, 0x0, 0x6, 0x2, 0x9, 0x401, 0x1ff, 0xfffffff9, 0x7, 0x8000, 0x9, 0x80000001, 0x5a, 0x8, 0x9, 0xfffffff8, 0x8, 0x800, 0x4, 0x6, 0x0, 0x80000000, 0x4e3501f, 0x3, 0x8b1b, 0x9, 0x101, 0x0, 0xd, 0x6, 0x4, 0x3, 0x9, 0x0, 0x400, 0x9, 0x515d, 0x8e3, 0x8e, 0x81, 0x2, 0xd46, 0x8, 0x400, 0xfffff800, 0x6, 0x5, 0xe038, 0x3, 0x200, 0x7, 0x8, 0x0, 0xffff, 0xffff, 0x4, 0xfffffff7, 0x9, 0x8, 0x1, 0x80000000, 0x6, 0x0, 0x7, 0x7, 0x16978351, 0x5, 0x81, 0x0, 0x8, 0x0, 0x6, 0x500, 0x5, 0xd5, 0x2955, 0x101, 0x1ff, 0xc, 0xb, 0x3, 0x6, 0x0, 0x771, 0xa9bf, 0x9, 0x4, 0x8, 0x3, 0x8, 0x101, 0x5, 0x80, 0x4, 0x7, 0x7, 0xffff, 0x7, 0x6, 0x6, 0x4, 0x7, 0x2, 0x3, 0x5, 0x7, 0x7, 0x7, 0x3, 0xa3, 0x7, 0x4, 0x650da911, 0xfe9, 0x3, 0x2, 0x3ff, 0x5, 0x6, 0x5, 0x7ff, 0x3914, 0x9, 0x5, 0xa, 0xfffffffc, 0x400, 0x3, 0x80000000, 0x100, 0x6, 0x1, 0x7, 0x1, 0x1, 0x6, 0x1, 0x4, 0x7, 0x7, 0x4, 0xffffffff, 0x0, 0x4, 0x8, 0x8000, 0x7, 0x2, 0x8, 0x0, 0x7]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xfff2}}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x19}, @TCA_U32_LINK={0x8, 0x3, 0x8}, @TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_LINK={0x8, 0x3, 0x3}, @TCA_U32_DIVISOR={0x8, 0x4, 0xa4}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0xca4}, 0x1, 0xf0ffffffffffff, 0x0, 0x4092}, 0x854) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000001a240)=ANY=[@ANYBLOB="240000001900010000000000000000121c"], 0x24}}, 0x0) r7 = socket(0x2, 0x3, 0xff) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000f000000000000000000000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='contention_begin\x00', r8, 0x0, 0x5}, 0x18) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b667265657a050000006e0400000000000000"], 0x13) (async) ioctl$SIOCSIFHWADDR(r9, 0x8937, &(0x7f0000000000)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg$inet(r7, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000008c0)="7ca96e1548a71479959840a77cbef04000000037", 0x14}], 0x1}}], 0x1, 0x20008814) (async) socket$kcm(0x2, 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, 0x0, 0x0, 0x4}, 0x94) 24.785675366s ago: executing program 3 (id=1136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vcan0\x00'}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8}}}}, 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vcan0\x00'}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8}}}}, 0xfdef) (async) 13.394177021s ago: executing program 3 (id=1136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vcan0\x00'}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8}}}}, 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'vcan0\x00'}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8}}}}, 0xfdef) (async) 3.297056081s ago: executing program 0 (id=2451): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)="0000040001000000", 0x8) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000400)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r8, &(0x7f0000000480)="59ec1cfc24bd35568f252213a5c61a4460d0710a82f28da113d428a14daababe", &(0x7f0000000540)=""/151}, 0x20) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r6, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="40000000100039042bbd7000fddbdf2500000000", @ANYRES32=r6, @ANYBLOB="0000000000000000180077aad32901f5667265000c000280000014000200000008000400000800009189a9dbfe97eb973bc08f13ba9cd3bacce08272"], 0x40}}, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010001fff2bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="170109008a040200"], 0x20}}, 0x24008000) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f0000000000)) sendmmsg$inet(r1, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x408d4) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x2c, r12, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911075000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01020000000000000000010000000800010003000000040004800800020002000016"], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000711242000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) 3.043635165s ago: executing program 2 (id=2455): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x20000010) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x58, r0, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]]}, 0x58}}, 0x0) 2.888247356s ago: executing program 2 (id=2456): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8649, 0x8, 0x1}}]}]}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000081) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MTU={0x8, 0x4, 0x40e}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x8649, 0x8, 0x1}}]}]}]}, 0x54}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000081) (async) 2.852908643s ago: executing program 0 (id=2458): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58010002100001000000e489efca857df914129fdcf2000000000000fe8000004000000000000000004600bb00000000000004000000ffffe000000200000025", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000032000000000000000000000000000000000000010000000000000000a3020000000000007f00000000000000ffffffffffffffff0000000000000000330000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200af000000000000001c001700000000000000000000000000000000002bbd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000"], 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58010002100001000000e489efca857df914129fdcf2000000000000fe8000004000000000000000004600bb00000000000004000000ffffe000000200000025", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x60, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x45}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x49}, @NL80211_ATTR_PMK={0x14, 0xfe, "b9bbc0c77c57366cb0723403c478ac0b"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xe55}]}, 0x60}, 0x1, 0x0, 0x0, 0x48801}, 0x0) (async) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x60, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x1}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x45}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x49}, @NL80211_ATTR_PMK={0x14, 0xfe, "b9bbc0c77c57366cb0723403c478ac0b"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xe55}]}, 0x60}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) (async) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f00000002c0), &(0x7f0000000300)=0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) socketpair(0x8, 0x1, 0x4, 0x0) (async) socketpair(0x8, 0x1, 0x4, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fd, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x2) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x40000) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @default, @bpq0, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2}, 0xe) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.785429437s ago: executing program 2 (id=2459): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000b00)={0xa, 0x0, 0x3, @mcast1, 0x6}, 0x20) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}}}, 0xe8) 2.651862172s ago: executing program 0 (id=2461): r0 = socket(0x1f, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="010a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0xffff, 0x0, @rand_addr=' \x01\x00', 0x200}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040), 0xc) r4 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, 0x0) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0x5, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x81, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) socket(0x1f, 0x4, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="010a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0xffff, 0x0, @rand_addr=' \x01\x00', 0x200}, 0x1c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) connect$qrtr(r3, &(0x7f0000000040), 0xc) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) (async) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, 0x0) (async) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) (async) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000003c0)=0x5, 0x4) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x81}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) (async) 2.651622042s ago: executing program 2 (id=2462): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d89024", 0x4}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) recvfrom$inet6(r0, &(0x7f0000000180), 0x0, 0x40, &(0x7f00000001c0)={0xa, 0x4e24, 0x167, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb}, 0x1c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200"/12, @ANYRES32, @ANYBLOB="b339ee0e2822a766a081ed7e1399ebbf2a1d629546b8b0709d22275ef555", @ANYRES64=0x0], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200"/12, @ANYRES32, @ANYBLOB="b339ee0e2822a766a081ed7e1399ebbf2a1d629546b8b0709d22275ef555", @ANYRES64=0x0], 0x10) socket$l2tp6(0xa, 0x2, 0x73) close(0x3) 2.518484336s ago: executing program 2 (id=2463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf70}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x1, 0x10001, {{0xe, 0x4, 0x2, 0x23, 0x38, 0x65, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @private=0xa010102, {[@generic={0x88, 0x2}, @end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x6c, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x3}, {@multicast2, 0x2}, {@empty, 0xfffffc00}]}]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000640)=r0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0xfff, 0x2, 0xa7, 0x10, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x17, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func, @generic={0x2, 0x3, 0xa, 0xedbb, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x16, &(0x7f00000001c0)=""/22, 0x41100, 0x1a, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000004c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xa, 0x8, 0x15ea}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000740)=[r4, r5], &(0x7f0000000780)=[{0x1, 0x4, 0xb, 0xb}, {0x0, 0x1, 0xe, 0xa}, {0x5, 0x3, 0xf, 0x9}, {0x3, 0x5, 0x10, 0x6}, {0x1, 0x4, 0xd, 0x3}, {0x3, 0x1, 0x10, 0x8}, {0x2, 0x4, 0xc, 0x4}, {0x4, 0x3, 0x9, 0xc}, {0x0, 0x2, 0x9, 0x5}], 0x10, 0x7}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000480)={0x0, 0x11, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 2.279495004s ago: executing program 2 (id=2464): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r0, 0x0, 0xfaf}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='svc_unregister\x00', r2, 0x0, 0xfaf}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000280)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r4}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=0x1, @ANYRES32=r5, @ANYBLOB="2f1ae64e63205b0e", @ANYRES32, @ANYBLOB, @ANYRES32=r4, @ANYRES64=0x0], 0x20) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0xfffffffd) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 1.738178645s ago: executing program 0 (id=2466): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) epoll_create(0x3) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000003340), 0x10) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="6d23f91c5e9e946b90c69aef34f6dc39a769065d8180", 0x16}, {&(0x7f0000000100)="8ad2530186bbfeb24f3a7d21e35eb22e710eebcc3ed00d7bdcff4ae806280adc83d270d7017a77c5b978fee0581275", 0x2f}], 0x2}, 0x4000000) 1.549114548s ago: executing program 0 (id=2469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x14) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "d1a2d6e7"}, &(0x7f0000000180)=0x2c) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000140)=0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0xa, &(0x7f0000000080)=[{0x3, 0x7, 0xe, 0x3}, {0x440, 0x5, 0x8, 0x200}, {0x9, 0x0, 0x8, 0x1}, {0x7, 0x7, 0x0, 0xff}, {0x0, 0x4, 0x5, 0x8}, {0xff, 0x74, 0x7f, 0x9}, {0x4, 0x2, 0x2, 0xff}, {0x7, 0x4, 0x1a, 0x6778f7c}, {0x0, 0x8, 0x6}, {0x2, 0x0, 0xcc, 0x80000001}]}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x0, 0x3b, 0xfd08, &(0x7f0000000180)="5ae02efc442000000000000000c723fa03faf2acdc0f9d5af8015b0abe92772c580d85e0dfa999ceaef773ead243c07350d9156d0ecc6a43edaeaa20fbf448d756e97a49901cf5", &(0x7f0000000140)=""/24, 0x0, 0x0, 0x37, 0x21}, 0x28) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4008004}, 0xc010) r7 = socket(0x11, 0x800000003, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000110000000900000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x36}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) ioctl$SIOCAX25GETINFOOLD(r7, 0x89e9, &(0x7f0000000280)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 1.47496779s ago: executing program 1 (id=2470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x682}]}, 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x0) getsockopt$ax25_int(r2, 0x101, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x108}}, 0x0) 1.152553911s ago: executing program 1 (id=2472): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x20000010) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x58, r1, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}], @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}]]}, 0x58}}, 0x0) 955.065066ms ago: executing program 1 (id=2474): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r0, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) close(r0) (fail_nth: 4) 672.014571ms ago: executing program 5 (id=2475): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0xf5}]}]}], {0x14}}, 0x68}}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000580)=0x5, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x0, 0xd, 0x0, 0x2000000, 0x0, 0x2]}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x800) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r5, 0x600}, {r0, 0x4600}, {r4, 0x43e}, {r2, 0x140}, {r0, 0x600}], 0x5, &(0x7f0000000180)={r6, r7+60000000}, &(0x7f00000001c0)={[0x7]}, 0x8) 642.985657ms ago: executing program 1 (id=2476): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r2) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r3, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0xd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000240000000400000002"], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r6, 0x0, 0xfffffffffffffffe}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000"], 0x0, 0x2}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000340)={r7, r7, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) shutdown(r7, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 530.702756ms ago: executing program 0 (id=2477): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x49) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000005c0)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x5e}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@broadcast, @private=0xa010100, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0_virt_wifi\x00', {}, {}, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @remote, 0x0, 0xffffffff, 'tunl0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x4, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000006800010000000000fedffff70a000000000000001800088014000300fc020000000000000000000000000000060007000200000008000500", @ANYRES32=r1, @ANYBLOB="140006"], 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x50, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0xc, &(0x7f0000000140)=ANY=[@ANYRES16], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 472.374135ms ago: executing program 5 (id=2478): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@deltaction={0x8c, 0x31, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x774a}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xffffffffffffffb6, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x8c}}, 0x0) 431.733526ms ago: executing program 1 (id=2479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000000000000000080003400000c0180600064000000000080004"], 0x7c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x52}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x37d}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x64}}, 0x2000000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r3) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x1b0, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x240440c0}, 0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[], 0x27) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r9, 0x80111500, &(0x7f0000006380)) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503afffe8000000000000000000000000000bbfe8000000000000000000000000000aa08029078000000006000081000001100fc01000000000000000000000000000000000000000061eb2175bdc323f600000000000000000000052f000000000000db9f49b2609ceb2ef48b2730155717d8"], 0x0) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r12, 0x106, 0x1, 0x0, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r10, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1d4, r11, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0xac, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b38b889807c4c392991d06caff4e87464af61337797d321fa7a467d26b72ec66"}, @NL802154_KEY_ATTR_ID={0x7c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x16}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_KEY={0xdc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "911ffd6b0e997867268135d0f6f926d0c9cdad8a4e140e687a8a08bece91bd08"}, @NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5eec}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d7b635ca64db6738485edc2e13955f07be91019d418f4c13d99c66771d669584"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0df7fc16c06366f10c47ef0caa9bca8f"}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x1d4}}, 0x4810) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a010100000000000000000000000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021080003400000014108000f"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x8000000) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r11, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 359.144003ms ago: executing program 5 (id=2480): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x20000010) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) accept$unix(r0, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x28, 0x11, 0x1, @private0, @mcast2, {[], {0x4e22, 0x4e22, 0x28, 0x0, @wg=@data={0x4, 0x2, 0x3, "c1ec20295ad01efe923f724ddb2e065d"}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="05006f783680ae99a0c6938ecb00000000fbdbff252e0000000800", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) 268.38495ms ago: executing program 5 (id=2481): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x2, 0x20000, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x38003}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0xfffffffb}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_IFALIASn={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 267.142306ms ago: executing program 1 (id=2482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x160, 0x10, 0x713, 0x70bd29, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x5b}, 0x4e23, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0xbf, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@private2, {0x0, 0x3, 0x9, 0x9, 0x2, 0x0, 0x20001, 0x3}, {0xc, 0x0, 0x2, 0xfffffffffffffffc}, {0x8000000c}, 0x70bd28, 0x0, 0x2, 0x4, 0x6, 0x2}, [@algo_aead={0x70, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x120, 0x80, "316f748a6d2d020d1c0dda27a9bca207141b9a451c00aa1271df019aeb512657849383b4"}}]}, 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x200480d0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf}]}}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000140000001400000002000000000000000100000d000000000e00"], &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0x8}, 0x28) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)={0x44, r7, 0x11, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffffb, 0xfffffffc}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) r9 = socket(0x200000000000011, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r9, &(0x7f0000000080)={0x11, 0x800, r10, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r11 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r11, 0x28, 0x8, 0x0, 0x1a) r12 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r12, &(0x7f0000000080)={0x11, 0x800, r10, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)}, 0x10) r13 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r13, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmmsg$inet6(r13, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="24000000000000002900000032000000fe80000000000000000000000000001d", @ANYRES32=r15, @ANYBLOB="00ffde00"], 0x28}}], 0x1, 0x4080) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 248.403167ms ago: executing program 5 (id=2483): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x20042840) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x22, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x4, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x2fc, 0xd4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xfff1, 0xd}, {0xffed, 0x10}}}, 0x101d0}, 0x1, 0x0, 0x0, 0x80}, 0x20000084) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000fb18110000cb9b40c6cf24101c1e12cbbb2f333ab5851a52dcd15362c09ba54415921b72", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r6, 0x0, 0x2, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x130, 0x240, 0x0, 0x240, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) 0s ago: executing program 5 (id=2484): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0xd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r6, &(0x7f0000000480)={0x11, 0xf8, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) splice(r5, 0x0, r6, 0x0, 0x10500, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r9}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@generic={0x6, 0x1, 0xc, 0x6, 0x4}, @call={0x85, 0x0, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000180)='syzkaller\x00', 0x7ac, 0x7f, &(0x7f0000000340)=""/127, 0x41000, 0x4, '\x00', r3, @fallback=0x24, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0xd, 0x2, 0x9}, 0x10, 0x0, r9, 0xa, &(0x7f00000003c0)=[r10], &(0x7f0000000400)=[{0x2, 0x5, 0x5, 0x9}, {0x1, 0x2, 0xd, 0x8}, {0x2, 0x4, 0xe, 0xa}, {0x5, 0x5, 0xa, 0xc}, {0x1, 0x1, 0xd, 0x6}, {0x5, 0x3, 0xd, 0x8}, {0x3, 0x4, 0xe, 0x2}, {0x1, 0x3, 0x8, 0x8}, {0x2, 0x2, 0xf, 0x3}, {0x2, 0x4, 0x4, 0x1}], 0x10, 0xbd38}, 0x94) kernel console output (not intermixed with test programs): yzkaller0>, priority 0 [ 255.677457][T12158] tipc: Resetting bearer [ 255.745780][T12164] netlink: 'syz.4.1617': attribute type 83 has an invalid length. [ 255.760683][T12157] tipc: Disabling bearer [ 255.851807][ T7887] bridge_slave_1: left allmulticast mode [ 255.870546][ T7887] bridge_slave_1: left promiscuous mode [ 255.889770][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.964148][ T7887] bridge_slave_0: left allmulticast mode [ 255.976691][ T7887] bridge_slave_0: left promiscuous mode [ 256.016902][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.046106][T12179] netlink: 'syz.4.1621': attribute type 1 has an invalid length. [ 256.065550][T12179] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1621'. [ 256.081462][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 256.104349][T12179] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1621'. [ 256.505268][ T7887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.517039][ T7887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.528937][ T7887] bond0 (unregistering): Released all slaves [ 256.943993][T12145] chnl_net:caif_netlink_parms(): no params data found [ 257.004470][ T5846] Bluetooth: hci0: command tx timeout [ 257.142065][ T7887] hsr_slave_0: left promiscuous mode [ 257.161011][ T7887] hsr_slave_1: left promiscuous mode [ 257.166863][ T7887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.175052][ T7887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.187534][ T7887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.196619][ T7887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.204182][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1628'. [ 257.239205][ T7887] veth1_macvtap: left promiscuous mode [ 257.245495][ T7887] veth0_macvtap: left promiscuous mode [ 257.251267][ T7887] veth1_vlan: left promiscuous mode [ 257.257484][ T7887] veth0_vlan: left promiscuous mode [ 257.979878][ T7887] team0 (unregistering): Port device team_slave_1 removed [ 258.040806][ T7887] team0 (unregistering): Port device team_slave_0 removed [ 258.373283][ T7875] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 258.474798][T12220] tipc: Enabling of bearer rejected, already enabled [ 258.652959][T12230] netlink: 'syz.4.1632': attribute type 21 has an invalid length. [ 258.676085][T12145] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.684628][T12145] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.692293][T12145] bridge_slave_0: entered allmulticast mode [ 258.699828][T12145] bridge_slave_0: entered promiscuous mode [ 258.737184][T12230] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1632'. [ 258.780610][T12145] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.789770][T12145] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.805601][T12145] bridge_slave_1: entered allmulticast mode [ 258.814172][T12145] bridge_slave_1: entered promiscuous mode [ 258.963821][T12145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.000409][T12237] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1634'. [ 259.005174][T12145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.071424][T12236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1634'. [ 259.080969][ T5846] Bluetooth: hci0: command tx timeout [ 259.189566][T12145] team0: Port device team_slave_0 added [ 259.200495][T12145] team0: Port device team_slave_1 added [ 259.280198][T12251] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.331430][T12145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.345632][T12145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.375998][T12145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.408912][T12145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.416213][T12145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.447085][T12145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.577205][T12145] hsr_slave_0: entered promiscuous mode [ 259.584129][T12145] hsr_slave_1: entered promiscuous mode [ 259.590797][T12145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.598698][T12145] Cannot create hsr debugfs directory [ 259.772828][T12268] __nla_validate_parse: 1 callbacks suppressed [ 259.772848][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1642'. [ 260.009226][T12282] netlink: 'syz.4.1646': attribute type 4 has an invalid length. [ 260.120723][T12287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.128019][T12287] IPv6: NLM_F_CREATE should be set when creating new route [ 260.135434][T12287] IPv6: NLM_F_CREATE should be set when creating new route [ 260.142689][T12287] IPv6: NLM_F_CREATE should be set when creating new route [ 260.219885][T12287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.234919][T12287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1648'. [ 260.303040][T12287] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1648'. [ 260.500566][T12304] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1653'. [ 260.512174][T12304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1653'. [ 260.632681][T12310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1655'. [ 260.664945][T12312] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1656'. [ 260.826344][T12145] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.970764][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'. [ 260.997600][T12322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 261.119570][T12145] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 261.148906][T12145] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.159940][ T5846] Bluetooth: hci0: command tx timeout [ 261.354525][T12145] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 261.367964][T12334] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !û˜ÌE³ýä>BáPÔ¢ýÝš—gtŒ£R$C |UÜ—À [ 261.572992][T12356] syz_tun: entered allmulticast mode [ 261.631355][T12355] syz_tun: left allmulticast mode [ 261.702824][T12145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.773150][T12145] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.819955][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.827165][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.878956][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.886202][ T5991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.251328][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1671'. [ 262.309965][T12383] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1671'. [ 262.513976][T12145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.614298][T12145] veth0_vlan: entered promiscuous mode [ 262.650263][T12397] netlink: 'syz.2.1673': attribute type 27 has an invalid length. [ 262.650330][T12396] netlink: 'syz.2.1673': attribute type 27 has an invalid length. [ 262.669017][T12145] veth1_vlan: entered promiscuous mode [ 262.755039][T12145] veth0_macvtap: entered promiscuous mode [ 262.781569][T12145] veth1_macvtap: entered promiscuous mode [ 262.844001][T12145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.892578][T12145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.955755][ T7894] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.976962][ T7894] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.007089][ T7894] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.046771][ T7894] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.058484][T12408] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 263.249804][ T5846] Bluetooth: hci0: command tx timeout [ 263.367195][ T7891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.399321][ T7891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.485223][ T7875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.513672][ T7875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.112189][ T7875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.129944][ T7875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.558669][ T7894] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.328231][ T7894] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.504764][ T7894] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.573702][ T7894] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.764228][ T5846] Bluetooth: hci4: link tx timeout [ 265.771330][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 265.780935][ T5851] Bluetooth: hci4: link tx timeout [ 265.786098][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 265.797456][ T5851] Bluetooth: hci4: link tx timeout [ 265.804182][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 265.804715][T12482] __nla_validate_parse: 4 callbacks suppressed [ 265.804729][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1694'. [ 265.839903][ T5851] Bluetooth: hci4: link tx timeout [ 265.845085][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 265.853168][ T5851] Bluetooth: hci4: link tx timeout [ 265.858303][ T5851] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 265.946795][T12489] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1694'. [ 266.196931][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 266.206755][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 266.215418][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 266.231870][ T7894] bridge_slave_1: left allmulticast mode [ 266.237868][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 266.245807][ T7894] bridge_slave_1: left promiscuous mode [ 266.252548][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.261601][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 266.314900][ T7894] bridge_slave_0: left allmulticast mode [ 266.321223][ T7894] bridge_slave_0: left promiscuous mode [ 266.326996][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.779866][T12518] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1701'. [ 267.113666][ T7894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.124840][ T7894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.135565][ T7894] bond0 (unregistering): Released all slaves [ 267.463205][T12524] gtp0: entered promiscuous mode [ 267.468345][T12524] gtp0: entered allmulticast mode [ 267.630294][T12536] sctp: [Deprecated]: syz.4.1706 (pid 12536) Use of int in max_burst socket option deprecated. [ 267.630294][T12536] Use struct sctp_assoc_value instead [ 267.805432][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 267.918519][ T7894] hsr_slave_0: left promiscuous mode [ 267.944425][ T7894] hsr_slave_1: left promiscuous mode [ 267.967137][ T7894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.992991][ T7894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.005213][T12558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'. [ 268.022794][ T7894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.046689][ T7894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.129243][ T7894] veth1_macvtap: left promiscuous mode [ 268.159905][ T7894] veth0_macvtap: left promiscuous mode [ 268.165582][ T7894] veth1_vlan: left promiscuous mode [ 268.209714][ T7894] veth0_vlan: left promiscuous mode [ 268.363772][ T5846] Bluetooth: hci0: command tx timeout [ 268.806369][ T7894] team0 (unregistering): Port device team_slave_1 removed [ 268.844535][ T7894] team0 (unregistering): Port device team_slave_0 removed [ 269.434186][T12583] Can't find ip_set type hash:ip$mec [ 269.472979][T12590] tipc: New replicast peer: 255.255.255.255 [ 269.507335][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1720'. [ 269.516941][T12590] tipc: Enabled bearer , priority 10 [ 269.651204][T12581] vlan2: entered allmulticast mode [ 269.656458][T12581] veth1: entered allmulticast mode [ 269.695446][T12497] chnl_net:caif_netlink_parms(): no params data found [ 269.889272][T12613] netlink: 'syz.0.1727': attribute type 8 has an invalid length. [ 269.938149][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1727'. [ 270.104235][T12626] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1728'. [ 270.117092][T12623] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1729'. [ 270.176609][T12628] netlink: 'syz.2.1730': attribute type 1 has an invalid length. [ 270.204283][T12497] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.209179][T12628] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1730'. [ 270.219624][T12497] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.239764][T12497] bridge_slave_0: entered allmulticast mode [ 270.247652][T12497] bridge_slave_0: entered promiscuous mode [ 270.253940][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1730'. [ 270.264800][T12497] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.276068][T12497] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.288734][T12497] bridge_slave_1: entered allmulticast mode [ 270.304681][T12497] bridge_slave_1: entered promiscuous mode [ 270.449702][ T5846] Bluetooth: hci0: command tx timeout [ 270.566106][T12497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.617936][T12497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.706783][T12654] netlink: 'syz.0.1735': attribute type 10 has an invalid length. [ 270.869628][T12497] team0: Port device team_slave_0 added [ 270.882865][T12662] __nla_validate_parse: 1 callbacks suppressed [ 270.882883][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 270.935757][T12497] team0: Port device team_slave_1 added [ 271.061410][T12497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.072999][T12497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.104032][T12497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.142990][T12667] vxcan5: entered promiscuous mode [ 271.152689][T12667] vxcan5: entered allmulticast mode [ 271.201638][T12497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.224396][T12497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.289565][T12497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.463805][T12497] hsr_slave_0: entered promiscuous mode [ 271.481152][T12497] hsr_slave_1: entered promiscuous mode [ 271.491724][T12497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.511607][T12497] Cannot create hsr debugfs directory [ 271.669017][T12689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1744'. [ 272.490174][T12719] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1757'. [ 272.493404][T12497] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.520046][ T5846] Bluetooth: hci0: command tx timeout [ 272.521040][T12497] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.554305][T12725] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 272.567237][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 272.607622][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1757'. [ 272.657261][T12497] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.733277][T12497] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.745845][T12734] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1759'. [ 272.779806][T12725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1757'. [ 273.470409][T12747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1761'. [ 273.587219][T12497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.697854][T12497] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.721304][ T7885] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.728774][ T7885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.782028][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.789214][ T7894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.803319][T12760] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1762'. [ 273.923792][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 273.967484][T12767] netlink: 'syz.0.1766': attribute type 14 has an invalid length. [ 273.977164][T12497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.002275][T12767] netlink: 'syz.0.1766': attribute type 13 has an invalid length. [ 274.045805][T12773] batadv_slave_1: entered promiscuous mode [ 274.071975][T12773] batadv_slave_1: left allmulticast mode [ 274.465250][T12497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.556916][T12497] veth0_vlan: entered promiscuous mode [ 274.579076][T12497] veth1_vlan: entered promiscuous mode [ 274.599875][ T5846] Bluetooth: hci0: command tx timeout [ 274.677053][T12497] veth0_macvtap: entered promiscuous mode [ 274.744100][T12497] veth1_macvtap: entered promiscuous mode [ 274.792895][T12497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.829978][T12497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.864235][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.873743][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.912263][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.926147][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.088548][ T7891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.122634][ T7891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.225867][ T7891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.252829][ T7891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.958478][ T7875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.097002][T12851] netlink: 'syz.2.1789': attribute type 3 has an invalid length. [ 276.302480][ T7875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.436154][ T7875] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.637370][ T7875] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.909268][ T7875] bridge_slave_1: left allmulticast mode [ 276.915212][ T7875] bridge_slave_1: left promiscuous mode [ 276.921584][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.935173][ T7875] bridge_slave_0: left allmulticast mode [ 276.941066][ T7875] bridge_slave_0: left promiscuous mode [ 276.946780][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.328353][T12876] __nla_validate_parse: 5 callbacks suppressed [ 277.328374][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1792'. [ 277.394749][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1792'. [ 277.451058][T12876] netlink: 'syz.2.1792': attribute type 13 has an invalid length. [ 277.488304][T12876] netlink: 'syz.2.1792': attribute type 11 has an invalid length. [ 277.678405][ T7875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.711219][ T7875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.738501][ T7875] bond0 (unregistering): Released all slaves [ 277.756661][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.767708][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.782241][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.819970][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.843075][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.197448][T12904] tipc: Can't bind to reserved service type 0 [ 278.297697][T12904] bond0: entered promiscuous mode [ 278.314213][T12904] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 278.356214][T12904] bond0: left promiscuous mode [ 278.509097][ T7875] hsr_slave_0: left promiscuous mode [ 278.534929][ T7875] hsr_slave_1: left promiscuous mode [ 278.548057][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.561134][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.569989][T12922] IPv6: addrconf: prefix option has invalid lifetime [ 278.583451][ T7875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.599602][ T7875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.648848][ T7875] veth1_macvtap: left promiscuous mode [ 278.660714][ T7875] veth0_macvtap: left promiscuous mode [ 278.666491][ T7875] veth1_vlan: left promiscuous mode [ 278.672215][ T7875] veth0_vlan: left promiscuous mode [ 278.685647][ T30] audit: type=1107 audit(1751889313.528:4): pid=12925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 279.148914][ T7875] team0 (unregistering): Port device team_slave_1 removed [ 279.187742][ T7875] team0 (unregistering): Port device team_slave_0 removed [ 279.566866][T12911] netlink: 'syz.2.1799': attribute type 4 has an invalid length. [ 279.625818][T12928] macsec0: entered promiscuous mode [ 279.645862][T12928] macsec0: entered allmulticast mode [ 279.666372][T12928] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 279.868339][T12950] netlink: 'syz.2.1810': attribute type 3 has an invalid length. [ 279.893826][ T5846] Bluetooth: hci0: command tx timeout [ 280.000143][T12951] netlink: 'syz.4.1809': attribute type 21 has an invalid length. [ 280.008569][T12951] netlink: 'syz.4.1809': attribute type 6 has an invalid length. [ 280.021494][T12958] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1811'. [ 280.044097][T12951] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1809'. [ 280.140416][T12886] chnl_net:caif_netlink_parms(): no params data found [ 280.148881][T12961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'. [ 280.190708][T12957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1811'. [ 280.659660][T12988] netlink: 'syz.2.1816': attribute type 13 has an invalid length. [ 280.667527][T12988] netlink: 'syz.2.1816': attribute type 17 has an invalid length. [ 280.824645][T12988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.856246][T12991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.881402][T12886] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.895107][T12998] netlink: 'syz.0.1817': attribute type 10 has an invalid length. [ 280.913489][T12886] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.935863][T12886] bridge_slave_0: entered allmulticast mode [ 280.958350][T12886] bridge_slave_0: entered promiscuous mode [ 280.974677][T12984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.978923][T12886] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.416084][T13010] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1820'. [ 281.445219][T13010] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1820'. [ 281.469621][T12886] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.487080][T12886] bridge_slave_1: entered allmulticast mode [ 281.496204][T12886] bridge_slave_1: entered promiscuous mode [ 281.764311][T12886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.804459][T12886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.960037][ T5846] Bluetooth: hci0: command tx timeout [ 282.152199][T12886] team0: Port device team_slave_0 added [ 282.165275][T13014] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1822'. [ 282.165404][T12886] team0: Port device team_slave_1 added [ 282.376424][T13023] Cannot find del_set index 0 as target [ 282.410744][T12886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.417888][T12886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.461906][T12886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.525318][T13023] bond0: (slave wlan1): Releasing backup interface [ 282.534908][T13023] bond0: Destroying bond [ 282.654615][T13023] bond0 (unregistering): Released all slaves [ 282.706769][T12886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.715893][T12886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.742753][T12886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.856288][T12886] hsr_slave_0: entered promiscuous mode [ 282.863678][T12886] hsr_slave_1: entered promiscuous mode [ 282.870499][T12886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.878161][T12886] Cannot create hsr debugfs directory [ 282.894584][T13033] netlink: 'syz.2.1826': attribute type 21 has an invalid length. [ 282.903120][T13033] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1826'. [ 282.944430][T13033] netlink: 'syz.2.1826': attribute type 4 has an invalid length. [ 282.954251][T13035] Cannot find add_set index 4 as target [ 282.959922][T13033] netlink: 'syz.2.1826': attribute type 5 has an invalid length. [ 282.959945][T13033] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1826'. [ 283.145236][T13039] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1828'. [ 283.205580][T13039] netlink: 'syz.2.1828': attribute type 10 has an invalid length. [ 283.257610][T13040] netlink: 'syz.2.1828': attribute type 10 has an invalid length. [ 283.427245][T13046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1832'. [ 284.055924][ T5846] Bluetooth: hci0: command tx timeout [ 284.553699][T12886] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 284.584736][T12886] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 284.622623][T12886] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 284.728778][T12886] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 284.791426][T13104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1845'. [ 284.833512][T13104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1845'. [ 284.984726][T13117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1848'. [ 285.068155][T12886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.124219][T12886] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.163134][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.170411][ T7887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.248098][ T7894] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.255370][ T7894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.375777][T13139] netlink: 'syz.4.1854': attribute type 1 has an invalid length. [ 285.409117][T13141] netlink: 'syz.0.1856': attribute type 83 has an invalid length. [ 285.938742][T12886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.053084][T12886] veth0_vlan: entered promiscuous mode [ 286.085265][T12886] veth1_vlan: entered promiscuous mode [ 286.117622][T13177] syz_tun: entered promiscuous mode [ 286.123651][T13177] macsec1: entered promiscuous mode [ 286.129132][T13177] macsec1: entered allmulticast mode [ 286.130290][ T5846] Bluetooth: hci0: command tx timeout [ 286.135582][T13177] syz_tun: entered allmulticast mode [ 286.169131][T13177] syz_tun: left allmulticast mode [ 286.174779][T13177] syz_tun: left promiscuous mode [ 286.253284][T12886] veth0_macvtap: entered promiscuous mode [ 286.290412][T12886] veth1_macvtap: entered promiscuous mode [ 286.342687][T12886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.376000][T12886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.401789][ T7887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.425159][ T7887] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.468444][ T7887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.507190][ T7887] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.996260][ T5991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.004903][ T5991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.176986][ T7891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.186440][ T7891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.537361][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'. [ 287.950591][T13234] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 287.963864][T13234] sit1: left promiscuous mode [ 287.968820][T13234] sit1: left allmulticast mode [ 287.974453][T13234] gretap1: left promiscuous mode [ 287.981300][T13234] gretap1: left allmulticast mode [ 287.990409][T13234] bridge2: left promiscuous mode [ 287.995585][T13234] bridge2: left allmulticast mode [ 288.015955][T13234] vlan2: left allmulticast mode [ 288.024215][T13234] veth1: left allmulticast mode [ 288.076530][T13241] tipc: Enabled bearer , priority 0 [ 288.097189][T13240] tipc: Resetting bearer [ 288.831555][T13239] tipc: Disabling bearer [ 288.847293][T13243] kthread_run failed with err -4 [ 288.852488][T13243] netlink: 'syz.4.1876': attribute type 5 has an invalid length. [ 288.983873][ T7885] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.487329][ T7885] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.626026][T13259] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1878'. [ 289.654237][ T7885] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.778752][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1882'. [ 289.812754][ T7885] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.874522][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1882'. [ 290.233941][T13287] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 290.270220][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 290.278848][ T7885] bridge_slave_1: left allmulticast mode [ 290.281038][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 290.293386][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 290.301525][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 290.305064][ T7885] bridge_slave_1: left promiscuous mode [ 290.317031][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.336380][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.354029][ T7885] bridge_slave_0: left allmulticast mode [ 290.369594][ T7885] bridge_slave_0: left promiscuous mode [ 290.375474][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.804713][ T7885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.816342][ T7885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.828777][ T7885] bond0 (unregistering): Released all slaves [ 290.853744][T13299] tipc: Enabling of bearer rejected, already enabled [ 291.036885][T13315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1893'. [ 291.152060][T13315] netlink: 146776 bytes leftover after parsing attributes in process `syz.1.1893'. [ 291.174771][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1896'. [ 291.240202][T13328] netlink: 212280 bytes leftover after parsing attributes in process `syz.1.1898'. [ 291.277308][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1896'. [ 291.466491][ T7885] hsr_slave_0: left promiscuous mode [ 291.478315][ T7885] hsr_slave_1: left promiscuous mode [ 291.496189][ T7885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.504760][ T7885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.526967][ T7885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.539052][ T7885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.563471][ T7885] veth1_macvtap: left promiscuous mode [ 291.569117][ T7885] veth0_macvtap: left promiscuous mode [ 291.575380][ T7885] veth1_vlan: left promiscuous mode [ 291.580875][ T7885] veth0_vlan: left promiscuous mode [ 292.105791][ T7885] team0 (unregistering): Port device team_slave_1 removed [ 292.147090][ T7885] team0 (unregistering): Port device team_slave_0 removed [ 292.359919][ T5846] Bluetooth: hci0: command tx timeout [ 292.548386][T13335] IPv6: syztnl0: Disabled Multicast RS [ 292.798080][T13353] xt_TCPMSS: Only works on TCP SYN packets [ 292.831088][T13355] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20001 [ 292.948945][T13353] 8021q: VLANs not supported on ip6_vti0 [ 293.020430][T13361] tipc: Enabling of bearer rejected, already enabled [ 293.165970][T13295] chnl_net:caif_netlink_parms(): no params data found [ 293.414416][T13377] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 293.477890][T13374] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 293.610990][T13394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1912'. [ 293.669310][T13295] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.682192][T13295] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.693107][T13295] bridge_slave_0: entered allmulticast mode [ 293.701065][T13397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1912'. [ 293.717871][T13295] bridge_slave_0: entered promiscuous mode [ 293.752442][T13394] veth3: entered promiscuous mode [ 293.764962][T13295] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.772984][T13295] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.780516][T13295] bridge_slave_1: entered allmulticast mode [ 293.790984][T13295] bridge_slave_1: entered promiscuous mode [ 293.816442][ T7885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.845369][ T7885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.957388][T13295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.986172][T13295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.170206][T13419] netlink: 'syz.1.1921': attribute type 10 has an invalid length. [ 294.222956][T13295] team0: Port device team_slave_0 added [ 294.258958][T13295] team0: Port device team_slave_1 added [ 294.367298][T13295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.383912][T13295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.426350][T13295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.447372][ T5846] Bluetooth: hci0: command tx timeout [ 294.457758][T13295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.467802][T13295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.499361][T13295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.519723][T13447] veth1_to_team: entered promiscuous mode [ 294.633828][T13295] hsr_slave_0: entered promiscuous mode [ 294.647237][T13295] hsr_slave_1: entered promiscuous mode [ 294.669075][T13295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.683549][T13295] Cannot create hsr debugfs directory [ 294.691037][T13449] pim6reg1: entered promiscuous mode [ 294.696442][T13449] pim6reg1: entered allmulticast mode [ 294.987698][T13469] __nla_validate_parse: 5 callbacks suppressed [ 294.987716][T13469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1934'. [ 295.148978][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1934'. [ 295.170686][T13474] sctp: [Deprecated]: syz.1.1935 (pid 13474) Use of int in max_burst socket option deprecated. [ 295.170686][T13474] Use struct sctp_assoc_value instead [ 295.338790][T13477] netlink: 'syz.4.1936': attribute type 4 has an invalid length. [ 295.466894][T13483] x_tables: duplicate underflow at hook 1 [ 295.648242][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1940'. [ 295.672124][T13295] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 295.723281][T13295] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 295.783312][T13295] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 295.990332][T13295] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 296.082805][ T7885] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.096219][ T7885] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.140097][ T7885] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.148349][ T7885] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 296.263507][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1944'. [ 296.275868][T13506] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1944'. [ 296.293705][T13295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.303421][T13506] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1944'. [ 296.320818][T13295] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.334711][T13506] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1944'. [ 296.346471][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.353612][ T7887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.366193][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.373376][ T7887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.386013][T13506] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1944'. [ 296.410365][T13506] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1944'. [ 296.430157][T13506] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1944'. [ 296.446561][T13295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.524330][ T5846] Bluetooth: hci0: command tx timeout [ 296.651855][T13489] delete_channel: no stack [ 296.846828][T13295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.940528][T13521] xt_CT: No such helper "netbios-ns" [ 297.095981][T13295] veth0_vlan: entered promiscuous mode [ 297.112515][T13295] veth1_vlan: entered promiscuous mode [ 297.173711][T13295] veth0_macvtap: entered promiscuous mode [ 297.231343][T13295] veth1_macvtap: entered promiscuous mode [ 297.402827][T13295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.433936][T13543] netlink: 'syz.4.1954': attribute type 29 has an invalid length. [ 297.485956][T13546] netlink: 'syz.4.1954': attribute type 29 has an invalid length. [ 297.518797][T13295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.765352][ T7885] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.873341][ T7885] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.945235][ T7885] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.996077][ T7885] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.292758][ T7894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.336812][ T7894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.562977][T13569] veth0_to_bond: left allmulticast mode [ 298.568579][T13569] veth0_to_bond: left promiscuous mode [ 298.579265][T13569] bridge3: port 1(veth0_to_bond) entered disabled state [ 298.603085][ T5846] Bluetooth: hci0: command tx timeout [ 298.654787][T13569] team0: Port device C removed [ 298.663886][T13569] team0: Port device team_slave_1 removed [ 298.696961][T13569] team0: Port device geneve0 removed [ 298.728699][ T36] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 298.749919][ T36] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 298.758444][ T36] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 298.785303][ T36] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 298.795455][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.818630][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.914796][T13590] netlink: 'syz.4.1966': attribute type 15 has an invalid length. [ 298.938530][T13590] xt_TCPMSS: Only works on TCP SYN packets [ 300.008815][ T5991] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.187533][ T5991] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.259015][ T5991] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.354732][ T5991] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.433814][ T5991] bridge_slave_1: left allmulticast mode [ 300.439733][ T5991] bridge_slave_1: left promiscuous mode [ 300.445745][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.456253][ T5991] bridge_slave_0: left allmulticast mode [ 300.462212][ T5991] bridge_slave_0: left promiscuous mode [ 300.467895][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.753961][ T5991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.766224][ T5991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.777053][ T5991] bond0 (unregistering): Released all slaves [ 301.040013][ T5991] hsr_slave_0: left promiscuous mode [ 301.045862][ T5991] hsr_slave_1: left promiscuous mode [ 301.052179][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.061829][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.071485][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.079087][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.099958][ T5991] veth1_macvtap: left promiscuous mode [ 301.105503][ T5991] veth0_macvtap: left promiscuous mode [ 301.111272][ T5991] veth1_vlan: left promiscuous mode [ 301.116736][ T5991] veth0_vlan: left promiscuous mode [ 301.210105][T13631] __nla_validate_parse: 40 callbacks suppressed [ 301.210129][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1979'. [ 301.471432][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1977'. [ 301.611250][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.635058][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.651602][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.667994][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.676370][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.887914][ T5991] team0 (unregistering): Port device team_slave_1 removed [ 301.924339][ T5991] team0 (unregistering): Port device team_slave_0 removed [ 302.602849][T13660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1983'. [ 302.856269][T13672] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.067676][T13647] chnl_net:caif_netlink_parms(): no params data found [ 303.434062][T13647] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.474234][T13679] netlink: 'syz.0.1987': attribute type 1 has an invalid length. [ 303.476144][T13647] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.507578][T13679] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1987'. [ 303.580251][T13647] bridge_slave_0: entered allmulticast mode [ 303.591723][T13647] bridge_slave_0: entered promiscuous mode [ 303.642963][T13647] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.657828][T13647] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.669138][T13647] bridge_slave_1: entered allmulticast mode [ 303.680237][T13647] bridge_slave_1: entered promiscuous mode [ 303.731978][ T5851] Bluetooth: hci0: command tx timeout [ 303.851407][T13647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.889374][T13647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.027051][T13647] team0: Port device team_slave_0 added [ 304.052009][T13647] team0: Port device team_slave_1 added [ 304.167927][T13647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.175147][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.203453][T13647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.254401][T13647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.271260][T13647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.316085][T13647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.472631][T13647] hsr_slave_0: entered promiscuous mode [ 304.488315][T13647] hsr_slave_1: entered promiscuous mode [ 304.496008][T13647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.508625][T13647] Cannot create hsr debugfs directory [ 304.577421][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 304.594327][T13728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 304.741394][T13735] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2002'. [ 304.763395][T13735] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2002'. [ 304.779717][T13735] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2002'. [ 304.815038][T13739] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 304.822974][T13739] CPU: 0 UID: 0 PID: 13739 Comm: syz.1.2003 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 304.823004][T13739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.823027][T13739] Call Trace: [ 304.823035][T13739] [ 304.823043][T13739] dump_stack_lvl+0x189/0x250 [ 304.823083][T13739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.823106][T13739] ? __pfx__printk+0x10/0x10 [ 304.823131][T13739] ? kernfs_path_from_node+0x2c/0x260 [ 304.823159][T13739] ? kernfs_path_from_node+0x2c/0x260 [ 304.823180][T13739] ? kernfs_path_from_node+0x2c/0x260 [ 304.823209][T13739] ? kernfs_path_from_node+0x22c/0x260 [ 304.823234][T13739] ? kernfs_path_from_node+0x2c/0x260 [ 304.823266][T13739] sysfs_warn_dup+0x8e/0xa0 [ 304.823293][T13739] sysfs_do_create_link_sd+0xc0/0x110 [ 304.823322][T13739] device_add_class_symlinks+0x1cf/0x240 [ 304.823353][T13739] device_add+0x475/0xb50 [ 304.823385][T13739] wiphy_register+0x1ba6/0x28d0 [ 304.823444][T13739] ? __pfx_wiphy_register+0x10/0x10 [ 304.823470][T13739] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 304.823510][T13739] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 304.823545][T13739] ieee80211_register_hw+0x33e1/0x4120 [ 304.823585][T13739] ? ieee80211_register_hw+0x1431/0x4120 [ 304.823616][T13739] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 304.823641][T13739] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 304.823674][T13739] ? __hrtimer_setup+0x187/0x210 [ 304.823696][T13739] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 304.823731][T13739] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 304.823795][T13739] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 304.823822][T13739] ? trace_kmalloc+0x1f/0xd0 [ 304.823842][T13739] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 304.823868][T13739] ? kstrndup+0xbf/0x160 [ 304.823908][T13739] hwsim_new_radio_nl+0xea4/0x1b10 [ 304.823939][T13739] ? __pfx___nla_validate_parse+0x10/0x10 [ 304.823978][T13739] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 304.824020][T13739] ? __nla_parse+0x40/0x60 [ 304.824046][T13739] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 304.824089][T13739] genl_family_rcv_msg_doit+0x212/0x300 [ 304.824120][T13739] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 304.824157][T13739] ? bpf_lsm_capable+0x9/0x20 [ 304.824180][T13739] ? security_capable+0x7e/0x2e0 [ 304.824216][T13739] genl_rcv_msg+0x60e/0x790 [ 304.824245][T13739] ? __pfx_genl_rcv_msg+0x10/0x10 [ 304.824265][T13739] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 304.824311][T13739] netlink_rcv_skb+0x205/0x470 [ 304.824338][T13739] ? __pfx_genl_rcv_msg+0x10/0x10 [ 304.824358][T13739] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 304.824404][T13739] ? down_read+0x1ad/0x2e0 [ 304.824435][T13739] genl_rcv+0x28/0x40 [ 304.824452][T13739] netlink_unicast+0x758/0x8d0 [ 304.824489][T13739] netlink_sendmsg+0x805/0xb30 [ 304.824527][T13739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.824559][T13739] ? aa_sock_msg_perm+0x94/0x160 [ 304.824590][T13739] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.824608][T13739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.824636][T13739] __sock_sendmsg+0x219/0x270 [ 304.824663][T13739] ____sys_sendmsg+0x505/0x830 [ 304.824701][T13739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.824743][T13739] ? import_iovec+0x74/0xa0 [ 304.824772][T13739] ___sys_sendmsg+0x21f/0x2a0 [ 304.824806][T13739] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.824880][T13739] ? __fget_files+0x2a/0x420 [ 304.824906][T13739] ? __fget_files+0x3a0/0x420 [ 304.824947][T13739] __x64_sys_sendmsg+0x19b/0x260 [ 304.824969][T13739] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.825014][T13739] ? rcu_is_watching+0x15/0xb0 [ 304.825044][T13739] ? do_syscall_64+0xbe/0x3b0 [ 304.825083][T13739] do_syscall_64+0xfa/0x3b0 [ 304.825108][T13739] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.825133][T13739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.825153][T13739] ? clear_bhb_loop+0x60/0xb0 [ 304.825179][T13739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.825199][T13739] RIP: 0033:0x7f1f3d98e929 [ 304.825219][T13739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.825237][T13739] RSP: 002b:00007f1f3e738038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.825258][T13739] RAX: ffffffffffffffda RBX: 00007f1f3dbb5fa0 RCX: 00007f1f3d98e929 [ 304.825273][T13739] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005 [ 304.825287][T13739] RBP: 00007f1f3da10b39 R08: 0000000000000000 R09: 0000000000000000 [ 304.825299][T13739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.825311][T13739] R13: 0000000000000000 R14: 00007f1f3dbb5fa0 R15: 00007ffe23fddb68 [ 304.825344][T13739] [ 305.357826][T13740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2002'. [ 305.668620][T13751] netlink: 'syz.0.2007': attribute type 1 has an invalid length. [ 305.681342][T13753] netlink: 'syz.0.2007': attribute type 1 has an invalid length. [ 305.800979][ T5851] Bluetooth: hci0: command tx timeout [ 305.877589][T13647] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 305.898685][T13647] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 305.941692][T13647] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 305.954023][T13647] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 306.031004][T13779] netlink: 'syz.2.2010': attribute type 39 has an invalid length. [ 306.185084][T13647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.228914][T13647] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.256134][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.263373][ T7875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.302701][ T7885] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.309904][ T7885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.363171][T13791] netlink: 'syz.1.2014': attribute type 1 has an invalid length. [ 306.371856][T13791] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2014'. [ 306.382763][T13789] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2012'. [ 306.594119][T13793] syzkaller0: entered allmulticast mode [ 306.841998][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2018'. [ 307.063401][T13647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.154891][T13831] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2022'. [ 307.175360][T13835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2024'. [ 307.213975][T13835] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2024'. [ 307.260889][T13835] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2024'. [ 307.270629][T13647] veth0_vlan: entered promiscuous mode [ 307.309196][T13647] veth1_vlan: entered promiscuous mode [ 307.392800][T13647] veth0_macvtap: entered promiscuous mode [ 307.445627][T13647] veth1_macvtap: entered promiscuous mode [ 307.483052][T13848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.509937][T13647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.532617][T13647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.603210][T13852] netlink: 211808 bytes leftover after parsing attributes in process `syz.0.2028'. [ 307.625260][ T5991] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.638383][ T5991] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.663509][T13854] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2031'. [ 307.673601][ T5991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.712420][ T5991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.880332][ T5851] Bluetooth: hci0: command tx timeout [ 307.905620][T13862] Unsupported ieee802154 address type: 0 [ 307.914555][ T7875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.927004][ T7875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.972104][T13866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 308.037246][ T7875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.062083][ T7875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.348270][ T7891] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.359723][T13922] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 309.556718][ T7891] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.833692][ T7891] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.885605][ T7891] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.973914][ T7891] bridge_slave_1: left allmulticast mode [ 309.980422][ T7891] bridge_slave_1: left promiscuous mode [ 309.986124][ T7891] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.996427][ T7891] bridge_slave_0: left allmulticast mode [ 310.002367][ T7891] bridge_slave_0: left promiscuous mode [ 310.008044][ T7891] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.315080][ T7891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.328333][ T7891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.339565][ T7891] bond0 (unregistering): Released all slaves [ 310.546896][ T7891] hsr_slave_0: left promiscuous mode [ 310.553074][ T7891] hsr_slave_1: left promiscuous mode [ 310.558939][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.566525][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.574798][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.585049][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.631941][ T7891] veth1_macvtap: left promiscuous mode [ 310.637536][ T7891] veth0_macvtap: left promiscuous mode [ 310.669638][ T7891] veth1_vlan: left promiscuous mode [ 310.675105][ T7891] veth0_vlan: left promiscuous mode [ 310.851665][T13943] netlink: 'syz.0.2053': attribute type 2 has an invalid length. [ 310.875411][T13943] netlink: 'syz.0.2053': attribute type 1 has an invalid length. [ 311.095199][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.123522][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.136320][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.152088][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.173147][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.379028][ T7891] team0 (unregistering): Port device team_slave_1 removed [ 311.424482][ T7891] team0 (unregistering): Port device team_slave_0 removed [ 311.830569][T13934] __nla_validate_parse: 6 callbacks suppressed [ 311.830591][T13934] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2050'. [ 311.957900][T13951] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2054'. [ 311.969681][T13955] netlink: 'syz.4.2056': attribute type 21 has an invalid length. [ 311.982978][T13956] netlink: 'syz.2.2055': attribute type 11 has an invalid length. [ 311.990299][T13953] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 312.012304][T13955] netlink: 'syz.4.2056': attribute type 1 has an invalid length. [ 312.027762][T13955] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2056'. [ 312.315054][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2060'. [ 312.769079][T13948] chnl_net:caif_netlink_parms(): no params data found [ 313.015373][T14002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2068'. [ 313.030320][T14002] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2068'. [ 313.160465][T13948] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.167640][T13948] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.199843][T13948] bridge_slave_0: entered allmulticast mode [ 313.223097][T13948] bridge_slave_0: entered promiscuous mode [ 313.231743][T14002] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2068'. [ 313.249883][ T5846] Bluetooth: hci0: command tx timeout [ 313.251864][T13948] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.276330][T13948] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.283762][T13948] bridge_slave_1: entered allmulticast mode [ 313.295920][T13948] bridge_slave_1: entered promiscuous mode [ 313.490783][T13948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.513687][T13948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.585346][T13948] team0: Port device team_slave_0 added [ 313.616683][T13948] team0: Port device team_slave_1 added [ 313.715585][T13948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.727264][T13948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.759063][T13948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.780319][T13948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.793464][T13948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.827781][T13948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.849988][T14034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2076'. [ 313.921833][T13948] hsr_slave_0: entered promiscuous mode [ 313.931569][T13948] hsr_slave_1: entered promiscuous mode [ 313.944751][T13948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.956141][T13948] Cannot create hsr debugfs directory [ 314.070449][T14047] pim6reg1: entered allmulticast mode [ 314.716046][T14070] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2088'. [ 315.160460][T13948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.182585][T13948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.215247][T13948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 315.245513][T13948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 315.321751][ T5846] Bluetooth: hci0: command tx timeout [ 315.461732][T13948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.524616][T13948] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.541978][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.549320][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.644647][ T7889] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.651848][ T7889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.776502][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2095'. [ 315.968057][T14121] xt_hashlimit: size too large, truncated to 1048576 [ 316.173808][T14130] bond0: entered promiscuous mode [ 316.211355][T14130] bond_slave_0: entered promiscuous mode [ 316.218174][T14130] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 316.291338][T14130] hsr1: Slave B (bond_slave_0) is not up; please bring it up to get a fully working HSR network [ 316.389986][T14130] hsr1: entered promiscuous mode [ 316.508135][T13948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.644226][T14151] netlink: zone id is out of range [ 316.651619][T14151] netlink: zone id is out of range [ 316.656761][T14151] netlink: zone id is out of range [ 316.674063][T14151] netlink: zone id is out of range [ 316.679317][T14151] netlink: zone id is out of range [ 316.685058][T14151] netlink: zone id is out of range [ 316.690526][T14151] netlink: zone id is out of range [ 316.696851][T14151] netlink: zone id is out of range [ 316.708969][T13948] veth0_vlan: entered promiscuous mode [ 316.728361][T14156] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 316.732868][T14151] netlink: zone id is out of range [ 316.751312][T13948] veth1_vlan: entered promiscuous mode [ 316.871189][T13948] veth0_macvtap: entered promiscuous mode [ 316.902415][T13948] veth1_macvtap: entered promiscuous mode [ 316.960326][T14164] syzkaller1: entered promiscuous mode [ 316.965835][T14164] syzkaller1: entered allmulticast mode [ 317.004442][T13948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.022242][T13948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.083682][ T7885] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.100268][T14172] __nla_validate_parse: 11 callbacks suppressed [ 317.100286][T14172] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2107'. [ 317.135639][ T7885] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.145563][ T7885] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.196552][ T7885] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.323176][T14182] netlink: 'syz.2.2109': attribute type 1 has an invalid length. [ 317.399747][ T5846] Bluetooth: hci0: command tx timeout [ 317.454525][T14187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2112'. [ 317.466191][T14189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 317.478582][T14187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2112'. [ 317.496852][T14190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2111'. [ 317.592761][ T5991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.639657][ T5991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.699568][T14187] netlink: 'syz.4.2112': attribute type 10 has an invalid length. [ 317.716839][T14198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2116'. [ 317.755579][ T7885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.774216][ T7885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.816597][T14194] netlink: 'syz.1.2114': attribute type 13 has an invalid length. [ 317.856690][T14194] netlink: 'syz.1.2114': attribute type 17 has an invalid length. [ 317.875692][T14198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2116'. [ 317.899957][T14201] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2116'. [ 317.991020][T14204] netlink: 'syz.0.2118': attribute type 11 has an invalid length. [ 318.370136][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2122'. [ 318.992737][ T7889] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.091660][ T7889] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.225382][ T7889] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.239977][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 319.296483][ T7889] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.365801][ T7889] bridge_slave_1: left allmulticast mode [ 319.371692][ T7889] bridge_slave_1: left promiscuous mode [ 319.377409][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.389267][ T7889] bridge_slave_0: left allmulticast mode [ 319.395349][ T7889] bridge_slave_0: left promiscuous mode [ 319.401435][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.724682][ T7889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.735850][ T7889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.746074][ T7889] bond0 (unregistering): Released all slaves [ 319.945354][ T7889] hsr_slave_0: left promiscuous mode [ 319.951313][ T7889] hsr_slave_1: left promiscuous mode [ 319.957075][ T7889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.965277][ T7889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.973221][ T7889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.981445][ T7889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.003378][ T7889] veth1_macvtap: left promiscuous mode [ 320.010434][ T7889] veth0_macvtap: left promiscuous mode [ 320.016014][ T7889] veth1_vlan: left promiscuous mode [ 320.021458][ T7889] veth0_vlan: left promiscuous mode [ 320.310864][T14249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2131'. [ 320.743103][ T7889] team0 (unregistering): Port device team_slave_1 removed [ 320.782261][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.791773][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.802233][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.812941][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.834086][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.859288][ T7889] team0 (unregistering): Port device team_slave_0 removed [ 321.275706][T14258] batadv_slave_0: entered promiscuous mode [ 321.866426][T14269] chnl_net:caif_netlink_parms(): no params data found [ 322.021321][T14269] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.028683][T14269] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.037391][T14269] bridge_slave_0: entered allmulticast mode [ 322.046361][T14269] bridge_slave_0: entered promiscuous mode [ 322.096725][T14269] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.105214][T14269] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.113775][T14269] bridge_slave_1: entered allmulticast mode [ 322.122579][T14269] bridge_slave_1: entered promiscuous mode [ 322.182804][T14269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.196723][T14269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.246974][T14269] team0: Port device team_slave_0 added [ 322.264329][T14269] team0: Port device team_slave_1 added [ 322.321034][T14269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.328019][T14269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.364856][T14269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.392334][T14269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.411711][T14269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.455065][T14269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.664629][T14269] hsr_slave_0: entered promiscuous mode [ 322.693244][T14269] hsr_slave_1: entered promiscuous mode [ 322.710912][T14269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.729912][T14269] Cannot create hsr debugfs directory [ 322.920207][ T5846] Bluetooth: hci0: command tx timeout [ 323.091888][T14319] __nla_validate_parse: 2 callbacks suppressed [ 323.091902][T14319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2148'. [ 323.154258][T14320] SET target dimension over the limit! [ 323.861151][T14367] ¾x9ÿ: left allmulticast mode [ 323.865963][T14367] ¾x9ÿ: left promiscuous mode [ 323.883744][T14367] bridge0: port 1(1¾x9ÿ) entered disabled state [ 323.897553][T14367] bridge_slave_1: left allmulticast mode [ 323.903835][T14367] bridge_slave_1: left promiscuous mode [ 323.914541][T14367] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.925522][T14367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.939337][T14367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.958947][T14367] bond1: (slave gretap1): Releasing active interface [ 324.076394][T14269] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 324.124713][T14269] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 324.163493][T14269] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 324.199819][T14269] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 324.380844][T14395] bridge0: port 1(syz_tun) entered blocking state [ 324.387398][T14395] bridge0: port 1(syz_tun) entered disabled state [ 324.395094][T14395] syz_tun: entered allmulticast mode [ 324.404120][T14395] syz_tun: entered promiscuous mode [ 324.414028][T14395] bridge0: port 1(syz_tun) entered blocking state [ 324.420902][T14395] bridge0: port 1(syz_tun) entered forwarding state [ 324.588563][T14269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.672351][T14269] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.747277][ T7889] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.754602][ T7889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.788576][T14415] tipc: Enabling of bearer rejected, already enabled [ 324.814605][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.821813][ T5991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.000791][ T5851] Bluetooth: hci0: command tx timeout [ 325.054854][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2177'. [ 325.121188][T14425] netlink: 3204 bytes leftover after parsing attributes in process `syz.4.2177'. [ 325.159686][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2177'. [ 325.363052][T14269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.417644][T14269] veth0_vlan: entered promiscuous mode [ 325.433170][T14269] veth1_vlan: entered promiscuous mode [ 325.471849][T14269] veth0_macvtap: entered promiscuous mode [ 325.485749][T14269] veth1_macvtap: entered promiscuous mode [ 325.509010][T14269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.536497][T14269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.576798][ T7889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.599917][ T7889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.608679][ T7889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.642272][ T7889] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.753075][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2182'. [ 325.763764][ T5991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.782210][ T5991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.836275][ T7887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.848016][ T7887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.186586][T14462] netlink: 'syz.2.2185': attribute type 16 has an invalid length. [ 326.421762][T14464] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2186'. [ 326.768889][T14486] veth0: entered promiscuous mode [ 326.775082][T14485] netlink: 'syz.1.2192': attribute type 21 has an invalid length. [ 326.787986][T14485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.795263][T14485] IPv6: NLM_F_CREATE should be set when creating new route [ 326.802573][T14485] IPv6: NLM_F_CREATE should be set when creating new route [ 326.809850][T14485] IPv6: NLM_F_CREATE should be set when creating new route [ 326.955328][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2196'. [ 327.026213][T14499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2198'. [ 327.035962][T14499] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2198'. [ 327.079873][ T5851] Bluetooth: hci0: command 0x040f tx timeout [ 327.317232][T14508] syz_tun: entered promiscuous mode [ 327.323036][T14508] macsec0: entered promiscuous mode [ 327.328348][T14508] macsec0: entered allmulticast mode [ 327.334672][T14508] syz_tun: entered allmulticast mode [ 327.341566][T14508] syz_tun: left allmulticast mode [ 327.346843][T14508] syz_tun: left promiscuous mode [ 327.559045][T14512] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2204'. [ 327.595905][T14484] veth0: left promiscuous mode [ 328.057125][ T7887] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.426897][ T7887] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.486303][ T7887] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.562374][ T7887] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.665664][ T7887] bridge_slave_1: left allmulticast mode [ 328.671631][ T7887] bridge_slave_1: left promiscuous mode [ 328.677754][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.687814][ T7887] bridge_slave_0: left allmulticast mode [ 328.693804][ T7887] bridge_slave_0: left promiscuous mode [ 328.699732][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.002778][ T7887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.015574][ T7887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.025875][ T7887] bond0 (unregistering): Released all slaves [ 329.248459][ T7887] hsr_slave_0: left promiscuous mode [ 329.256860][ T7887] hsr_slave_1: left promiscuous mode [ 329.262799][ T7887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.272687][ T7887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.280826][ T7887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.288248][ T7887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.310471][ T7887] veth1_macvtap: left promiscuous mode [ 329.315981][ T7887] veth0_macvtap: left promiscuous mode [ 329.322763][ T7887] veth1_vlan: left promiscuous mode [ 329.328048][ T7887] veth0_vlan: left promiscuous mode [ 329.658582][T14535] netlink: 'syz.1.2211': attribute type 1 has an invalid length. [ 329.671138][T14535] netlink: 'syz.1.2211': attribute type 4 has an invalid length. [ 329.679006][T14535] __nla_validate_parse: 1 callbacks suppressed [ 329.679020][T14535] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2211'. [ 329.715879][T14535] NCSI netlink: No device for ifindex 458760 [ 329.724957][T14537] netlink: 'syz.1.2211': attribute type 1 has an invalid length. [ 329.743082][T14537] netlink: 'syz.1.2211': attribute type 4 has an invalid length. [ 329.755382][T14537] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2211'. [ 329.772203][T14537] NCSI netlink: No device for ifindex 458760 [ 330.041213][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 330.053127][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 330.072226][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 330.089041][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 330.097701][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 330.097704][ T7887] team0 (unregistering): Port device team_slave_1 removed [ 330.164401][ T7887] team0 (unregistering): Port device team_slave_0 removed [ 330.984025][T14548] chnl_net:caif_netlink_parms(): no params data found [ 331.099967][T14567] tipc: Enabled bearer , priority 0 [ 331.165430][T14567] syzkaller0: entered promiscuous mode [ 331.180417][T14567] syzkaller0: entered allmulticast mode [ 331.188143][T14548] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.195759][T14548] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.204529][T14548] bridge_slave_0: entered allmulticast mode [ 331.214039][T14548] bridge_slave_0: entered promiscuous mode [ 331.227927][T14577] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002 [ 331.271702][T14567] tipc: Resetting bearer [ 331.280497][T14548] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.296667][T14548] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.313500][T14548] bridge_slave_1: entered allmulticast mode [ 331.336559][T14548] bridge_slave_1: entered promiscuous mode [ 331.411721][T14566] tipc: Resetting bearer [ 331.430722][T14566] tipc: Disabling bearer [ 331.547513][T14548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.592815][T14548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.628794][T14591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2223'. [ 331.656869][T14591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2223'. [ 331.710003][T14548] team0: Port device team_slave_0 added [ 331.745523][T14548] team0: Port device team_slave_1 added [ 331.956926][T14605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2226'. [ 332.000839][T14548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.008294][T14548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.036236][T14548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.072389][T14603] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2226'. [ 332.124330][T14548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.131562][T14548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.158330][T14548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.199845][ T5851] Bluetooth: hci0: command tx timeout [ 332.209937][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 332.218947][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2228'. [ 332.232436][T14611] netlink: 'syz.1.2228': attribute type 14 has an invalid length. [ 332.240673][T14611] netlink: 'syz.1.2228': attribute type 13 has an invalid length. [ 332.302678][T14548] hsr_slave_0: entered promiscuous mode [ 332.310153][T14548] hsr_slave_1: entered promiscuous mode [ 332.316665][T14548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.324828][T14548] Cannot create hsr debugfs directory [ 332.656075][T14616] bridge0: port 1(erspan0) entered blocking state [ 332.676965][T14616] bridge0: port 1(erspan0) entered disabled state [ 332.687006][T14616] erspan0: entered allmulticast mode [ 332.695203][T14616] erspan0: entered promiscuous mode [ 332.732820][T14618] erspan0: left allmulticast mode [ 332.739149][T14618] erspan0: left promiscuous mode [ 332.744515][T14618] bridge0: port 1(erspan0) entered disabled state [ 332.770604][T14620] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2230'. [ 332.826387][T14620] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2230'. [ 332.845515][T14620] rdma_rxe: rxe_newlink: failed to add lo [ 332.877157][T14624] (unnamed net_device) (uninitialized): option mode: invalid value (174) [ 333.463538][T14639] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 333.473416][T14639] macsec0: left allmulticast mode [ 333.510241][T14640] macsec0: left promiscuous mode [ 333.567176][T14644] bond0: entered promiscuous mode [ 333.572995][T14644] bond0: entered allmulticast mode [ 333.578614][T14644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.586826][T14642] tipc: Enabling of bearer rejected, failed to enable media [ 333.904416][T14548] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 333.928704][T14548] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 333.947905][T14548] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 333.978060][T14548] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 334.117847][T14670] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 334.247768][T14548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.279778][ T5851] Bluetooth: hci0: command tx timeout [ 334.283309][T14548] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.337415][ T7889] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.344712][ T7889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.396422][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.403636][ T5991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.507478][T14548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.712867][T14548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.748986][T14683] xt_l2tp: missing protocol rule (udp|l2tpip) [ 334.795845][T14548] veth0_vlan: entered promiscuous mode [ 334.814446][T14548] veth1_vlan: entered promiscuous mode [ 334.867219][T14548] veth0_macvtap: entered promiscuous mode [ 334.881746][T14548] veth1_macvtap: entered promiscuous mode [ 334.906988][T14548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.918960][T14699] __nla_validate_parse: 5 callbacks suppressed [ 334.918979][T14699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2246'. [ 334.947910][T14548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.975706][ T7887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.986649][ T7887] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.996361][ T7887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.012061][ T7887] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.072384][T14701] netlink: 'syz.2.2247': attribute type 9 has an invalid length. [ 335.123261][ T7885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.138068][ T7885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.183310][ T5991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.191745][ T5991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.485764][T14717] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2252'. [ 335.601891][T14728] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2255'. [ 335.616764][T14728] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2255'. [ 335.665182][T14731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2256'. [ 335.679738][T14731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2256'. [ 335.728406][T14734] tun0: tun_chr_ioctl cmd 1074025681 [ 335.739887][T14734] SET target dimension over the limit! [ 335.834695][T14739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2259'. [ 336.072758][T14745] tipc: Enabling of bearer rejected, failed to enable media [ 336.114565][T14747] tipc: Enabling of bearer rejected, failed to enable media [ 336.864821][ T7886] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.919091][ T7886] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.125044][ T7886] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.195191][ T7886] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.281184][ T7886] bridge_slave_1: left allmulticast mode [ 338.286843][ T7886] bridge_slave_1: left promiscuous mode [ 338.293934][ T7886] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.304230][ T7886] bridge_slave_0: left allmulticast mode [ 338.310181][ T7886] bridge_slave_0: left promiscuous mode [ 338.315858][ T7886] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.612358][ T7886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.623822][ T7886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.636754][ T7886] bond0 (unregistering): Released all slaves [ 338.996351][T14801] syzkaller1: entered promiscuous mode [ 339.017094][T14801] syzkaller1: entered allmulticast mode [ 339.118694][T14803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2271'. [ 339.172353][T14803] netlink: 'syz.0.2271': attribute type 4 has an invalid length. [ 339.184388][T14803] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2271'. [ 339.199758][ T7886] hsr_slave_0: left promiscuous mode [ 339.238471][ T7886] hsr_slave_1: left promiscuous mode [ 339.256572][ T7886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.267454][ T7886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.293365][ T7886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.303029][ T7886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.344368][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.354879][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.365226][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.366155][ T7886] veth1_macvtap: left promiscuous mode [ 339.378987][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.383970][ T7886] veth0_macvtap: left promiscuous mode [ 339.392912][ T7886] veth1_vlan: left promiscuous mode [ 339.398438][ T7886] veth0_vlan: left promiscuous mode [ 339.398539][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.533483][T14815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2271'. [ 339.867154][ T7886] team0 (unregistering): Port device team_slave_1 removed [ 339.912750][ T7886] team0 (unregistering): Port device team_slave_0 removed [ 340.532982][T14818] tipc: Enabling of bearer rejected, failed to enable media [ 340.757908][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.771298][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.791360][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.802049][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.811343][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.151696][T14834] sctp: [Deprecated]: syz.1.2276 (pid 14834) Use of int in max_burst socket option. [ 341.151696][T14834] Use struct sctp_assoc_value instead [ 341.433797][T14844] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2278'. [ 341.446160][T14846] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2278'. [ 341.464949][T14842] 8021q: VLANs not supported on sit0 [ 341.486929][ T5846] Bluetooth: hci0: command tx timeout [ 341.493261][T14808] chnl_net:caif_netlink_parms(): no params data found [ 341.716126][T14825] chnl_net:caif_netlink_parms(): no params data found [ 341.856186][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2282'. [ 341.933477][T14856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2280'. [ 341.970041][T14876] netlink: 'syz.2.2281': attribute type 16 has an invalid length. [ 341.989867][T14876] netlink: 'syz.2.2281': attribute type 17 has an invalid length. [ 342.139142][T14808] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.152346][T14808] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.162249][T14808] bridge_slave_0: entered allmulticast mode [ 342.173958][T14808] bridge_slave_0: entered promiscuous mode [ 342.174130][T14883] netlink: 'syz.1.2286': attribute type 3 has an invalid length. [ 342.175398][T14884] netlink: 'syz.1.2286': attribute type 3 has an invalid length. [ 342.204046][T14876] net_ratelimit: 163 callbacks suppressed [ 342.204057][T14876] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.226822][T14825] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.234387][T14825] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.242751][T14825] bridge_slave_0: entered allmulticast mode [ 342.251019][T14825] bridge_slave_0: entered promiscuous mode [ 342.259913][T14808] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.267079][T14808] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.275274][T14808] bridge_slave_1: entered allmulticast mode [ 342.283021][T14808] bridge_slave_1: entered promiscuous mode [ 342.289842][T14885] tipc: Enabling of bearer rejected, already enabled [ 342.301703][T14825] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.308841][T14825] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.316398][T14825] bridge_slave_1: entered allmulticast mode [ 342.324892][T14825] bridge_slave_1: entered promiscuous mode [ 342.423002][T14808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.444806][T14825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.467200][T14808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.500836][T14825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.637004][T14808] team0: Port device team_slave_0 added [ 342.654441][T14808] team0: Port device team_slave_1 added [ 342.804263][T14825] team0: Port device team_slave_0 added [ 342.818723][T14825] team0: Port device team_slave_1 added [ 342.867908][T14808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.867983][T14901] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2292'. [ 342.893941][T14808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.920088][ T5846] Bluetooth: hci5: command tx timeout [ 342.945623][T14808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.977343][T14808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.996281][T14808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.050100][T14808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.063870][T14904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2293'. [ 343.082233][T14901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.119349][T14825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.143243][T14825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.182900][T14825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.275348][T14825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.289769][T14825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.299627][T14915] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2294'. [ 343.327877][T14825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.388921][T14808] hsr_slave_0: entered promiscuous mode [ 343.416207][T14808] hsr_slave_1: entered promiscuous mode [ 343.423081][T14808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.442027][T14808] Cannot create hsr debugfs directory [ 343.459635][T14918] geneve2: entered promiscuous mode [ 343.511086][ T4135] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.525300][ T4135] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.559957][ T5846] Bluetooth: hci0: command tx timeout [ 343.615035][T14825] hsr_slave_0: entered promiscuous mode [ 343.630699][T14825] hsr_slave_1: entered promiscuous mode [ 343.637170][T14825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.645230][T14825] Cannot create hsr debugfs directory [ 343.669812][ T4135] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.682353][T14920] tipc: Enabling of bearer rejected, failed to enable media [ 343.748273][ T4135] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.836650][T14929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2299'. [ 344.069290][T14940] xt_l2tp: wrong L2TP version: 0 [ 344.075455][T14940] xt_l2tp: wrong L2TP version: 0 [ 344.081131][T14940] xt_l2tp: wrong L2TP version: 0 [ 344.086457][T14940] xt_l2tp: wrong L2TP version: 0 [ 344.092275][T14940] xt_l2tp: wrong L2TP version: 0 [ 344.097549][T14940] xt_l2tp: wrong L2TP version: 0 [ 344.103334][T14940] xt_l2tp: wrong L2TP version: 0 [ 344.108554][T14940] xt_l2tp: wrong L2TP version: 0 [ 344.114331][T14940] xt_l2tp: wrong L2TP version: 0 [ 344.119910][T14940] xt_l2tp: wrong L2TP version: 0 [ 344.353757][T14948] bridge: RTM_NEWNEIGH with invalid state 0x31 [ 344.779911][T14964] tipc: Enabling of bearer rejected, failed to enable media [ 344.857701][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2310'. [ 344.938377][T14808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.973534][T14808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 345.000186][ T5846] Bluetooth: hci5: command tx timeout [ 345.042958][T14808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 345.060518][T14808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 345.102677][T14974] tipc: Enabling of bearer rejected, failed to enable media [ 345.172630][T14825] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 345.180299][T14981] Bluetooth: MGMT ver 1.23 [ 345.213043][T14825] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 345.282422][T14825] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 345.439914][T14825] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 345.733945][T14808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.828383][T14808] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.894377][T14825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.935074][ T4135] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.942257][ T4135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.978920][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2318'. [ 346.034838][ T7889] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.042053][ T7889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.063796][T14825] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.086623][ T7889] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.093861][ T7889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.136099][ T7891] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.143287][ T7891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.243839][T14825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.767509][T14808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.910121][T14808] veth0_vlan: entered promiscuous mode [ 346.928834][T14808] veth1_vlan: entered promiscuous mode [ 347.080713][ T5846] Bluetooth: hci5: command tx timeout [ 347.195800][T14825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.250583][T14808] veth0_macvtap: entered promiscuous mode [ 347.293664][T14808] veth1_macvtap: entered promiscuous mode [ 347.360014][T14808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.381788][T15048] tipc: Enabling of bearer rejected, failed to enable media [ 347.422528][T14808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.441167][T15050] netlink: 'syz.1.2326': attribute type 10 has an invalid length. [ 347.452353][ T7889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.471110][ T7889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.496550][ T7889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.539143][ T7889] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.797668][ T5991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.821674][ T5991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.908029][ T7885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.931082][ T7885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.989156][T14825] veth0_vlan: entered promiscuous mode [ 348.014674][T14825] veth1_vlan: entered promiscuous mode [ 348.093305][T14825] veth0_macvtap: entered promiscuous mode [ 348.115892][T14825] veth1_macvtap: entered promiscuous mode [ 348.254432][T14825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.305070][T14825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.338827][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.355615][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.369292][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.398751][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.436352][T15077] __nla_validate_parse: 2 callbacks suppressed [ 348.436371][T15077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2330'. [ 348.545331][ T4135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.553793][ T4135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.606966][T15078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2331'. [ 348.624959][ T7886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.637786][ T7886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.862627][ T7885] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.159948][ T5846] Bluetooth: hci5: command tx timeout [ 349.184223][ T7885] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.346230][ T7885] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.425556][ T7885] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.564476][ T7885] bridge_slave_1: left allmulticast mode [ 349.573425][ T7885] bridge_slave_1: left promiscuous mode [ 349.579134][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.590115][ T7885] bridge_slave_0: left allmulticast mode [ 349.596577][ T7885] bridge_slave_0: left promiscuous mode [ 349.603367][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.923979][ T7885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.934935][ T7885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.945521][ T7885] bond0 (unregistering): Released all slaves [ 350.167192][ T7885] hsr_slave_0: left promiscuous mode [ 350.174428][ T7885] hsr_slave_1: left promiscuous mode [ 350.180608][ T7885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.188033][ T7885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.198154][ T7885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.205809][ T7885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.228356][ T7885] veth1_macvtap: left promiscuous mode [ 350.234763][ T7885] veth0_macvtap: left promiscuous mode [ 350.244405][ T7885] veth1_vlan: left promiscuous mode [ 350.250371][ T7885] veth0_vlan: left promiscuous mode [ 350.740896][T15094] xt_TCPMSS: Only works on TCP SYN packets [ 351.077079][ T7885] team0 (unregistering): Port device team_slave_1 removed [ 351.220705][ T7885] team0 (unregistering): Port device team_slave_0 removed [ 351.355355][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 351.381997][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 351.394085][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 351.407801][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 351.417624][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 351.891587][T15103] bridge_slave_0: left allmulticast mode [ 351.897276][T15103] bridge_slave_0: left promiscuous mode [ 351.918992][T15103] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.942324][T15103] bridge_slave_1: left allmulticast mode [ 351.960279][T15103] bridge_slave_1: left promiscuous mode [ 351.966675][T15103] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.984880][T15103] bond0: (slave bond_slave_0): Releasing backup interface [ 351.995206][T15103] bond0: (slave bond_slave_1): Releasing backup interface [ 352.008940][T15103] team0: Port device team_slave_0 removed [ 352.019955][T15103] team0: Port device team_slave_1 removed [ 352.026496][T15103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.035007][T15103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.045930][T15103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.054461][T15103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.081611][T15108] team0: Mode changed to "broadcast" [ 352.089121][T15110] vlan0: entered promiscuous mode [ 352.106561][T15110] team0: Port device vlan0 added [ 352.246216][T15125] netlink: 'syz.1.2342': attribute type 21 has an invalid length. [ 352.255194][T15125] IPv6: NLM_F_REPLACE set, but no existing node found! [ 352.348137][T15130] netlink: 'syz.5.2343': attribute type 39 has an invalid length. [ 352.860387][T15111] chnl_net:caif_netlink_parms(): no params data found [ 353.257575][T15111] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.293262][T15111] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.336296][T15111] bridge_slave_0: entered allmulticast mode [ 353.351321][T15111] bridge_slave_0: entered promiscuous mode [ 353.371175][T15111] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.378415][T15111] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.403124][T15111] bridge_slave_1: entered allmulticast mode [ 353.421118][T15111] bridge_slave_1: entered promiscuous mode [ 353.481934][ T5846] Bluetooth: hci0: command tx timeout [ 353.567835][T15111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.628798][T15111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.904646][T15111] team0: Port device team_slave_0 added [ 353.944695][T15111] team0: Port device team_slave_1 added [ 354.082734][T15111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.091476][T15111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.160456][T15111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.180152][T15111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.187363][T15111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.223263][T15111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.235108][T15196] openvswitch: netlink: IP tunnel dst address not specified [ 354.274385][T15201] Bluetooth: MGMT ver 1.23 [ 354.543656][T15111] hsr_slave_0: entered promiscuous mode [ 354.565612][T15111] hsr_slave_1: entered promiscuous mode [ 354.598749][T15111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.613938][T15111] Cannot create hsr debugfs directory [ 354.647191][T15215] macsec1: entered promiscuous mode [ 354.684128][T15215] macsec1: entered allmulticast mode [ 354.819143][T15224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2361'. [ 354.845301][T15224] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2361'. [ 355.216708][T15231] pim6reg1: entered promiscuous mode [ 355.229969][T15231] pim6reg1: entered allmulticast mode [ 355.417552][T15111] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 355.449647][T15111] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 355.474547][T15111] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 355.569761][ T5846] Bluetooth: hci0: command tx timeout [ 355.580673][T15238] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 355.616417][T15111] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 355.719462][T15248] netlink: 'syz.1.2368': attribute type 4 has an invalid length. [ 355.789100][T15248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2368'. [ 355.811552][T15248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2368'. [ 355.910705][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2371'. [ 355.926246][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2371'. [ 355.936406][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2371'. [ 355.951855][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2371'. [ 355.977699][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2371'. [ 355.999598][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2371'. [ 356.150405][T15111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.234053][T15111] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.305896][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.313156][ T7886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.447785][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.455012][ T7887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.612615][T15111] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.658315][T15111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.760143][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 357.640030][ T5846] Bluetooth: hci0: command tx timeout [ 357.695888][T15111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.847332][T15321] geneve1: entered allmulticast mode [ 357.914451][T15111] veth0_vlan: entered promiscuous mode [ 357.954126][T15111] veth1_vlan: entered promiscuous mode [ 358.074456][T15111] veth0_macvtap: entered promiscuous mode [ 358.117355][T15330] veth1_macvtap: left promiscuous mode [ 358.198212][T15111] veth1_macvtap: entered promiscuous mode [ 358.245089][T15111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.295237][T15111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.392566][T15348] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 358.410264][T15348] team0: Device macvtap0 is already an upper device of the team interface [ 358.412501][T15350] IPVS: set_ctl: invalid protocol: 51 172.30.0.1:20002 [ 358.543473][ T7889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.567048][T15359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.578263][ T7889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.625552][ T7889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.660363][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.825355][T15369] geneve3: entered promiscuous mode [ 358.877164][ T7886] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.920252][ T7886] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.997503][ T7886] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.017775][ T7886] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.049332][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.072724][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.190939][ T4135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.205662][T15388] netlink: 'syz.0.2407': attribute type 10 has an invalid length. [ 359.210278][ T4135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.888493][T15414] __nla_validate_parse: 21 callbacks suppressed [ 359.888513][T15414] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2412'. [ 360.212629][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.404613][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.631476][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.706191][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.798988][ T36] bridge_slave_1: left allmulticast mode [ 360.805278][ T36] bridge_slave_1: left promiscuous mode [ 360.811578][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.821685][ T36] bridge_slave_0: left allmulticast mode [ 360.827325][ T36] bridge_slave_0: left promiscuous mode [ 360.833281][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.160249][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.172408][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.182761][ T36] bond0 (unregistering): Released all slaves [ 361.386479][ T36] hsr_slave_0: left promiscuous mode [ 361.394046][ T36] hsr_slave_1: left promiscuous mode [ 361.403880][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.415132][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.423168][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.432379][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.455312][ T36] veth1_macvtap: left promiscuous mode [ 361.461796][ T36] veth0_macvtap: left promiscuous mode [ 361.467491][ T36] veth1_vlan: left promiscuous mode [ 361.473565][ T36] veth0_vlan: left promiscuous mode [ 361.901710][ T36] team0 (unregistering): Port device team_slave_1 removed [ 361.944268][ T36] team0 (unregistering): Port device team_slave_0 removed [ 362.324732][T15436] netlink: 'syz.2.2418': attribute type 1 has an invalid length. [ 362.400952][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2417'. [ 362.643159][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2417'. [ 362.667185][T15443] bond4: (slave gretap2): making interface the new active one [ 362.675996][T15443] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 362.866711][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.883517][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.896766][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.922565][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.937145][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.015103][T15467] ip6tnl1: entered promiscuous mode [ 363.038224][T15467] ip6tnl1: entered allmulticast mode [ 363.101972][T15467] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2424'. [ 363.457145][T15463] chnl_net:caif_netlink_parms(): no params data found [ 363.786859][T15481] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2427'. [ 364.046401][T15463] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.056349][T15463] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.067226][T15463] bridge_slave_0: entered allmulticast mode [ 364.075407][T15463] bridge_slave_0: entered promiscuous mode [ 364.116110][T15463] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.128968][T15463] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.137683][T15463] bridge_slave_1: entered allmulticast mode [ 364.152682][T15463] bridge_slave_1: entered promiscuous mode [ 364.160593][T15496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2431'. [ 364.267021][T15463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.313982][T15463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.314986][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2432'. [ 364.333550][T15502] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2433'. [ 364.520962][T15463] team0: Port device team_slave_0 added [ 364.546464][T15463] team0: Port device team_slave_1 added [ 364.552829][T15519] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2437'. [ 364.649873][T15520] veth1_to_bond: entered allmulticast mode [ 364.666786][T15463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.679440][T15463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.706540][T15463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.785277][T15463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.800198][T15463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.826927][T15463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.854357][T15529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2438'. [ 364.957973][T15533] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2440'. [ 365.001031][ T5846] Bluetooth: hci0: command tx timeout [ 365.017641][T15463] hsr_slave_0: entered promiscuous mode [ 365.047540][T15463] hsr_slave_1: entered promiscuous mode [ 365.090447][T15463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.098042][T15463] Cannot create hsr debugfs directory [ 365.126743][T15538] bond0: up delay (65536) is not a multiple of miimon (100), value rounded to 65500 ms [ 365.195035][T15544] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 365.205831][T15544] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2444'. [ 365.236233][T15544] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2444'. [ 365.253096][T15544] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2444'. [ 365.266882][T15544] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2444'. [ 365.300244][T15544] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2444'. [ 365.310908][T15544] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2444'. [ 365.360429][T15544] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2444'. [ 365.379504][T15544] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2444'. [ 365.406633][T15544] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2444'. [ 367.087926][ T5851] Bluetooth: hci0: command tx timeout [ 369.217050][ T5851] Bluetooth: hci0: command tx timeout [ 370.166408][T15569] xt_policy: output policy not valid in PREROUTING and INPUT [ 370.414765][T15580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.826884][T15463] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 370.844520][T15463] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 370.872687][T15463] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 370.884656][T15463] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 370.989208][T15463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.026455][T15463] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.048927][ T7891] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.056181][ T7891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.078587][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.085773][ T7887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.240220][ T5851] Bluetooth: hci0: command tx timeout [ 371.587516][T15463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.753654][T15463] veth0_vlan: entered promiscuous mode [ 371.810814][T15463] veth1_vlan: entered promiscuous mode [ 371.847144][T15636] __nla_validate_parse: 6 callbacks suppressed [ 371.847163][T15636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2467'. [ 371.898591][T15636] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 371.910203][T15463] veth0_macvtap: entered promiscuous mode [ 371.922895][T15636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.934266][T15463] veth1_macvtap: entered promiscuous mode [ 371.985520][T15641] syzkaller0 speed is unknown, defaulting to 1000 [ 372.007047][T15463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.035566][T15641] syzkaller0 speed is unknown, defaulting to 1000 [ 372.038568][T15463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.115514][ T5991] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.146217][ T5991] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.184141][T15641] syzkaller0 speed is unknown, defaulting to 1000 [ 372.184272][ T5991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.235676][ T5991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.275952][T15641] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 372.436207][T15641] syzkaller0 speed is unknown, defaulting to 1000 [ 372.464668][T15641] syzkaller0 speed is unknown, defaulting to 1000 [ 372.474257][ T7887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.505669][ T7887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.540688][T15641] syzkaller0 speed is unknown, defaulting to 1000 [ 372.581500][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 372.589374][T15641] syzkaller0 speed is unknown, defaulting to 1000 [ 372.599280][T15641] syzkaller0 speed is unknown, defaulting to 1000 [ 372.610857][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 372.620210][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 372.628696][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.638662][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.643088][T15641] syzkaller0 speed is unknown, defaulting to 1000 [ 372.656379][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 372.671206][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.714330][T15641] syzkaller0 speed is unknown, defaulting to 1000 [ 372.810473][T15658] syzkaller0 speed is unknown, defaulting to 1000 [ 372.972192][T15668] netlink: 'syz.1.2476': attribute type 1 has an invalid length. [ 373.091405][T15674] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2479'. [ 373.293335][T15688] tipc: Started in network mode [ 373.310046][T15688] tipc: Node identity 4, cluster identity 4711 [ 373.320127][T15688] tipc: Node number set to 4 [ 373.390596][T15658] chnl_net:caif_netlink_parms(): no params data found [ 373.569902][T15701] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 373.581909][T15701] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 373.590326][T15701] CPU: 1 UID: 0 PID: 15701 Comm: syz.5.2484 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 373.602398][T15701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.612597][T15701] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 373.618005][T15701] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 ed 6a 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 0a 6f 3e f8 85 [ 373.637679][T15701] RSP: 0018:ffffc90002ef70b0 EFLAGS: 00010206 [ 373.643858][T15701] RAX: ffffffff8981f513 RBX: 00000000000001a8 RCX: 0000000000080000 [ 373.651821][T15701] RDX: ffffc90015fda000 RSI: 00000000000003d5 RDI: 00000000000003d6 [ 373.659954][T15701] RBP: dffffc0000000000 R08: ffff88805469da00 R09: 0000000000000002 [ 373.667918][T15701] R10: 00000000ffffffff R11: ffffffff8981f4f0 R12: dffffc0000000000 [ 373.675876][T15701] R13: 0000000000000035 R14: 0000000000000000 R15: ffff8880295e4000 [ 373.683836][T15701] FS: 00007fe7ae37e6c0(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 373.692753][T15701] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.699331][T15701] CR2: 0000200000000240 CR3: 00000000300fe000 CR4: 00000000003526f0 [ 373.707309][T15701] Call Trace: [ 373.710578][T15701] [ 373.713495][T15701] qdisc_tree_reduce_backlog+0x299/0x480 [ 373.719119][T15701] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 373.724824][T15701] codel_change+0x859/0xae0 [ 373.729323][T15701] ? is_dynamic_key+0xd6/0x1c0 [ 373.734084][T15701] ? qdisc_alloc+0x789/0xaa0 [ 373.738672][T15701] ? qdisc_create+0x12c/0xea0 [ 373.743339][T15701] ? rtnetlink_rcv_msg+0x77c/0xb70 [ 373.748441][T15701] ? netlink_rcv_skb+0x205/0x470 [ 373.753377][T15701] ? netlink_unicast+0x758/0x8d0 [ 373.758302][T15701] ? netlink_sendmsg+0x805/0xb30 [ 373.763317][T15701] ? __sock_sendmsg+0x219/0x270 [ 373.768160][T15701] ? ____sys_sendmsg+0x505/0x830 [ 373.773092][T15701] ? ___sys_sendmsg+0x21f/0x2a0 [ 373.777936][T15701] ? __x64_sys_sendmsg+0x19b/0x260 [ 373.783035][T15701] ? __pfx_codel_change+0x10/0x10 [ 373.788058][T15701] codel_init+0x1f7/0x3e0 [ 373.792381][T15701] ? __pfx_codel_init+0x10/0x10 [ 373.797233][T15701] qdisc_create+0x7a9/0xea0 [ 373.801745][T15701] tc_modify_qdisc+0x1426/0x2010 [ 373.806698][T15701] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 373.811996][T15701] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 373.817280][T15701] rtnetlink_rcv_msg+0x77c/0xb70 [ 373.822217][T15701] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 373.827322][T15701] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 373.832775][T15701] ? ref_tracker_free+0x63a/0x7d0 [ 373.837789][T15701] ? __copy_skb_header+0xa7/0x550 [ 373.842806][T15701] ? __pfx_ref_tracker_free+0x10/0x10 [ 373.848173][T15701] netlink_rcv_skb+0x205/0x470 [ 373.852940][T15701] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 373.858392][T15701] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 373.863686][T15701] ? netlink_deliver_tap+0x2e/0x1b0 [ 373.868880][T15701] ? netlink_deliver_tap+0x2e/0x1b0 [ 373.874164][T15701] netlink_unicast+0x758/0x8d0 [ 373.878954][T15701] netlink_sendmsg+0x805/0xb30 [ 373.883738][T15701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.889033][T15701] ? aa_sock_msg_perm+0x94/0x160 [ 373.893977][T15701] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.899252][T15701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.904532][T15701] __sock_sendmsg+0x219/0x270 [ 373.909203][T15701] ____sys_sendmsg+0x505/0x830 [ 373.913965][T15701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.919263][T15701] ? import_iovec+0x74/0xa0 [ 373.923758][T15701] ___sys_sendmsg+0x21f/0x2a0 [ 373.928431][T15701] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.933642][T15701] ? __fget_files+0x2a/0x420 [ 373.938234][T15701] ? __fget_files+0x3a0/0x420 [ 373.942909][T15701] __x64_sys_sendmsg+0x19b/0x260 [ 373.947845][T15701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.953313][T15701] ? rcu_is_watching+0x15/0xb0 [ 373.958068][T15701] ? do_syscall_64+0xbe/0x3b0 [ 373.962739][T15701] do_syscall_64+0xfa/0x3b0 [ 373.967235][T15701] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.972428][T15701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.978485][T15701] ? clear_bhb_loop+0x60/0xb0 [ 373.983158][T15701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.989042][T15701] RIP: 0033:0x7fe7ad58e929 [ 373.993447][T15701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.013041][T15701] RSP: 002b:00007fe7ae37e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.021445][T15701] RAX: ffffffffffffffda RBX: 00007fe7ad7b5fa0 RCX: 00007fe7ad58e929 [ 374.029402][T15701] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000004 [ 374.037358][T15701] RBP: 00007fe7ad610b39 R08: 0000000000000000 R09: 0000000000000000 [ 374.045324][T15701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.053281][T15701] R13: 0000000000000000 R14: 00007fe7ad7b5fa0 R15: 00007ffcdfc1b078 [ 374.061249][T15701] [ 374.064265][T15701] Modules linked in: [ 374.068267][T15701] ---[ end trace 0000000000000000 ]--- [ 374.073767][T15701] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 374.079161][T15701] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 ed 6a 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 0a 6f 3e f8 85 [ 374.098813][T15701] RSP: 0018:ffffc90002ef70b0 EFLAGS: 00010206 [ 374.099150][T15670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.104916][T15701] RAX: ffffffff8981f513 RBX: 00000000000001a8 RCX: 0000000000080000 [ 374.104933][T15701] RDX: ffffc90015fda000 RSI: 00000000000003d5 RDI: 00000000000003d6 [ 374.104947][T15701] RBP: dffffc0000000000 R08: ffff88805469da00 R09: 0000000000000002 [ 374.104962][T15701] R10: 00000000ffffffff R11: ffffffff8981f4f0 R12: dffffc0000000000 [ 374.104978][T15701] R13: 0000000000000035 R14: 0000000000000000 R15: ffff8880295e4000 [ 374.104993][T15701] FS: 00007fe7ae37e6c0(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 374.105011][T15701] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.105026][T15701] CR2: 0000200000000240 CR3: 00000000300fe000 CR4: 00000000003526f0 [ 374.105057][T15701] Kernel panic - not syncing: Fatal exception in interrupt [ 374.105187][T15701] Kernel Offset: disabled