last executing test programs: 1m2.718270523s ago: executing program 2 (id=431): unshare(0x6020400) (async, rerun: 64) unshare(0x20000) (async, rerun: 64) unshare(0x40000) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001280)={@private2, @dev={0xac, 0x14, 0x14, 0x3f}, 0x1f, 0x13}}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 51.840451194s ago: executing program 2 (id=431): unshare(0x6020400) (async, rerun: 64) unshare(0x20000) (async, rerun: 64) unshare(0x40000) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001280)={@private2, @dev={0xac, 0x14, 0x14, 0x3f}, 0x1f, 0x13}}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 41.403029447s ago: executing program 2 (id=431): unshare(0x6020400) (async, rerun: 64) unshare(0x20000) (async, rerun: 64) unshare(0x40000) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001280)={@private2, @dev={0xac, 0x14, 0x14, 0x3f}, 0x1f, 0x13}}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 28.580252127s ago: executing program 2 (id=431): unshare(0x6020400) (async, rerun: 64) unshare(0x20000) (async, rerun: 64) unshare(0x40000) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001280)={@private2, @dev={0xac, 0x14, 0x14, 0x3f}, 0x1f, 0x13}}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 17.450717257s ago: executing program 2 (id=431): unshare(0x6020400) (async, rerun: 64) unshare(0x20000) (async, rerun: 64) unshare(0x40000) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001280)={@private2, @dev={0xac, 0x14, 0x14, 0x3f}, 0x1f, 0x13}}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 5.596746278s ago: executing program 4 (id=989): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xfffb, 0x5, 0x1}, 0x48) (async) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x30, 0x0, 0x0, @private2, @mcast2, {[@routing={0x29}], "b2031bd5af02ed89faf1d01f64b7e4b1b4836f373ed8f09a380b61960d7cedd013ef27ee9fe4acf8"}}}}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r1}, 0x38) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_NEWSETELEM={0x7e8, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x700, 0x3, 0x0, 0x1, [{0x6fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x3f8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xe4, 0x1, "b8d0085a7e9280e5c4bac60b79a0f66449dd05cb0391b5fb790d1d37a118c3bcdb76c49c0dc4dc176241140dd991a1e3c08cc3811793755e47a5a2778f62e540a2f0325cdf6e8670bd3da8b08a2d927448495deb50cb77b27c7568f85335cd1c5ae890caac27d05cc70d5bd4e75e32d9ff6f4ef6d660c71edbf0496e8653c391faebf419a094bbab50c9bb2520ad4cb0a59988043c161e2012a470c059355c8b782a0ee29818051041831c0c0a13b2e6dd3a65481e3527b9b20a37186a58310b860750fb4c478c16d89b5fa8e90383a6d8a7a1dcc60671178434135f92b616e0"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xb2, 0x1, "280e3fbfa8119a8eea94a661a82613d15094b37914e806764296892cf5f6f6adaf40882fdb73b3b00e51558e695c8e9239fdc95009c6ef9bc4933e0f5d89b2cae9e1828dd119e33dec4b9bb9e95bd62afd1547b2585a7c4fc8867b9f9fc989749ca170885c9e92898fda55fd4e23aa6869421eeea48dcc354777e912ab5559dbda63752e65ca6218cdc0ea309d2c43530b8959a2270c6fe1ef47653a43cc279f277744a24c5587020bfa28c595e9"}, @NFTA_DATA_VALUE={0x41, 0x1, "017e033e09f76225bfc5853bbdb70fb66c0a4e33a391ce53990cfa213eb4e9e396887c51a6db626cdb9088abd487514d4d3f3287f53e9c3fc29aa1d49d"}]}, @NFTA_SET_ELEM_USERDATA={0x1f, 0x6, 0x1, 0x0, "25018540941c1545d9fc7b9a71fa62a6ba1f08011fbd7f0f18907c"}, @NFTA_SET_ELEM_USERDATA={0xe4, 0x6, 0x1, 0x0, "a911267aa4de2ecd97950ee4e8be05bfc1bb63db1f88028a1d8f3df0ee0a2597c4da20121fc183171440909229dc1c15288c4380e45a8faa09bafb00a927127d85699b06147888c766330df1ab47086321e11ce9fae9152bd32ef56ed07d4630ab0318eeda005c975417fac8bcc0337097a525528ddfea965d1e97e6ea1ad2c068d86b24685166fdfbf4cd14c947d4883aa38866455234ecbbdbdbc59df414b9af89a95aeb4e13f9269eb08bba9dfcadc3019b5addcab3272d64838f2f09f9617ca512274ef56dffa3928f038cb99cd123aebed28d395c8465aa8ab801c5a38f"}, @NFTA_SET_ELEM_KEY_END={0x1fc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xbc, 0x1, "5f99f1d2a0104bcc848f5bcab0ee7177d1259736bbd5b829d05bac0479cb5c0a1704b948bf2cab02d6578963106cb48a205912b98f710ec8d6f73fd7442c6801d7b552c0a403a14597a48fa70bcf399157b92fba8d8c71cddc76a37ad83dfe5acf915d722ac489de843c46c35fe6a2be3e3c15b72a092386f0dc8d06cb1ebc22618e06d41ab0047a9b0ae382a3032e9792d6806b1baac17a4abc549068e79e12ae402ad6ceaed27e446bb51a9a43376318f3ec78daf3a0c6"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xca, 0x1, "9948433b66fedeb511e268f6f2376496b0f58812f2f41e3c6e57928ceca93ad05ae59164356a21953462d8347fcdf3864a182168784bb7d15d0ee85b2407dcc15e627f98feb9bdaab0e675b5e2181c752b51e8f7ab7dde505bd63b421d631683066a23e1474966e2736163c5babe769cb30b952189973399ebf8f4e211f5883b689b98cc08802f983a13ecfa820074b23b3261caef3b7b06cdecd57148b8c023a2e8a73de0f72cf069dfbaa38d9c212b1c5e4c200ffe10f419ede7ee176e3c994b1e3d50360d"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xcc, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xad, 0x6, 0x1, 0x0, "95f563535ccd48fbf559004a3362ca65e454f3483876c7ab87f0a869311a177fba6e728549807d729b97220862676e45a770d3bc3fe97467c7b6cb90e55f809d78f3b8c097f20c01e03ed6826de9284eb1454b2b31834f0ba317950a7278f156343ac374117ba3f2d20615063c229549975b3902d79b6789ae4f7a0762ca60ba9412364a8c3577e5bff0590b2ae4316ab6c33dd762630242e2fe9c7e23c5a8280d9b7e7cc674cabe7c"}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}]}]}]}], {0x14, 0x10}}, 0x878}}, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 5.353584754s ago: executing program 4 (id=993): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x10, 0x3, 0x0) connect$l2tp(r0, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd28, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0x11}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000027000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@cgroup, r3, 0x2e, 0x2000}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000300850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002100)=ANY=[@ANYBLOB="3400000011000d0927bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000010c0200140003"], 0x34}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0xf, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x47, 0x1, 0x3, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async, rerun: 32) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@delqdisc={0xe8, 0x25, 0x800, 0x70bd2d, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0x1, 0xffe0}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) (async) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}, 0x101}], 0x1, 0x60, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 5.179884707s ago: executing program 4 (id=997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}}, 0x108) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}}, 0x880) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40800000000000073114000000000008510000002000000b7000000000000009500c200000000009500001200000000f593d26bc6fa2d343eac9290dcd80ae286e2d02b53c0a1a0284786a4715338416e7ab1f3a8b3163df0353c209c42e1e46c9b6f9acfb9db20783be91d051bbfa1512dc8a244e4d473dc55ad"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x6, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6(0xa, 0x80001, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}}, 0x108) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}}, 0x880) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40800000000000073114000000000008510000002000000b7000000000000009500c200000000009500001200000000f593d26bc6fa2d343eac9290dcd80ae286e2d02b53c0a1a0284786a4715338416e7ab1f3a8b3163df0353c209c42e1e46c9b6f9acfb9db20783be91d051bbfa1512dc8a244e4d473dc55ad"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x6, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x0) (async) 5.052103678s ago: executing program 2 (id=431): unshare(0x6020400) (async, rerun: 64) unshare(0x20000) (async, rerun: 64) unshare(0x40000) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000012c0)={'sit0\x00', &(0x7f0000001280)={@private2, @dev={0xac, 0x14, 0x14, 0x3f}, 0x1f, 0x13}}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cc, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 4.00936687s ago: executing program 4 (id=1001): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000002060101000000000000000c0000000014000300686173683a69702c706f72742c69700005000400000000000900e70073797a300000000005000100070000002500050000000000"], 0x4c}}, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000680001000000000000000000020000000000000006000700070000000c000880050005000000000008000500", @ANYRES32=r3], 0x34}}, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r5}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r6}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b0086ffdc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x52, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0xfffffffffffffc8d) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x25, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x9, 0x0, 0x1000000}, 0x9c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x0, @broadcast}, 0x4}}, 0x2e) (async) syz_emit_ethernet(0x4c, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd6001010000161400fe8000000000000000000000000000bbfe8000000000000000000000000000aa000e2200169078020300000000000030b00a7e4e70"], 0x0) (async) recvmmsg(r10, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x10003, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r11, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) 3.630386292s ago: executing program 4 (id=1003): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x56}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, 0x0, 0x884) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, 0x0, 0x884) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast, @multicast1}, &(0x7f0000000200)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast, @multicast1}, &(0x7f0000000200)=0xc) bind$packet(r0, &(0x7f0000000240)={0x11, 0x1, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) (async) bind$packet(r0, &(0x7f0000000240)={0x11, 0x1, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x180) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f00000004c0)) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf25040000001800018014000200626f6e645f736c6176655f3000000000a80001801400020062617461647630000000000000000000140002006e657464657673696d300000000000001400020073797a6b616c6c657231000000000000140002006261746164763000000000000000000014000200626174616476300000000000000000001400020076657468305f766c616e0000000000001400020067656e657665300000000000000000000800030000000000080003000000000008000300000000007c000180140002007600000000000008000100", @ANYRES32=r3, @ANYBLOB="1400020064766d727030000000000000000000000800030003000000080003000200000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="1400020073797a6b616c6c6572310000000000001400020077673200000000000000000000000000200001801400020067656e6576653100000000000000000008000100", @ANYRES32=r3, @ANYBLOB="04000180"], 0x174}, 0x1, 0x0, 0x0, 0x48000}, 0xc004001) syz_emit_ethernet(0x52, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004c0000440000000000069078ac1414bbac1414aa441c0a010000000000000000ac14140000000000ac1414000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\r\x00\x00\x00\x00\x00\x00\x00'], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r9) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r9) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r12, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, 0x0, &(0x7f0000000580)) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, 0x0, &(0x7f0000000580)) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)={0x34, r11, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_QOS_MAP={0x15, 0xc7, {[{0xa, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {0x40, 0x5}, {0xfa}, {0x3, 0x5}], "60323bb1c3e17c83"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @local}, 0x10) 3.16642449s ago: executing program 4 (id=1007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000001c0)={@val, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x6, 0x6, "24de18", 0x21, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x8}, {"5cc2aceb3af4a5ba367b4495a3"}}}}}}}}, 0x5f) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004001200000000000c0001800600060074aec81f42090597c2108bf7cd8e"], 0x30}, 0x1, 0x0, 0x0, 0x2404c880}, 0xc000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) close(0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r8, 0x6fe69000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="6a0ac4ff000000007110930000000000950b"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x90) bind$x25(r1, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) socket$inet6_sctp(0xa, 0x1, 0x84) bind$x25(r1, &(0x7f00000002c0), 0x12) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x3c, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x136}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2.654050622s ago: executing program 1 (id=1012): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/294], &(0x7f0000000040)='syzkaller\x00'}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r1, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000840)={r2, r1, 0x0, 0xd6, &(0x7f0000000940)='cgro0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x7c}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x4004880) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x15c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x130, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x7, 0x0, 0x9e0, 0x17, 0xe, 0xe}}, @TCA_RED_PARMS={0x14, 0x1, {0xffffffff, 0x5, 0xf, 0x10, 0x13, 0x1f, 0x7}}]}}]}, 0x15c}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, 0x0}}], 0x1, 0x0) 2.29430689s ago: executing program 1 (id=1016): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x3dfa708e056562c6}, 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac00400020208000b000300010004000c00eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18010000", @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250100000014000180080003000300000008000400", @ANYRES32, @ANYBLOB="04000300ac00028054000180080001000300000008000100060000000800010000000000080001000700000008000100080000000800010007000000080001000200000008000100020000000800010002000000080001000800000024000180080001000300000008000100020000000800010000000000080001000000000014000180080001000200000008000100030000001c000180080001000000000008000100140000000800010001000000040003003800028034000180080001000500000008000100050000000800010006000000080001000800000008000100080000000800010002000000040003"], 0x118}, 0x1, 0x0, 0x0, 0x804}, 0x4050) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x1c, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, ';.;S'}]}}}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @local}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xfffffffffffffee6, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x4, 0x5}}]}}]}, 0x3c}}, 0x2004c840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000013c0)=[{{&(0x7f0000000180)=@xdp={0x2c, 0x0, r5, 0x7}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000003c0)="2c1942dc0d40d1cceda6c1dbfa8986950f0635e0c3c2a87e123047ad23823268f10454e22565cb811d7ca287787bd6d21cd442bafcf693e730b15cbe25fc8f263c8062e41f1e3d1243a809679a660ae1b6af3a108056ff5e40a8079e4dfb4c1e9cfc80adc0e1124864849ca91d393ac296b04861acb750201a0bbcb4bef1", 0x7e}, {&(0x7f0000000440)="43533eec42d2dcbc5d2247c365e3aa3a723bab0378bda360b0aefec69a08e91b17ba931d21600226992add17e7615232337e2e7b039639f54d9bd9203eb6aa83814f08ff9a869e566d4b41ccfb7daa5a07fd3899f8449d999bcf022f03c2bb81adae1da1c596f19fb0225595a3e52a63aad04c", 0x73}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000004c0)="6c289554b3a7afdcc9db5427b6a1e58491c80965431bd7b880b17376eeb1c9b3aad6f5e556310803b8e4a125ba88f1bc17eb037cae2b45c6bc4eaded43a2065dda306820fb9f7d910693227b48c9979e1b84f4ec019dff1cb6917fbef994f4c0fdaa5ea7be005040a8bf5122d300e8493aa1f0edb47003dfb27e6de4bbbc0fbe8f0297758321a31e302f50027eb1bc28f8d33d635796d3fbe32d260832b38d2e710b899b37af5fb30f44cd542c4733176d5ed5a30ceaf4a091a83ecb2ffbf5daa436e34304fc8b2aaf", 0xc9}, {&(0x7f00000005c0)="3f5bae2b2e5b5956e607cd6e465f4f558be63c06c6a4c0c1245c8dafbc07c898ceda4922a80dc168176e9ac5da69e31b0c1cb61706c01d05e9e5cb5120e0b37a5334ae7b83fa1a5b31ecc1c9f4f4f2803138ea26d34abf2d59c316ff9ba99df0f724350a77955e5fd2d90c3874344d6d678a434a6603b2cd035b4130f595b1493aae517b22f9b0a865702369eaffcf4f6440e45458978a7c5a58088aa9907555a608d16ad7ee0a3fcf5f83122a759fa297e9288625e09a42f71887df1bf1b5f36e7043bec9d179173aa133ebffbd6709b67cac352f1d36e8cd36827f31a7c65dd2aa955c1cf9582c4297ded4a72e", 0xee}, {&(0x7f00000006c0)="49cbbca35c608b586a58e6d22d6e04e683ae41831e0a86295cdeb9c4be627fce2d9942b643ad999a92d033710478cbd4d13d6aab5b99f2b2c28e5ad2e7f9533ef129f647360319a1303ec90672dfe45eadca49c579f6b6cd39f0c380457fb7447a37da2600d4b841423418b5b9e529f28706c817b51246d3d23ea5b5528c41bd707da024684c3c3417e984a35469347f7f57c913f60b72c0badca62cf8de855a9f77bea3b84d6350144ced443f2785f049c4761d62fdcd983211893b1d0763076fbb7c40cdd36070d8623bf7cc9a592a89", 0xd1}, {&(0x7f00000007c0)="285c496e3dde432dc8dff89574cd1dee32f175b6b8333a7e2138afd34e1ac8b9230a3785cd533811b066bff1c76b93077ba1172d93d88793f850c7c0ba92055e934914fb5c4a0b65401229c1f5413d441a948ea7cc7a0fe915c1e0308a569115f3a704306d8eb360980daa7f62ffae7634", 0x71}, {&(0x7f0000000840)="12759d9e9f3c259a710897551dd9100496d0cf71453d0fe053876f7fa9bcfbb258639fb8a733be13f2a565367f56bbc00fb17a77040e700f2f8dcd6cd77636a26081faac7eea5a1c069225aee5d064aacfdcc4ee8770765035975e8931fbf4578b0bfd87e07331ba091afbb9be147e4f11dd41e137bf58bedb7098c0dc905791ae31ac33d90efe883d7a32119f2ca63a7d10d770443a02e46dd30c4324f660a5b06d", 0xa2}, {&(0x7f0000000900)="111aa6e7eff0179fda56e5d9211d3a4d709df0b8a3736043a065908e57fdc986060cc7c331428111ba7176b0a602fc329ae8b1e940b7e6f9d6412d823b65fc1a33809a04b40b0fbe31ce2fdab87acd501f775cddc085af4bdc753bb2edbf5b26f5e05514be1ca7cf60396980e61dcb915f0e6e662eacf3b6a8317a5c7ca3fcdf4923928e950a8d8a2fe6579111285e1b2701ecac355ba9e319f14d9042237ef0d0e3424c9a382806c929f931ba54e2a5d1294c45fdda5bb2fe7194e999e336ce6bce231b7e5cd780e7c82d484f8c420697b7abf1e440fb8d7755c1842992fa", 0xdf}], 0x9, &(0x7f0000003700)=ANY=[@ANYBLOB="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"/681], 0x2a0}}, {{&(0x7f0000000d80)=@l2tp6={0xa, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5bee, 0x2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="2ea58670844931e9", 0x8}, {&(0x7f0000000e00)="497d03372c11139b3976756133ba9995c85bfc04ed3258410fe0840b31721ddccb3f76abc7a2e9754c4f5dd0dbc671a91a8d09b2e84b0b60b09813b20cc9f6ebc75c2682f39ca1b64374f5393e55420ed443f402c866ebc4f47cb144a791db39a20c2da5cc2df7651eb303f3972afb50e625a2720d4b520a2cb630bbb78d13", 0x7f}, {&(0x7f0000000e80)="2971c5d7f4cb70a2adbc5a22d3ba0186e5bc28d5a5929cf28d1f716c7b04bd98e7021e98e636aabda1e66773d66735027817d6067176a66fb007e8f03e5eca848d8a3d3a153625c1c540a3b618bc7274cf53b89b48798826b235462b4365005bcfe4e829ffec41cd2085f0b4cabd80987e0abe31acfa6aeaabe2f1c8c5261973698203539cce56e3cf40e73a5d517af6255de889", 0x94}], 0x3, &(0x7f00000034c0)=[{0x60, 0x10a, 0x1, "e8e48d7b9737c99168636ab43533e5011e2c1628f6193dfbc6bbe284bbca2d7da43e9dd1812e5d42ecb635a148a5259c9ac6f84952ba4c7efef291db598ccc6abd2c2d630254988b7f2483293229eb"}, {0x60, 0x10c, 0x9, "bc85c127170922ef0eac1503761d1b341a5a6de1332f814cfd5fc148f8a97476be2b2b73203fe669c4dec0172a0ccd45d589f6b17f91c319bc64bb41ad5c1581926771b1abcbca20ae5498d861202c2c"}, {0x60, 0x10b, 0x8001, "498c3e941c29f59b9acae49ad0d75aefe4fc0d20abb86c422c71926097a90f12e4d7de799b06a094d0256fe4e42ca0abca04408bc28c8a85eff7e6a432505e25c1955bf9d539ea4bef34c7d0"}, {0x40, 0x114, 0x3, "5efdfdf7199a6e91e52942e8a0e7e06407fa78f5308a2c0bc68065a4e2d4f07c46543e82e286d3e423410678"}, {0xd8, 0x110, 0x1, "acda9382c830aeb2b98b27a3b489d058ef846e73e3d8a4bcf1415ff5719f96853bdcb1c5a35a47c5172d2fdbb420bc0a3b190dc59b89cf27fe1045353e59b175e89f1504bceee3b3cc0039ffb71541afd0afa3b493dc5075d7b0c398bdac369047b3cadaf5b14fadac8eb757d64e3ed86c015fc48f92dce3b9c27df5fc763e40e37eb450eef64899b6f0e3f7227f860c6f766af6e1711b7e8d26bd2adb1374b0f87de0b9cf86bd45ed716dd596493d46eb56a2471a7a0b297b01ea55097c8123df488783e686d5fe"}], 0x238}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001180)="877f6bb33e497891869e3f2b925e58ccdc01c46d7e27f6636d919bab228892f7ffefbbd905306a1087d49db6a35fc7a805e6d970b27925d6b87766941c2fe1eb064452a0f6c92c72eb73534afb60530371b4e56a1ca63c74410826a67793da72bdc39b64d2cb029e2103a79be9f90932c5faa70c9b3c23dd75855d9f58ea5adaf4786d31f1d0513becd545a859c5cb22d26edc34b2f74d1f5c75f900e3ec837b4529ccc007c751de010c326db5cf61f83d4c848104d5e1abc7f63d27a3b124", 0xbf}, {&(0x7f0000000f40)="a0a4c6adfa636d06c4e164043609e94beb2f8d9402afb7f10783d73cbb9f2d3015b4bf8d15e50750ad5e2319a16169ec9b832f036746a7bacc8269", 0x3b}, {&(0x7f00000024c0)="880b0dbf94d00f251af228a48a9026a4595857c5a2224585b23156ac6ebed0eb2c73abd37f62ffd5dc08973c3ff2ae02dbe41b5b84cf34ab9b4a60283b9257ad4d37363795730e80cf8eb050df0b63a8bb710913f2d61a8487d2a0b247f8586c9edf46cb945e8edd5b216c2ea1ef880afceace62e4376fe473127fedf0287cecb898dfca4ea2b4b209ac50118a1e93b6a3a05201b4ba00ffeda6616c4c0d4f9c7ac2f34ba895d0f1dc4eb658f6548c1a0181067e85aa2299a3183a62496aef1e0278669246a05fb0d2c506835ce20bd6f2aadab6a9839bde173a06fde01c1977b8bafa8ee4217053248ea2cb1c95e8f23074e4e08eb43f6592b4de64b6f967e039d5edfa48bf96442a617c4a7865ad60c66b8ac21083c757bfd1e30b9bac10adb0c9cec1bb849461033f5813d649d2449b25f08b8d4fe9bd1ac97a0512d63ceb49c63abda29f4a40d4174b4b7d440fd9d12c80bdba7cfae47f7e7ca6ad9ecbeb282725485d6a68a122c7fe3311a0c4346e624dc4f38ac1fc6ff7cd8eb733e687fab8c3d4934f48f7b811c8224db7d181d29209914473786d2a70406c416b0a99fbf54049cae02deb7341f05ccd9f11c1515f2d0ff1e50a11f902f42decd0c749de9de5d84a8849449c4ab4235b529db518aa8502ce6a7ed4362f645f6eb6bdff4e5fdccc86fbbf88b45ce360c3ac3eebe695eead853140ccc81d8f85b7a0102e1bfd34eba7df924172c521943418f2a52dbe57f1cf2a6a5d3a688820fb9ce36f9b6610516f0ae7355d83b2470fd1b5faf89bf95c56bd334c520bc3304f92e90075b1daaf19a334f00dc7289d1fb438a5d8e44a6ac10ae6f2faa19ab4829fca97e4dfeb148ec9a215d6a7220637d443254480ecc86ba2ef1bd378746cf2e18bf1a71a35cd27f2609e0507340d816536c16c151447a4c8fae341193903b5a4651eb908c99e0552f447fbdac01f78a514c50b05093320e464b5be14f33854250cb0a1972bc16e80c265336631951d74dbc434adffca10ba6cbc561c38a44cd73e564ef774d4a4831d88818641ef7e016d609fa160908686faac2e15c92f6e1248b8aed9e0974355231c1a7f7685da43bb12af227cba96ca783559ac276afe2436f51e93509e922edb3d2341ebe5020773d51a761cb9d50be9fe6f6481936329496eb4f32add7dc71158daf4d6dfc6378419745a9168635909c6a4ec2cdf978794717bc5de922a584e105376ec121a2f0090036fa1fb97552161e6b9b3beb24782f4ee1341a84cff04f35a2c8b4bb6c426271798a6c31d10af7b687f0d46e3bd517f88a7d2b6e7ef09cefa8d64b748c57d374a39c6841bff3674c577816ebe43903dec304d669d8886877cbc4805d819597b12ef5c1e4c307c325d00f5e8c903fcd57cf782931958b125ce1e3f855c1d5910e85789b8471cf047f8c2f3835a889b6956e0ea2b71b4726eed1f7196ce80d49918dbe9d17c4d671c1f0fad6356a18d99af95fac642e00f15800ed083bd9cd94f9fa3951f081003116d88a15a9cbf06c135f642a3b494939d5b52c54440a1152f04a3a1af0ebe94d9766a798e80d766a017a8453948f69a7b8cc68161f88a2cc130d3b7aebd95b68979dc96e7affd9f9bf713c011067f8a7fe59801c39068417a8fe76f9766804b56fe1e5cdadd9fc49cd9f147c0665201bd43911d2cfa1c632963d21194c1cde104709542e656125c6216364d544ebe140d1be87eb8420269d5bdd9f8b9098ca359fff0293ae7640b009548bd8410accf8139910d764d00c569eb903f265c133cf33f0722f42ac13c1219b2f68e0b3c64ec22b8e26b286f4ea76e5f130a10d6693183e157c6bbdb307531439d57513eb39a8251a5cad83266c146af5f0b80af9d6531b8b31c5bfbf2274714783aa225988598af771f5b091fa6639687c929af40c2b224813357885ac309e43ae40531dbae59edf053d23be915c29363dc03c12bf427b3317f852e7f4b54807149dd98d2d9cb65c199ee22d3b91214cc951def7dfae4672c64ecdad7f66eb9c5ed5e77d9264ad5fe231261b839f66a5aab196f19a6a97070b5b38f8ddfee42653bec10dd357b5ca75c1656a260d1b832e5a96f1ffac7cfa73100c4f657e8ff8145b80d7ffe858b3bdfff0e8c22983c0bda94c027370146d8f1349e7f4e10be47261665e23780a3bf6ab9a8f8864bdf36118e42b02964a327a1afb9ac3ad7bcc6b093965de6eecbe630df145643648e62e988ce71109b77396fced508e2b9c842786431d46b84703e0f3ab40cda7fd0ccbf57936d91488c32d2a7f77376864dc1f87e9c1d2ee223bb50b42c22739ff2b6b6316d4efabe065047f560d498aabc59a5bc12d7ab02f736ef1b5e7e1fefea9f7a5ae1a940616dbf5d58f5e409b054b7812ab08cd94ca9ac6c06010adb990f69d3abf2514f91c3647efa7801cfe23ca4a2a1b4eaa56d2bd1683fe050beb2a5f122d1a29a57111244575ab5f29a7392c9396434ef0593c892389a423f863f5896e7c504637e1de266187ec4aa6513e0fc722c967d6ac81f73d30d98c8e321225209f3f76a52ccc38a157c160a0fbd993484cfa34fcc12e25c69a3188e6a14d075d03d37ef5dd71705ce95eb15ec8c211272965750aaa2a8ee876f943ef373f8ef9f8ba0251373a66568d076c6268c755fd7fcbb808f4a2af75a41f59ee1d59a58d1cee8cda01039ea762be4a154b73c4a08f5e407d14b64d128795b221b4709c8d95459780864b51491eb0e86c533672542a0f36742efd88c1b67789b479f371ee1306a733ffecedd03f561c513c0d3f46f0587a1aa3c811737b9e38ec3634518a764cda811589eaa5697bf2ba53e24efcfbba37c66bcd2ab33792d6f04ae4027e628e22ed36cc02d7e127138ae400445f55e9e2bae541b05797a37fda0d06d8c16e1453c27da39d426629b77b626865e3f1ad12ce5ae741fa06c1f76dcc7ef7fdef4ef9e179bba145c2e9970766995152edebd3675e813f604dc210dae2898fca632be8e52f17b9a2326efe24eb1bb1f05056dd7a5b732101f11c9fd1206c387ed19ace5e43271cca714ee30769e9c4bec682ccebb6bf769ca8b822806e21926d3d666f5a24985d39ffd813edbe48a812c0a29c5fc79a2c44e46f7e8059500267cd50d84afce21ab3412daef229561309c7d4e995562b91f912f18d46406768a26dc548160b08cc80c978e7b3980bcead5ba3b79ab098f8ec6b415df1a90de9f49b064e3ddd37b3004285e361f5965c15197b5bb7b7d182c34801c4dd1bea9d8f1e8afeebc72b999fff27b07dfdd74102ecacceaaa52aba11406b3592a5c17a92fe1b4293ef7f2cb7a565fb9e96e9128e412e3f531e02ef2ae9e6d1fb0ce007ddb33423c53574e2c75c88687218f250a293db0285771654fa7bbeed2037003c512fd6fbfa36941488d351cd8baac3a4757906979f7c78eda6fbfa3584547146c88235789a6d371c5ffb5a06fb428f48bbc2a2611974b370d43333b74b2d3d4290dcc303d38a2de0b95c50c1d757bf5d72237559dcedac67cec2ab1bcc4bcee33ff844befa98f4c2f4b76d16d8ba0517e7f0be425cdc482b44167b9aac34248953f2e3343dd601d2179d53bda1381b5213f3d18a7d3b66096977dc4a6d6577746f2bc0bf4b94a5a1c229645300da5b219de788a5a2a3e89f053e2803e6a25f51c74fc73dd4349fd0239d43258984f4be764d25d1be511a32545a7c5646829967851c640b762f20dad041fd61b5fb414f6dc7a5ff0916e5dc7a6acc627588e1b3bec6e7ad70390468bb14232a5f989ce42dfe42a546e1788e1b5adacf8a0aa2b183c462f8014b2dbeb0909301ac2da5d424a465acd72b9c975a120c24f974c249bbe7ab9780313e55b33321689256df3da2e7ba4d5f46ab3fe1c5fc21f243802e3f1cf1c3acf3fa66d91db5b285a6107da9b2b53065ba0f916bbce9ed74fa5c72455e600876e539822b2c3a5958f4ec474a068f42fbd80256c6770bd407013a831f64dc1c775f46195a9726ce63b388714c4415661577369ec4c3a6ba937832fd8f632faeb0bb7069587e25eb9bf2610cbd7af751ee7d3d7c4b64eb44ce876ee9597c9b63bee6041a74ea3dee5bdcdebe8100782bb347b1f422d216da8da098d05de8c681c624a085cba22b4a505cd9f4a06b8592429af325b92659b5d011133fd24940d694c60e302381467966731d30f2a1f3c606043a4898a7629e0e9c25739768c82ad25c0e63e3e28a8e3debd564dd86ea310ea68628d16220519fa293206d89e3a483f36b3403339387dcb5e8059745b4814025e1a152d3433a06f6ecd90fdf3b5f9d9cc66f8cc5c3d53ff4430844f7cf898d3a660dc55ed3757696378d241d0a62cd29c8cbb31748e33bc66ebcb684cea90a13c714ebf5a2e31a3296c86980f30fff0a4a3b4631da7f74a8802afe3db57c8af8d6c48fd418d22fc07bc4ffa0bf3537f04f45099f229c7cd9e972dd2af7189f24ef6d9251249b53c3513dda51bfb3c058f9741d972517a4d8c236b7e69e6935aeb3a5c3f3a611ecbfbe9134679959d6d27b16b30c4bd33ac4df898d081aff27aef8628aafd78cfc0feaa24d66bd79e536ef0a9a960928895fdb833b3d57d141c82888deb04500172faf842bc5345a7a131f414cf49c7ffa3c86c12ea02f2a960c71868eee032d828f677bca0a3db5dc6de4a231f5d4ef67bccb118d758c127b3a34207198eabd49f24e0eeff09f5fbabb901930e6b775dc55c3ea74de6a69b97859aa91bf493b26bbe49dc9a8587bad047a902291b838892aa0408b1ec168ca0e9bb5e8302f5f79c11ad5796e462c61b48af1e0ba3d61c70c17c5cb8ee3ab1d4a5705cc0573399da75cf8e7a9477e67e53e3a04b92f885edc349d81ffb7d53af6f7ce47c441c88fe7d65199d7854f14b6181c23f9ef42045dbc6c1c3bc977d7144eb68b9e411a6aa9ae2906286bd9d53bc97d4cb89e2369cabe7ba2c58270b1972b11dca16096c92220397bf1cf1df5e25df43af9faa55ce1144fffb16776f56d38c86796ba6c810d6c590a6f86b3e0a43ca507c5576990afb06a2dcdc043ca06b68d49a483e37b8d30528a55a05e6e89ae28130c2728a92f672b95da21adf640d4618b614857187f8621645882ee5d14ac6cee253715e11ec17bd37e3998918ea5dd7365dbcf2f7603b02fc67e6f05906e287bac055f53ccd96fdd38e7c366c7c24050c43fb3f80e893be2d5e1a0d4d6160a2d04f8befffc54038db65241822efa2a3fa79c39baf5a4ae2e74ffb6df75224df02243b6611002d49f4f441047fb7aa7e03ccc1f128012ac0ccb70f17816594855ae2abde4442c8b53fd30fafec4a95bce7153e1e6cb0898dd627952c9ab1b38a901b9157f9b58e8100a6b04ccb98811f7d10be7651b8258b7891b3e497083ebc4b379f5315086f951256ebe62e906b754df5243698b420dc0db37b57aa911411352dd1d3347107b9fe226e21687127ce8681c3e5848a392e0ca34abb10582115617d13283af30a4d1938318eade9b2b4ae142c9a5588a8b86013416067630e7c35845337bfa978135abd8e99939c0efb166695f5191cbc9506c88928ef6e10337184a1c09bbe8fe0a4d3fab292e80a7c966302f7ad48a2dbbd631ff560ccf1cbbf7e025646b362fbcffddc9c57b2b1a7e2f71bd778bf58c32d57bb5c4c2ed6b621dae931b2a45ee3ae0768e4bcf2c255dd8d7c865414d14349b7ba8d03d0eae14fdf9b2ce2b688a889537b449c17952fceaca48fd45ecf2bfa5497fbad4d5ac1be72300351", 0x1000}, {&(0x7f0000001280)="47100e24298270f8a05cdd4aeef898d11ccff33fa2c56537fe302cc1e2806f4c3534be94c95caedf283e9a63f63809c7d6ef02cc4648b4d66d30d791f6c88a34448312a18e9cdf9b81074523ff0083b14585773bd1783a2f0924ae37965b2a8494644fe2cbcf37a9c573bb0c0bc5d21d6d5fa37633761d3ebd88f027eb8bd5193820a8ee363586c647f6f528b9fed5d469d2b9cbfc59b6edcf08c213e3c506dabe57ed37dfbda328297b70fab682b55e63b5ed35a2393a6c6737ec58a50ebc2c51aa8e28d87133e2f91c19691a46638b42c914b6451d9492a4687c7c4c954daca86ed0dc7da573e55b", 0xe9}], 0x4}}], 0x3, 0x40011) 2.293127871s ago: executing program 0 (id=1017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xa}, @void, @val={0xc, 0x99, {0x800, 0x15}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3bdb06, 0x75}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000013c0)="241725f4df6b34bc9b0c927b44456222fe7739beb70df5cd218e2663d1c5dad9eac03bf41db774d97c5894f3aac93e719803394bd3bd1ec30ced5fe5a4e29bfc6c664b233a8eb8cfc691a113d32b1290a09b5037ac25cc2820df1bfe3a629e7fc6e99a172d19f14db797a097164cf215d1706e3a08fba6d966fc0aef75f6f95d22a844d5e70929968a1fe5eae63f13f30592fec765c80f94064f82ffd6f0d3af9dbb99f4bdeb8eed4a53df8a4f2f94a7e49e75eba5226b07aa5404d67e836f35c6828642d6c82d90f88853c583cf9cb3048e246d0ec68c4b3d5d5a72fa1d037d2f6de09f9b398d3426a41a4c347c72ad1b112bec0441612b35fc033583b61fd1094f26b36064ace3768709d2731dd06cc1c0cfbd138c0971204ebefd4245f2222890bfc0736203400ade0eb444d839e0854869e8183f3e1ec6a2c500908c8f048bc961e1bf7cd9b6478235b394a5f9b330d3d67d5bfef25159f79b46fec379f3f8a8808a3ac68fb5cb60ba000c63fdf525dca39c101f39670f251e80ac05c812b6a2fa6879d7334b47ae0ba46b98d483f2f03548fb038b4bfed1e903a8907bb38531e142e58a0766f43f2be7b31fee8b79bd8c948d267436b3042720ae4a9ecb277a4d33924aadd8a9157a3f848105fa9bcdcc6ead697b83eec53908d8518737c2c3d1f28ca87b0fd5b612b9680c6d9a8a675d45a098bb6827a77ce0ee066ea2f9c1064bb68e1b413094f3254aefb1eced15c0cb028470e188c1445aeca2b61f5dbc47ac0c22a8d9835eb775a1388d3ebd816d07a3adae930d83ae4bfce082019eae83afac5636fa649b9e9f0bf09441a407fc0e202dee052588013f4060371ecb56c8b5e990ba8e5deb73df8b60e6776b326737972f94b043f2c38cc6e63de7b661d1c05385f9b5bfa319c849eb766015f0edcd26979b4039a794af87069540e93d146fd6b3d251dda0e5bd2ebb211c4fd6698e68b2b32746103e654a529eb57413d4baad7f732bce539c3e6ca05f6f3b95b4552e392313d4b404f0357ddf27a3dfa2b478d7ff06a2d3b01f48ec458ccac08b37ba9b3d825e58b5e9aa3cbb0b56245b1a312f8505bc0731cc1083ae52416eadac6e2295c59634f24d7bdf386b72a8ba25776f745797942f14696adc87c7298955bbad812a5672986de637ddd0b192a5b6bdac9d20094030e2d53828cfe2c86e8d9e12ca9a0d816cf668d121552ac29d90cbba5c73cc11658d2f5b755d11cdf9df9a13dc42f202dadc1be8b5257e830e072af3db9a9b709e8f52a6086400c6c2301f49e90092a4c05884a3a955d9ef022a76d2ad4aff4ee2c26e5a285480b9c514c0bb6f6dc9042b4978e6e480a7ae1ac5cf60a354f7677e8800104bc94748c49117afe5dae7e68251ecd4484335b2151136fe2e2d62846bc2e0586f880900d118d8279eb70322fed88cd659b0c4a0cbbeab0370c1c20231c28940690898c735c8e2b8e941a665390ae327df16ae4ed5cd8ea23ff61bfa3eda1073eff3aeb5c0453ce305000fb3032fa4e56019b1c0177e7f74b6ffeda7439c4a9639be003f402409e3c0a2fb980a7cb509bee93611865f191651160c4fb201ea8e1c110617b0b35197bde0e4ae9a26d189471714312ab5264620feebcc853994918aeeb3bd408f75329689492f7d213e9da3e8e7016571b4cff63f378d095cf623ae9ae91a94092685f2db3805746bc3ae9b898c9f851bdd76a50028576217bc587245661f194d2c07f8d3e8a8ab714c8dd731072ffe2562d8036ad39da5256ab51e23ba96c806ff0324c6c9a2be125690df761e4aea0f2c48fe518955009fbd490414d1e0f0a1273a6b2275ea484200ef8abba74e3c499c9c6668b4d2348ca6229480761d8a6b81e4d1781a2fcff3df01a96dd2d6589fe8f05bdc001656d6e0c42d4d5f3d8bd80ab62f523c70069c523340757a0b95647f2414ef27015411ae811941978852f50cc58473acd1e5e66d5c37d7367e86240be82becf54d1976ae99b3d06dcfdeabe07db8b96cd203620a46232fa4706addaf7e72c76b1e67a6f1206511758513300b3cbf04c0a384712d1779d85c86ab60c482f8bfed9d92a3c6390bac56857e1f2fb9b9980203347eff727df1c87527444007a293448637fe1854f1d7f8c95f1e6f4bd8950e93f529c9140af723bcc03fd8ac4d2415ac642c6d7fe56030e35fabcb9cb6c756b59e7885a2c9acc3eba5c001ca8e638af47249534bb9d2036be054f982774d4e37232161ef65ca338c2fc069af1233fd86f1af4c4f8ab36da4ee31c786a75effffeee2ad3974f1ee2afb37dc7a78f1546e3290dcbb3cd93cafd4771d6965bb55610b38398e98c8906d55e1974cbba06deaacf65a5d4fe58cf7c4c30710e93ba0f87cbd5b0fb36491844e5d20977ca661af6f4df94304246ee59473c170216e5f769b1dafaf099b22fbe42d465d53cb5372a56e004a2880f00c39fcf78263dc6e87c4642d0d501fdd803ba56650b8a464873dc90f896030ae08049c76d690ecc2c2a8759bbb3cd8d95e3a13ed658b102217efeb4d77aff312b8c6e6c4cb878629891728da08087200b5ff3d21709cdf1fb8cc5bd1f8e730cbdc38d2c7fa9e760b3665bed62a7dc0010291422cfcec4aebf35d8ed77f232060fb922ec48e76dbd6bb9848402cc5a8fd58b41b7ac5d831b4009eac2bb24e46d1decc2271479deddb9db0337f6677e32878f9711484d11a8d8aeeb25ace0e0fe61ad8d7c568c4d6cf3cde8cf704ca22bbe597adb363ede951f7cf5c81895c12a21c5d58144fe9b816674bc18139b97e3003491498d660496fb488499fc8f0a12475f0f1f2cbd0ff9d395912ca37215fff763144e5236f582a87fe73fde0debdefbc2c1c221e09247767ea470f33b904a018e6b41be89dfc0a2a68999601ccb25eed8e4650ac694bb3a6891d03c6500b7abd188b68bd8a7424bc2cde61e5b45ef77ed42ef7da089ee35436ccce4ee9afa5f22079da6a8de2fd43347d12c801758a6121018e0592fbdde01d26a3e17746dc203b6bda11b28b873be806c7258cf58b5c037fb7308d2ee75378234ef55e1132779eceedffab28e24ee6037e39397a4f08ccf2f38bd21f51b1ac4fa1c098419b15db4287d79bc25cc0ec2adb82b738c7aa165e345bc1ede840d97c96f67a4b3c9e5339d38d403e2648f7287dbd13f52e047b677dfe91b6aa7bedc1d73791800e7956873dae6b3dea4930b46f1a1cae56c33a3855ce5e0f51a6445a82b1456f423d1a4cb39ec56ad3e6b5e38b145727e9358ca7253c57fd73a6471748a09cefad431ad4a3a378bdbe591489682b474018b4ba100dcc99f8fce9205aebb20592df33243a7eaf7f6c26201e46562e7e98b8aa8f97506b564fa4a5b9d0394fa0dad3c5750e661915b513cdcc6b9e52d489ffa30700366298dc149e63c20ed0978daa8b9a25ef5410ade6b4ae491b352529ee6a4a66c88c76b65e470cbd2dfcf93b7de14bf9efe0d6bd13af4083cfc4e0f93d2e439fd0fdb3727ef5082d56a12ab4907bc591240c8d76ed86ec052ee43c4c2909c1c481707b1cdbd77b778ff4a13b6e27768feb4e181e41982e4890e546779be6511cf002843a7ac8d528b8393cd894ee71ed9b43b8b0062003c6e4dfc3e88ba0952f9b9c57dbd21fa8361c4492882b334a257d8585c7b2fbefe6e03941c1659e340ca074a215f7176bdfc08a8b46b749f9a0337c24c480fb5c1e3bc970f44e0b4f465988d3f6d410672d790f331fb09e5eaa80ee68617a0d3f50d10601fec7620cc5bbd065c95b9debcf32ee5e4f47182e70bdc0d7bc98417dc5a8c32f8f0c7fba9100f7f2f3021d807c9805e5cb1c0fe424d0556e74fa93c51f852f71849c9ee2dafe81dbb49e30d5e364460bbd1a79991eb183883aad66fbd053e397b61194fa7dc1b23a75c966aa3afb8df66ec4c8d7aec42c995d6ac2dafab1c86ff1433b19691bbd6e6acfede8cf082927e28d7629d8f48cc5e0fb67f2b1aa6f720482ab4da5495d30a0f0e09d9abc5e2b0086deda69bcdcdb7e24ca4725f42f3ac18ca69ac7230e3c3043a0bdc61e71b94f3bbc2672ba0bb28c5f27cbdaf9dd38e10af1824e6f928c766ac455dfcf8039b332695803e51ef3a7dd89f3f242d1361d553d4684e7d7ebdb07c12487f06ef5af41e237b068348e2322702753fb792f760302283c3c57b9d3a6b89b6978ae550fc330ba39407f6418132063d6ab179d9d75aba6348f27a51319b363fe6e260a454911ad49f31436ef816a9b733639d00a602179cf804a5f9dd9112909a1ea704241abb9ead1d15f212978b0c57020b7e5d90e2e9f3b3be3f7a5767f08f6aa03ecd28e350849f17a81190f70b794e8226510d016fad5a7fe43d503944952d524027f483c71b2d7d31e27dde6cc7ff8ab540947a35bda37f9b655a041d619956aa8e8033686163c2d7dc871e84dac65e954368cd816753e462c55354f841436b5cdd07bdf1e92274393976e8b39bf9268c453c898f49f3cfac5c785c00f37d55961509f62c30a6d9e9ed6f7a705c0322f5b4e76eed7240b49853b8d4fe8dd86bfe7c0fca25cb8611b39ce02d7d633e9a3a41a137714c1147638297b4ddde5de374e3cd4562622f7891f20590334046f25d2a855d6691959dd928c6c39cd62958818228e9136905807f7de56d6d2cdd07a7cc1fb3cb9e2c4c4613fa9f448ca56ecd3f4bd32fff4aaafdd8a6a950538682fa08bb568338925a618b1eff3d5fe9fa53cdeaaefc87e5de1abaad0d4e72cea8b35977ac5fd23ec4c9d84d117e1597566701ce0f5688773946379309bf29f8986aee4026c524384a7fc6ab040f076d44776cb6064cca33a1f419447e6f9f3863a38781d21297bc2c7347334084798ea93efa32d3154d07bbb1f8f0eabb43f7196e608eb6786d2469de13e94bdc6777a816a1774e9a8e3d697a9ad076849c51668c9d9424b12ee45d786fe24e2a6576c9cd50e73165c33b4bb53c21c6e8faf1cfb8c8b82583dfe0ed291e045e0f4a2fa1f66b4df053f9da77d0002b3bf3546920c8c1a4bcbce8d4a2badb07abf4f8022df3dac7c347d3946ddd881a380a05f68f4617e9bf1c2279abdc991ee69042b42ae78b239fe5c48c01427834d62290fcfaa055e57797013ddfabbbcd4da75d29d2ccde1506496cf830e751534978802105a407e4b8031a36a6a39daf938929da275593c190ab644be05c00cdb68d4d999395847e25a3974a17ef545289039cf1789ba80b48ed3004fe0ee115a018740443e9c3647890b8cca3110c0d1e5c54aaa1a7ee93e727dc2ffc3665226e16a2b60cfb8f7f08b5ee72903ecdefc8b7d7f7be33845b960dd3932d86ef4895ea139c030f09da667b6992d7a82d9832ca565097e4c2cee4662ab9caca988884aa126d2566ddda2b62a4ae62db88e529b9dbb0679cc89bda7842fa884fab08851f23824c7fa512490f691af7f0653cf80667e96b63036d5c114bab0b9de2295226d74501556ce89a217b62652a194bd1bc5be98e7cd94ef8e0ac81ad5d91193a6a7464d19eec91e0a465b94e54d1f0a7d62dfeee44ffdb14a74db5248f5a470fe70facc43010ea54d94dcead7b7b0ffb167747ed5180237abd897564c28c51a10bd245a4d213446b2b2c04ced65c0293b5afda6b45b7d2caf107e212eaa405bc4844ed058fe815690b50269fc2e169317583e73d79a185bbd2e98076b9734c5f67e04bab35b5566e2dca000664ca3fdd1f78bcdafd41ecffb3831544d099185386b16fbf08638937418a9487eeb3d464ec11ca83d6ee2c64bac032e22c8783e6e067be97ac8ff137edc24b8bba792a61720d8e8581fec1923fe", 0x1024}, {&(0x7f0000000000)="8fdabff79b61b323cf530fd5cf96c9072f821f922ea95ed5f9d56e6780c3ab4c034222c25f30827a2341b38f12bf228d429a230389c56893b7c935d4c83fbf3326555554f26257cb24021860be1b55f4c78654d1e327ca268bc66afe9b438d386d66f1a0aaddcad35062eaef74710e991bd9e30d752ab3a945f53a0c029555f1115a041329c0371f8433707ca7beb6921109fda08fe35a50282f7199dd8236cfc2029957b13d6b58e733a6fd5d527be95b09a479ed6127c42994178c0cd474072a09097f68f0f278cb1e7d739531d017fcb1c0c5ffc5968e743410e43ae22c80ef77", 0xe2}, {&(0x7f0000000180)="113cca69e51ba7da870262650ddb774a8215307ad9c5aa1036186caed1111fb07a22eb61345e6d2433c303cf6ed64a741bdc965b150c70b309c8a176230c7e3368698fc6977cd51d1af125cfddc54e67c43901c74f30f9f2be5ccf36ca226ea5b097be00956cecfe1325ecebb5a7f1f1ad68d197aec0c0e4eec4d9ef770ea5c31c4b9221dc", 0x85}], 0x3}, 0x80) 2.142144061s ago: executing program 1 (id=1018): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000340)) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001000030425bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="00050000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x420580, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) ioctl$TUNSETCARRIER(r6, 0x400454e2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYRES64=r4, @ANYRESOCT=r6, @ANYRES16=r7, @ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r2}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r8}, 0x10) recvmsg$unix(r1, &(0x7f0000000480)={&(0x7f0000000880), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000000900)=""/149, 0x95}, {&(0x7f00000009c0)=""/181, 0xb5}, {&(0x7f0000000b40)=""/105, 0x69}, {&(0x7f00000003c0)=""/59, 0x3b}, {&(0x7f0000000bc0)=""/118, 0x76}, {&(0x7f0000001e40)=""/190, 0xc5}, {&(0x7f00000033c0)=""/4096, 0x3f}, {&(0x7f0000001d40)=""/125, 0x7d}], 0x100000000000015d}, 0x160) r10 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r10, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f00000004c0)={@private2, r11}, 0x14) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) socket$vsock_stream(0x28, 0x1, 0x0) close(r13) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0xf, 0x6, [0x1f, 0x24, 0x20, 0x3f, 0x3d, 0x25, 0x34, 0x6, 0x36, 0x16, 0xb, 0x35, 0xd, 0x13, 0x104, 0x26], 0x0, 0x9a, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) openat$cgroup_ro(r7, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x0, 0x0) 2.07958452s ago: executing program 3 (id=1019): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01030000ff"], 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="2600330009000000ffffffffff2a08021100000050501050505057f9040009c0010009005c0200000800570002b179"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x1, 0x0}, 0x8) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x6, 0x2, 0x2}, 0x50) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x21, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xdf37, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x5, 0x8, 0x6, 0x0, 0x139e2be6}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xca}, @exit, @jmp={0x5, 0x1, 0x8, 0x4, 0x3, 0x8, 0xfffffffffffffff7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x5af, 0xea, &(0x7f0000000400)=""/234, 0x100, 0x8, '\x00', r3, 0x1b, r0, 0x8, &(0x7f0000000200)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x1, 0xffff, 0x29}, 0x10, r8, 0x0, 0x6, &(0x7f0000000580)=[r9, r0, r0, r1, r10, r0], &(0x7f00000006c0)=[{0x0, 0x1, 0x2}, {0x0, 0x1, 0xbfa, 0x3}, {0x2, 0x1, 0xf, 0x8}, {0x4, 0x3, 0x0, 0x5}, {0x0, 0x3, 0x3, 0x5}, {0x5, 0x2, 0x5, 0x7}], 0x10, 0x80000000}, 0x94) ioctl$sock_FIOSETOWN(r7, 0x8901, 0x0) 2.002528968s ago: executing program 0 (id=1020): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.889697317s ago: executing program 0 (id=1021): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) (async) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20000080) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x12, 0x800) close(r2) 1.783598645s ago: executing program 3 (id=1022): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) r0 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x80, 0x0}, 0x8040) (async) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) (async) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) (async) getsockopt$nfc_llcp(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x2000005d) (async) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x3, 0xffff}, {0xfff3, 0xf}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x0, "9f77572006a748bfd34f344bcaff6217"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x1, 0x42}, {0x6, 0x4, 0x0, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=@delqdisc={0x154, 0x25, 0xc02ba32962164446, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x3, 0x10}, {0xe, 0x9}, {0xfff3, 0x8}}, [@TCA_STAB={0x128, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xa7, 0x8b, 0x6, 0x2, 0x6, 0x7, 0x8}}, {0x14, 0x2, [0xb3, 0x8, 0x9, 0x800, 0x9, 0x6a, 0x4, 0x6]}}, {{0x1c, 0x1, {0x8, 0xfd, 0x7, 0x49, 0x2, 0xfffffffa, 0x7, 0x6}}, {0x10, 0x2, [0x4, 0x5, 0x6, 0x8000, 0x5, 0x8001]}}, {{0x1c, 0x1, {0xd7, 0x7, 0x7, 0x5a, 0x1, 0x5, 0x10, 0x3}}, {0xa, 0x2, [0xc2, 0x3, 0x800]}}, {{0x1c, 0x1, {0x9, 0x5, 0x6, 0xfffffffa, 0x0, 0x8, 0x3, 0x5}}, {0xe, 0x2, [0x4, 0x10, 0x81, 0x6, 0xd]}}, {{0x1c, 0x1, {0x1, 0x0, 0x9, 0x4, 0x0, 0x3, 0x7, 0x5}}, {0xe, 0x2, [0x9, 0x1, 0x0, 0x9, 0x2]}}, {{0x1c, 0x1, {0x0, 0x8, 0x864f, 0x9201, 0x1, 0x7fff, 0x0, 0x3}}, {0xa, 0x2, [0xfffc, 0x68, 0xfffd]}}, {{0x1c, 0x1, {0x1, 0x5, 0x9, 0xffffffff, 0x1, 0x0, 0x2}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0xc}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00'}) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = socket$kcm(0x2, 0x3, 0x2) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100edff0000000000000000000a58000000060a09040000000000000000020000002c000480280001800d00010073796e70726f787900000000140002800500020009000000080003400000000a0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) (async) r12 = epoll_create(0xc) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000000}) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x40, 0x1c}, 0xc) (async) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@remote, @random="c38068113188", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2b, 0x30, 0x0, 0x0, 0xff, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x1c, 0x0, 0x0, 0x7741, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @remote}}}}}}, 0x0) (async) sendmsg$inet(r10, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac14142ae0000001000000e837000000000000000000000007"], 0x58}, 0x4000080) 1.62675609s ago: executing program 1 (id=1023): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae05442d5e837629311ee93cc3c32846b2f30d2b616b7773a44448565daf18cd6fbdce54ecfeca72e2f7c7185bd2f34cee23a71bc11c069ff1e27234f66438680a9383ad0581f66d744a8ed5a2cf14949379013b5e2aca595044fc055da27b41b0a6234f5ef3785d4b58f9879d73945e88188793b51dada8e253c2"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000003780)=""/4097, 0x1001}], 0x2}, 0x4}], 0x1, 0x40010000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) 1.574905235s ago: executing program 0 (id=1024): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x9d, 0x4) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2120, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000180)=0xf3f, 0x4) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080045000028006400000002907800000000e00000009078e00000020000000101000000000000000000"], 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, 0x0, 0x4) sendmsg$key(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x14, 0x68, 0x9, 0x5, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_address={0x3, 0x17, 0x2b, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$caif_stream(0x25, 0x1, 0x4) ppoll(&(0x7f0000000740)=[{r4, 0x26}, {r5, 0x8434}], 0x2, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001a0001f40000ef000000000081040000000000000000000014000100"], 0x30}}, 0x0) unshare(0x20000400) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0400000018d4f30642b4d18736c047720700ad3e7a669935a2d55a73f13608ffc7096d9acdd717a009bd8411a24af0a6393dce3aa2ccfec67fa040000000ba52a1008c77512770db5794b9b31151e9", @ANYRES16=r9, @ANYBLOB="010028bd7000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="0c0099000000000080000000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_ULP(r10, 0x6, 0x1f, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @private=0xa010100, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) r12 = socket(0x18, 0x0, 0x0) connect$pppoe(r12, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.503386682s ago: executing program 3 (id=1025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003300)={0x14, r1, 0x200, 0x70bd2e}, 0x14}, 0x1, 0x0, 0x0, 0x20000141}, 0x20000050) 1.390638746s ago: executing program 3 (id=1026): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x7, &(0x7f0000000340)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x76}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffffb}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc4, &(0x7f00000000c0)=""/196, 0x0, 0x17, '\x00', 0x0, @fallback, r0, 0x6}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x7, &(0x7f0000000340)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x76}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffffb}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc4, &(0x7f00000000c0)=""/196, 0x0, 0x17, '\x00', 0x0, @fallback, r0, 0x6}, 0x94) (async) 1.351023913s ago: executing program 3 (id=1027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x38}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x90, 0x0, 0x7, 0x5, 0x0, 0x0, {0x3, 0x0, 0x56b8}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffff5}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffff81}]}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000001}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x280080d0}, 0x8001) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2, 0x25dfdbfc, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x1, {@ip4=@multicast2, 0x800}}}]}, 0x38}}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}]}]}], {0x14}}, 0x94}}, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000f06010100000000000000000a000006050001000700000006000b0000000000ee44feca41be357b953153fb104850d2d5fde7c4700f8a406635954416da54bf8946a0498890a52ac6a5ffc1d6ef03e0f5a438fb44b566e1709a02ba27670b66c631bf0b76505234f317775a827d8f7b8e76f4fe1e6eaea98fe4a6a8348ee8c67b54eb3efd0d01a159c2b466f6a5a79fe4d8e03379737356fbf699307b4ed55a182e7d71ba41cfc427340a50cadafc6d0a1597849c"], 0x24}, 0x1, 0x0, 0x0, 0x80080}, 0x8884) (rerun: 64) 288.858742ms ago: executing program 1 (id=1028): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYBLOB="0000000006"], 0x24}}, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x1f) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r2, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="e647f8c4dc935c2243790d3b957d276dc04f77fb8ea704f31a85eeb9fcc6976ff8", 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)="2d13dd35007b214473488d11ba10274336ee990b512ba61b74919220d62b757bf95d198e5a686c928530fe092814240f61c82ec09f77aab780da6d06a28b8e435a723681520bf21e9f596da4117de6a8f3a88f6412499bcaf2ed6b760c2581fe76536cf34ea38995820728c714161bac8df95264be33e0cc49e1bb8050a11ca87d44c5e5479f210321b6b29800d43403b202eeb2f6ec70b0dc3d3a1013ff5d39c9b3942e97f8e01f7accc2f2987c244cf51020bb867657cce3fa9c508691233e80e56c8cefe94ae3f190b3939a67a252a14d5eb25011b2826e2dbf38833bf067a625b22436b755f7fadc843f9fc9b973", 0xf0}, {&(0x7f0000000280)="7be0008a38ffc268fe2db7320ad0e751d1f0bf4b0f98bb7a3c356876e8c22cb76ebed7025903581cd5ac19bc583a2378e8219d24274ff3cfa25a49b12340fa77350dfa", 0x43}, {&(0x7f0000000540)="629bb1e4af03ebc6edff505fa746b22669c996cff3d06f1df0fa3aed7a4bb195f21099b49fed8af734ab970a78", 0x2d}], 0x3}}], 0x2, 0x40408c1) recvmmsg(r2, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001440)=""/161, 0xa1}], 0x1}, 0x9}], 0x1, 0x10002, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) clock_gettime(0x0, &(0x7f0000008600)) recvmmsg(r5, &(0x7f0000008480)=[{{0x0, 0x0, &(0x7f0000006040)=[{&(0x7f0000000700)=""/172, 0xac}], 0x1}, 0x1}, {{0x0, 0x0, 0x0}, 0x167d12a2}], 0x2, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002"], 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x14, 0x7}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0xe, 0x5, {0x1, 0x5, 0x7, 0x8, 0x8000, 0x7, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x110, 0xffffffffffffffff, 0x100000000) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$inet6(0xa, 0x2, 0x0) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x20, 0x14, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x13, 0x0, 0x0, @fd=r10}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="ecc032c4"]}]}, 0x20}], 0x1}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) 174.721536ms ago: executing program 0 (id=1029): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f22", 0x4}], 0x1}}], 0x2, 0x240080e4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 125.941879ms ago: executing program 3 (id=1030): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="c8485b94a70ce3d2a64437e03f03003f000b05d25a806c886394f90325fc60100002000a000300555ecd420a493a88dc974e5fc1f867d45ea8d82f9c06dfc4bfd04bff1bd2bac1241fde4ca819b171b816398ab481b8f5c2e5df1ce8e30b9d200547575911dffc86643cebc95d1e885603d757971d2224115d99e31b5e", 0x7d}], 0x1}, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) 0s ago: executing program 0 (id=1031): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='G', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000000000000840000000800000018"], 0x28}, 0x41) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)='a', 0x1}, {0x0, 0x10}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000a40)=ANY=[@ANYBLOB="0d000000000000000a004e230000000b00000000000000000000000000000001010000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000a004e2400000004fc00000000000000000000000000000100000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2480000000ff020000000000000000000000000001f8c25f52000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2100000000fe8000000000000000000000000000bb09000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000005fc01000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000006fc01000000000000000000000000000197000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000003fe8000000000000000000000000000bb0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ceae0cec24224eef390d7f6fbb57f38b6882be616ed6472dee5383dd47f7e65876c347ba4fbb05136960bfeb621f9045f26da1dd657521f51224729da9a352a3950c9942e91deb"], 0x390) r3 = getuid() sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@can_newroute={0x144, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_UID={0x8, 0xe, r3}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0xff, 0x0, 0x0, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0xa840}, 0x49080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.228' (ED25519) to the list of known hosts. [ 82.863484][ T5836] cgroup: Unknown subsys name 'net' [ 82.973890][ T5836] cgroup: Unknown subsys name 'cpuset' [ 82.983057][ T5836] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.658775][ T5836] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.533087][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.541777][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.550373][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.558349][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.566512][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.582153][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.591178][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.614460][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.637490][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.645512][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.671379][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.677521][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.687980][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.698212][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.717861][ T5168] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.718649][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.727255][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.738236][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.749914][ T5168] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.764091][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.772255][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.787018][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.797315][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.817665][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.825578][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.415156][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 89.611582][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 89.656345][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 89.690234][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 89.787510][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.795247][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.803187][ T5851] bridge_slave_0: entered allmulticast mode [ 89.811617][ T5851] bridge_slave_0: entered promiscuous mode [ 89.901635][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.909029][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.916194][ T5851] bridge_slave_1: entered allmulticast mode [ 89.923827][ T5851] bridge_slave_1: entered promiscuous mode [ 90.009804][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.017158][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.024357][ T5855] bridge_slave_0: entered allmulticast mode [ 90.033169][ T5855] bridge_slave_0: entered promiscuous mode [ 90.055349][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 90.085884][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.093376][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.100749][ T5847] bridge_slave_0: entered allmulticast mode [ 90.108800][ T5847] bridge_slave_0: entered promiscuous mode [ 90.116277][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.123948][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.131505][ T5855] bridge_slave_1: entered allmulticast mode [ 90.139313][ T5855] bridge_slave_1: entered promiscuous mode [ 90.149807][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.178965][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.186124][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.193608][ T5847] bridge_slave_1: entered allmulticast mode [ 90.200919][ T5847] bridge_slave_1: entered promiscuous mode [ 90.240373][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.320688][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.378645][ T5851] team0: Port device team_slave_0 added [ 90.394283][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.403516][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.411601][ T5858] bridge_slave_0: entered allmulticast mode [ 90.418971][ T5858] bridge_slave_0: entered promiscuous mode [ 90.429903][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.455488][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.469844][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.485842][ T5851] team0: Port device team_slave_1 added [ 90.493181][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.500578][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.507876][ T5858] bridge_slave_1: entered allmulticast mode [ 90.515912][ T5858] bridge_slave_1: entered promiscuous mode [ 90.539946][ T5847] team0: Port device team_slave_0 added [ 90.596210][ T5847] team0: Port device team_slave_1 added [ 90.675627][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.702187][ T5855] team0: Port device team_slave_0 added [ 90.724196][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.731787][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.739155][ T5860] bridge_slave_0: entered allmulticast mode [ 90.746285][ T5860] bridge_slave_0: entered promiscuous mode [ 90.754939][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.764766][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.778133][ T5864] Bluetooth: hci0: command tx timeout [ 90.795561][ T5861] Bluetooth: hci1: command tx timeout [ 90.797640][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.815132][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.822557][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.848958][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.859729][ T5861] Bluetooth: hci3: command tx timeout [ 90.863232][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.874485][ T5861] Bluetooth: hci4: command tx timeout [ 90.879960][ T5864] Bluetooth: hci2: command tx timeout [ 90.900851][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.907996][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.934196][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.948475][ T5855] team0: Port device team_slave_1 added [ 90.954581][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.962375][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.970143][ T5860] bridge_slave_1: entered allmulticast mode [ 90.978000][ T5860] bridge_slave_1: entered promiscuous mode [ 91.032724][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.040436][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.068089][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.111660][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.118954][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.145450][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.173465][ T5858] team0: Port device team_slave_0 added [ 91.183511][ T5858] team0: Port device team_slave_1 added [ 91.197480][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.204499][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.231220][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.247936][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.310386][ T5851] hsr_slave_0: entered promiscuous mode [ 91.317333][ T5851] hsr_slave_1: entered promiscuous mode [ 91.326659][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.400660][ T5847] hsr_slave_0: entered promiscuous mode [ 91.407537][ T5847] hsr_slave_1: entered promiscuous mode [ 91.413607][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.422183][ T5847] Cannot create hsr debugfs directory [ 91.461501][ T5860] team0: Port device team_slave_0 added [ 91.468668][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.475679][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.502275][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.563766][ T5860] team0: Port device team_slave_1 added [ 91.584116][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.592511][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.618712][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.665542][ T5855] hsr_slave_0: entered promiscuous mode [ 91.672018][ T5855] hsr_slave_1: entered promiscuous mode [ 91.678628][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.686221][ T5855] Cannot create hsr debugfs directory [ 91.743755][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.751840][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.778839][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.814352][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.821770][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.847917][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.984447][ T5858] hsr_slave_0: entered promiscuous mode [ 91.992129][ T5858] hsr_slave_1: entered promiscuous mode [ 92.017918][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.025542][ T5858] Cannot create hsr debugfs directory [ 92.063265][ T1210] cfg80211: failed to load regulatory.db [ 92.153535][ T5860] hsr_slave_0: entered promiscuous mode [ 92.161362][ T5860] hsr_slave_1: entered promiscuous mode [ 92.167766][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.175334][ T5860] Cannot create hsr debugfs directory [ 92.508922][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.545423][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.575139][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.606743][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.696487][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.712635][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.724353][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.749886][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.844856][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.857108][ T5864] Bluetooth: hci0: command tx timeout [ 92.857746][ T5861] Bluetooth: hci1: command tx timeout [ 92.871891][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.902781][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.928326][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.937647][ T5861] Bluetooth: hci2: command tx timeout [ 92.943202][ T5864] Bluetooth: hci4: command tx timeout [ 92.943250][ T5864] Bluetooth: hci3: command tx timeout [ 93.048496][ T5858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.064524][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.089129][ T5858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.114320][ T5858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.137794][ T5858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.202608][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.228125][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.235054][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.245941][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.265398][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.322561][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.329791][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.371436][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.378692][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.403741][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.493676][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.535659][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.542871][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.565908][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.573305][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.593242][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.684182][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.752769][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.760071][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.789211][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.796325][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.844198][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.855630][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.881940][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.931273][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.938536][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.972206][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.979466][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.015707][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.120661][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.127934][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.139606][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.147041][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.402367][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.425190][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.516796][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.663636][ T5847] veth0_vlan: entered promiscuous mode [ 94.754009][ T5847] veth1_vlan: entered promiscuous mode [ 94.806117][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.829010][ T5851] veth0_vlan: entered promiscuous mode [ 94.842822][ T5851] veth1_vlan: entered promiscuous mode [ 94.868584][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.939113][ T5168] Bluetooth: hci0: command tx timeout [ 94.944677][ T5861] Bluetooth: hci1: command tx timeout [ 94.975818][ T5847] veth0_macvtap: entered promiscuous mode [ 94.992345][ T5847] veth1_macvtap: entered promiscuous mode [ 95.018797][ T5861] Bluetooth: hci2: command tx timeout [ 95.024268][ T5861] Bluetooth: hci3: command tx timeout [ 95.029958][ T5168] Bluetooth: hci4: command tx timeout [ 95.060351][ T5851] veth0_macvtap: entered promiscuous mode [ 95.073654][ T5851] veth1_macvtap: entered promiscuous mode [ 95.090053][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.112444][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.175748][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.199023][ T5855] veth0_vlan: entered promiscuous mode [ 95.222799][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.246151][ T5847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.271418][ T5847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.282753][ T5847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.294552][ T5847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.313643][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.331949][ T5855] veth1_vlan: entered promiscuous mode [ 95.354692][ T5860] veth0_vlan: entered promiscuous mode [ 95.364805][ T5851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.377449][ T5851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.386213][ T5851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.396598][ T5851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.446443][ T5860] veth1_vlan: entered promiscuous mode [ 95.604118][ T5855] veth0_macvtap: entered promiscuous mode [ 95.636533][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.651865][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.682300][ T5860] veth0_macvtap: entered promiscuous mode [ 95.720344][ T5855] veth1_macvtap: entered promiscuous mode [ 95.729701][ T5860] veth1_macvtap: entered promiscuous mode [ 95.738325][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.746190][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.775963][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.784394][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.814287][ T5858] veth0_vlan: entered promiscuous mode [ 95.852774][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.856450][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.871100][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.907305][ T5858] veth1_vlan: entered promiscuous mode [ 95.920858][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.931446][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.953528][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.991310][ T5860] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.010555][ T5860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.019785][ T5860] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.037304][ T5860] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.090414][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.125939][ T5858] veth0_macvtap: entered promiscuous mode [ 96.169001][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.196061][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.213450][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.225683][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.253404][ T5858] veth1_macvtap: entered promiscuous mode [ 96.328761][ T5973] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 96.355893][ T5973] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 96.365940][ T5973] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 96.375499][ T5973] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 96.385239][ T5973] geneve2: entered promiscuous mode [ 96.391020][ T5973] geneve2: entered allmulticast mode [ 96.440617][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.565368][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.575899][ T5980] sit0: entered promiscuous mode [ 96.585427][ T5980] netlink: 'syz.0.8': attribute type 1 has an invalid length. [ 96.594467][ T5980] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8'. [ 96.641021][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.645043][ T5858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.661618][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.664144][ T5858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.684085][ T5858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.692912][ T5858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.801261][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.810969][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.931187][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.943567][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.972361][ T5989] sctp: [Deprecated]: syz.0.10 (pid 5989) Use of int in max_burst socket option. [ 96.972361][ T5989] Use struct sctp_assoc_value instead [ 96.986232][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.005289][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.017449][ T5168] Bluetooth: hci0: command tx timeout [ 97.023364][ T5861] Bluetooth: hci1: command tx timeout [ 97.097237][ T5861] Bluetooth: hci3: command tx timeout [ 97.102745][ T5168] Bluetooth: hci4: command tx timeout [ 97.102758][ T5864] Bluetooth: hci2: command tx timeout [ 97.125819][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.193263][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.253991][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.291877][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.612690][ T6006] Zero length message leads to an empty skb [ 97.716798][ T6011] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.794730][ T6011] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.910039][ T6017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16'. [ 97.978080][ T6017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16'. [ 98.170376][ T6028] netlink: 'syz.1.19': attribute type 5 has an invalid length. [ 98.463592][ T6041] netlink: 'syz.2.22': attribute type 83 has an invalid length. [ 98.981276][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 99.041197][ T6058] netlink: 14 bytes leftover after parsing attributes in process `syz.4.27'. [ 99.258722][ T6063] syz.0.30 (6063) used greatest stack depth: 20104 bytes left [ 99.329319][ T6058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.372338][ T6058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.426430][ T6058] bond0 (unregistering): Released all slaves [ 99.582567][ T6070] geneve3: entered promiscuous mode [ 99.588737][ T6070] geneve3: entered allmulticast mode [ 99.789279][ T6082] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 99.846970][ T6082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.34'. [ 99.946310][ T6094] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 99.954389][ T6088] xt_CT: No such helper "snmp" [ 100.007270][ T6089] xt_CT: No such helper "snmp" [ 100.192027][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 100.252491][ T6108] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 100.322589][ T6117] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 100.337151][ T6113] netlink: 96 bytes leftover after parsing attributes in process `syz.2.42'. [ 100.359623][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 100.372270][ T6113] 8021q: VLANs not supported on ip6gre0 [ 100.381190][ T6117] netlink: 28 bytes leftover after parsing attributes in process `syz.0.44'. [ 100.535802][ T6121] netlink: 'syz.4.45': attribute type 9 has an invalid length. [ 100.672588][ T6129] netlink: 'syz.0.48': attribute type 8 has an invalid length. [ 100.797394][ T6140] warning: `syz.1.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.888103][ T6141] sctp: failed to load transform for md5: -4 [ 100.912005][ T6138] sctp: failed to load transform for md5: -4 [ 101.345989][ T6162] tipc: Started in network mode [ 101.365906][ T6162] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 101.405497][ T6162] tipc: Enabled bearer , priority 12 [ 101.643423][ T6184] openvswitch: netlink: Flow actions attr not present in new flow. [ 101.702652][ T6184] syz.0.61 uses obsolete (PF_INET,SOCK_PACKET) [ 101.763183][ T6189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.021057][ T6196] __nla_validate_parse: 1 callbacks suppressed [ 102.021079][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 102.517960][ T980] tipc: Node number set to 10070698 [ 102.743142][ T6234] Only authenc() type AEADs are supported by ESSIV [ 102.773052][ T6238] netlink: 40 bytes leftover after parsing attributes in process `syz.1.76'. [ 102.820262][ T6238] netlink: 40 bytes leftover after parsing attributes in process `syz.1.76'. [ 102.821236][ T6237] trusted_key: syz.3.78 sent an empty control message without MSG_MORE. [ 103.037980][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.81'. [ 103.063231][ T6246] bridge_slave_1: left allmulticast mode [ 103.070509][ T6246] bridge_slave_1: left promiscuous mode [ 103.077442][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.244515][ T6261] netlink: 'syz.0.85': attribute type 11 has an invalid length. [ 103.333069][ T6246] bridge_slave_0: left allmulticast mode [ 103.357266][ T6246] bridge_slave_0: left promiscuous mode [ 103.363433][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.482280][ C1] Unknown status report in ack skb [ 103.499842][ T6270] x_tables: duplicate underflow at hook 3 [ 103.735295][ T6277] IPv6: sit1: Disabled Multicast RS [ 103.786070][ T6277] sit1: entered allmulticast mode [ 104.176978][ T30] audit: type=1800 audit(1751904346.006:2): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.95" name="memory.events" dev="tmpfs" ino=165 res=0 errno=0 [ 104.786987][ T6321] netlink: 'syz.0.102': attribute type 1 has an invalid length. [ 105.031644][ T6343] sch_fq: defrate 0 ignored. [ 105.109578][ T6344] sch_fq: defrate 0 ignored. [ 105.173715][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 105.305910][ T6352] netlink: 204 bytes leftover after parsing attributes in process `syz.3.110'. [ 105.323729][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 105.402423][ T6358] netlink: 'syz.2.112': attribute type 4 has an invalid length. [ 105.548595][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.113'. [ 105.556649][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 105.927149][ T6384] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 106.241456][ T6399] IPVS: set_ctl: invalid protocol: 255 172.30.1.5:20003 [ 106.301095][ T6401] Bluetooth: MGMT ver 1.23 [ 106.361560][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.125'. [ 106.419691][ T6403] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 106.435908][ T6403] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 106.446564][ T6403] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 106.467975][ T6403] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 106.481844][ T6403] geneve2: entered promiscuous mode [ 106.492038][ T6403] geneve2: entered allmulticast mode [ 106.503797][ T6408] netlink: 'syz.2.128': attribute type 7 has an invalid length. [ 106.826717][ T6423] 8021q: VLANs not supported on ipvlan0 [ 106.915233][ T6428] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:1761 [ 107.141054][ T6430] syz.0.138 (6430) used greatest stack depth: 17992 bytes left [ 107.256364][ T6445] __nla_validate_parse: 4 callbacks suppressed [ 107.256383][ T6445] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.142'. [ 107.271937][ T6449] xfrm0: entered promiscuous mode [ 107.283153][ T6449] xfrm0: entered allmulticast mode [ 107.411893][ T6457] sctp: [Deprecated]: syz.2.146 (pid 6457) Use of int in max_burst socket option deprecated. [ 107.411893][ T6457] Use struct sctp_assoc_value instead [ 107.459554][ T6457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.532696][ T6464] netlink: 72 bytes leftover after parsing attributes in process `syz.3.148'. [ 107.632932][ T6469] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.149'. [ 107.725692][ T6471] smc: net device erspan0 applied user defined pnetid SYZ0 [ 107.748237][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 108.193508][ T6496] netlink: 200 bytes leftover after parsing attributes in process `syz.3.161'. [ 108.307552][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 108.319607][ T6500] xt_hashlimit: max too large, truncated to 1048576 [ 108.566410][ T6517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.168'. [ 108.603713][ T6519] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 108.661813][ T6523] netlink: 60 bytes leftover after parsing attributes in process `syz.0.170'. [ 108.985809][ T6537] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 109.011265][ T6540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.176'. [ 109.025778][ T6537] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 109.034980][ T6537] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 109.044029][ T6537] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 109.055043][ T6537] geneve2: entered promiscuous mode [ 109.060721][ T6537] geneve2: entered allmulticast mode [ 109.086778][ T6543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.177'. [ 109.331378][ T6549] tls_set_device_offload_rx: netdev not found [ 109.354154][ T6554] xt_cgroup: xt_cgroup: no path or classid specified [ 109.415738][ T6553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.443191][ T6556] 8021q: VLANs not supported on ip6tnl0 [ 109.985538][ T6591] netlink: 'syz.1.193': attribute type 4 has an invalid length. [ 110.069262][ T6586] netlink: ct family unspecified [ 110.097055][ T6586] openvswitch: netlink: Actions may not be safe on all matching packets [ 110.443275][ T6614] netlink: 'syz.1.200': attribute type 21 has an invalid length. [ 110.462109][ T6614] netlink: 'syz.1.200': attribute type 5 has an invalid length. [ 110.828726][ T6631] netlink: 'syz.0.206': attribute type 4 has an invalid length. [ 111.696714][ T6676] geneve1: entered promiscuous mode [ 111.752353][ T6674] geneve1: left promiscuous mode [ 112.092879][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880313b8c00: rx timeout, send abort [ 112.102851][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880313b8c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 112.117505][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880313b9c00: rx timeout, send abort [ 112.125938][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880313b9400: rx timeout, send abort [ 112.134925][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880313b9400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 112.149565][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880313b9c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 112.324569][ T6707] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 112.368873][ T6707] veth1_vlan: entered allmulticast mode [ 112.436661][ T6707] team0: Device veth1_vlan failed to register rx_handler [ 112.511844][ T6715] __nla_validate_parse: 5 callbacks suppressed [ 112.511863][ T6715] netlink: 228 bytes leftover after parsing attributes in process `syz.3.227'. [ 112.789867][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 112.993246][ T6741] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 113.307386][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.239'. [ 113.480880][ T6769] netlink: 'syz.0.243': attribute type 7 has an invalid length. [ 113.564146][ T6769] : entered promiscuous mode [ 113.822324][ T6783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.249'. [ 113.872332][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 113.917994][ T6790] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 113.939783][ T6793] sctp: [Deprecated]: syz.2.251 (pid 6793) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.939783][ T6793] Use struct sctp_sack_info instead [ 113.958274][ T6790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.160084][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 114.209862][ T6804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.313802][ T6773] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 114.506743][ T6823] netlink: 'syz.2.258': attribute type 1 has an invalid length. [ 114.555624][ T6823] netlink: 'syz.2.258': attribute type 1 has an invalid length. [ 114.714136][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 114.759540][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 114.827882][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 114.931296][ T6850] netlink: 'syz.1.268': attribute type 4 has an invalid length. [ 115.390731][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.576155][ T6883] netlink: 216 bytes leftover after parsing attributes in process `syz.3.280'. [ 115.696700][ T6892] netlink: 'syz.0.283': attribute type 16 has an invalid length. [ 115.743947][ T6896] netlink: 'syz.4.284': attribute type 2 has an invalid length. [ 115.943049][ T6903] netlink: 'syz.2.287': attribute type 12 has an invalid length. [ 115.959814][ T6903] netlink: 'syz.2.287': attribute type 29 has an invalid length. [ 116.536141][ T6929] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 116.546737][ T48] IPVS: starting estimator thread 0... [ 116.657032][ T6932] IPVS: using max 25 ests per chain, 60000 per kthread [ 116.699341][ T6936] netlink: 'syz.1.298': attribute type 28 has an invalid length. [ 116.724189][ T6936] netlink: 'syz.1.298': attribute type 3 has an invalid length. [ 116.836074][ T6942] netlink: 'syz.2.299': attribute type 7 has an invalid length. [ 117.413486][ T6974] tipc: Resetting bearer [ 117.652218][ T6974] tipc: Disabling bearer [ 117.824268][ T6991] __nla_validate_parse: 23 callbacks suppressed [ 117.824290][ T6991] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.317'. [ 118.058053][ T1318] wlan1: Trigger new scan to find an IBSS to join [ 118.333125][ T7008] netlink: 216 bytes leftover after parsing attributes in process `syz.2.323'. [ 118.384384][ T7010] netlink: 72 bytes leftover after parsing attributes in process `syz.1.324'. [ 118.592644][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.330'. [ 118.624859][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.330'. [ 118.767096][ T7033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.332'. [ 118.787060][ T7033] netlink: 32 bytes leftover after parsing attributes in process `syz.4.332'. [ 119.104337][ T7056] netlink: 60 bytes leftover after parsing attributes in process `syz.1.335'. [ 119.157313][ T7050] netlink: 60 bytes leftover after parsing attributes in process `syz.1.335'. [ 119.173797][ T7061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.336'. [ 119.436944][ T7061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.562497][ T7076] bond1: entered promiscuous mode [ 119.567877][ T7076] bond1: entered allmulticast mode [ 119.573805][ T7076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.717552][ T7091] : entered promiscuous mode [ 119.734657][ T48] IPVS: starting estimator thread 0... [ 119.846974][ T7092] IPVS: using max 29 ests per chain, 69600 per kthread [ 119.888659][ T7098] validate_nla: 8 callbacks suppressed [ 119.888679][ T7098] netlink: 'syz.4.348': attribute type 4 has an invalid length. [ 120.440733][ T7124] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.723101][ C1] Unknown status report in ack skb [ 120.892578][ T7151] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 121.914788][ T7209] netlink: 'syz.4.383': attribute type 1 has an invalid length. [ 121.963173][ T7209] openvswitch: netlink: IP tunnel dst address not specified [ 122.431089][ T7245] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.615965][ T7250] netlink: 'syz.3.399': attribute type 3 has an invalid length. [ 122.812098][ T7257] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 122.841145][ T7260] __nla_validate_parse: 11 callbacks suppressed [ 122.841165][ T7260] netlink: 80 bytes leftover after parsing attributes in process `syz.4.402'. [ 122.856732][ T7265] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 122.877483][ T7266] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 123.017811][ T1007] wlan1: Trigger new scan to find an IBSS to join [ 123.220413][ T7285] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.410'. [ 123.245131][ T7284] veth0: entered promiscuous mode [ 123.291330][ T7283] veth0: left promiscuous mode [ 123.447124][ T7295] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 123.525771][ T7298] netlink: 33 bytes leftover after parsing attributes in process `syz.2.414'. [ 123.542003][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 123.752332][ T7304] netlink: 'syz.2.417': attribute type 1 has an invalid length. [ 123.786524][ T7304] netlink: 224 bytes leftover after parsing attributes in process `syz.2.417'. [ 123.987230][ T64] wlan1: Creating new IBSS network, BSSID be:d9:18:51:62:94 [ 124.060338][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 124.169748][ T7308] netlink: 36 bytes leftover after parsing attributes in process `syz.2.420'. [ 124.403830][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'. [ 124.580937][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 124.594329][ T7343] netlink: 'syz.4.430': attribute type 3 has an invalid length. [ 124.823498][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.952819][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.103109][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.329076][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.756422][ T64] bridge_slave_1: left allmulticast mode [ 125.777061][ T64] bridge_slave_1: left promiscuous mode [ 125.812580][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.833250][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 125.879593][ T5168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 125.889918][ T5168] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 125.904874][ T5168] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 125.915914][ T64] bridge_slave_0: left allmulticast mode [ 125.915967][ T5168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 125.988022][ T5168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.088546][ T64] bridge_slave_0: left promiscuous mode [ 126.098261][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.719913][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.731592][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.742321][ T64] bond0 (unregistering): Released all slaves [ 126.840318][ T64] bond1 (unregistering): Released all slaves [ 127.633445][ T7390] chnl_net:caif_netlink_parms(): no params data found [ 127.738025][ T64] hsr_slave_0: left promiscuous mode [ 127.744418][ T64] hsr_slave_1: left promiscuous mode [ 127.750914][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.759255][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.772484][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.780336][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.802624][ T64] veth1_macvtap: left promiscuous mode [ 127.809923][ T64] veth0_macvtap: left promiscuous mode [ 127.815733][ T64] veth1_vlan: left promiscuous mode [ 127.822726][ T64] veth0_vlan: left promiscuous mode [ 128.061694][ T5861] Bluetooth: hci2: command tx timeout [ 128.295007][ T64] team0 (unregistering): Port device team_slave_1 removed [ 128.337071][ T64] team0 (unregistering): Port device team_slave_0 removed [ 129.061350][ T7470] IPVS: Error connecting to the multicast addr [ 129.070653][ T7474] set match dimension is over the limit! [ 129.122099][ T7390] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.133444][ T7390] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.145295][ T7390] bridge_slave_0: entered allmulticast mode [ 129.187151][ T7390] bridge_slave_0: entered promiscuous mode [ 129.217553][ T7390] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.225645][ T7390] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.266092][ T7390] bridge_slave_1: entered allmulticast mode [ 129.290067][ T7390] bridge_slave_1: entered promiscuous mode [ 129.562286][ T7390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.596057][ T7390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.754255][ T7390] team0: Port device team_slave_0 added [ 129.809764][ T7390] team0: Port device team_slave_1 added [ 129.997401][ T7390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.022236][ T7390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.076943][ T7390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.122211][ T7390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.139194][ T5168] Bluetooth: hci2: command tx timeout [ 130.154613][ T7390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.263265][ T7390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.323548][ T64] IPVS: stop unused estimator thread 0... [ 130.326859][ T7525] netlink: 'syz.0.482': attribute type 10 has an invalid length. [ 130.432799][ T7525] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 130.445438][ T7525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.531219][ T7390] hsr_slave_0: entered promiscuous mode [ 130.543362][ T7390] hsr_slave_1: entered promiscuous mode [ 130.561802][ T7390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.588895][ T7390] Cannot create hsr debugfs directory [ 130.932141][ T7553] bridge0: entered promiscuous mode [ 130.940793][ T7553] bridge0: entered allmulticast mode [ 131.293832][ T7569] __nla_validate_parse: 4 callbacks suppressed [ 131.293852][ T7569] netlink: 14 bytes leftover after parsing attributes in process `syz.3.496'. [ 131.360444][ T7575] x_tables: duplicate underflow at hook 1 [ 131.367309][ T7569] hsr_slave_0: left promiscuous mode [ 131.373798][ T7569] hsr_slave_1: left promiscuous mode [ 131.640185][ T7585] netlink: 'syz.1.501': attribute type 4 has an invalid length. [ 131.818101][ T7598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.504'. [ 131.980823][ T7598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.504'. [ 131.997795][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 132.051941][ T7390] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 132.072433][ T7390] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 132.104578][ T7390] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 132.135502][ T7390] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 132.217585][ T5168] Bluetooth: hci2: command 0x040f tx timeout [ 132.309648][ T7623] netlink: 'syz.0.512': attribute type 1 has an invalid length. [ 132.333255][ T7623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.525442][ T7390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.579542][ T7631] netlink: 9 bytes leftover after parsing attributes in process `syz.0.514'. [ 132.627523][ T7631] gretap0: entered promiscuous mode [ 132.643489][ T7636] netlink: 5 bytes leftover after parsing attributes in process `syz.0.514'. [ 132.663317][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 132.672608][ T7640] netlink: 136 bytes leftover after parsing attributes in process `syz.3.517'. [ 132.679315][ T7390] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.692144][ T7636] 0ªX¹¦D: renamed from gretap0 [ 132.695511][ T7640] netlink: 'syz.3.517': attribute type 5 has an invalid length. [ 132.712417][ T7636] 0ªX¹¦D: left promiscuous mode [ 132.714214][ T7642] netlink: 604 bytes leftover after parsing attributes in process `syz.4.518'. [ 132.721433][ T7636] 0ªX¹¦D: entered allmulticast mode [ 132.741702][ T7636] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 132.765318][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.518'. [ 132.798759][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.806055][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.845440][ T7648] netlink: 'syz.1.519': attribute type 3 has an invalid length. [ 132.875288][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.882602][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.031589][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.038935][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.092898][ T7657] gretap1: entered promiscuous mode [ 133.100804][ T7657] gretap1: entered allmulticast mode [ 133.122881][ T7390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.679636][ T7390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.795462][ T7390] veth0_vlan: entered promiscuous mode [ 133.841340][ T7390] veth1_vlan: entered promiscuous mode [ 133.914580][ T7390] veth0_macvtap: entered promiscuous mode [ 133.943997][ T7390] veth1_macvtap: entered promiscuous mode [ 134.034997][ T7390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.072605][ T7390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.104667][ T7390] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.125402][ T7390] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.142403][ T7390] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.153438][ T7390] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.179858][ T7702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.299059][ T5861] Bluetooth: hci2: command 0x040f tx timeout [ 134.353032][ T3930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.393977][ T3930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.485803][ T7716] netlink: 'syz.3.541': attribute type 39 has an invalid length. [ 134.485929][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.534399][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.959158][ T7731] netlink: 'syz.4.547': attribute type 16 has an invalid length. [ 134.968869][ T7731] netlink: 'syz.4.547': attribute type 17 has an invalid length. [ 135.215745][ T7744] openvswitch: netlink: Flow actions attr not present in new flow. [ 135.660883][ T1007] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.032224][ T1007] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.325679][ T7778] xt_nat: multiple ranges no longer supported [ 136.359221][ T1007] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.521376][ T48] hid-generic 0005:10CF:0009.0001: unknown main item tag 0x0 [ 136.536146][ T1007] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.574907][ T48] hid-generic 0005:10CF:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 136.621689][ T7784] __nla_validate_parse: 12 callbacks suppressed [ 136.621711][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 136.738204][ T7800] netlink: 'syz.0.567': attribute type 11 has an invalid length. [ 136.797312][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 136.821179][ T5168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.841061][ T5168] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.850378][ T5168] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.872994][ T5168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.882127][ T5168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.912288][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'. [ 136.936100][ T7806] veth1_macvtap: left promiscuous mode [ 137.018734][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'. [ 137.082852][ T1007] bridge_slave_1: left allmulticast mode [ 137.121878][ T1007] bridge_slave_1: left promiscuous mode [ 137.137238][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.160171][ T1007] bridge_slave_0: left allmulticast mode [ 137.179129][ T1007] bridge_slave_0: left promiscuous mode [ 137.185004][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.238072][ T7822] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 137.686518][ T1007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.698759][ T1007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.710309][ T1007] bond0 (unregistering): Released all slaves [ 137.776119][ T7821] macsec1: entered promiscuous mode [ 138.152682][ T7838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.579'. [ 138.202428][ T7833] bridge0: left allmulticast mode [ 138.275609][ T7805] chnl_net:caif_netlink_parms(): no params data found [ 138.571619][ T7853] 8021q: VLANs not supported on wg1 [ 138.575637][ T7858] IPv6: Can't replace route, no match found [ 138.602615][ T7859] netlink: 40 bytes leftover after parsing attributes in process `syz.4.584'. [ 138.619436][ T7855] netlink: 40 bytes leftover after parsing attributes in process `syz.4.584'. [ 138.726737][ T7855] netlink: 44 bytes leftover after parsing attributes in process `syz.4.584'. [ 138.807269][ T1007] hsr_slave_0: left promiscuous mode [ 138.831888][ T1007] hsr_slave_1: left promiscuous mode [ 138.853392][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.866421][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.874011][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.587'. [ 138.894743][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.918437][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.937466][ T5861] Bluetooth: hci2: command tx timeout [ 139.004569][ T1007] veth1_macvtap: left promiscuous mode [ 139.017619][ T1007] veth0_macvtap: left promiscuous mode [ 139.023374][ T1007] veth1_vlan: left promiscuous mode [ 139.038521][ T1007] veth0_vlan: left promiscuous mode [ 139.329558][ T7885] xt_l2tp: invalid flags combination: c [ 139.752056][ T1007] team0 (unregistering): Port device team_slave_1 removed [ 139.792618][ T1007] team0 (unregistering): Port device team_slave_0 removed [ 140.236375][ T7881] IPv6: sit1: Disabled Multicast RS [ 140.244111][ T7881] sit1: entered allmulticast mode [ 140.315396][ T7805] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.329287][ T7805] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.336722][ T7805] bridge_slave_0: entered allmulticast mode [ 140.354909][ T7805] bridge_slave_0: entered promiscuous mode [ 140.425540][ T7805] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.450067][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.479598][ T7805] bridge_slave_1: entered allmulticast mode [ 140.496283][ T7805] bridge_slave_1: entered promiscuous mode [ 140.704926][ T7805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.747801][ T7805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.750218][ T7914] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 140.792512][ T7914] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 140.919774][ T7805] team0: Port device team_slave_0 added [ 140.967814][ T7921] vlan3: entered promiscuous mode [ 140.977224][ T7921] bridge0: entered promiscuous mode [ 140.988195][ T7921] vlan3: entered allmulticast mode [ 140.993717][ T7921] bridge0: entered allmulticast mode [ 141.016941][ T5861] Bluetooth: hci2: command tx timeout [ 141.034537][ T7805] team0: Port device team_slave_1 added [ 141.133361][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.157442][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.190500][ T7805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.212938][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.222671][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.290478][ T7939] xt_hashlimit: overflow, rate too high: 0 [ 141.299492][ T7805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.559550][ T7953] netlink: 'syz.3.606': attribute type 10 has an invalid length. [ 141.585484][ T7805] hsr_slave_0: entered promiscuous mode [ 141.596290][ T7805] hsr_slave_1: entered promiscuous mode [ 141.813076][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 141.894606][ T7966] netlink: 'syz.1.611': attribute type 27 has an invalid length. [ 141.921897][ T7966] netlink: 'syz.1.611': attribute type 1 has an invalid length. [ 141.933599][ T7969] netlink: 'syz.1.611': attribute type 1 has an invalid length. [ 141.941444][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.945999][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.975630][ T7971] netlink: 'syz.0.612': attribute type 16 has an invalid length. [ 142.004435][ T7971] netlink: 'syz.0.612': attribute type 17 has an invalid length. [ 142.040461][ T7971] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.047827][ T7971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.065392][ T7971] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.073449][ T7971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.645019][ T7805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.672684][ T7805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.696617][ T7805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.733684][ T7805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 143.097466][ T5168] Bluetooth: hci2: command tx timeout [ 143.101345][ T7805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.209165][ T7805] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.231404][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.238680][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.266159][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.273461][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.370977][ T8021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.623'. [ 143.406111][ T8025] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 143.810188][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.630'. [ 143.990602][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.631'. [ 144.092589][ T8052] bond1: entered promiscuous mode [ 144.099333][ T8052] bond1: entered allmulticast mode [ 144.105255][ T8063] netlink: 'syz.3.632': attribute type 21 has an invalid length. [ 144.105518][ T8052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.128625][ T7805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.152768][ T8064] netlink: 232 bytes leftover after parsing attributes in process `syz.0.634'. [ 144.168159][ T8063] netlink: 128 bytes leftover after parsing attributes in process `syz.3.632'. [ 144.173616][ T7805] veth0_vlan: entered promiscuous mode [ 144.254077][ T8063] netlink: 3 bytes leftover after parsing attributes in process `syz.3.632'. [ 144.276761][ T8068] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 144.291500][ T7805] veth1_vlan: entered promiscuous mode [ 144.298708][ T8070] netlink: 'syz.1.636': attribute type 6 has an invalid length. [ 144.328762][ T8070] netlink: 'syz.1.636': attribute type 6 has an invalid length. [ 144.365164][ T8070] Cannot find del_set index 5 as target [ 144.443984][ T7805] veth0_macvtap: entered promiscuous mode [ 144.494415][ T8077] netlink: 16 bytes leftover after parsing attributes in process `syz.3.639'. [ 144.550557][ T7805] veth1_macvtap: entered promiscuous mode [ 144.632590][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.673979][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.719952][ T7805] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.734891][ T7805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.758288][ T7805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.777850][ T7805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.989514][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.012174][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.053385][ T8117] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 145.117007][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.124991][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.187780][ T5168] Bluetooth: hci2: command 0x0419 tx timeout [ 145.484041][ T8135] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 145.716588][ T8146] x_tables: duplicate underflow at hook 1 [ 145.752602][ T8146] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20004 [ 145.832496][ T8149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.844612][ T10] IPVS: starting estimator thread 0... [ 145.947164][ T8150] IPVS: using max 26 ests per chain, 62400 per kthread [ 146.048889][ T8156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.661'. [ 146.166587][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.293105][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.873887][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.893461][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.902447][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.918631][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.933371][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.088797][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.233824][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.263196][ T8187] netlink: 17 bytes leftover after parsing attributes in process `syz.1.666'. [ 148.447921][ T8194] bridge0: port 1(wlan1) entered blocking state [ 148.454435][ T8194] bridge0: port 1(wlan1) entered disabled state [ 148.493693][ T8194] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 148.525557][ T8194] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 148.622798][ T8197] syzkaller1: entered promiscuous mode [ 148.644531][ T8197] syzkaller1: entered allmulticast mode [ 148.680437][ T8206] sctp: [Deprecated]: syz.1.673 (pid 8206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.680437][ T8206] Use struct sctp_sack_info instead [ 148.774834][ T8206] sctp: [Deprecated]: syz.1.673 (pid 8206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.774834][ T8206] Use struct sctp_sack_info instead [ 149.013563][ T8214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.675'. [ 149.023335][ T5861] Bluetooth: hci2: command tx timeout [ 149.064902][ T8214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.675'. [ 149.074796][ T8217] xt_l2tp: invalid flags combination: 4 [ 149.189669][ T64] bridge_slave_1: left allmulticast mode [ 149.196331][ T64] bridge_slave_1: left promiscuous mode [ 149.209540][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.244517][ T64] bridge_slave_0: left allmulticast mode [ 149.266065][ T64] bridge_slave_0: left promiscuous mode [ 149.281978][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.386127][ T8231] x_tables: duplicate underflow at hook 1 [ 149.682477][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.697170][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.711594][ T64] bond0 (unregistering): Released all slaves [ 150.012865][ T8177] chnl_net:caif_netlink_parms(): no params data found [ 150.031176][ T8239] delete_channel: no stack [ 150.106225][ T8241] netlink: 'syz.3.683': attribute type 1 has an invalid length. [ 150.116966][ T8241] netlink: 'syz.3.683': attribute type 4 has an invalid length. [ 150.124688][ T8241] netlink: 192 bytes leftover after parsing attributes in process `syz.3.683'. [ 150.158815][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.683'. [ 150.179672][ T8230] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 150.328071][ T8250] netlink: 'syz.0.687': attribute type 11 has an invalid length. [ 150.400291][ T64] hsr_slave_0: left promiscuous mode [ 150.417581][ T64] hsr_slave_1: left promiscuous mode [ 150.424435][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.446133][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.471415][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.484906][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.486728][ T8260] openvswitch: netlink: Message has 199 unknown bytes. [ 150.500870][ T8260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.541058][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 150.543670][ T64] veth1_macvtap: left promiscuous mode [ 150.564870][ T64] veth0_macvtap: left promiscuous mode [ 150.570956][ T64] veth1_vlan: left promiscuous mode [ 150.580882][ T64] veth0_vlan: left promiscuous mode [ 150.641873][ T8268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.689'. [ 150.790571][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c169000: rx timeout, send abort [ 150.880531][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 151.111944][ T5861] Bluetooth: hci2: command tx timeout [ 151.250894][ T64] team0 (unregistering): Port device team_slave_1 removed [ 151.290701][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ab09400: rx timeout, send abort [ 151.299085][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c169000: abort rx timeout. Force session deactivation [ 151.329647][ T64] team0 (unregistering): Port device team_slave_0 removed [ 151.417856][ T5861] Bluetooth: hci0: command 0x0401 tx timeout [ 151.798955][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ab09400: abort rx timeout. Force session deactivation [ 151.918855][ T8278] veth0: entered promiscuous mode [ 152.046409][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'. [ 152.065363][ T8290] xt_hashlimit: max too large, truncated to 1048576 [ 152.090359][ T8177] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.122728][ T8177] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.139917][ T8177] bridge_slave_0: entered allmulticast mode [ 152.162056][ T8177] bridge_slave_0: entered promiscuous mode [ 152.201010][ T8177] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.228267][ T8177] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.246354][ T8177] bridge_slave_1: entered allmulticast mode [ 152.261723][ T8177] bridge_slave_1: entered promiscuous mode [ 152.338514][ T8277] veth0: left promiscuous mode [ 152.441621][ T8177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.485380][ T8177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.585379][ T8314] SET target dimension over the limit! [ 152.633226][ T8313] netlink: 64 bytes leftover after parsing attributes in process `syz.4.700'. [ 152.689966][ T8177] team0: Port device team_slave_0 added [ 152.711095][ T8177] team0: Port device team_slave_1 added [ 152.833041][ T8177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.845490][ T8177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.881951][ T8177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.884086][ T8324] netlink: 'syz.3.705': attribute type 30 has an invalid length. [ 152.902377][ T8177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.909917][ T8177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.943990][ T8177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.094193][ T8333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.138895][ T8177] hsr_slave_0: entered promiscuous mode [ 153.160030][ T8177] hsr_slave_1: entered promiscuous mode [ 153.177129][ T5861] Bluetooth: hci2: command tx timeout [ 153.632399][ T8360] __nla_validate_parse: 5 callbacks suppressed [ 153.632419][ T8360] netlink: 28 bytes leftover after parsing attributes in process `syz.4.714'. [ 153.653272][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 153.666184][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 153.702201][ T8363] batadv1: entered allmulticast mode [ 153.790784][ T8366] netlink: 'syz.0.715': attribute type 1 has an invalid length. [ 154.017496][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.718'. [ 154.460094][ T8391] xt_CT: No such helper "syz0" [ 154.663267][ T8406] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.725'. [ 154.719459][ T8406] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.725'. [ 154.739720][ T8406] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.725'. [ 154.757740][ T8406] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.725'. [ 154.785616][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.725'. [ 154.804665][ T8177] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 154.829380][ T8408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.725'. [ 154.831687][ T8177] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 154.863121][ T8408] netlink: 'syz.0.725': attribute type 20 has an invalid length. [ 154.883506][ T8177] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 154.924237][ T8177] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 154.925180][ T8408] netlink: 'syz.0.725': attribute type 20 has an invalid length. [ 154.970406][ T8408] netlink: 'syz.0.725': attribute type 20 has an invalid length. [ 154.988927][ T8408] netlink: 'syz.0.725': attribute type 20 has an invalid length. [ 155.015698][ T8408] netlink: 'syz.0.725': attribute type 20 has an invalid length. [ 155.125623][ T8408] validate_nla: 24 callbacks suppressed [ 155.125641][ T8408] netlink: 'syz.0.725': attribute type 20 has an invalid length. [ 155.156410][ T8408] netlink: 'syz.0.725': attribute type 20 has an invalid length. [ 155.203230][ T8408] netlink: 'syz.0.725': attribute type 20 has an invalid length. [ 155.238634][ T8408] netlink: 'syz.0.725': attribute type 20 has an invalid length. [ 155.258084][ T5861] Bluetooth: hci2: command tx timeout [ 155.300947][ T8177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.322639][ T8177] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.385222][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.392464][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.413351][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.420646][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.767601][ T8455] netlink: 'syz.0.738': attribute type 10 has an invalid length. [ 155.843237][ T8455] team0: Port device geneve0 added [ 155.915814][ T8177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.047759][ T8177] veth0_vlan: entered promiscuous mode [ 156.060333][ T1152] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 156.086873][ T8177] veth1_vlan: entered promiscuous mode [ 156.191746][ T8177] veth0_macvtap: entered promiscuous mode [ 156.210208][ T8177] veth1_macvtap: entered promiscuous mode [ 156.266451][ T8476] sctp: [Deprecated]: syz.1.744 (pid 8476) Use of int in max_burst socket option deprecated. [ 156.266451][ T8476] Use struct sctp_assoc_value instead [ 156.271320][ T8177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.311982][ T8177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.346624][ T8177] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.391823][ T8177] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.428312][ T8177] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.450086][ T8177] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.868289][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.884669][ T8503] netlink: 'syz.1.754': attribute type 1 has an invalid length. [ 156.902326][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.013357][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.026915][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.079751][ T8508] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 157.113175][ T8514] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 157.139133][ T8514] bond2 (unregistering): Released all slaves [ 157.978172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.220921][ T8569] sctp: [Deprecated]: syz.3.771 (pid 8569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 158.220921][ T8569] Use struct sctp_sack_info instead [ 158.301167][ T8574] netlink: 'syz.1.772': attribute type 3 has an invalid length. [ 158.488201][ T8572] netlink: 'syz.4.773': attribute type 1 has an invalid length. [ 158.889092][ T1152] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.162808][ T1152] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.233855][ T1152] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.310535][ T1152] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.387699][ T1152] bridge_slave_1: left allmulticast mode [ 159.393378][ T1152] bridge_slave_1: left promiscuous mode [ 159.399617][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.410906][ T1152] bridge_slave_0: left allmulticast mode [ 159.416768][ T1152] bridge_slave_0: left promiscuous mode [ 159.423518][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.677316][ T8600] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 159.879424][ T8614] netlink: 'syz.0.781': attribute type 1 has an invalid length. [ 159.902858][ T8614] __nla_validate_parse: 77 callbacks suppressed [ 159.902878][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.781'. [ 160.085850][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.100958][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.112575][ T1152] bond0 (unregistering): Released all slaves [ 160.346018][ T5168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 160.356730][ T5168] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 160.379776][ T5168] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 160.382838][ T8629] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.401989][ T5168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 160.413180][ T5168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 160.538703][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.700914][ T8645] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.789130][ T8648] netlink: 'syz.0.796': attribute type 6 has an invalid length. [ 160.803650][ T1152] hsr_slave_0: left promiscuous mode [ 160.839686][ T8650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.858630][ T1152] hsr_slave_1: left promiscuous mode [ 160.865890][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.878970][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.892272][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.901034][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.904939][ T8658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.796'. [ 160.943386][ T1152] veth1_macvtap: left promiscuous mode [ 160.949670][ T1152] veth0_macvtap: left promiscuous mode [ 160.963612][ T1152] veth1_vlan: left promiscuous mode [ 160.969395][ T1152] veth0_vlan: left promiscuous mode [ 161.473520][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 161.514505][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 161.939832][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.798'. [ 161.949490][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.798'. [ 161.958491][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.798'. [ 162.187712][ T8670] netlink: 44 bytes leftover after parsing attributes in process `syz.0.799'. [ 162.444547][ T8628] chnl_net:caif_netlink_parms(): no params data found [ 162.460075][ T5168] Bluetooth: hci2: command tx timeout [ 162.814056][ T8701] lo speed is unknown, defaulting to 1000 [ 162.841343][ T8701] lo speed is unknown, defaulting to 1000 [ 162.869629][ T8706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.809'. [ 162.917845][ T8701] lo speed is unknown, defaulting to 1000 [ 162.926092][ T8628] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.942894][ T8628] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.951711][ T8628] bridge_slave_0: entered allmulticast mode [ 162.961754][ T8628] bridge_slave_0: entered promiscuous mode [ 162.971407][ T8628] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.986118][ T8628] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.996410][ T8628] bridge_slave_1: entered allmulticast mode [ 163.015467][ T8714] Unsupported ieee802154 address type: 0 [ 163.053028][ T8628] bridge_slave_1: entered promiscuous mode [ 163.208542][ T8628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.245111][ T8628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.464321][ T8701] infiniband syz0: set down [ 163.478385][ T8701] infiniband syz0: added lo [ 163.534624][ T10] lo speed is unknown, defaulting to 1000 [ 163.565092][ T8701] RDS/IB: syz0: added [ 163.569858][ T8628] team0: Port device team_slave_0 added [ 163.570104][ T8701] smc: adding ib device syz0 with port count 1 [ 163.583729][ T8701] smc: ib device syz0 port 1 has pnetid [ 163.592505][ T48] lo speed is unknown, defaulting to 1000 [ 163.632278][ T8628] team0: Port device team_slave_1 added [ 163.677507][ T8701] lo speed is unknown, defaulting to 1000 [ 163.868442][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 163.908089][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 164.205233][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.263144][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.388160][ T8734] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.397432][ T8734] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.406505][ T8734] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.423930][ T8734] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.444500][ T8734] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 164.533436][ T8734] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 164.537022][ T5168] Bluetooth: hci2: command tx timeout [ 164.543767][ T8734] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 164.558927][ T8734] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 164.568381][ T8734] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 164.581293][ T8734] geneve2: left promiscuous mode [ 164.586929][ T8734] geneve2: left allmulticast mode [ 164.607593][ T8734] macsec1: left promiscuous mode [ 164.614199][ T8628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.624471][ T8628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.661526][ T8628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.678399][ T8628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.685624][ T8628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.716520][ T8628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.816033][ T8701] lo speed is unknown, defaulting to 1000 [ 164.942833][ T8628] hsr_slave_0: entered promiscuous mode [ 164.967762][ T8628] hsr_slave_1: entered promiscuous mode [ 165.179858][ T8779] netlink: 'syz.4.827': attribute type 10 has an invalid length. [ 165.598457][ T8701] lo speed is unknown, defaulting to 1000 [ 165.802111][ T8804] nbd: must specify a size in bytes for the device [ 165.966483][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'. [ 166.154331][ T8628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 166.192667][ T8628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 166.213276][ T8628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 166.241919][ T8628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 166.341204][ T8701] lo speed is unknown, defaulting to 1000 [ 166.432455][ T8827] : renamed from hsr0 (while UP) [ 166.514503][ T8628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.577764][ T8628] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.605866][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.613815][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.618460][ T5168] Bluetooth: hci2: command tx timeout [ 166.682446][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.689615][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.774410][ T8831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.844'. [ 166.890639][ T8701] lo speed is unknown, defaulting to 1000 [ 167.201650][ T8628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.251036][ T8839] tipc: Enabling of bearer rejected, failed to enable media [ 167.444312][ T8628] veth0_vlan: entered promiscuous mode [ 167.508220][ T8628] veth1_vlan: entered promiscuous mode [ 167.657906][ T8628] veth0_macvtap: entered promiscuous mode [ 167.798834][ T8863] netlink: 'syz.3.850': attribute type 1 has an invalid length. [ 167.807175][ T8862] netlink: 'syz.3.850': attribute type 1 has an invalid length. [ 167.815027][ T8862] netlink: 224 bytes leftover after parsing attributes in process `syz.3.850'. [ 167.827595][ T8863] netlink: 224 bytes leftover after parsing attributes in process `syz.3.850'. [ 167.859311][ T8628] veth1_macvtap: entered promiscuous mode [ 167.913243][ T8628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.942547][ T8628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.958198][ T8628] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.969315][ T8628] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.984951][ T8628] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.010732][ T8628] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.029064][ T8868] netlink: 'syz.4.853': attribute type 1 has an invalid length. [ 168.119627][ T8872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.180607][ T8868] netlink: 104 bytes leftover after parsing attributes in process `syz.4.853'. [ 168.213913][ T8875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.228359][ T8875] bond0: (slave bond1): making interface the new active one [ 168.238754][ T8875] bond0: (slave bond1): Enslaving as an active interface with an up link [ 168.314724][ T8868] netlink: 60 bytes leftover after parsing attributes in process `syz.4.853'. [ 168.382165][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.855'. [ 168.667003][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.675010][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.696969][ T5168] Bluetooth: hci2: command tx timeout [ 168.735646][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.746740][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.779369][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'. [ 168.788791][ T8896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.859'. [ 168.803088][ T8900] netlink: 'syz.1.861': attribute type 10 has an invalid length. [ 168.806965][ T8898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.860'. [ 168.841469][ T8900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.871546][ T8900] team0: Port device bond0 added [ 168.948340][ T8908] netlink: 'syz.3.862': attribute type 1 has an invalid length. [ 169.129199][ T8912] tipc: Started in network mode [ 169.134186][ T8912] tipc: Node identity a212ffb18a12, cluster identity 4711 [ 169.147136][ T8912] tipc: Enabled bearer , priority 0 [ 169.175462][ T8913] syzkaller0: entered promiscuous mode [ 169.186171][ T8913] syzkaller0: entered allmulticast mode [ 169.213984][ T8921] !: renamed from dummy0 [ 169.228495][ T8912] tipc: Resetting bearer [ 169.278782][ T8911] tipc: Resetting bearer [ 169.373416][ T8911] tipc: Disabling bearer [ 169.855044][ T3930] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.060853][ T3930] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.204128][ T3930] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.263031][ T3930] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.370984][ T3930] bridge_slave_1: left allmulticast mode [ 170.376764][ T3930] bridge_slave_1: left promiscuous mode [ 170.383161][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.394023][ T3930] bridge_slave_0: left allmulticast mode [ 170.400583][ T3930] bridge_slave_0: left promiscuous mode [ 170.406411][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.006215][ T3930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.009073][ T8966] netlink: 'syz.3.881': attribute type 4 has an invalid length. [ 171.054272][ T3930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.076470][ T3930] bond0 (unregistering): Released all slaves [ 171.274188][ T8986] team0: Port device bond0 removed [ 171.322897][ T8986] bridge_slave_0: left allmulticast mode [ 171.341946][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.398675][ T8986] bridge_slave_1: left allmulticast mode [ 171.434944][ T8986] bridge_slave_1: left promiscuous mode [ 171.462354][ T8986] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.584184][ T8986] bond0: (slave bond_slave_0): Releasing backup interface [ 171.613218][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.625164][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.633612][ T8986] bond0: (slave bond_slave_1): Releasing backup interface [ 171.634332][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.650807][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.659105][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.693060][ T8986] team0: Port device team_slave_0 removed [ 171.718576][ T8986] team0: Port device team_slave_1 removed [ 171.725171][ T8986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.737596][ T8986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.746553][ T8986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.757211][ T8986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.783491][ T8751] lo speed is unknown, defaulting to 1000 [ 171.789462][ T8751] syz0: Port: 1 Link ACTIVE [ 171.794479][ T8751] lo speed is unknown, defaulting to 1000 [ 171.799768][ T8756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.807548][ T8978] lo speed is unknown, defaulting to 1000 [ 171.891590][ T8998] vlan0: entered promiscuous mode [ 171.950822][ T8998] team0: Port device vlan0 added [ 172.213236][ T9010] __nla_validate_parse: 5 callbacks suppressed [ 172.213257][ T9010] netlink: 108 bytes leftover after parsing attributes in process `syz.1.887'. [ 172.252811][ T9010] netlink: 108 bytes leftover after parsing attributes in process `syz.1.887'. [ 172.263410][ T9010] netlink: 108 bytes leftover after parsing attributes in process `syz.1.887'. [ 172.353421][ T9010] netlink: 108 bytes leftover after parsing attributes in process `syz.1.887'. [ 172.373799][ T9010] netlink: 108 bytes leftover after parsing attributes in process `syz.1.887'. [ 172.405224][ T9010] netlink: 108 bytes leftover after parsing attributes in process `syz.1.887'. [ 172.493413][ T9002] lo speed is unknown, defaulting to 1000 [ 172.668650][ T9010] netlink: 108 bytes leftover after parsing attributes in process `syz.1.887'. [ 172.682647][ T9010] netlink: 108 bytes leftover after parsing attributes in process `syz.1.887'. [ 172.706589][ T9010] netlink: 108 bytes leftover after parsing attributes in process `syz.1.887'. [ 172.797887][ T8756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.006262][ T9033] vlan0: entered allmulticast mode [ 173.011629][ T9033] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 173.167469][ T9037] netlink: 88 bytes leftover after parsing attributes in process `syz.4.896'. [ 173.765037][ T5168] Bluetooth: hci2: command tx timeout [ 173.976436][ T9050] 8021q: VLANs not supported on ip_vti0 [ 173.986633][ T9050] x_tables: duplicate underflow at hook 1 [ 174.022343][ T3930] hsr_slave_0: left promiscuous mode [ 174.032017][ T3930] hsr_slave_1: left promiscuous mode [ 174.039196][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.046725][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.055841][ T3930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.063767][ T3930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.086774][ T3930] veth1_macvtap: left promiscuous mode [ 174.093291][ T3930] veth0_macvtap: left promiscuous mode [ 174.099730][ T3930] veth1_vlan: left promiscuous mode [ 174.105900][ T3930] veth0_vlan: left promiscuous mode [ 174.623550][ T3930] team0 (unregistering): Port device team_slave_1 removed [ 174.679411][ T3930] team0 (unregistering): Port device team_slave_0 removed [ 175.405784][ T9002] chnl_net:caif_netlink_parms(): no params data found [ 175.494708][ T9085] ªªªªªª†³?ÂHº: renamed from lo [ 175.817509][ T5168] Bluetooth: hci2: command tx timeout [ 175.851875][ T9002] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.869548][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.877040][ T9002] bridge_slave_0: entered allmulticast mode [ 175.893897][ T9002] bridge_slave_0: entered promiscuous mode [ 175.919640][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.947392][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.954699][ T9002] bridge_slave_1: entered allmulticast mode [ 175.975947][ T9002] bridge_slave_1: entered promiscuous mode [ 176.169865][ T9002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.223199][ T9002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.407501][ T9002] team0: Port device team_slave_0 added [ 176.429198][ T9002] team0: Port device team_slave_1 added [ 176.512278][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.525610][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.563942][ T9002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.612612][ T9002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.624351][ T9002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.657612][ T9002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.717189][ T9150] openvswitch: netlink: IPv6 tunnel dst address is zero [ 176.952257][ T9002] hsr_slave_0: entered promiscuous mode [ 176.962924][ T9002] hsr_slave_1: entered promiscuous mode [ 177.408839][ T9187] __nla_validate_parse: 13 callbacks suppressed [ 177.408860][ T9187] netlink: 96 bytes leftover after parsing attributes in process `syz.0.935'. [ 177.850038][ T9202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.941'. [ 177.900289][ T5168] Bluetooth: hci2: command tx timeout [ 177.986108][ T9210] openvswitch: netlink: IPv4 tunnel dst address is zero [ 178.255906][ T9002] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.308325][ T9002] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.343765][ T9231] netlink: 36 bytes leftover after parsing attributes in process `syz.1.950'. [ 178.350482][ T9232] netlink: 'syz.3.951': attribute type 1 has an invalid length. [ 178.355888][ T9002] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.499905][ T9002] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.576586][ T9240] ip6gre1: entered allmulticast mode [ 178.736216][ T9255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.953'. [ 178.834534][ T9255] bridge3: entered allmulticast mode [ 178.921585][ T9259] delete_channel: no stack [ 179.098753][ T9002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.165853][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.957'. [ 179.192259][ T9002] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.380330][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.958'. [ 179.446485][ T9268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.957'. [ 179.463572][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.470848][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.613503][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.620797][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.979298][ T5168] Bluetooth: hci2: command tx timeout [ 179.994084][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.966'. [ 180.014156][ T9297] netlink: 'syz.4.967': attribute type 1 has an invalid length. [ 180.068802][ T9297] team0: Port device team_slave_0 removed [ 180.091492][ T9297] team0: Port device team_slave_1 removed [ 180.115559][ T9297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.139544][ T9297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.155697][ T9297] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 180.164415][ T9297] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 180.181812][ T9297] bridge0: port 1(wlan1) entered disabled state [ 180.203592][ T9297] bond0: (slave bond1): Releasing backup interface [ 180.575120][ T9002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.686662][ T9002] veth0_vlan: entered promiscuous mode [ 180.740030][ T9002] veth1_vlan: entered promiscuous mode [ 180.874732][ T9319] sctp: [Deprecated]: syz.3.974 (pid 9319) Use of int in maxseg socket option. [ 180.874732][ T9319] Use struct sctp_assoc_value instead [ 180.909961][ T9002] veth0_macvtap: entered promiscuous mode [ 180.945218][ T9002] veth1_macvtap: entered promiscuous mode [ 181.013870][ T9002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.035686][ T9002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.062378][ T9002] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.098033][ T9002] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.116945][ T9002] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.141610][ T9002] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.458494][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.483260][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.498051][ T9341] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 181.533118][ T9344] netlink: 'syz.1.983': attribute type 1 has an invalid length. [ 181.539135][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.543095][ T9344] netlink: 220 bytes leftover after parsing attributes in process `syz.1.983'. [ 181.567562][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.681568][ T9351] netlink: 20 bytes leftover after parsing attributes in process `syz.3.986'. [ 181.984187][ T9367] netlink: 'syz.0.991': attribute type 7 has an invalid length. [ 182.236226][ T9377] team1: entered promiscuous mode [ 182.243658][ T9377] team1: entered allmulticast mode [ 182.270781][ T9377] team0: Device vti0 is of different type [ 182.461031][ T1007] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.601389][ T1007] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.686717][ T1007] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.835435][ T1007] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.987453][ T1007] bridge_slave_1: left allmulticast mode [ 182.993160][ T1007] bridge_slave_1: left promiscuous mode [ 182.999774][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.010496][ T1007] bridge_slave_0: left allmulticast mode [ 183.016171][ T1007] bridge_slave_0: left promiscuous mode [ 183.023004][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.425442][ T9396] __nla_validate_parse: 3 callbacks suppressed [ 183.425463][ T9396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.999'. [ 183.437878][ T9402] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1000'. [ 183.477947][ T1007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.502566][ T1007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.523747][ T1007] bond0 (unregistering): Released all slaves [ 183.523914][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.999'. [ 183.628822][ T9406] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 183.666970][ T9406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.111034][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 184.180438][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'. [ 184.224900][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.240757][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.258271][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.271240][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.292236][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.325717][ T9426] netlink: 'syz.0.1008': attribute type 1 has an invalid length. [ 184.374506][ T9427] xt_CT: No such helper "snmp" [ 184.420879][ T9429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.468032][ T9432] bond2 (unregistering): Released all slaves [ 184.533437][ T9438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1008'. [ 184.662295][ T9435] bond2: (slave gretap0): making interface the new active one [ 184.674449][ T9435] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 184.714186][ T9438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.726458][ T9423] lo speed is unknown, defaulting to 1000 [ 184.957878][ T9453] gre2: entered promiscuous mode [ 184.962898][ T9453] gre2: entered allmulticast mode [ 185.207736][ T9436] lo speed is unknown, defaulting to 1000 [ 185.436620][ T9470] netlink: 'syz.1.1018': attribute type 1 has an invalid length. [ 185.564819][ T9470] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.813409][ T1007] hsr_slave_0: left promiscuous mode [ 185.858618][ T1007] hsr_slave_1: left promiscuous mode [ 185.864881][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.907091][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.928100][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.935587][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.961414][ T9494] netlink: 'syz.0.1024': attribute type 10 has an invalid length. [ 185.993726][ T1007] veth1_macvtap: left promiscuous mode [ 186.007881][ T1007] veth0_macvtap: left promiscuous mode [ 186.013797][ T1007] veth1_vlan: left promiscuous mode [ 186.037103][ T1007] veth0_vlan: left promiscuous mode [ 186.387613][ T5168] Bluetooth: hci2: command tx timeout [ 186.572052][ T1007] team0 (unregistering): Port device team_slave_1 removed [ 186.615368][ T1007] team0 (unregistering): Port device team_slave_0 removed [ 187.069131][ T9494] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 187.419458][ T64] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 187.479650][ T64] ------------[ cut here ]------------ [ 187.496397][ T64] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 187.512753][ T9423] chnl_net:caif_netlink_parms(): no params data found SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 187.514850][ T64] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 187.599433][ T64] CPU: 0 UID: 0 PID: 64 Comm: kworker/u8:4 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 187.599462][ T64] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.599474][ T64] Workqueue: events_unbound cfg80211_wiphy_work [ 187.599503][ T64] Call Trace: [ 187.599511][ T64] [ 187.599520][ T64] dump_stack_lvl+0x189/0x250 [ 187.599549][ T64] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.599572][ T64] ? __pfx__printk+0x10/0x10 [ 187.599614][ T64] ubsan_epilogue+0xa/0x40 [ 187.599638][ T64] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 187.599670][ T64] ieee80211_request_ibss_scan+0x600/0x8b0 [ 187.599722][ T64] ieee80211_ibss_work+0xd85/0x1060 [ 187.599747][ T64] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.599779][ T64] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 187.599806][ T64] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 187.599833][ T64] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 187.599868][ T64] ? skb_dequeue+0x10e/0x150 [ 187.599884][ T64] ? ieee80211_iface_work+0xcdb/0xfe0 [ 187.599906][ T64] ? ieee80211_iface_work+0xf39/0xfe0 [ 187.599926][ T64] ? rcu_is_watching+0x15/0xb0 [ 187.599956][ T64] cfg80211_wiphy_work+0x2df/0x460 [ 187.599979][ T64] ? process_scheduled_works+0x9ef/0x17b0 [ 187.600012][ T64] process_scheduled_works+0xade/0x17b0 [ 187.600072][ T64] ? __pfx_process_scheduled_works+0x10/0x10 [ 187.600116][ T64] worker_thread+0x8a0/0xda0 [ 187.600174][ T64] kthread+0x70e/0x8a0 [ 187.600204][ T64] ? __pfx_worker_thread+0x10/0x10 [ 187.600225][ T64] ? __pfx_kthread+0x10/0x10 [ 187.600254][ T64] ? _raw_spin_unlock_irq+0x23/0x50 [ 187.600280][ T64] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.600304][ T64] ? __pfx_kthread+0x10/0x10 [ 187.600332][ T64] ret_from_fork+0x3fc/0x770 [ 187.600357][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 187.600385][ T64] ? __switch_to_asm+0x39/0x70 [ 187.600407][ T64] ? __switch_to_asm+0x33/0x70 [ 187.600429][ T64] ? __pfx_kthread+0x10/0x10 [ 187.600456][ T64] ret_from_fork_asm+0x1a/0x30 [ 187.600501][ T64] [ 187.602778][ T64] ---[ end trace ]--- [ 187.872699][ T64] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 187.879974][ T64] CPU: 1 UID: 0 PID: 64 Comm: kworker/u8:4 Not tainted 6.16.0-rc4-syzkaller-00109-gb9fd9888a565 #0 PREEMPT(full) [ 187.891985][ T64] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.902079][ T64] Workqueue: events_unbound cfg80211_wiphy_work [ 187.908374][ T64] Call Trace: [ 187.911689][ T64] [ 187.914656][ T64] dump_stack_lvl+0x99/0x250 [ 187.919296][ T64] ? __asan_memcpy+0x40/0x70 [ 187.923920][ T64] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.929159][ T64] ? __pfx__printk+0x10/0x10 [ 187.933791][ T64] panic+0x2db/0x790 [ 187.937709][ T64] ? __pfx_panic+0x10/0x10 [ 187.942134][ T64] ? _printk+0xcf/0x120 [ 187.946395][ T64] ? __pfx__printk+0x10/0x10 [ 187.951007][ T64] check_panic_on_warn+0x89/0xb0 [ 187.956002][ T64] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 187.961743][ T64] ieee80211_request_ibss_scan+0x600/0x8b0 [ 187.967575][ T64] ieee80211_ibss_work+0xd85/0x1060 [ 187.972785][ T64] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.978084][ T64] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 187.983993][ T64] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 187.990333][ T64] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 187.995981][ T64] ? skb_dequeue+0x10e/0x150 [ 188.000578][ T64] ? ieee80211_iface_work+0xcdb/0xfe0 [ 188.005959][ T64] ? ieee80211_iface_work+0xf39/0xfe0 [ 188.011340][ T64] ? rcu_is_watching+0x15/0xb0 [ 188.016119][ T64] cfg80211_wiphy_work+0x2df/0x460 [ 188.021241][ T64] ? process_scheduled_works+0x9ef/0x17b0 [ 188.026975][ T64] process_scheduled_works+0xade/0x17b0 [ 188.032565][ T64] ? __pfx_process_scheduled_works+0x10/0x10 [ 188.038670][ T64] worker_thread+0x8a0/0xda0 [ 188.043296][ T64] kthread+0x70e/0x8a0 [ 188.047388][ T64] ? __pfx_worker_thread+0x10/0x10 [ 188.052506][ T64] ? __pfx_kthread+0x10/0x10 [ 188.057196][ T64] ? _raw_spin_unlock_irq+0x23/0x50 [ 188.062407][ T64] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.067617][ T64] ? __pfx_kthread+0x10/0x10 [ 188.072239][ T64] ret_from_fork+0x3fc/0x770 [ 188.076853][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 188.081993][ T64] ? __switch_to_asm+0x39/0x70 [ 188.086766][ T64] ? __switch_to_asm+0x33/0x70 [ 188.091540][ T64] ? __pfx_kthread+0x10/0x10 [ 188.096143][ T64] ret_from_fork_asm+0x1a/0x30 [ 188.100935][ T64] [ 188.104243][ T64] Kernel Offset: disabled [ 188.108671][ T64] Rebooting in 86400 seconds..