last executing test programs: 2.839464205s ago: executing program 1 (id=1331): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0xf5}, 0xa) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@sack={0x1d, 0x2, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES16=r3, @ANYBLOB="21f6cdcf14b8b7f7990f3b0ec9576844"], 0x34}, 0x1, 0x0, 0x0, 0x20008841}, 0x4000000) 2.603084935s ago: executing program 1 (id=1334): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) 2.330565401s ago: executing program 1 (id=1339): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x80, @mcast2, 0xfffffffd}, 0x1c) 2.247183103s ago: executing program 1 (id=1340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) 2.059415646s ago: executing program 1 (id=1343): socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000001c0)="6f1ed3635db1a1a10e09795ee58425093882958e227335fa3b71074418c091cea16091378e1ddbddf74ace6a4312c8aea4432a7f7774db8fc38cda5b6df16b6858734eb5b19aed84d615ffafe7395649c40de0a6f240578ee105a286", 0x5c}, {&(0x7f0000000240)="2401bd58227c4e4399f166edee51f7776a2c0320d0bca508dec28c5f57b4623bfc15b7d92aaf9f064910763a4ea83d63dad9e75d6aafd488bddcfab484bf4cdc240da5a9a654e0496ac56c4b995f0242f798c51094036a20fe5cb52e3ed1d0b74387c85a7e942e39a1935063d2c42d268141e41ae0376898db70537be762fa6fcc", 0x81}, {&(0x7f0000000300)="0503e6e5cabe8924a9a7f7bb67d250a094358b030542739a921c6079e7ebc0cd6fb44761c59878c3a07c526957ca633a2668437d5de88b12f039e50e4e9a74121bd7297cbe7521ca8477a6fca466c4ec431120a80fd6458fd9b733ae66823293b369109cdabae455db39df65b8e873d5e9568594f5b1a0d5c9a60ef6e5d123c7855d456ccb982ea5ddb5a8e521c6f2ace3a4083e90359bda99c2dc704da9474a8b906c5766e20462f0d329a6e13b0e501001446a0cd5acdcae", 0xb9}, {&(0x7f00000003c0)="9dde8f7003b974ab585d6f9f2bf6e5aee3f487918ba1932a94ac3284ba2385c7383037d76b4c7f307dbb3acbe79858ab9103a878e1138fb183170ca6204a79b120aef21390f1fcd00a16d702c10855f265faa7a0d025c8223a2a325c05f5dd94f28600c571b6a9b07f10af9bbf184981c293bb72ca4410fe31e5fc9ea5fa6b34db860eb6e953a2854e7b60ec3817aeb56bf6efe35dbd4914a8448064dc26b742555266e958bc436a75732d701f3b033e7734200866688e572368400db43a793bd4d7bbd6339bf727a2fe2affba4ecb182f6766b1e9f8933fa73c9f73be9d47768782582a3b0180e635db04051dab8b8a1490d4c7c1006b", 0xf7}, {&(0x7f00000004c0)="bc60cfe23f91ff5489c301abeec94022d45bc4e7d109bbabbf36624310038d5e00f6b99c7709afa14caa0dd9e42c1bfb9a20d6b29aeff43b51089310555ef3091a928049d454c049ddd2288019d8c1fa525b4e5eae538a070b5dc3657ab9ac04ca5bc10ee579ff0aa34df4b06e32e7a775ccbb0737d52cb79795c8dbd7a80c353eed6c90d08d098bee3a06f87eb2918149ce63d321ec75c0a0eeee52ec7ef5a1f7484e32877bf79faff4e643a213d23268290bd4e21f15a5f3fb1ee3bf48ade80dbf8c80b5ea29370290bdadca54ef9b2be18906a3d1053811e23f7618550f2e111b389f5c1ab2a47a8189137552b5c90724eb", 0xf3}, {&(0x7f0000000640)="dd4c6f9b3c5ba98fbc7a6addbd505af10c47248731d29d46b7ff489899ae47f87a7229731a873fe47ae1f79d02d3ddb7dade724494a8afdb9cbc03ddab618299cfa24d304e15177562b7d533e2b223e8993c85dc980068bc40f86b0b66a9f0b590ce99edd36dea26ad6ed600d60e554b321a780f163710d2171ba4f551a6bdc86d879b2fef88da03df1a2c30ef40cf7006638f02e2470c556347002686c43b6291b104d04d95aa01ca9e276a19dc84419a68d431e0eb22f694cca3b951a325ec769e3f7f1aae66dd3e058e6e1fe968d5a5166a64b2c8933f595c84cdd8d602787ee5a9ccd4cdabfb3aec3ad1", 0xec}, {&(0x7f0000000000)="7f5713eefb35e1fb67d1701a4933e755c810a287d73fd2271e96362de34aa3a7ef3f4435c7587fc51f02eaeb8a19c18fd1252d508af0c029c0aef8", 0x3b}, {&(0x7f0000000740)="12e91bcf36495c0f12aee1e2a4e0b2ebceeb0d1f41905c3d27e857183c2fc27bf3d80a1b27cc8831cefb4d5067bcf3df6e3c38786d0447dd03fd84affd583beda53bef0a19929b98c1362b4881ca9be7a81711f6f151da52263a9e3018125d92c9b06d6aba31a908d4b4f6fe793a02e38a30c4ab576c221337a5ff5e7ed980705a19fbab6e832d50666d6bfb1cfa75c9c8300f49a6c697965aa5cefb5f2764c7361d24f719ec343088e14e84b4d1497656bf948d3cab33408970a074974af05da9640b036d1fb0c553803d7c83bb9da4fce1", 0xd2}, {&(0x7f0000000840)="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", 0xa48}], 0x9}, 0x400c000) syz_emit_ethernet(0xbe, &(0x7f0000001300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000b000680000008890787f000001640101004e204e24009c90780100000003000000497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42ef7c9d6a98e3943f6892078bb9f8ac57a7fe4dddd2e7c0ce70a4ac7da851525b16af17fe87acbae2ab0b233dd8e4ad6fc1d3b573e94331d0b791a72432e7df745c4cc09054bb78c14ad334c9ab28227490b747d09eacdbbb2fca01fe2a44db8f274969b299fe954c108efcabfaad7cd0138bc4465191d983c352176471ef4b206d81eab604eb54fdd81820436f40a145d42424addc51e1dc82090cf45fd92e6811711d5a2b43f61797e828d5297481224e6525b6f73be2fe898048df6296c5a5a454a61df5e2749fc1f0f475ae89dad85b9280e474afef2eb764a88b93b78a7049ee05078b4f3ce70af5d69aaf553274f343d825ba7793de023d8b8c5cce403cf0229296c3a4cd923670575cb198006c26f36e3c5dce5eba7201406867e2ac4f5af67d484b0c49070a57ea2995d174d478ffcf4ac18c4f70d7a236f58ebb7601f560179bbe3dc42341473466400898bb4e88f5e89ccf380eeb9a9dfef3969d1938d40525e209aceafef89aec69bf13c69bc3031ebd4d"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffff81, 0xb, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', r3, 0x700, 0x1, 0xfffffff2, 0x4, {{0x13, 0x4, 0x2, 0x39, 0x4c, 0x67, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @broadcast, {[@lsrr={0x83, 0x1f, 0x52, [@rand_addr=0x64010102, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010101, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x7, 0x10, "1b700234fab6b8fb43b1c5e04bd2"}, @rr={0x7, 0x7, 0x34, [@empty]}]}}}}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cfe, 0xbd, 0x4, 0x9, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r14, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000500)="27030200000214000e00002fb96dffddcb00000080000082760000f9ffffffffffffff0000008feabc9ba96318a71beb0b7d", 0x32}], 0x1}, 0x5) 1.956748746s ago: executing program 0 (id=1344): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/24, &(0x7f0000000080)=0x18) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x3a8, 0x1c0, 0x310, 0xffffffff, 0x268, 0x268, 0x310, 0x310, 0xffffffff, 0x310, 0x310, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @rand_addr=0x64010100, @remote, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x96, 0x0, 0x1}}, @common=@unspec=@limit={{0x48}, {0xf, 0x101, 0x5, 0x3, 0x400005, 0x1, 0x81}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7d4, 0x4, 0x2939, 0x2}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x8, @multicast2, @multicast2, @gre_key=0x4, @port=0x4e20}}}}, {{@ip={@remote, @local, 0xffffff00, 0x0, 'veth0_to_team\x00', 'batadv0\x00', {}, {0xff}, 0x62, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @empty, @empty, @icmp_id=0x64, @gre_key=0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 1.74485702s ago: executing program 0 (id=1347): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x1) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x800}, 0xc) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f0000000300)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0xef}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x2c}}, 0x0) 1.713279633s ago: executing program 3 (id=1348): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001d00000000000000", 0x1c) (async) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000001380)=0x4) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x50, r3, 0x400, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x50}, 0x2, 0x34005}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000340000000010800024000000000080001400000000f08000440000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}}, 0x0) (async, rerun: 64) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000140)={0x1, 0x0, 0x2, 0x1fe0, 0xffffffc0}) (rerun: 64) 1.596312132s ago: executing program 2 (id=1350): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e000e401"], 0x40}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009001000000000000002000100000000000000000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000001500)={{0x6c, @local, 0x4e24, 0x2, 'fo\x00', 0x10, 0x0, 0x4b}, {@remote, 0x4e20, 0x0, 0x8, 0x1, 0xfffffffd}}, 0x44) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x63) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001580)=ANY=[@ANYRESDEC=r3, @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x30, r7, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x6, 0x1, 0xc4, 0x3198}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r9, 0x8940, &(0x7f000000a640)={0x0, 0x0}) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0xfc}}, 0x28814) socket$kcm(0x10, 0x3, 0x10) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r10, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r10, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) 1.520941634s ago: executing program 0 (id=1351): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000001680)=0x3, 0x2) (async) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000001680)=0x3, 0x2) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x34c, r1, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0xa8, 0x12, 0x0, 0x1, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x88, 0x84, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xfff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x60b}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x10001}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x800}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x10}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x16, 0x1, @random="746c144dc2d986e42f8a278216528658346a"}]}]}, @NL80211_ATTR_MAC={0xa}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x1c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x248, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x21c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x74, 0x6, "e1651dcdddcc69046d157daba9281807481f9e08e01b1101805a980c313913388a962ff60b062dc1969f0fc3c2a4dff9ad7f883c01c030f921f0a01034e5d82470c75311bfa61f4593c153ad6bcf6fbb3dde1c59e771d76d18f6de053efe221eeba3526bef71d1d05a150cd60aa1ed52"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xce, 0x8, {0x4f9, 0x101, "d315a3a3457f5a6e54d988900c515d11a7e3734682275c488bfdc7f612b51d3c5d79047868e2b729d66688c45f828da49af5657869baf7b5d0452cd577a034727b9e6698391e1d03d30bb1347c7f2bbdd010cd6dde196682b40359ab15fde6e7b5c5e15c0acec0f2263c40f8f9e85f4a354ecd31400e49e5acb77f09330887a5505a0cc940d905d09717c4a6b0f7d11343676a68b94c3af8e0d6e38ca9bc5041cf522a75be210cdf51197c6e8c710afa243ef6c4c598d21bf0466889e40eb44674fe"}}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}, @NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0xbd, 0xa, "dcc2b6c23475408620e45382c9bd1cd2ebe825ece82d3a0e616b07f5fa8fddc5b738ebd0a6c09d5bf4b42702e4dbdac9357345157a94443095bf0f829c326af79e474040e2509b22da393c2707edabf85322c9231ab9154deb49142563770d75f009e307731907aa07013befe41068eaad5e49cd982e4991542352ef1200fc9a9ad70b89d15fd48d04a7791cd3425b9baec5ff11997aca50771a5399be734f951d738efd5c9ceb4ce0431f2a5f88b5640e352224bc32fdbc67"}, @NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x10, 0x4, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x80817}, 0x800) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="ed4d00005e020000080003c48a7600", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) 1.42439064s ago: executing program 1 (id=1352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="03009000"}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000121408002bbd7000fbdbdf2508004b001300000008004f0004000000"], 0x20}, 0x1, 0x0, 0x0, 0x4044090}, 0x4c8c4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xffffffffffffff67) ioctl$sock_netdev_private(r4, 0x8924, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000207000000000000001bbf92ed7f8e1ff6559a000000957fda84601cff6718f2be62de29d6cafb6ed4a3f7ee08592800c653f8e831862f889595d2b90c3fa51a77"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x54}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x48, &(0x7f0000019400)=ANY=[]}, @devid}) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="ee48aeacff0f00000000007e062076648c9116816b32070046c0e0392f779a585508dda447e1e08e5dbdcc937debee83b9e962fc57e86298457a75413b1e51d9d1f251f11103760b6f3dc560cdbdc27e391687d7d2de80e81365a07c07f1b852321c92f9e068c5bb07ddefaf6da384360315b7afe202cb878c82", @ANYRES16=r3, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r8, @ANYBLOB="0a000600ffffffffffff00001c003300080100000802110000010802110000010802110000001000"], 0x44}}, 0x0) 1.412662602s ago: executing program 2 (id=1353): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x5f, 0x30, 0x15f68a878522e060]}}, 0x0, 0x35}, 0x20) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="66696c743fc8a629a1d6666572000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000e700"/95], 0x58) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}, @in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c7000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x29, 0x1a, 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETLINK(r4, 0x400454cd, 0x339) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd61"], 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async) r8 = socket$kcm(0x2, 0xa, 0x2) (async) r9 = socket(0x2a, 0x2, 0x0) connect$inet(r9, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) close(0x3) 1.381884589s ago: executing program 3 (id=1354): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @timestamp}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002f80)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x34, 0x4}}], 0x18}}], 0x1, 0x0) 1.159481229s ago: executing program 4 (id=1355): socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_emit_ethernet(0x8f, &(0x7f00000000c0)={@broadcast, @random="01ecae272dcf", @val={@val, {0x8100, 0x0, 0x0, 0xffc}}, {@mpls_uc={0x8847, {[{0x4, 0x0, 0x1}, {0x80}, {}, {0xff825, 0x0, 0x1}, {0xb}, {0x1, 0x0, 0x1}], @llc={@snap={0xab, 0xd483fa9749f0ddab, '~', '\x00', 0x806, "f3a352f6b066c31ddeae893c4a78df180e944c09b5bf459274be67a32157df0e7e4609cec3a464d140d39cb4919539a0a4f902629dd09bd16ff7dffa930710f27d54eb9379a295c710201371eb908b183eea9db5ba520593e6"}}}}}}, 0x0) 1.1590615s ago: executing program 2 (id=1356): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006c000000720a00ff00000000730a9fff00000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000028d18ae38aa6530e00000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @void, @value=r5}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x14d6}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) r7 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r8, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r9, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x1) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r10, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 972.650672ms ago: executing program 3 (id=1357): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0xd, 0x1, 0x8}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f40)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x800) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r8, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000024c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r12, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000002500)={0x28, r10, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000804) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20a4c0c6}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="d53f9ef6", @ANYRES16=r7, @ANYBLOB="000827bd7000fedbdf254900000008000300", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40808}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 945.759822ms ago: executing program 0 (id=1358): syz_emit_ethernet(0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa99879e18d2ff8906434b5682f8682ed45b171376ad6a4e38b7aea7854bdfacbcb6245fd5539d8ffe6a8f98cecd73"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0xe59bca127d81b0fa, 0xa36c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40480c4}, 0x4044000) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffb2) r5 = socket(0x10, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtfilter={0x3c, 0x28, 0xd27, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff3}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x1}]}}]}, 0x3c}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000000)={{{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x4e24, 0x7, 0xa, 0x20, 0xa0, 0xff, r8, 0xee00}, {0x8000, 0x2, 0x5, 0xc8, 0x2, 0x4, 0x6, 0x1}, {0x9, 0x800, 0x35ee6583, 0x4}, 0x2, 0x6e6bb2, 0x2e03cd839909bd58, 0x0, 0x3, 0x3}, {{@in=@multicast2, 0x4d6, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3505, 0x0, 0x0, 0x5c, 0xff, 0x300, 0x81}}, 0xe8) 872.677252ms ago: executing program 4 (id=1359): r0 = socket$caif_stream(0x25, 0x1, 0x2) connect$caif(r0, &(0x7f00000003c0)=@rfm={0x25, 0x3, "974a7386d371a23ef74ea97b8a3ae5d9"}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local}) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0x1, &(0x7f00000001c0)="010000009700060000071a80010061cc", 0x10) (async) close(r3) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 825.410031ms ago: executing program 2 (id=1360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004805}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a0b040000000000000000020000005c000480580001800a0001006d617463680000004800028008000240000000001c0003004cb43801b2486e8f58c2052fade1bc2c62cdeb7521cf85f60e0001007374617469737469630000000e000100636f6e6e62797465730000000900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) 678.124466ms ago: executing program 4 (id=1361): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001b40)=[{{&(0x7f0000000440)={0xa, 0x4e25, 0x5, @mcast1, 0xbaaf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="06e91e75ae3ed47c69f48763cf70fe1f5db1117cbe8747faf03c6aab651ef3214b026e34a74a10c4ce61a8db6e6ec4fec8c44fc1cba1aefe2c4010d8510924e902ef6e", 0x43}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0x6df53d5b, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x9}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="35364770f20eb94e06ecfa2fd82cac582ba64bb66cfd890f43ba61aee57124cae422c45a1fe6d2e208d155c26e052f7883ec8f465a8d180876668d35ef91affac0576b900ac88253172110f490fdb350aa06ec595c915e185c0e7802928c2d9f92e85108fa756e3da6d2e4f1", 0x6c}, {&(0x7f0000000180)="3f27b3775271bbc49c994cb957fa46c4b271ebdceb9e4283f19ec1f4d9777b562c7c0440346d42efff4099b8d5dd16c2a701eac33fffc76063c1782c2e2b36c749f89532e82d40a1c9e2c81a1aa6dbb9a579fc5156ba341364be4520002a6c6ecdaea21fbf638cfd7529dd929f6a8ed6de7dd95212afe07d7e7d05ba3c80b2535bb95853a2efcd0f62a9b18b1d4690aee46a654fd7fc50f10ae8a68a6a05810eb4677e574a86fc17bcde62d44fa9fedf30bc1ee1452b57ff28e40a84c63f41d1c739530a853e6b50b547b544dd16214f973f76160ad4831d67ded1", 0xdb}, {&(0x7f0000000280)="0f54d6ff92a35f049199214827444fd9a8dad12092f2df828142021192102482a9fb0b9b7d177b178b53f11a4c73811827baf94ec4a770d243c00bc427805ce03469dd46", 0x44}, {&(0x7f0000000480)="81be24db4b31d624b6f9428aa4fa19e3aeaac463fb64a3a389ef9c9307f57df16d131a841dfb96885ef8f0aa3f8202882d05dce97027ef3909d3f6064f8d023a752fe251383aae14888d3bdeccce00d0d0df4a85bc23cdce0916f4f5d19e255481e388c78e41d41ce55c20c11fb72018f2b199b010a8decc2e1fe1b70954683f46967891d1dc494a4937c6a584de4171be7a6fa0eb3d827b546fe6828f452137aee55408eb37ecc51f57bafd5b3b533b6b85640942aeb8c8ae7b9ef7f01333408ea3a60fb8c3de5bc3067b8a0d4702966dbddf9f0d42571c7c850006776b495edd", 0xe1}, {&(0x7f0000000640)="bd7341f695a673df2d5fd73761e96d5bc3700fe28748a03ee6de0a02fdea4c3672515c6fee902e2934b11836aa04123bfc5b2566226a4aed91905475740dc321717467352fb68e2e7c58fe7867dc50c15701ecb1263937175db6d47443f1a27636297ee980cd8668f12b79a17df82180132d14268fdebab7e30c026d13c0df8a1e75f9abe5", 0x85}], 0x5}}, {{&(0x7f0000000340)={0xa, 0x4e22, 0x2, @private0, 0x7fe0}, 0x1c, &(0x7f0000000700), 0x0, &(0x7f0000000740)=[@hopopts={{0x1f8, 0x29, 0x36, {0x2, 0x3b, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xb}}, @ra={0x5, 0x2, 0x600}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x7, 0xa6, "736d7773b27356aede42097ae70ebbcdccff595d60095d40eb30907fae8eb5432de3ddd2bbe30864918892857abe02e192001b5bb6bd2558b174b6dc34749042398137676ead3237e416a2b29fb511084d2503d6dfdfb4fce9df851b512a070f70a17e43662ebbd8111cc744255b6240abfe0efd3b6a7f8470d6f7b60fd4b48298e9df2ac129ab93d41603bbcd6a0dca8304d9e03386db0527a7b703fd679db6865f1ee9abcc"}, @generic={0x4, 0xd3, "6cb2e951cb20d2695fb2fcefb018d824dbefc218839a815fc4ec5d874b3736666445d743cdf84356e59b59dacd54347ceaa36863cc589fed13e9b695205256ac327185066501f296d14348746f834742acbc4c4ce603ff201f028136d9b4a0f3f213e2c259ca9834d12b76c6d0f3a22bf8b7999afa1e3b146a5dc57f31c609107f6bfe8d771aa4783fc24ad55003022565fb855de67001dd460246905f590ae420ac7d0759d8f265c9e886734f9c07bbe163cad1fca1a2cdcff2e83d77832c2a0aede66b34a8facd7475be6e7fdaa7e3329db9"}, @calipso={0x7, 0x30, {0x3, 0xa, 0x6, 0x1, [0x400, 0xdea, 0x80000001, 0x2, 0x6]}}, @jumbo={0xc2, 0x4, 0x17}]}}}, @hopopts_2292={{0x1050, 0x29, 0x36, {0x2, 0x206, '\x00', [@enc_lim={0x4, 0x1, 0x6a}, @generic={0x81, 0x1000, "63bddbf9964f56f7473928afdb1debd5ee2788f8bd6531886a072f5bb49c70cd1ebff6aab3132252e49adf07df3f6257131973d7bf5f85ab9643bcaa79dd46b5883062d26022b6f731b2c1f500b5e0a552bbfbe934ad82e2150670b18b24ccc41f646d1fa4227a1e42e1e396c7c509e8f38cc03fe7704872442f1f19c0e360eed20cf39ba4e3d8726812be6539275917a88bbddcf2c620ea7fcc8a65bb77c7c87dca831576af2fc92a5902ab2a0fde18cef631bbe04d1bc9480764ddd6d8064701045565e61430ba78823acc290b873c992b16fccc0f8276b095fd003d276d9a6de89f2628992843b0e02c59d3164ec68d40e32e4280299ba4b8567bceb78f251afc24cd3f1173d65f7071d43f7e60dd691acdb0ad18e73fd772fb525b6ff101d9aaf5f30588e836624a3ab537bac4178522bd5e4869998170cd45abf8fc4c5cb8b5ede089a8b151cb69ac1b5c76cdf7ce60543dc2223a3991b31285e15e3c2cdd88225f2e0bf050da595d564ce4fe991854e158c20c864777e1cff6807d5b2a3a4a38f3b16c76ad7436c6f05d0857d0711a4fa057f12fbf756733de68ba5d33cb487eafefd58979b418015c91323e97bc20f57bcd104929e8656d6c09f08f0fdfd707b026dedb92e4ed7fa39f20ad564b032abb616b72172b7a5f81ce6f9ce696a41037a84917db4fa3fbc6e9c39abd3674a4808af26a25e553adfb4cbb53c549ba6aee1b28eb5e439e86caf18d260e00c2df576bf86f9b5b6e7424ab0861aebff1569bf9a39116cf2a7debdcdf3927004ac186ce2335f282db69541a1dc2e9a9895c2e17428e0e71bee0252a014f045b2a92bea861f824873529a70b63e831b5aa5aeb8d181a8273ba62eda3cc332b546581e0c560935a5809b411f2bdb21d590fff946ce45e6be156e9ae36e2d56f43ae22f75337170cf131e040cea3bedf00d4edafc20de86071365d3393485fafeec632b25c72b79f7f25c98c805df75efc2a3f999e472f8c0bcbfc353113d8829b9f16ee216f511fc203063f87000f80633e9fce9e3adeda29e9df99a828864471548003fdc83497a8d909b63eb08c1888b98a1b30b9bc957fe7fed80b2ad421bc7b764a3c37f13465a77c5da3f7d427125627c66b9bb3e71d963b9e303244fbdad6ed23ab7b1a42accc2aba124979a710a071ea20f766e6d3af353d6a68e450298cb79fae40dd33c6c839aeddb9276a007ff8d1cf1c385895f90a68266c40524b825a08047558f1f56f0dbe5d94cd0cd54a588768ae96f5a592bfecccb6d4373f166d47fd0666cf382702e2ab823f8e24318eaca00488e3759e4d3db79c9a8c405512afd2fd477a1384bc3f91cf753d38112661bd4dc392f8dc7b16717ff710b2dd8201a6258ea66edbc27cb38d3d13cdd493c85a981dc65589f46448dfd0819bb2dff6bfcdf953425cc74853065b528cf00370d88642e9afaa369ae97d4848397d35572b7ae3a4fbec5308c89a3ab3f8c42b9d2917cad621e44b1c7e504e202b3d118932deb2de627d170a0dcc19db9fea0d966dc25769e5a793147dad07af1bb520fbdd8b1c4b3980aa81f9be2d2e0a947ad3c7999e20d14d932b3c03c8282ce0d663ca3eb793c60a1db570881b0043a21e53ab958b271c725ae99e97bcce5797d027aa9ea019d10fe7da0a8ea07dc09c4485898c14d78d184c2ce3fa879bb8b6ef370d98290f189f4658a09fcd4f379a409fc8ed80ba3476715f0cc5fac9a2baf1ebc151a81b9badee6ed3239c5120b172eee6059070fd588af85f89fc80c2f0cbe6ff72a40ff736c9c30807bed1558962a204a82e6b8aa0905b91b3b64a19bea360e39025c10e7936b7f8e0dc45727917d49e5b06ef6ff722851ba11dd6530fb24d0c7b368cd92824d21c8dd1b25fca0bafc310b8dcc84217bf3294118b2f20ed0b5fa15a0043ee5ed2c509c68f69a5d051b599209b333859b6accde0eaa981deb60ab9cd03c84eaa3623112bdb7e54a742ff7e26d52902a84ee8b584f5d731c5c9cfc6d837f4462c6d33173ecd6ec981f11e118474c8064c5242eedec90a783bf3c566c0dba0c7c729e60b65881bb188be5346f1bf0823076dc5e1f219d291a2441420df752a4235cff4dad2d014fb415a9957474dae5b99ba25a85adb688ef970f54cd4c997ff3a357b9f1720b2509c6cea87551aad4573805fa294ff266838359f4c2241ef47df222a06f0ef5b3f1f60aea7221e9e898fa836eff08e22f57abdfa2d0175ca3174d51259b5ebaae6d70de52a428c15ce8c6cb1ed0e6d653ec1cb7dbd64fb39908a6ac68ee79d7b3391c592a18a09aa7a8947500d52ff0d9ffcfccb993d1b8887412150e681d9aed41e08ced48fefe8136a2887713157188fddd920b25c8953400cb61a019023dfe5c8328c2630bedf885baa1a3bc75a828fc55e7c3a5dbdf573884610701ce95d854b038c6487912833f2032dae339169f21552fd0bd9b7c926d878f5e0e235bcf0e54edaa047fbe7842cd366b1a92a67e523ebf83a70195c9535a349c5251b78ad1382fc092462e2e42c1e2f033ad0d7a188aa0513976eb9f39d13202df2cb99660700221f0657b861a7ebe825d093a94d2ae1b256c2becc8df763ccd240114095e461c38b9efecd5429d45f0fda77db76ccd7808a393ac2df91947370be63f6c7e1c674ab28ef9bc9eb1b1d7dd9005c1e947455b8639983e13181282c52c57825749b57d189ad13aa0c5cc26dbcd4e861222b84046169170ce687b559249021233fa1e9d98e25cb6a003f4b2b8cc044cdf027d4e62674ad3d5a20b4e0ca31ff53e07bf79cd690f54e293413f05ac66b3c3b56bd5a684fe0d36a15145889b1e5103415d024e103ba7274c12d79d5b96782bab415b2d83c4214f15feba47f17f3e8d641fc7cae3820a9e77892288e3093b3a0d8e9bce5c429a90e1229958b55815f60dcf0f6d2a091c16062f41246c55c3cab1c210195309aed309cc6baf5e48feaa7c438f9a4711966471c0b27aea89f3905d9ad975435fe0789a573762f8cc877e2b75fd5a5e77f3560f137086fe4cb2efd801297ed18367bec16220e6c343f7c7f421b77d602221289687119ba75baf3e36ec8594653de88801fb6775967bbc06e0755c6907738a4799774c3c689cee3efbd5f4dd5c8b556d4c7cd32c908f3d59283c95ff0d1ef3685ab2e07dfd8d0fc4fab1535b85f17366f791b95c9089b8944092b4c4950624afbf18746b0a141c3e955c72dad3444c6298fc2be9db59f2fb446db4670b7c49dbf0c9ab2fe01a7b947537c5939a3aba8eff8e8af11ebb5dfb72c3d704e0ef71cad3bc05d26f44797b15ee7caae9cc76a395643d64803b6428b85bc69fd7cb5c6c0964e6fe45dc9b2d69ffea91301064f0a91e131422655b2bb02e3d1f9361a2a25b9a8ae46072e5021e7cbf7445fda1c48811e2ad3094bd32f1fa019efa579de67d43bf2a116816a5d3299de35a38f1a76553bb22afb0a9f54a6f9665713a8085de02e90ee34dd8898ee918f005356ca38ed083327bc51afa96468873d7191a071f244a7322627884ae83b2cf874b220b8add780cc58fd4497a77d9ee2cb0a249332e7d86ab269bdb5c80e8db6615d49d1b14aacd6d1c58065d32e5652789e450674bb4f7ee1828f56892d01ba1ef41fbd74ec65e3fe5588343ef053ea2ff1d5dd03e842757d28f0357487a5c02ee16132c2944a0e0c047cac8282c8ce680f3c2b67d01890af8570f6a03795a53f91a726ac3bcd86d846a0f4d31bade233aaeec79cb97061d6daf68ba5bfc99623e0283c4f4e3304c8668e2c12de9e97d5203b7f3d9365ef2f46f6f05021364a8992aa7a2d8e31d73101292e962c3d4f4f09d737817dea5bc9341078023d4e9c561b32aed1565e1cb6abc040f7c436767f88b7bb70f57718f3eb4e30bcfb559f73ed7db69301b1db72a3a7ca6660122f1b863c892ac692f6864be1b26000c4f1c1548b4349aa403f2573d8c40a8f9f04ee05d6e045741035a5b5b53dc420041e08ce730cd4a7855872b715131fe81ed3a9547acaeb7bcc3eb4fba4334974a8b20166614ef998b24b10066cfa61c1d1f62379dd53b90844eb4fd0eed173b02ffd122f38cbee256dce2fde39b6d1e7a84c69dc51b3c15e3acf2e928df3702d55518edb9ae6af4ccb5c16b59122c8160ed88d3f8e64fdac75284b5f18ed14dc8c3a5f405a92c214dc68a571d17badb91eb200505341c89c738ea0e4d7c82d3f3f3e569f136818b3bf11b07bf0125cd43785b78041eb567f9d654a07cda80bee0895509cd138da9ac88163c71b6ed1d5eafb19525452f286a3c75ddc00d9644596b5be35fd92c4dcf08d0126a087acc758d89acab16b72d998751dae0bc755998ff25bb93ec4e8799ccd87555f19a64c5e75b0a84066517bdaab80fa02fd4e4ce09285ca0d27a26c47243cf8924cb1e75674bc25f99336d10264b5cdbb3509ee7732536c4a8e9d66df16b1d035c100ca02a89c5835ad873da44f50bf35c3e4d3a1c6418999c5a026423924b6c6cce3c317854263b99ecff2c1488407eb05aa6dd63dbaef7250f947bb822dc80b9a6fddaaf44a9b6cc162dba58bed156872b3425f5e44a776ff7c96234cd541d8aae4da2272e94466b021891495eba60695d2256a5b65dfbd903a8a8366cbd933df86a986deb68c1c0fcc3f8af8c75ab76c900720748dc3cd81e1235dd4c8860a9705a194e6bf956c7f0fae37bac2119ea3c5fa64aef3cc7882c2d1f64f20deee028b8c0f0f7b1274afba609190b9d5861b14fcecd2622e5fd46702574c4e27c5685e617cfb19c25437ed3563ce701dabf34c75d918c84769433d771128d78e92c6c5a9f266382a4d9003ae9b84cb660efae204e90a76106409550c96170765d255ab02a64b1bbb5385406c64f634c9ea10408b7519eba4b2b237813ed24ef1024cc67b64fab697422c593d320b521c997f4a9edabd2383675ae7d0a9d46a27cc3a595c8ec93a955b375eb76551de623448d8392bb04e842b16fcece52b4a7dc9cfabe0fdf89bf444ba3db0b2cfc6e4c747bc12e4e51e101fdf24a8a72f6a99d66426afba20c4e104961e54b2feb8a04f38d745e0eb85d2fe8532cebfe835b224fa77fd7f1b2f34b8cf0260364157ee86f9f1942260ac4d4a4e4982e2f557d44457f1fff70524b780525a0ac9b5284f0129aef4163a3116541813dec364f411a558bba54d74e27ab2dc1dd6ec2ed6e355e760559c4e1f76ef3509a07c23d92a7fb546407a99b3b776b6842fb81611096321a28b942c1629e2f6f28891a1eec7159cf89700323fe438e8843ae6f39f0a270b3b3eadb7660026e0923854e4dc88dd9a4a4d4676155831ee988c20fa949feab10dfb23d052d45bfb5ea0f08a08a52e170cefbe6e130722fa09bd346a323683733d821db7e70d453d01f833e098d17f362567072f808bd282bac9349545d20b8aa7850dffc83be1812c41a1873f904b3312f9b7c930ec821f0e4764ab8f3c48f620e158e5fbecc5f35985c6021b8acd0da37872d8edc85c178ed47ba94f0f40d45f117485c9f1396175b8df923c33e707cb42dad6d09d9563c74b98857693b46a52205440405bfc75ad14260c0dc4e6e1746f6517609425a9969a3035f85f4694b13212ddc8138bdeb8db7c063dd772c1821e87aeee6a61d02c555702be9aba6211d1afc979a828765f9562be8132d0ecb52da4e5e2b3912a8f2dbd204aea82c09f3358bd867a6286fb2ea3276067f496b3b3463f8ba65a9c67c3962553f3b56ea38209a913c5ba597c4790835b"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0x7, [0x4, 0x8]}}, @ra, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0xffffffff}, @ra={0x5, 0x2, 0x200}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x73, 0x10, 0x0, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @local, @remote, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x8, 0x2, '\x00', [@ra={0x5, 0x2, 0x59}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0xe}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x4, 0xb, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x0, 0x5, [0x9, 0x2, 0x800, 0xf29e, 0x96, 0x7f]}}, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x5}, @jumbo, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0x1ea0000}, @enc_lim={0x4, 0x1, 0x7}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x5e, 0x1, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x4}, @pad1, @jumbo={0xc2, 0x4, 0x80}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x13e0}}], 0x3, 0x20008041) shutdown(r0, 0x1) setsockopt(r0, 0x3, 0x80, &(0x7f0000000000)="1ef3050000f6bd5b", 0xfffffffffffffebf) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000001c00)={0x74, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_MARK={0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x1) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={0x0, @in={{0x2, 0x6e20, @local}}}, 0x84) 583.560711ms ago: executing program 2 (id=1362): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061106d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000800)={0x204, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1f0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "c13dcd82ee9abf419ded7d260dcf851d791d16fc5059f84c79d11175f8"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "be2ac52baa7b1f9753c40b80e38712cedffc61f9bb5f1acba104e5fe2dcc4601b09d"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "610d499566156747e593b45d559c7cdee228b848f35c4ca05896bd14295840caa4a4a517"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "0b26b0aa5df5f522be30e81672f4e8051b5597f6ce2b8a89"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "47ba77f86b9133a93d9da97d05a02b1bd188b57a"}}, @TIPC_NLA_NODE_ID={0x72, 0x3, "eff07c50c1ae982682cb44fbb29b5079c58a98263f059cbc82d9c2f477ef07664001c4d70c3fdfabc484606879726ba3abbc8ee04cf44bdf4af0ee3fb3e0ae0ceda4e68f5261c2bf2d6c91a0063a45cb63e2ab472dafca01fa125e53130a6e994fa4b476ac3ec90277da95fff311"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x804) (async) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf251b000000080001007063690011000200303030303a30303a31302e300000000008000b0001000000080001007063690011000200303030303a30303a31302e300000000008000b00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00010100000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000800000"], 0xac}, 0x1, 0x0, 0x0, 0x8005}, 0x0) 570.013191ms ago: executing program 3 (id=1363): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x2a, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x103}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4e0}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x500}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x400}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x84c}, 0x200088c1) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="05000000010097", 0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r7, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$inet(0xa, 0x801, 0x84) listen(r9, 0x8) r10 = accept4(r9, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000680)={0x0, 0x9}, 0x8) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000004c0)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0x46, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3]}}) 483.884859ms ago: executing program 0 (id=1364): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x4e23, 0x2, 'ovf\x00', 0x1, 0x7, 0x4f}, 0x2c) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3b, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) sendmsg$sock(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x46}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x6f92}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x78}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000300)={0x1f, 0x3, 0x3}, 0x6) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-ce\x00'}, 0x67) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}}, 0x4008014) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x4, 0xf, 0xe1b2, 0xfffffffd}}, 0x44) 482.327926ms ago: executing program 4 (id=1365): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}, 0x7}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000008c0)="1892", 0x2}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @empty, 0x4000005}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) 393.663621ms ago: executing program 2 (id=1366): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xffff}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r9, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0xe8, r8, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x8c, 0xac, "c97ac6882ca3fc9fb8c57632de809541b152cd77c21aa4db1a5a00b63930a88ad1db7acb3d0e5dced180d3e5aaf77d4924d587d59ea36f76996044293ae3d236430e95662c4a6ef703d06c8f17e48e022450aa3bc8695a58712d4b07e4d863271bded65f6efb32712238ec09ac8368cc2c7908b7fa922c8e616802e0f6d49ee41d469fe9e397609a"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x20, 0x13, [{}, {0x18, 0x1}, {0x5}, {0x18, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x3}, {0x36}, {0x12}, {0x5b}, {0x30}, {0x9}, {0x3}, {0x56, 0x1}, {0x5}, {0x16}, {0x9, 0x1}, {0x6c}, {0x1b, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x6}, {0x1}, {0x3, 0x1}, {0x2}, {0x60, 0x1}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xd, 0x13, [{0x30, 0x1}, {0x6c, 0x1}, {0x24, 0x1}, {0xb, 0x1}, {0x22529ad388ab8998}, {0x9, 0x1}, {0x1b, 0x1}, {0x30, 0x1}, {0x6, 0x1}]}]}, 0xe8}}, 0x0) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 268.065573ms ago: executing program 4 (id=1367): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000620188000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) 186.746238ms ago: executing program 3 (id=1368): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x6, 0x0}, 0x8) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, r1, 0x0, 0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, r0, r1}, 0x94) 146.56206ms ago: executing program 0 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000380)=ANY=[@ANYRES32=r2]) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0x401, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x4, 0xc824, 0x4, 0xe3, 0x6, 0x0, 0xe, 0x7, 0xe, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x7ff, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0x2, 0x8, 0xfffffffa, 0xfffffff7, 0x1, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x4, 0x3, 0x7ff, 0x5, 0xfffffffc, 0x3, 0x2, 0x6, 0xa5, 0xfffff000, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x80, 0x3, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x1, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x2, 0x7, 0x200, 0x2, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x2e, 0xc, 0x7, 0x0, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0xfffffff9, 0x6, 0x8, 0x990, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x7ff, 0x8000, 0x5, 0x1, 0x10000, 0xd41b, 0x128b5072, 0xf, 0x4, 0xf918, 0x7f, 0x3, 0x8, 0x2, 0x0, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x1, 0x9, 0x6, 0x1, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0x0, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x0, 0xb78b, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x9, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x7, 0x3, 0x81, 0x58783dd6, 0xed2, 0x5, 0x5, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r6, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b00500"], 0x5b0}, 0x20008001) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000180), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000050601011000000000400000010000080500010007000000"], 0x1c}}, 0x8084) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x1ff}, &(0x7f0000000240)=0x8) 67.973833ms ago: executing program 4 (id=1370): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20, 0x32}, {0xcdef, 0x2, 0x3fffffffffffffd}, {}, 0x1, 0x6e6bbc, 0x2}, {{@in=@local, 0x4d5, 0x3c}, 0x0, @in6=@remote, 0x2, 0x2, 0x0, 0x3, 0x0, 0x0, 0x800}}, 0xe8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) connect$tipc(r0, &(0x7f0000000000), 0x10) (async) connect$tipc(r0, &(0x7f0000000000), 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c000500ff0f00000008000014000a0004000000000000000400000000000000100006"], 0x108}}, 0x24040800) 0s ago: executing program 3 (id=1371): accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c011}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x80000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe45}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r4) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, 0x0, 0x0) socket(0x3, 0x800, 0xa7c) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, r5, 0x1}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x87, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4, '\x00', 0x0, @fallback=0x7}, 0x94) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000600)) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r4) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000129bd70007f000000010000000800080002000000060006000400000008000500e000000108000100", @ANYRES32=0x0, @ANYBLOB="05000d002300000008000400000000000800080003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2c844}, 0x24058804) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000400"/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r9}, 0x38) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x28}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000011401002bbd7000ffdbdf25080001000000000076bfbd434ef5630e47bb05b2057ff5d189d32cb461b62ce5941df96cd7ea9989f715798156125182bc"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000840)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$rds(r10, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0xf000}}], 0x48}, 0x0) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r11, &(0x7f0000000280)="f51a961b8c3e7fc77cc9c00dcae1edd6a12762071574127a711106c1039e8b3f63a65d977e9667210efa53b5feff047d3af28e1cf67a1c54442c23874c10a48da7b18c0595b58f7a2cf435aac0c1464156c206bbbec2f46604323b43da3e83ded333edcc42556a1b3c6a80c5553e3d4c69bb194e0650d11a3368354eebba5db7e4d477b9307e21145c14c14782056a47ed0fc90a9d75af03b3d37c4333d515a7294563ff183b89262a59f3102ecd4334e2e836a997947ee4a772be302916e7ce208a5cb3660269cba0739e8e0efddfdda4126b4049816d33166ebf41ad24d98162da3a", 0xe3, 0x20040884, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. [ 89.437063][ T5819] cgroup: Unknown subsys name 'net' [ 89.628181][ T5819] cgroup: Unknown subsys name 'cpuset' [ 89.638273][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.385123][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.740084][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.760160][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.769785][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.778997][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.788366][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.797479][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.807117][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.815592][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.824478][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.832372][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.834310][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.847218][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.855068][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.864095][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.866427][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.877324][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.886628][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.894106][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.901312][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.913433][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.916678][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.932463][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.941395][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.952342][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.967634][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.570004][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 94.734840][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 94.774260][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 94.917588][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 94.951317][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.958776][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.967152][ T5834] bridge_slave_0: entered allmulticast mode [ 94.974768][ T5834] bridge_slave_0: entered promiscuous mode [ 95.003781][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 95.024060][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.031365][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.038797][ T5834] bridge_slave_1: entered allmulticast mode [ 95.047040][ T5834] bridge_slave_1: entered promiscuous mode [ 95.197887][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.205642][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.212870][ T5835] bridge_slave_0: entered allmulticast mode [ 95.220674][ T5835] bridge_slave_0: entered promiscuous mode [ 95.233225][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.275826][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.283462][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.290809][ T5835] bridge_slave_1: entered allmulticast mode [ 95.298350][ T5835] bridge_slave_1: entered promiscuous mode [ 95.308242][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.324623][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.331919][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.339735][ T5833] bridge_slave_0: entered allmulticast mode [ 95.348135][ T5833] bridge_slave_0: entered promiscuous mode [ 95.412305][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.419627][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.428206][ T5833] bridge_slave_1: entered allmulticast mode [ 95.435683][ T5833] bridge_slave_1: entered promiscuous mode [ 95.502489][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.509986][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.517433][ T5839] bridge_slave_0: entered allmulticast mode [ 95.524838][ T5839] bridge_slave_0: entered promiscuous mode [ 95.535686][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.547254][ T5834] team0: Port device team_slave_0 added [ 95.553371][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.560530][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.568605][ T5832] bridge_slave_0: entered allmulticast mode [ 95.576258][ T5832] bridge_slave_0: entered promiscuous mode [ 95.597616][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.605148][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.612420][ T5839] bridge_slave_1: entered allmulticast mode [ 95.620508][ T5839] bridge_slave_1: entered promiscuous mode [ 95.630986][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.643007][ T5834] team0: Port device team_slave_1 added [ 95.648974][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.656777][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.664597][ T5832] bridge_slave_1: entered allmulticast mode [ 95.672864][ T5832] bridge_slave_1: entered promiscuous mode [ 95.694351][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.753559][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.799379][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.822455][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.834976][ T5835] team0: Port device team_slave_0 added [ 95.844305][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.855042][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.862136][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.890420][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.906748][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.932685][ T5835] team0: Port device team_slave_1 added [ 95.951961][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.959071][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.985352][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.986738][ T52] Bluetooth: hci1: command tx timeout [ 95.996979][ T5837] Bluetooth: hci0: command tx timeout [ 96.004403][ T5844] Bluetooth: hci4: command tx timeout [ 96.013717][ T5842] Bluetooth: hci2: command tx timeout [ 96.019526][ T5154] Bluetooth: hci3: command tx timeout [ 96.035256][ T5833] team0: Port device team_slave_0 added [ 96.089938][ T5833] team0: Port device team_slave_1 added [ 96.109031][ T5839] team0: Port device team_slave_0 added [ 96.118770][ T5832] team0: Port device team_slave_0 added [ 96.136898][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.144126][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.171000][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.185581][ T5839] team0: Port device team_slave_1 added [ 96.194477][ T5832] team0: Port device team_slave_1 added [ 96.213887][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.220906][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.248201][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.298491][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.305874][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.332299][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.391190][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.398521][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.425304][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.438103][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.445450][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.471931][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.491303][ T5834] hsr_slave_0: entered promiscuous mode [ 96.498702][ T5834] hsr_slave_1: entered promiscuous mode [ 96.507202][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.514748][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.541329][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.561823][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.569117][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.595957][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.609173][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.616575][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.643725][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.718247][ T5835] hsr_slave_0: entered promiscuous mode [ 96.725297][ T5835] hsr_slave_1: entered promiscuous mode [ 96.732029][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 96.738302][ T5835] Cannot create hsr debugfs directory [ 96.874177][ T5833] hsr_slave_0: entered promiscuous mode [ 96.880786][ T5833] hsr_slave_1: entered promiscuous mode [ 96.887774][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 96.893614][ T5833] Cannot create hsr debugfs directory [ 96.905801][ T5839] hsr_slave_0: entered promiscuous mode [ 96.912355][ T5839] hsr_slave_1: entered promiscuous mode [ 96.919252][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 96.925395][ T5839] Cannot create hsr debugfs directory [ 96.996697][ T5832] hsr_slave_0: entered promiscuous mode [ 97.004764][ T5832] hsr_slave_1: entered promiscuous mode [ 97.011167][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 97.017021][ T5832] Cannot create hsr debugfs directory [ 97.628541][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.645339][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.657313][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.675475][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.766592][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.780037][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.796581][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.812044][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.829432][ T106] cfg80211: failed to load regulatory.db [ 97.957102][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.980252][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.998702][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.032127][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.063532][ T52] Bluetooth: hci1: command tx timeout [ 98.063697][ T5837] Bluetooth: hci0: command tx timeout [ 98.069264][ T5154] Bluetooth: hci3: command tx timeout [ 98.075843][ T5844] Bluetooth: hci4: command tx timeout [ 98.086021][ T5842] Bluetooth: hci2: command tx timeout [ 98.160000][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.169699][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.186568][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.214092][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.242450][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.298462][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.332535][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.361007][ T3664] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.368575][ T3664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.395295][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.420712][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.429124][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.444188][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.475141][ T3664] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.482830][ T3664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.560326][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.610686][ T3746] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.617988][ T3746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.657176][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.664376][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.692061][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.794476][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.827090][ T3664] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.834328][ T3664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.882204][ T3664] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.889429][ T3664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.906709][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.989994][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.032684][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.087144][ T3664] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.094352][ T3664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.124679][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.139907][ T3664] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.147521][ T3664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.180208][ T3664] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.187507][ T3664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.242436][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.249712][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.307247][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.385683][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.484065][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.544777][ T5834] veth0_vlan: entered promiscuous mode [ 99.587897][ T5834] veth1_vlan: entered promiscuous mode [ 99.685398][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.729014][ T5835] veth0_vlan: entered promiscuous mode [ 99.782117][ T5835] veth1_vlan: entered promiscuous mode [ 99.859745][ T5834] veth0_macvtap: entered promiscuous mode [ 99.897952][ T5834] veth1_macvtap: entered promiscuous mode [ 99.969775][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.981826][ T5835] veth0_macvtap: entered promiscuous mode [ 100.014630][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.027585][ T5835] veth1_macvtap: entered promiscuous mode [ 100.040419][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.053846][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.104962][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.137620][ T135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.146841][ T5837] Bluetooth: hci1: command tx timeout [ 100.146925][ T5844] Bluetooth: hci3: command tx timeout [ 100.157185][ T5842] Bluetooth: hci2: command tx timeout [ 100.164151][ T5837] Bluetooth: hci0: command tx timeout [ 100.167753][ T5844] Bluetooth: hci4: command tx timeout [ 100.195624][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.203021][ T135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.215915][ T135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.237749][ T135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.274477][ T135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.284908][ T135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.301757][ T135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.312435][ T135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.350687][ T5839] veth0_vlan: entered promiscuous mode [ 100.415353][ T5839] veth1_vlan: entered promiscuous mode [ 100.489746][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.504606][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.522627][ T5832] veth0_vlan: entered promiscuous mode [ 100.548186][ T5833] veth0_vlan: entered promiscuous mode [ 100.561625][ T3664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.575318][ T3664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.620681][ T5832] veth1_vlan: entered promiscuous mode [ 100.656154][ T5839] veth0_macvtap: entered promiscuous mode [ 100.672357][ T3664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.678717][ T5833] veth1_vlan: entered promiscuous mode [ 100.681629][ T3664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.700053][ T3664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.710382][ T3664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.719309][ T5839] veth1_macvtap: entered promiscuous mode [ 100.790581][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.804514][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.829633][ T5833] veth0_macvtap: entered promiscuous mode [ 100.840123][ T3664] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.852487][ T3664] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.877984][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.896487][ T5832] veth0_macvtap: entered promiscuous mode [ 100.905879][ T3664] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.917477][ T3664] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.927027][ T5833] veth1_macvtap: entered promiscuous mode [ 100.962395][ T5832] veth1_macvtap: entered promiscuous mode [ 101.079575][ T5952] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.116090][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.135953][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.175697][ T5955] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 101.189918][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.197934][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.215900][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.226910][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.296322][ T135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.324360][ T135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.338990][ T135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.350655][ T3664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.368739][ T3664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.397318][ T135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.416623][ T135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.433734][ T135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.448907][ T135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.486275][ T135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.797744][ T5971] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 101.914033][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.934661][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.950978][ T5952] infiniband : set down [ 101.956626][ T5952] infiniband : added ipvlan0 [ 102.024589][ T5952] RDS/IB: : added [ 102.029958][ T5952] smc: adding ib device  with port count 1 [ 102.036682][ T5952] smc: ib device  port 1 has no pnetid [ 102.124144][ T5978] Cannot find set identified by id 65534 to match [ 102.176089][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.203414][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.224257][ T5842] Bluetooth: hci2: command tx timeout [ 102.224549][ T52] Bluetooth: hci0: command tx timeout [ 102.229807][ T5844] Bluetooth: hci4: command tx timeout [ 102.235206][ T5837] Bluetooth: hci3: command tx timeout [ 102.235252][ T5154] Bluetooth: hci1: command tx timeout [ 102.306338][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.323116][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.425498][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.461055][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.801190][ T5995] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 102.812608][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 102.913691][ T5991] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 103.428361][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16'. [ 103.428387][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16'. [ 103.488444][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.526646][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.578080][ T6016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.603612][ T6016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.666602][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 103.739766][ T6024] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 103.778153][ T6024] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 103.816320][ T6024] gretap1: entered promiscuous mode [ 103.862629][ T6024] gretap1: entered allmulticast mode [ 104.156829][ T6033] ip6tnl1: entered allmulticast mode [ 104.339179][ T6045] netlink: 40 bytes leftover after parsing attributes in process `syz.4.27'. [ 104.649554][ T6049] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.808910][ T6058] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 105.046891][ T6067] syz_tun: entered allmulticast mode [ 105.121381][ T6071] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.37'. [ 105.133978][ T6071] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 105.146677][ T6062] syz_tun: left allmulticast mode [ 105.163713][ T6071] Zero length message leads to an empty skb [ 105.220132][ T6074] vlan2: entered promiscuous mode [ 105.253169][ T6074] bridge0: entered promiscuous mode [ 105.316832][ T6078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.39'. [ 105.524746][ T6085] warning: `syz.2.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.954212][ T6098] netlink: 'syz.4.45': attribute type 4 has an invalid length. [ 106.041434][ T6104] netlink: 104 bytes leftover after parsing attributes in process `syz.3.47'. [ 106.285940][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.50'. [ 106.317477][ T6115] netlink: 7 bytes leftover after parsing attributes in process `syz.0.51'. [ 106.559569][ T6120] netlink: 'syz.4.52': attribute type 3 has an invalid length. [ 106.600368][ T6120] netlink: 'syz.4.52': attribute type 1 has an invalid length. [ 106.608832][ T6120] netlink: 224 bytes leftover after parsing attributes in process `syz.4.52'. [ 106.826976][ T6128] netlink: 'syz.2.56': attribute type 3 has an invalid length. [ 106.965204][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 106.979118][ T6135] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 107.061512][ T6138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.093299][ T6138] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 107.216413][ T6145] netlink: 40 bytes leftover after parsing attributes in process `syz.3.61'. [ 107.233727][ T6145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.61'. [ 108.106598][ T6186] netlink: 48 bytes leftover after parsing attributes in process `syz.0.73'. [ 108.158897][ T6190] Cannot find add_set index 0 as target [ 108.239794][ T6189] x_tables: duplicate underflow at hook 3 [ 108.444315][ T6200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.77'. [ 108.582076][ T6207] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 108.593829][ T6206] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 108.653460][ T6211] Cannot find add_set index 0 as target [ 108.683304][ T6206] Cannot find add_set index 0 as target [ 108.820290][ T6218] macvtap1: entered promiscuous mode [ 108.835322][ T6218] macvtap1: entered allmulticast mode [ 108.840788][ T6218] veth1_vlan: entered allmulticast mode [ 109.000675][ T6221] bond1: option resend_igmp: invalid value (32767) [ 109.007671][ T6221] bond1: option resend_igmp: allowed values 0 - 255 [ 109.021681][ T6221] bond1 (unregistering): Released all slaves [ 109.254089][ T6238] x_tables: duplicate entry at hook 3 [ 109.280100][ T6245] netlink: 'syz.3.90': attribute type 3 has an invalid length. [ 109.301458][ T6245] netlink: 666 bytes leftover after parsing attributes in process `syz.3.90'. [ 109.793988][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'. [ 110.291954][ T6296] ip6gre1: entered promiscuous mode [ 110.318186][ T6296] ip6gre1: entered allmulticast mode [ 111.052561][ T6338] netlink: 'syz.1.110': attribute type 33 has an invalid length. [ 111.659902][ T6363] __nla_validate_parse: 2 callbacks suppressed [ 111.659923][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.118'. [ 111.701405][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.713804][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.742685][ T6363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.765812][ T6363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.776254][ T6370] netlink: 44 bytes leftover after parsing attributes in process `syz.3.122'. [ 111.809495][ T6370] netlink: 35 bytes leftover after parsing attributes in process `syz.3.122'. [ 111.819087][ T6370] netlink: 'syz.3.122': attribute type 5 has an invalid length. [ 111.829620][ T6370] netlink: 'syz.3.122': attribute type 6 has an invalid length. [ 111.839246][ T6370] netlink: 35 bytes leftover after parsing attributes in process `syz.3.122'. [ 112.243651][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 112.258821][ T6392] x_tables: unsorted underflow at hook 4 [ 112.274206][ T6390] netlink: 9 bytes leftover after parsing attributes in process `syz.3.126'. [ 112.664783][ T6409] xt_HMARK: spi-set and port-set can't be combined [ 112.690820][ T6406] trusted_key: syz.2.132 sent an empty control message without MSG_MORE. [ 113.005793][ T6430] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.137'. [ 113.079864][ T6432] netlink: 'syz.2.139': attribute type 10 has an invalid length. [ 113.104221][ T6432] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 113.356485][ T6449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.364175][ T6449] IPv6: NLM_F_CREATE should be set when creating new route [ 113.371568][ T6449] IPv6: NLM_F_CREATE should be set when creating new route [ 113.426606][ T6446] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 113.453530][ T6449] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.660639][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 113.742694][ T6462] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 113.897777][ T6468] syzkaller0: entered promiscuous mode [ 113.915623][ T6468] syzkaller0: entered allmulticast mode [ 114.073714][ T6467] bond1: option min_links: invalid value (18446744073709551614) [ 114.120906][ T6467] bond1: option min_links: allowed values 0 - 2147483647 [ 114.150426][ T6467] bond1 (unregistering): Released all slaves [ 114.183906][ T6491] netlink: 'syz.4.152': attribute type 10 has an invalid length. [ 114.306475][ T6481] veth3: entered allmulticast mode [ 114.452494][ T6491] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.467531][ T6491] bond0: (slave team0): Enslaving as an active interface with an up link [ 114.681254][ T6501] bond1: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 114.695758][ T6501] bond1: entered promiscuous mode [ 114.704413][ T6501] bond1: entered allmulticast mode [ 114.712084][ T6501] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.722377][ T6504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.157'. [ 114.745349][ T6507] netlink: 'syz.0.158': attribute type 39 has an invalid length. [ 115.020006][ T6516] Bluetooth: MGMT ver 1.23 [ 115.338477][ T6541] IPVS: set_ctl: invalid protocol: 136 172.30.0.4:20002 [ 115.553508][ T6561] netlink: 'syz.4.169': attribute type 1 has an invalid length. [ 115.668418][ T6565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.168'. [ 116.036666][ T6574] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 116.364112][ T6594] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.948915][ T6621] __nla_validate_parse: 4 callbacks suppressed [ 116.948937][ T6621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'. [ 116.976129][ T6623] netlink: 'syz.3.188': attribute type 5 has an invalid length. [ 117.006304][ T6627] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 117.058263][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.190'. [ 117.194745][ T6636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.194'. [ 117.208410][ T6632] netlink: 9 bytes leftover after parsing attributes in process `syz.0.192'. [ 117.490937][ T6632] gretap0: entered promiscuous mode [ 117.516594][ T6642] gretap0: left promiscuous mode [ 117.543028][ T6642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 118.002135][ T6667] raw_sendmsg: syz.1.201 forgot to set AF_INET. Fix it! [ 118.034299][ T6653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.242290][ T6675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.203'. [ 118.563211][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 118.583989][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 118.615057][ T6689] netlink: 'syz.0.207': attribute type 12 has an invalid length. [ 118.718765][ T6696] Driver unsupported XDP return value 0 on prog (id 40) dev N/A, expect packet loss! [ 118.743247][ T6689] bond1: option primary_reselect: invalid value (255) [ 118.802812][ T6689] bond1 (unregistering): Released all slaves [ 119.305429][ T6724] openvswitch: netlink: IP tunnel dst address not specified [ 119.375564][ T6728] netlink: 'syz.1.219': attribute type 12 has an invalid length. [ 120.350449][ T6778] netlink: 'syz.0.237': attribute type 27 has an invalid length. [ 120.529308][ T6789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.241'. [ 120.561966][ T6788] netem: change failed [ 120.618857][ T6790] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.240'. [ 120.811364][ T6799] syzkaller0: entered promiscuous mode [ 120.822281][ T6799] syzkaller0: entered allmulticast mode [ 120.996768][ T6811] sctp: [Deprecated]: syz.2.248 (pid 6811) Use of int in maxseg socket option. [ 120.996768][ T6811] Use struct sctp_assoc_value instead [ 121.198016][ T6824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.250'. [ 121.210363][ T6823] netlink: 'syz.4.249': attribute type 11 has an invalid length. [ 121.524007][ T6841] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 2, id = 0 [ 121.997692][ T6860] xt_TPROXY: Can be used only with -p tcp or -p udp [ 122.128987][ T6862] __nla_validate_parse: 1 callbacks suppressed [ 122.129010][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.261'. [ 122.172795][ T6864] geneve2: entered promiscuous mode [ 122.730422][ T6883] syzkaller0: entered promiscuous mode [ 122.741999][ T6883] syzkaller0: entered allmulticast mode [ 122.936861][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 122.940964][ T6872] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 124.195559][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'. [ 124.270203][ T6925] syzkaller1: entered promiscuous mode [ 124.277781][ T6925] syzkaller1: entered allmulticast mode [ 124.358499][ T6934] x_tables: duplicate underflow at hook 1 [ 124.385304][ T5844] Bluetooth: hci0: command 0x0401 tx timeout [ 124.391723][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 124.617401][ T6942] netlink: 'syz.1.278': attribute type 4 has an invalid length. [ 124.644480][ T6942] netlink: 'syz.1.278': attribute type 4 has an invalid length. [ 124.752576][ T6942] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 124.773189][ T6942] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 124.892485][ T6952] netlink: 84 bytes leftover after parsing attributes in process `syz.4.283'. [ 125.088879][ T6966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.287'. [ 125.148879][ T6970] sctp: [Deprecated]: syz.2.288 (pid 6970) Use of int in maxseg socket option. [ 125.148879][ T6970] Use struct sctp_assoc_value instead [ 125.257981][ T6971] netlink: 'syz.4.287': attribute type 13 has an invalid length. [ 125.443757][ T6971] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 125.477421][ T6971] veth3: left allmulticast mode [ 125.485933][ T6974] netlink: 96 bytes leftover after parsing attributes in process `syz.3.290'. [ 125.795190][ T6986] syzkaller0: entered promiscuous mode [ 125.812174][ T6986] syzkaller0: entered allmulticast mode [ 125.938260][ T7003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 127.277298][ T7016] syzkaller0: entered promiscuous mode [ 127.282855][ T7016] syzkaller0: entered allmulticast mode [ 127.457543][ T7032] netlink: 'syz.2.297': attribute type 10 has an invalid length. [ 128.489634][ T7032] team0: Port device dummy0 added [ 128.718927][ T7045] netlink: 64 bytes leftover after parsing attributes in process `syz.2.302'. [ 128.740282][ T7041] tipc: Invalid UDP bearer configuration [ 128.740342][ T7041] tipc: Enabling of bearer rejected, failed to enable media [ 128.782571][ T7045] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 128.817634][ T7051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.305'. [ 128.828736][ T7045] gretap2: entered promiscuous mode [ 128.840921][ T7045] gretap2: entered allmulticast mode [ 129.054193][ T7063] tipc: MTU too low for tipc bearer [ 129.065513][ T7062] netlink: 'syz.1.307': attribute type 1 has an invalid length. [ 129.103205][ T7062] netlink: 'syz.1.307': attribute type 1 has an invalid length. [ 129.114734][ T7062] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.307'. [ 129.453745][ T7079] erspan0: entered promiscuous mode [ 129.459134][ T7079] erspan0: entered allmulticast mode [ 129.487910][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 129.512033][ T7083] netlink: 'syz.0.312': attribute type 1 has an invalid length. [ 129.530933][ T7083] netlink: 224 bytes leftover after parsing attributes in process `syz.0.312'. [ 129.561603][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.312'. [ 129.585308][ T7081] netlink: 'syz.0.312': attribute type 1 has an invalid length. [ 129.595613][ T7081] netlink: 224 bytes leftover after parsing attributes in process `syz.0.312'. [ 129.615212][ T7087] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 129.981130][ T7097] v: renamed from nlmon0 [ 130.055698][ T7114] netlink: 'syz.0.319': attribute type 10 has an invalid length. [ 130.105028][ T30] audit: type=1800 audit(1769023894.048:2): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.318" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 130.126617][ T7114] lo: entered promiscuous mode [ 130.134523][ T7110] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 130.155155][ T7114] lo: entered allmulticast mode [ 130.166610][ T7114] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 130.177471][ T7110] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 130.208315][ T7114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.239164][ T7110] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 130.457936][ T7121] tipc: Invalid UDP bearer configuration [ 130.457994][ T7121] tipc: Enabling of bearer rejected, failed to enable media [ 130.502727][ T7123] x_tables: duplicate underflow at hook 1 [ 130.504111][ T7129] syzkaller1: entered promiscuous mode [ 130.523346][ T7129] syzkaller1: entered allmulticast mode [ 130.931118][ T7147] bond0: Error: Cannot enslave bond to itself. [ 130.941676][ T6552] tipc: Subscription rejected, illegal request [ 131.372020][ T7175] netlink: 36 bytes leftover after parsing attributes in process `syz.3.334'. [ 131.388471][ T7177] macvlan0: entered promiscuous mode [ 131.425643][ T7177] netlink: 'syz.4.335': attribute type 24 has an invalid length. [ 131.598626][ T7185] syzkaller0: entered promiscuous mode [ 131.613091][ T7185] syzkaller0: entered allmulticast mode [ 132.284379][ T7212] netlink: 44 bytes leftover after parsing attributes in process `syz.2.346'. [ 132.317438][ T7212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.346'. [ 132.634030][ T7224] syzkaller0: entered promiscuous mode [ 132.642589][ T7224] syzkaller0: entered allmulticast mode [ 133.436835][ T7274] openvswitch: netlink: Message has 4 unknown bytes. [ 134.047199][ T7298] netlink: 'syz.3.374': attribute type 29 has an invalid length. [ 134.175291][ T7305] tipc: Started in network mode [ 134.180246][ T7305] tipc: Node identity 6a3255ebb533, cluster identity 4711 [ 134.214517][ T7305] tipc: Enabled bearer , priority 0 [ 134.234315][ T7305] syzkaller0: entered promiscuous mode [ 134.239876][ T7305] syzkaller0: entered allmulticast mode [ 134.339000][ T7305] tipc: Resetting bearer [ 134.642360][ T7330] sctp: [Deprecated]: syz.1.379 (pid 7330) Use of int in max_burst socket option. [ 134.642360][ T7330] Use struct sctp_assoc_value instead [ 134.732004][ T7336] __nla_validate_parse: 3 callbacks suppressed [ 134.732024][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 134.924758][ T7301] tipc: Resetting bearer [ 134.971055][ T7301] tipc: Disabling bearer [ 135.310609][ T7326] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.355287][ T7353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 135.432312][ T7357] netlink: 60 bytes leftover after parsing attributes in process `syz.0.386'. [ 135.459543][ T7360] netlink: zone id is out of range [ 135.466888][ T7360] netlink: del zone limit has 4 unknown bytes [ 135.496680][ T7360] netlink: 24 bytes leftover after parsing attributes in process `syz.2.387'. [ 135.658392][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 135.858140][ T7378] netlink: 'syz.4.394': attribute type 1 has an invalid length. [ 135.921564][ T7378] bond1: entered promiscuous mode [ 135.927441][ T7378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.957526][ T7381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.980719][ T7384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.989794][ T7384] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 136.011775][ T7384] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 136.027613][ T7384] bond1: (slave gre1): making interface the new active one [ 136.036664][ T7384] gre1: entered promiscuous mode [ 136.045779][ T7384] bond1: (slave gre1): Enslaving as an active interface with an up link [ 136.182426][ T7392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.399'. [ 136.203462][ T7391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.399'. [ 136.393798][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 136.533840][ T7414] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 136.550933][ T7420] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.568618][ T7420] netlink: 116 bytes leftover after parsing attributes in process `syz.3.405'. [ 136.624091][ T5844] Bluetooth: hci0: command 0x0401 tx timeout [ 136.684333][ T7414] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 136.771591][ T7433] Cannot find add_set index 2 as target [ 136.787689][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 137.161888][ T7445] netlink: 'syz.0.412': attribute type 1 has an invalid length. [ 137.300473][ T7445] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.596276][ T7475] IPv6: sit2: Disabled Multicast RS [ 137.945980][ T7498] syzkaller1: entered promiscuous mode [ 137.954981][ T7498] syzkaller1: entered allmulticast mode [ 138.701650][ T7542] netlink: 'syz.1.437': attribute type 3 has an invalid length. [ 138.789842][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.801511][ T7544] bridge_slave_0: left allmulticast mode [ 138.813326][ T7544] bridge_slave_0: left promiscuous mode [ 138.820930][ T7544] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.838632][ T7544] bridge_slave_1: left allmulticast mode [ 138.849602][ T7544] bridge_slave_1: left promiscuous mode [ 138.856165][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.895843][ T7544] bond0: (slave bond_slave_0): Releasing backup interface [ 138.936565][ T7544] bond0: (slave bond_slave_1): Releasing backup interface [ 138.974355][ T7544] team0: Port device team_slave_0 removed [ 139.008847][ T7544] team0: Port device team_slave_1 removed [ 139.021206][ T7544] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 139.551485][ T7572] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 139.733248][ T7572] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 139.941565][ T7603] sctp: [Deprecated]: syz.3.456 (pid 7603) Use of int in max_burst socket option. [ 139.941565][ T7603] Use struct sctp_assoc_value instead [ 139.978892][ T7607] netlink: 'syz.4.453': attribute type 10 has an invalid length. [ 140.015524][ T7607] __nla_validate_parse: 3 callbacks suppressed [ 140.015544][ T7607] netlink: 40 bytes leftover after parsing attributes in process `syz.4.453'. [ 140.036436][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 140.053125][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 140.158775][ T7607] team0: Port device geneve0 added [ 140.250614][ T7615] netlink: 11 bytes leftover after parsing attributes in process `syz.1.459'. [ 140.295609][ T7615] netlink: 64 bytes leftover after parsing attributes in process `syz.1.459'. [ 140.375286][ T7617] wg1 speed is unknown, defaulting to 1000 [ 140.394191][ T7617] wg1 speed is unknown, defaulting to 1000 [ 140.414795][ T7617] wg1 speed is unknown, defaulting to 1000 [ 140.442078][ T7625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.458'. [ 140.456485][ T7617] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 140.574698][ T7617] wg1 speed is unknown, defaulting to 1000 [ 140.589772][ T7617] wg1 speed is unknown, defaulting to 1000 [ 140.615237][ T7617] wg1 speed is unknown, defaulting to 1000 [ 140.630461][ T7617] wg1 speed is unknown, defaulting to 1000 [ 140.648677][ T7631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.464'. [ 140.650906][ T7617] wg1 speed is unknown, defaulting to 1000 [ 141.468900][ T30] audit: type=1804 audit(1769023905.418:3): pid=7649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.470" name="/newroot/79/cgroup.controllers" dev="tmpfs" ino=419 res=1 errno=0 [ 141.552125][ T30] audit: type=1800 audit(1769023905.418:4): pid=7649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.470" name="cgroup.controllers" dev="tmpfs" ino=419 res=0 errno=0 [ 141.578322][ T7654] syzkaller0: entered promiscuous mode [ 141.610033][ T7654] syzkaller0: entered allmulticast mode [ 141.687345][ T7657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.472'. [ 142.109752][ T5894] IPVS: starting estimator thread 0... [ 142.165592][ T7674] syzkaller0: entered promiscuous mode [ 142.192461][ T7674] syzkaller0: entered allmulticast mode [ 142.209153][ T6555] syzkaller0: tun_net_xmit 48 [ 142.225245][ T7677] IPVS: using max 28 ests per chain, 67200 per kthread [ 142.231119][ T7683] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 142.256299][ T7680] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 142.274480][ T7674] syzkaller0: create flow: hash 4005753171 index 1 [ 142.295482][ T7687] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.478'. [ 142.323385][ T7686] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.478'. [ 142.394702][ T7673] syzkaller0: delete flow: hash 4005753171 index 1 [ 142.611764][ T7699] openvswitch: netlink: Flow key attribute not present in set flow. [ 142.626901][ T7699] Bluetooth: MGMT ver 1.23 [ 143.610637][ T7693] vlan2: entered allmulticast mode [ 143.616079][ T7693] hsr0: entered allmulticast mode [ 143.621293][ T7693] hsr_slave_0: entered allmulticast mode [ 143.630798][ T7693] hsr_slave_1: entered allmulticast mode [ 143.917190][ T7718] netlink: 'syz.0.488': attribute type 13 has an invalid length. [ 143.955583][ T7718] veth0_macvtap: left promiscuous mode [ 143.968501][ T7718] macvtap0: entered allmulticast mode [ 144.008996][ T7718] macvtap0: refused to change device tx_queue_len [ 144.114461][ T7729] xt_l2tp: missing protocol rule (udp|l2tpip) [ 145.127342][ T7774] __nla_validate_parse: 4 callbacks suppressed [ 145.127365][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'. [ 145.221520][ T7782] netlink: 256 bytes leftover after parsing attributes in process `syz.4.504'. [ 145.330923][ T7776] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 145.377162][ T7789] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 145.797419][ T7794] team0 (unregistering): Port device team_slave_0 removed [ 145.837040][ T7794] team0 (unregistering): Port device team_slave_1 removed [ 145.882220][ T7794] team0 (unregistering): Port device dummy0 removed [ 146.139018][ T7807] syzkaller0: entered promiscuous mode [ 146.157959][ T7807] syzkaller0: entered allmulticast mode [ 146.441806][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.513'. [ 146.486009][ T7836] netlink: 'syz.4.511': attribute type 29 has an invalid length. [ 146.524161][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.513'. [ 147.710197][ T7825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.738274][ T7833] xfrm1: entered promiscuous mode [ 147.745277][ T7833] xfrm1: entered allmulticast mode [ 147.911637][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 147.950026][ T7852] nftables ruleset with unbound set [ 147.970152][ T7852] netlink: 'syz.1.519': attribute type 21 has an invalid length. [ 147.988540][ T7852] netlink: 128 bytes leftover after parsing attributes in process `syz.1.519'. [ 148.019974][ T7852] netlink: 'syz.1.519': attribute type 4 has an invalid length. [ 148.034617][ T7858] netlink: 'syz.1.519': attribute type 21 has an invalid length. [ 148.042743][ T7852] netlink: 'syz.1.519': attribute type 5 has an invalid length. [ 148.051442][ T7858] netlink: 128 bytes leftover after parsing attributes in process `syz.1.519'. [ 148.061571][ T7852] netlink: 3 bytes leftover after parsing attributes in process `syz.1.519'. [ 148.134703][ T7858] netlink: 'syz.1.519': attribute type 4 has an invalid length. [ 148.173840][ T7858] netlink: 'syz.1.519': attribute type 5 has an invalid length. [ 148.205902][ T7858] netlink: 3 bytes leftover after parsing attributes in process `syz.1.519'. [ 148.368828][ T7868] netlink: 48 bytes leftover after parsing attributes in process `syz.4.522'. [ 148.669416][ T7885] tipc: Started in network mode [ 148.712028][ T7885] tipc: Node identity 9ec1951a8467, cluster identity 4711 [ 148.726264][ T7885] tipc: Enabled bearer , priority 0 [ 148.754152][ T7884] syzkaller0: entered promiscuous mode [ 148.759705][ T7884] syzkaller0: entered allmulticast mode [ 148.784835][ T7849] wg1 speed is unknown, defaulting to 1000 [ 148.791329][ T7891] tipc: Enabling of bearer rejected, already enabled [ 148.829424][ T7885] sch_tbf: peakrate 786 is lower than or equals to rate 19658 ! [ 148.841835][ T799] IPVS: starting estimator thread 0... [ 148.857415][ T7895] tipc: Started in network mode [ 148.862986][ T7895] tipc: Node identity ac1414aa, cluster identity 4711 [ 148.871936][ T7895] tipc: Enabled bearer , priority 10 [ 148.910784][ T7891] tipc: Resetting bearer [ 148.933325][ T7896] IPVS: using max 28 ests per chain, 67200 per kthread [ 148.994892][ T7879] tipc: Resetting bearer [ 149.022627][ T7879] tipc: Disabling bearer [ 149.493410][ T7917] syz.1.536 (7917) used greatest stack depth: 16032 bytes left [ 149.651715][ T7926] bond1: entered allmulticast mode [ 149.658280][ T7926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.775168][ T7938] sock: sock_timestamping_bind_phc: sock not bind to device [ 149.970408][ T7950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.038108][ T799] tipc: Node number set to 2886997162 [ 150.516287][ T7979] __nla_validate_parse: 4 callbacks suppressed [ 150.516307][ T7979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.556'. [ 150.636030][ T7986] Bluetooth: MGMT ver 1.23 [ 150.862323][ T7998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.560'. [ 150.878057][ T7999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.562'. [ 151.034140][ T7999] macvlan0: entered promiscuous mode [ 151.101990][ T8007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.564'. [ 151.240962][ T8016] bond2: option lp_interval: invalid value (0) [ 151.259080][ T8016] bond2: option lp_interval: allowed values 1 - 2147483647 [ 151.286358][ T8016] bond2 (unregistering): Released all slaves [ 151.301774][ T8008] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 151.304000][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 151.308958][ T8008] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 151.424820][ T8027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.729327][ T8045] netlink: 13 bytes leftover after parsing attributes in process `syz.2.569'. [ 151.838577][ T8054] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 151.911372][ T8059] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 151.927307][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'. [ 152.013453][ T8061] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 152.062766][ T8061] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 152.113451][ T8061] gretap1: entered promiscuous mode [ 152.135376][ T8061] gretap1: entered allmulticast mode [ 152.152481][ T8074] netlink: 52 bytes leftover after parsing attributes in process `syz.3.577'. [ 152.170822][ T8068] vlan3: entered promiscuous mode [ 152.176210][ T8068] bridge0: entered promiscuous mode [ 152.196703][ T8074] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.205234][ T8074] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.403570][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 152.456726][ T8086] bond0: entered promiscuous mode [ 152.486170][ T8086] bond_slave_0: entered promiscuous mode [ 152.509671][ T8086] bond_slave_1: entered promiscuous mode [ 152.537013][ T8086] bond0: left promiscuous mode [ 152.548966][ T8086] bond_slave_0: left promiscuous mode [ 152.556242][ T8091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.581'. [ 152.567410][ T8093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.579218][ T8086] bond_slave_1: left promiscuous mode [ 152.797309][ T8112] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 152.798643][ T8104] sctp: [Deprecated]: syz.0.585 (pid 8104) Use of int in maxseg socket option. [ 152.798643][ T8104] Use struct sctp_assoc_value instead [ 153.086318][ T8126] bond0: Error: Cannot enslave bond to itself. [ 153.111013][ T8129] netlink: 'syz.1.594': attribute type 14 has an invalid length. [ 153.136694][ T6551] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.137071][ T8129] netlink: 'syz.1.594': attribute type 14 has an invalid length. [ 153.174896][ T6551] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.201857][ T6551] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.228068][ T6551] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.724524][ T8159] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 153.777167][ T8171] gretap0: entered promiscuous mode [ 153.815445][ T8173] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 153.828198][ T8171] gretap0: left promiscuous mode [ 153.858501][ T8171] erspan0: left promiscuous mode [ 153.865426][ T8171] erspan0: left allmulticast mode [ 153.894443][ T8171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.936589][ T8179] netlink: 'syz.4.608': attribute type 2 has an invalid length. [ 154.042944][ T8179] : entered promiscuous mode [ 154.098827][ T8188] openvswitch: netlink: Flow actions attr not present in new flow. [ 154.368697][ T8203] netlink: 'syz.0.616': attribute type 1 has an invalid length. [ 154.927403][ T6554] smc: removing ib device  [ 155.025946][ T8225] veth0: entered promiscuous mode [ 155.100190][ T8227] veth0: left promiscuous mode [ 155.639620][ T8258] __nla_validate_parse: 16 callbacks suppressed [ 155.639642][ T8258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.631'. [ 155.703484][ T8261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.631'. [ 155.785279][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.630'. [ 156.231540][ T8282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.636'. [ 156.489090][ T8295] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 156.901583][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 157.460811][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'. [ 157.684584][ T8338] syzkaller0: entered promiscuous mode [ 157.687181][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.652'. [ 157.695971][ T8338] syzkaller0: entered allmulticast mode [ 157.753676][ T8338] netlink: 'syz.4.650': attribute type 4 has an invalid length. [ 157.780035][ T8346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.653'. [ 158.016774][ T8360] netlink: 'syz.3.658': attribute type 35 has an invalid length. [ 158.079801][ T8362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'. [ 158.222828][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 158.306532][ T8373] erspan0: entered promiscuous mode [ 159.021048][ T8390] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 159.158541][ T8399] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 159.391734][ T8423] nbd: must specify a size in bytes for the device [ 159.588802][ T8430] netlink: 'syz.2.679': attribute type 28 has an invalid length. [ 159.604487][ T8434] bridge_slave_1: left allmulticast mode [ 159.610360][ T8434] bridge_slave_1: left promiscuous mode [ 159.618503][ T8430] netlink: 'syz.2.679': attribute type 3 has an invalid length. [ 159.628122][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.659974][ T8434] bridge_slave_0: left allmulticast mode [ 159.674146][ T8434] bridge_slave_0: left promiscuous mode [ 159.680914][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.882019][ T30] audit: type=1107 audit(1769023923.828:5): pid=8450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='+*GGG{)=%"?c+gZmr*MIOz&_eK,vwYA8S<8xJW+!g1MxdנHsFRENp' [ 160.797941][ T8499] wg1 speed is unknown, defaulting to 1000 [ 161.085283][ T8513] syzkaller0: entered promiscuous mode [ 161.097600][ T8513] syzkaller0: entered allmulticast mode [ 161.180696][ T8518] xt_NFQUEUE: number of total queues is 0 [ 161.321712][ T8520] pim6reg1: entered promiscuous mode [ 161.337899][ T8520] pim6reg1: entered allmulticast mode [ 161.487855][ T8521] __nla_validate_parse: 8 callbacks suppressed [ 161.487876][ T8521] netlink: 64 bytes leftover after parsing attributes in process `syz.0.703'. [ 161.691983][ T8540] syzkaller0: entered promiscuous mode [ 161.699539][ T8540] syzkaller0: entered allmulticast mode [ 161.721465][ T8540] 0: reclassify loop, rule prio 0, protocol 800 [ 161.863638][ T8552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.901490][ T6540] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.921695][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.715'. [ 161.949844][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.715'. [ 162.004552][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.715'. [ 162.983304][ T8619] openvswitch: netlink: Invalid VLAN frame [ 163.203650][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 163.220876][ T8634] netlink: 60 bytes leftover after parsing attributes in process `syz.4.737'. [ 163.392428][ T6556] tipc: Subscription rejected, illegal request [ 163.404993][ T8647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 163.570668][ T8657] netlink: 36 bytes leftover after parsing attributes in process `syz.1.744'. [ 163.726458][ T8665] netlink: 'syz.2.746': attribute type 18 has an invalid length. [ 163.759521][ T6556] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.776263][ T6556] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.807398][ T6556] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.318839][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 164.338361][ T8698] macvlan0: left promiscuous mode [ 164.359608][ T8698] netlink: 'syz.2.754': attribute type 2 has an invalid length. [ 164.480039][ T8705] netlink: 'syz.1.756': attribute type 30 has an invalid length. [ 164.595743][ T8715] netlink: 48 bytes leftover after parsing attributes in process `syz.0.758'. [ 164.990483][ T8732] netlink: 'syz.2.763': attribute type 2 has an invalid length. [ 165.231148][ T8749] netlink: 'syz.1.766': attribute type 10 has an invalid length. [ 165.269530][ T8751] netlink: 'syz.3.768': attribute type 13 has an invalid length. [ 165.308000][ T8740] bridge2: port 1(veth5) entered blocking state [ 165.319966][ T8740] bridge2: port 1(veth5) entered disabled state [ 165.327072][ T8740] veth5: entered allmulticast mode [ 165.335911][ T8740] veth5: entered promiscuous mode [ 165.348885][ T8756] netlink: 'syz.1.766': attribute type 10 has an invalid length. [ 165.391040][ T8753] bridge2: port 2(veth0_to_bond) entered blocking state [ 165.427948][ T8753] bridge2: port 2(veth0_to_bond) entered disabled state [ 165.438945][ T8753] veth0_to_bond: entered allmulticast mode [ 165.448736][ T8753] veth0_to_bond: entered promiscuous mode [ 165.459814][ T8749] syz_tun: entered promiscuous mode [ 165.516557][ T8749] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 165.534595][ T8751] veth0_macvtap: left promiscuous mode [ 165.557281][ T8751] macvtap0: entered allmulticast mode [ 165.575176][ T8751] macvtap0: refused to change device tx_queue_len [ 165.605050][ T8756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.619574][ T8756] team0: Port device bond0 added [ 165.635162][ T8767] bond0: (slave syz_tun): Releasing backup interface [ 165.667292][ T8767] team0: Port device bond0 removed [ 165.677994][ T8767] bridge_slave_0: left allmulticast mode [ 165.692052][ T8767] bridge_slave_0: left promiscuous mode [ 165.716467][ T8767] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.753938][ T8767] bridge_slave_1: left allmulticast mode [ 165.761845][ T8767] bridge_slave_1: left promiscuous mode [ 165.772275][ T8767] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.789025][ T8767] bond0: (slave bond_slave_0): Releasing backup interface [ 165.819597][ T8767] bond0: (slave bond_slave_1): Releasing backup interface [ 165.855383][ T8767] team0: Port device team_slave_0 removed [ 165.891335][ T8767] team0: Port device team_slave_1 removed [ 165.902584][ T8767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.915731][ T8767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.926398][ T8767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.934708][ T8767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.947467][ T8767] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 166.225289][ T8794] syzkaller0: entered promiscuous mode [ 166.240174][ T8794] syzkaller0: entered allmulticast mode [ 166.380169][ T799] IPVS: starting estimator thread 0... [ 166.493191][ T8808] IPVS: using max 24 ests per chain, 57600 per kthread [ 166.668582][ T8821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.688716][ T8821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.710903][ T8825] netlink: 'syz.0.782': attribute type 13 has an invalid length. [ 166.747777][ T8825] netlink: 'syz.0.782': attribute type 17 has an invalid length. [ 166.788358][ T8825] lo: left promiscuous mode [ 166.818410][ T8825] lo: left allmulticast mode [ 166.914575][ T8832] __nla_validate_parse: 4 callbacks suppressed [ 166.914596][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'. [ 166.938809][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'. [ 167.131408][ T8825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.166919][ T8837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 167.183404][ T8837] netlink: 'syz.2.789': attribute type 9 has an invalid length. [ 167.473212][ T8851] netlink: 36 bytes leftover after parsing attributes in process `syz.2.792'. [ 167.511257][ T8850] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.792'. [ 167.674152][ T8860] netlink: 'syz.3.795': attribute type 1 has an invalid length. [ 167.733189][ T8860] netlink: 96 bytes leftover after parsing attributes in process `syz.3.795'. [ 167.766919][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.793'. [ 167.989264][ T8875] wg1 speed is unknown, defaulting to 1000 [ 168.006153][ T8885] tipc: Can't bind to reserved service type 0 [ 168.425859][ T8903] netlink: 36 bytes leftover after parsing attributes in process `syz.3.808'. [ 168.515034][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 168.600111][ T8915] netlink: 'syz.4.812': attribute type 10 has an invalid length. [ 168.631799][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.812'. [ 168.693719][ T8921] netem: invalid attributes len -24 [ 168.699010][ T8921] netem: change failed [ 168.952846][ T8935] netlink: 'syz.2.817': attribute type 25 has an invalid length. [ 169.237734][ T8959] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 169.316060][ T8959] bond2: ARP target 1.0.0.0 is already present [ 169.323895][ T8959] bond2: option arp_ip_target: invalid value (1) [ 169.348469][ T8959] bond2 (unregistering): Released all slaves [ 169.734209][ T8982] macvtap1: entered promiscuous mode [ 169.757687][ T8982] vlan0: entered promiscuous mode [ 169.763473][ T8982] macvtap1: entered allmulticast mode [ 169.769790][ T8982] vlan0: entered allmulticast mode [ 169.778715][ T8982] veth0_vlan: entered allmulticast mode [ 169.930546][ T8997] No such timeout policy "syz0" [ 170.045024][ T9006] validate_nla: 1 callbacks suppressed [ 170.045047][ T9006] netlink: 'syz.1.836': attribute type 2 has an invalid length. [ 170.541525][ T9039] tls_set_device_offload: netdev not found [ 170.588125][ T9041] netlink: 'syz.2.846': attribute type 1 has an invalid length. [ 170.719270][ T9055] netlink: 'syz.4.849': attribute type 3 has an invalid length. [ 171.287426][ T9093] bond0: entered promiscuous mode [ 171.302839][ T9097] netlink: 'syz.2.862': attribute type 21 has an invalid length. [ 171.547012][ T24] IPVS: starting estimator thread 0... [ 171.558161][ T9110] tipc: Enabled bearer , priority 10 [ 171.653528][ T9111] IPVS: using max 29 ests per chain, 69600 per kthread [ 171.776687][ T9119] veth1_macvtap: left promiscuous mode [ 171.782339][ T9119] macsec0: entered promiscuous mode [ 171.810136][ T9119] macsec0: entered allmulticast mode [ 171.821266][ T9119] veth1_macvtap: entered promiscuous mode [ 171.827944][ T9119] veth1_macvtap: entered allmulticast mode [ 171.834282][ T9119] macsec0: left promiscuous mode [ 171.840470][ T9119] macsec0: left allmulticast mode [ 171.846201][ T9119] veth1_macvtap: left allmulticast mode [ 172.138348][ T9153] __nla_validate_parse: 12 callbacks suppressed [ 172.138370][ T9153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.879'. [ 172.174218][ T9137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.184168][ T9145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 172.250101][ T9155] netlink: 96 bytes leftover after parsing attributes in process `syz.3.881'. [ 172.390639][ T9161] netlink: 'syz.0.882': attribute type 11 has an invalid length. [ 172.549718][ T9170] netlink: 56 bytes leftover after parsing attributes in process `syz.3.884'. [ 172.686937][ T5894] tipc: Node number set to 447124762 [ 172.716935][ T9177] netlink: 80 bytes leftover after parsing attributes in process `syz.0.887'. [ 172.732766][ T9177] netlink: 80 bytes leftover after parsing attributes in process `syz.0.887'. [ 172.758462][ T9178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.888'. [ 172.867907][ T9184] netlink: 88 bytes leftover after parsing attributes in process `syz.1.890'. [ 172.924937][ T9184] netlink: 88 bytes leftover after parsing attributes in process `syz.1.890'. [ 173.006972][ T9188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.892'. [ 173.042672][ T9189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.890'. [ 173.281366][ T9210] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 173.392049][ T9215] tipc: Enabling of bearer rejected, already enabled [ 173.406483][ T9213] net veth1_virt_wifi .: renamed from virt_wifi0 [ 173.505404][ T9222] veth1_macvtap: left promiscuous mode [ 173.730161][ T9235] syzkaller1: entered promiscuous mode [ 173.737620][ T9235] syzkaller1: entered allmulticast mode [ 173.802423][ T9237] tipc: MTU too low for tipc bearer [ 173.954492][ T9248] netlink: 'syz.4.908': attribute type 2 has an invalid length. [ 173.962244][ T9248] netlink: 'syz.4.908': attribute type 1 has an invalid length. [ 174.014277][ T9251] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 174.042237][ T9253] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000 [ 174.358658][ T9274] syzkaller0: entered promiscuous mode [ 174.371078][ T9274] syzkaller0: entered allmulticast mode [ 174.828954][ T9306] syzkaller0: entered promiscuous mode [ 174.844795][ T9306] syzkaller0: entered allmulticast mode [ 174.985706][ T9313] can: request_module (can-proto-0) failed. [ 175.880541][ T9352] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 175.981619][ T9352] team0: entered promiscuous mode [ 175.987421][ T9352] team0: entered allmulticast mode [ 176.030851][ T9356] syzkaller1: entered promiscuous mode [ 176.058261][ T9356] syzkaller1: entered allmulticast mode [ 176.310161][ T9373] wg1 speed is unknown, defaulting to 1000 [ 176.577583][ T9387] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 176.890110][ T9406] ip_vti0: entered promiscuous mode [ 177.143479][ T9415] netlink: 'syz.3.958': attribute type 10 has an invalid length. [ 177.161154][ T9415] netlink: 'syz.3.958': attribute type 10 has an invalid length. [ 177.276832][ T9419] syzkaller0: entered promiscuous mode [ 177.282394][ T9419] syzkaller0: entered allmulticast mode [ 177.402900][ T9432] __nla_validate_parse: 17 callbacks suppressed [ 177.402920][ T9432] netlink: 5072 bytes leftover after parsing attributes in process `syz.3.965'. [ 177.437601][ T9435] netlink: 5072 bytes leftover after parsing attributes in process `syz.3.965'. [ 177.447195][ T9432] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 177.463346][ T9435] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 177.515183][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.967'. [ 177.842557][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'. [ 177.891101][ T9458] veth5: entered allmulticast mode [ 177.931004][ T9468] netlink: 'syz.0.975': attribute type 1 has an invalid length. [ 177.947537][ T9468] netlink: 'syz.0.975': attribute type 1 has an invalid length. [ 178.166291][ T9476] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 178.388708][ T9493] delete_channel: no stack [ 178.502755][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.982'. [ 179.458690][ T9539] netlink: 'syz.0.994': attribute type 83 has an invalid length. [ 179.557558][ T3568] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 179.576880][ T9553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.995'. [ 179.605581][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 179.687762][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 179.782918][ T9557] team1: entered promiscuous mode [ 179.868650][ T9557] team1: entered allmulticast mode [ 180.197263][ T9581] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 180.226639][ T9581] syzkaller0: entered promiscuous mode [ 180.232199][ T9581] syzkaller0: entered allmulticast mode [ 180.521618][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 181.846373][ T9624] netlink: 'syz.2.1013': attribute type 4 has an invalid length. [ 181.873374][ T9624] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1013'. [ 181.880500][ T9623] netlink: 'syz.2.1013': attribute type 4 has an invalid length. [ 182.075851][ T9637] bridge0: port 1(veth0_to_bridge) entered blocking state [ 182.102373][ T9637] bridge0: port 1(veth0_to_bridge) entered disabled state [ 182.127355][ T9637] veth0_to_bridge: entered allmulticast mode [ 182.164665][ T9637] veth0_to_bridge: entered promiscuous mode [ 182.185885][ T9641] tipc: Enabling of bearer rejected, media not registered [ 182.216229][ T9640] macsec3: entered promiscuous mode [ 182.221711][ T9640] macsec3: entered allmulticast mode [ 182.227797][ T9640] bridge0: entered allmulticast mode [ 182.238356][ T9640] bridge0: port 3(macsec3) entered blocking state [ 182.245998][ T9640] bridge0: port 3(macsec3) entered disabled state [ 182.287451][ T9640] bridge0: left allmulticast mode [ 182.489891][ T9654] __nla_validate_parse: 3 callbacks suppressed [ 182.489912][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1020'. [ 182.535768][ T9650] bond3: entered promiscuous mode [ 182.541539][ T9650] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.575043][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1020'. [ 182.635500][ T9650] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.649982][ T9667] netlink: 'syz.0.1023': attribute type 1 has an invalid length. [ 182.661002][ T9650] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 182.676241][ T9650] bond3: (slave xfrm1): Error -95 calling set_mac_address [ 182.758192][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'. [ 182.858382][ T9676] netlink: 'syz.0.1023': attribute type 32 has an invalid length. [ 182.902087][ T9667] 8021q: adding VLAN 0 to HW filter on device bond2 [ 182.959239][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1023'. [ 183.007999][ T9669] syzkaller1: entered promiscuous mode [ 183.017498][ T9669] syzkaller1: entered allmulticast mode [ 183.068824][ T9660] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 183.120805][ T9660] netlink: 'syz.0.1023': attribute type 1 has an invalid length. [ 183.130426][ T9660] netlink: 'syz.0.1023': attribute type 2 has an invalid length. [ 183.345453][ T9700] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1034'. [ 183.575962][ T9713] syzkaller0: entered promiscuous mode [ 183.581816][ T9713] syzkaller0: entered allmulticast mode [ 183.592900][ T9716] netlink: 1800 bytes leftover after parsing attributes in process `syz.0.1040'. [ 183.619160][ T9716] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 183.637144][ T9713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1039'. [ 183.649180][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1039'. [ 183.658348][ T9713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1039'. [ 183.730802][ T9714] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1039'. [ 183.767505][ T9714] tipc: Enabled bearer , priority 0 [ 183.798331][ T9713] tipc: Resetting bearer [ 183.828366][ T9712] tipc: Resetting bearer [ 183.889481][ T9712] tipc: Disabling bearer [ 183.951575][ T9688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.128666][ T9745] bond0: left promiscuous mode [ 184.136837][ T9745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.249589][ T9754] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 184.300760][ T9760] xt_ecn: cannot match TCP bits for non-tcp packets [ 184.337370][ T9759] tipc: Started in network mode [ 184.356316][ T9759] tipc: Node identity 52a0d61d56a, cluster identity 4711 [ 184.374738][ T9759] tipc: Enabled bearer , priority 0 [ 184.384157][ T9759] syzkaller0: entered promiscuous mode [ 184.391725][ T9759] syzkaller0: entered allmulticast mode [ 184.434045][ T9759] tipc: Resetting bearer [ 184.459621][ T9757] tipc: Resetting bearer [ 184.502574][ T9757] tipc: Disabling bearer [ 184.561586][ T9768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.604295][ T9768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.695433][ T9770] erspan0: entered promiscuous mode [ 184.851707][ T9778] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 185.053441][ T9789] netlink: 'syz.0.1062': attribute type 1 has an invalid length. [ 185.117382][ T9789] netlink: 'syz.0.1062': attribute type 2 has an invalid length. [ 185.139603][ T9789] netlink: 'syz.0.1062': attribute type 1 has an invalid length. [ 185.150472][ T9789] netlink: 'syz.0.1062': attribute type 1 has an invalid length. [ 185.289773][ T9800] sch_fq: defrate 0 ignored. [ 185.579572][ T9815] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 185.605891][ T9815] bond2 (unregistering): Released all slaves [ 185.685871][ T9826] xt_nat: multiple ranges no longer supported [ 185.705899][ T9829] xt_nat: multiple ranges no longer supported [ 185.877920][ T9835] wg1: entered promiscuous mode [ 185.905405][ T9835] wg1: entered allmulticast mode [ 186.179916][ T9852] netlink: 'syz.4.1076': attribute type 21 has an invalid length. [ 186.209813][ T9852] netlink: 'syz.4.1076': attribute type 4 has an invalid length. [ 186.422129][ T9867] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 186.559992][ T9876] x_tables: duplicate underflow at hook 1 [ 186.652146][ T9879] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.726358][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880562db400: rx timeout, send abort [ 186.737057][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880562db400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 186.917086][ T9896] Cannot find del_set index 1 as target [ 186.922827][ T9895] Cannot find del_set index 1 as target [ 187.036818][ T9899] bond2: entered promiscuous mode [ 187.042892][ T9899] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.528415][ T9935] __nla_validate_parse: 18 callbacks suppressed [ 187.528438][ T9935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1100'. [ 187.928155][ T9954] validate_nla: 3 callbacks suppressed [ 187.928281][ T9954] netlink: 'syz.3.1106': attribute type 5 has an invalid length. [ 188.111869][ T9963] tipc: Failed to remove unknown binding: 66,0,0/0:3785558687/3785558688 [ 188.188071][ T9963] tipc: Failed to remove unknown binding: 66,0,0/0:3785558687/3785558688 [ 188.262399][ T9969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1112'. [ 188.344103][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'. [ 188.375585][ T9969] lo: entered allmulticast mode [ 188.380794][ T9969] lo: left allmulticast mode [ 188.426291][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1115'. [ 188.532285][ T9979] 8021q: VLANs not supported on tunl0 [ 188.620658][ T9985] netlink: 'syz.3.1116': attribute type 5 has an invalid length. [ 188.628819][ T9985] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1116'. [ 189.036381][T10014] x_tables: duplicate underflow at hook 3 [ 189.093958][T10017] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1126'. [ 189.436368][T10037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1131'. [ 189.753012][T10053] syzkaller1: entered promiscuous mode [ 189.774075][T10053] syzkaller1: entered allmulticast mode [ 189.832992][T10065] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 189.902805][T10068] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1139'. [ 189.990513][T10070] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1140'. [ 190.239600][T10081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1143'. [ 190.688276][T10104] bond3: (slave veth7): Enslaving as an active interface with a down link [ 190.746760][T10112] xt_addrtype: ipv6 does not support BROADCAST matching [ 190.773439][T10110] bond3: (slave veth9): Enslaving as an active interface with a down link [ 190.804008][T10118] netlink: 'syz.3.1150': attribute type 4 has an invalid length. [ 191.665568][T10162] netlink: 'syz.1.1158': attribute type 4 has an invalid length. [ 191.931950][T10177] netlink: 'syz.1.1162': attribute type 1 has an invalid length. [ 191.944949][T10176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.120947][T10189] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 192.290659][T10198] netlink: 'syz.2.1172': attribute type 1 has an invalid length. [ 192.330494][T10198] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 192.419316][T10209] Cannot find del_set index 1 as target [ 192.659362][T10231] __nla_validate_parse: 11 callbacks suppressed [ 192.659386][T10231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1180'. [ 192.708781][T10231] block nbd0: not configured, cannot reconfigure [ 192.716723][T10231] netlink: 'syz.1.1180': attribute type 2 has an invalid length. [ 192.786160][T10233] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 192.819755][T10233] netlink: 'syz.4.1183': attribute type 10 has an invalid length. [ 192.878914][T10233] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 192.905265][T10235] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1184'. [ 193.095820][T10253] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1190'. [ 193.108665][T10253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1190'. [ 193.246733][T10253] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1190'. [ 193.292820][T10260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1190'. [ 193.344564][T10253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1190'. [ 193.363431][T10260] nbd: device at index 64 is going down [ 193.452667][T10269] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 193.563764][T10276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1195'. [ 193.599425][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'. [ 193.819833][T10287] syzkaller1: entered promiscuous mode [ 193.827741][T10287] syzkaller1: entered allmulticast mode [ 193.936358][T10299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.951369][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 193.985712][T10299] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.994949][T10299] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.206794][T10311] ip6tnl1: entered allmulticast mode [ 194.453574][T10318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.633221][T10339] erspan0: entered promiscuous mode [ 194.645703][T10339] erspan0: entered allmulticast mode [ 194.675599][T10344] lo: entered promiscuous mode [ 194.702719][T10344] netlink: 'syz.2.1215': attribute type 2 has an invalid length. [ 194.724250][T10344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.010978][T10362] smc: net device team0 applied user defined pnetid SYZ2 [ 195.761137][T10409] syzkaller0: entered promiscuous mode [ 195.766989][T10409] syzkaller0: entered allmulticast mode [ 197.448850][T10509] bond4: (slave veth7): Enslaving as an active interface with a down link [ 197.471144][T10520] netlink: zone id is out of range [ 197.476655][T10520] netlink: zone id is out of range [ 197.481973][T10520] netlink: zone id is out of range [ 197.488004][T10520] netlink: zone id is out of range [ 197.494763][T10520] netlink: zone id is out of range [ 197.500494][T10520] netlink: zone id is out of range [ 197.506046][T10520] netlink: zone id is out of range [ 197.511346][T10520] netlink: zone id is out of range [ 197.517047][T10520] netlink: zone id is out of range [ 197.522624][T10520] netlink: zone id is out of range [ 197.649806][T10517] bond4: (slave veth9): Enslaving as an active interface with a down link [ 197.893384][T10540] __nla_validate_parse: 16 callbacks suppressed [ 197.893408][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1271'. [ 197.938882][T10540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1271'. [ 197.958893][T10540] geneve3: entered promiscuous mode [ 197.975673][T10540] geneve3: entered allmulticast mode [ 198.071500][T10550] netlink: 'syz.4.1275': attribute type 1 has an invalid length. [ 198.094553][T10554] netlink: 'syz.3.1276': attribute type 11 has an invalid length. [ 198.102667][T10554] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.1276'. [ 198.140740][T10550] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.260127][T10561] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1275'. [ 198.340581][T10554] vlan0 (unregistering): left allmulticast mode [ 198.349947][T10554] veth0_vlan (unregistering): left allmulticast mode [ 198.357163][T10554] vlan0 (unregistering): left promiscuous mode [ 198.762273][T10558] bond4: (slave veth11): Enslaving as an active interface with a down link [ 198.825494][T10561] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 198.834560][T10561] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 199.102205][T10587] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1284'. [ 199.121375][T10587] gretap0: entered promiscuous mode [ 199.152794][T10587] gretap0: left promiscuous mode [ 199.190772][T10590] : renamed from veth1_vlan (while UP) [ 199.492130][T10612] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1292'. [ 199.879982][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1293'. [ 200.027369][T10626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1295'. [ 200.239184][T10638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1297'. [ 200.274667][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1297'. [ 200.581800][T10658] nbd: must specify a size in bytes for the device [ 200.695885][T10666] tipc: Started in network mode [ 200.700871][T10666] tipc: Node identity c24be6e069ea, cluster identity 4711 [ 200.722112][T10666] tipc: Enabled bearer , priority 0 [ 200.836272][T10666] tipc: Resetting bearer [ 200.867698][T10664] tipc: Disabling bearer [ 200.889298][T10679] netlink: 'syz.2.1312': attribute type 3 has an invalid length. [ 200.907442][T10682] netlink: 'syz.2.1312': attribute type 3 has an invalid length. [ 201.170059][T10693] syzkaller0: entered promiscuous mode [ 201.203112][T10693] syzkaller0: entered allmulticast mode [ 201.761211][T10737] netlink: 'syz.2.1327': attribute type 16 has an invalid length. [ 201.769821][T10737] netlink: 'syz.2.1327': attribute type 17 has an invalid length. [ 201.835318][T10737] lo: left promiscuous mode [ 201.952490][T10746] Unsupported ieee802154 address type: 0 [ 201.962231][T10737] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.969563][T10737] bridge0: port 2(bridge_slave_1) entered listening state [ 201.977129][T10737] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.984407][T10737] bridge0: port 1(bridge_slave_0) entered listening state [ 202.001214][T10737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.034402][T10748] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 202.044744][T10744] netlink: 'syz.0.1329': attribute type 8 has an invalid length. [ 202.178610][T10758] Unsupported ieee802154 address type: 0 [ 202.412259][T10768] netlink: 'syz.3.1337': attribute type 1 has an invalid length. [ 202.912848][T10791] syzkaller0: entered promiscuous mode [ 202.928283][T10791] syzkaller0: entered allmulticast mode [ 203.206250][T10811] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20004 [ 203.430856][T10783] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 203.717093][T10833] __nla_validate_parse: 7 callbacks suppressed [ 203.717115][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1356'. [ 203.922890][T10841] netlink: 'syz.3.1357': attribute type 10 has an invalid length. [ 204.014450][T10853] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 204.121256][T10844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1358'. [ 204.175298][T10814] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 204.182685][T10814] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 204.324314][T10814] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 204.342143][T10814] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 204.385057][T10871] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1364'. [ 204.448072][T10814] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 204.474536][T10871] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 204.486091][T10814] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 204.565691][T10814] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 204.593163][T10814] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 204.660857][T10814] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 204.693653][T10814] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 204.744691][T10883] ================================================================== [ 204.752852][T10883] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x16b/0x6b0 [ 204.761061][T10883] Read of size 8 at addr ffff8880323e8d48 by task syz.0.1369/10883 [ 204.769098][T10883] [ 204.771520][T10883] CPU: 0 UID: 0 PID: 10883 Comm: syz.0.1369 Not tainted syzkaller #0 PREEMPT(full) [ 204.771546][T10883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 204.771571][T10883] Call Trace: [ 204.771579][T10883] [ 204.771589][T10883] dump_stack_lvl+0xe8/0x150 [ 204.771622][T10883] print_report+0xba/0x230 [ 204.771646][T10883] ? cfusbl_device_notify+0x16b/0x6b0 [ 204.771668][T10883] kasan_report+0x117/0x150 [ 204.771694][T10883] ? net_generic+0x1e/0x240 [ 204.771730][T10883] ? cfusbl_device_notify+0x16b/0x6b0 [ 204.771757][T10883] cfusbl_device_notify+0x16b/0x6b0 [ 204.771778][T10883] ? net_generic+0x1e/0x240 [ 204.771818][T10883] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 204.771840][T10883] ? caif_device_notify+0x250/0xfc0 [ 204.771879][T10883] notifier_call_chain+0x19d/0x3a0 [ 204.771913][T10883] register_netdevice+0x1200/0x1aa0 [ 204.771938][T10883] ? __mutex_lock+0x5ac/0x1300 [ 204.771978][T10883] ? __pfx_register_netdevice+0x10/0x10 [ 204.772000][T10883] ? dev_addr_check+0x20/0x230 [ 204.772024][T10883] ? dev_addr_mod+0x354/0x520 [ 204.772048][T10883] register_netdev+0x40/0x60 [ 204.772070][T10883] bnep_add_connection+0x6e5/0xca0 [ 204.772109][T10883] ? __pfx_bnep_add_connection+0x10/0x10 [ 204.772141][T10883] ? __fget_files+0x3a0/0x420 [ 204.772175][T10883] do_bnep_sock_ioctl+0x40b/0x650 [ 204.772209][T10883] ? kasan_quarantine_put+0xbb/0x1f0 [ 204.772231][T10883] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 204.772269][T10883] ? tomoyo_path_number_perm+0x219/0x630 [ 204.772305][T10883] sock_do_ioctl+0x101/0x320 [ 204.772331][T10883] ? __pfx_sock_do_ioctl+0x10/0x10 [ 204.772353][T10883] ? do_futex+0x333/0x420 [ 204.772384][T10883] sock_ioctl+0x5c6/0x7f0 [ 204.772407][T10883] ? __pfx_sock_ioctl+0x10/0x10 [ 204.772431][T10883] ? __fget_files+0x2a/0x420 [ 204.772456][T10883] ? __fget_files+0x3a0/0x420 [ 204.772482][T10883] ? __fget_files+0x2a/0x420 [ 204.772509][T10883] ? bpf_lsm_file_ioctl+0x9/0x20 [ 204.772533][T10883] ? __pfx_sock_ioctl+0x10/0x10 [ 204.772554][T10883] __se_sys_ioctl+0xfc/0x170 [ 204.772589][T10883] do_syscall_64+0xe2/0xf80 [ 204.772619][T10883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.772640][T10883] ? trace_irq_disable+0x37/0x100 [ 204.772668][T10883] ? clear_bhb_loop+0x60/0xb0 [ 204.772690][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.772710][T10883] RIP: 0033:0x7fbbe659acb9 [ 204.772741][T10883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.772759][T10883] RSP: 002b:00007fbbe749e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.772789][T10883] RAX: ffffffffffffffda RBX: 00007fbbe6815fa0 RCX: 00007fbbe659acb9 [ 204.772811][T10883] RDX: 0000200000000380 RSI: 00000000400442c8 RDI: 0000000000000007 [ 204.772826][T10883] RBP: 00007fbbe6608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 204.772840][T10883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.772853][T10883] R13: 00007fbbe6816038 R14: 00007fbbe6815fa0 R15: 00007fffc3c0f228 [ 204.772878][T10883] [ 204.772886][T10883] [ 205.078286][T10883] Allocated by task 5154: [ 205.082681][T10883] kasan_save_track+0x3e/0x80 [ 205.087908][T10883] __kasan_kmalloc+0x93/0xb0 [ 205.092519][T10883] __kmalloc_cache_noprof+0x3d1/0x6e0 [ 205.097919][T10883] __hci_conn_add+0x3c5/0x1b30 [ 205.102715][T10883] hci_conn_request_evt+0x5b1/0xc40 [ 205.107951][T10883] hci_event_packet+0x805/0x12c0 [ 205.113030][T10883] hci_rx_work+0x3ee/0x1030 [ 205.117692][T10883] process_scheduled_works+0xaec/0x17a0 [ 205.123283][T10883] worker_thread+0x89f/0xd90 [ 205.127939][T10883] kthread+0x726/0x8b0 [ 205.132234][T10883] ret_from_fork+0x51b/0xa40 [ 205.136847][T10883] ret_from_fork_asm+0x1a/0x30 [ 205.141737][T10883] [ 205.144080][T10883] Freed by task 10814: [ 205.148358][T10883] kasan_save_track+0x3e/0x80 [ 205.153168][T10883] kasan_save_free_info+0x46/0x50 [ 205.158260][T10883] __kasan_slab_free+0x5c/0x80 [ 205.163069][T10883] kfree+0x1be/0x650 [ 205.167019][T10883] device_release+0x9e/0x1d0 [ 205.171729][T10883] kobject_put+0x228/0x560 [ 205.176187][T10883] hci_conn_del+0xc36/0x1230 [ 205.180796][T10883] hci_conn_hash_flush+0x191/0x260 [ 205.185934][T10883] hci_dev_close_sync+0x821/0x10e0 [ 205.191065][T10883] hci_dev_do_close+0x30/0xc0 [ 205.195763][T10883] hci_rfkill_set_block+0x1f4/0x290 [ 205.200985][T10883] rfkill_set_block+0x1d2/0x440 [ 205.205872][T10883] rfkill_fop_write+0x461/0x5a0 [ 205.210770][T10883] vfs_write+0x29a/0xb90 [ 205.215073][T10883] ksys_write+0x150/0x270 [ 205.219439][T10883] do_syscall_64+0xe2/0xf80 [ 205.223985][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.229941][T10883] [ 205.232298][T10883] Last potentially related work creation: [ 205.238045][T10883] kasan_save_stack+0x3e/0x60 [ 205.242767][T10883] kasan_record_aux_stack+0xbd/0xd0 [ 205.248028][T10883] insert_work+0x3d/0x330 [ 205.252410][T10883] __queue_work+0xccf/0xf90 [ 205.256952][T10883] queue_delayed_work_on+0x11a/0x1d0 [ 205.262319][T10883] l2cap_chan_del+0x285/0x610 [ 205.267075][T10883] l2cap_conn_del+0x326/0x5b0 [ 205.271981][T10883] hci_conn_hash_flush+0x10d/0x260 [ 205.277121][T10883] hci_dev_close_sync+0x821/0x10e0 [ 205.282349][T10883] hci_dev_do_close+0x30/0xc0 [ 205.287055][T10883] hci_rfkill_set_block+0x1f4/0x290 [ 205.292299][T10883] rfkill_set_block+0x1d2/0x440 [ 205.297189][T10883] rfkill_fop_write+0x461/0x5a0 [ 205.302064][T10883] vfs_write+0x29a/0xb90 [ 205.306329][T10883] ksys_write+0x150/0x270 [ 205.310680][T10883] do_syscall_64+0xe2/0xf80 [ 205.315241][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.321479][T10883] [ 205.323823][T10883] The buggy address belongs to the object at ffff8880323e8000 [ 205.323823][T10883] which belongs to the cache kmalloc-8k of size 8192 [ 205.338073][T10883] The buggy address is located 3400 bytes inside of [ 205.338073][T10883] freed 8192-byte region [ffff8880323e8000, ffff8880323ea000) [ 205.352248][T10883] [ 205.354700][T10883] The buggy address belongs to the physical page: [ 205.361157][T10883] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x323e8 [ 205.370045][T10883] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 205.378576][T10883] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 205.386150][T10883] page_type: f5(slab) [ 205.390156][T10883] raw: 00fff00000000040 ffff88813ff27280 ffffea0001eda200 0000000000000002 [ 205.398763][T10883] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 205.407380][T10883] head: 00fff00000000040 ffff88813ff27280 ffffea0001eda200 0000000000000002 [ 205.416627][T10883] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 205.425413][T10883] head: 00fff00000000003 ffffea0000c8fa01 00000000ffffffff 00000000ffffffff [ 205.434112][T10883] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 205.442871][T10883] page dumped because: kasan: bad access detected [ 205.449346][T10883] page_owner tracks the page as allocated [ 205.455100][T10883] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5486, tgid 5486 (rcS), ts 61582189990, free_ts 61471224187 [ 205.475205][T10883] post_alloc_hook+0x228/0x280 [ 205.480012][T10883] get_page_from_freelist+0x24dc/0x2580 [ 205.485809][T10883] __alloc_frozen_pages_noprof+0x18d/0x380 [ 205.491679][T10883] alloc_pages_mpol+0x232/0x4a0 [ 205.496582][T10883] allocate_slab+0x86/0x3a0 [ 205.501125][T10883] ___slab_alloc+0xd82/0x1760 [ 205.505841][T10883] __slab_alloc+0x65/0x100 [ 205.510302][T10883] __kmalloc_cache_noprof+0x40d/0x6e0 [ 205.515714][T10883] tomoyo_init_log+0x112e/0x1fb0 [ 205.520730][T10883] tomoyo_supervisor+0x353/0x1570 [ 205.525828][T10883] tomoyo_env_perm+0x151/0x1f0 [ 205.530728][T10883] tomoyo_find_next_domain+0x15cb/0x1aa0 [ 205.536411][T10883] tomoyo_bprm_check_security+0x11b/0x180 [ 205.542201][T10883] security_bprm_check+0x85/0x240 [ 205.547310][T10883] bprm_execve+0x896/0x1410 [ 205.551973][T10883] do_execveat_common+0x50f/0x690 [ 205.557046][T10883] page last free pid 5484 tgid 5484 stack trace: [ 205.563421][T10883] __free_frozen_pages+0xbb0/0xd10 [ 205.568605][T10883] __put_partials+0x146/0x170 [ 205.573434][T10883] __slab_free+0x294/0x320 [ 205.577913][T10883] qlist_free_all+0x97/0x100 [ 205.582555][T10883] kasan_quarantine_reduce+0x148/0x160 [ 205.588044][T10883] __kasan_slab_alloc+0x22/0x80 [ 205.592928][T10883] __kmalloc_noprof+0x3c2/0x7e0 [ 205.597797][T10883] tomoyo_supervisor+0xc22/0x1570 [ 205.602867][T10883] tomoyo_path_permission+0x25a/0x380 [ 205.608341][T10883] tomoyo_check_open_permission+0x2b2/0x470 [ 205.614276][T10883] security_bprm_check+0x85/0x240 [ 205.619349][T10883] bprm_execve+0x896/0x1410 [ 205.623907][T10883] do_execveat_common+0x50f/0x690 [ 205.629060][T10883] __x64_sys_execve+0x94/0xb0 [ 205.633947][T10883] do_syscall_64+0xe2/0xf80 [ 205.638511][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.644436][T10883] [ 205.646791][T10883] Memory state around the buggy address: [ 205.652526][T10883] ffff8880323e8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.660613][T10883] ffff8880323e8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.668690][T10883] >ffff8880323e8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.676771][T10883] ^ [ 205.683225][T10883] ffff8880323e8d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.691312][T10883] ffff8880323e8e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.699496][T10883] ================================================================== [ 205.747422][T10883] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 205.754711][T10883] CPU: 0 UID: 0 PID: 10883 Comm: syz.0.1369 Not tainted syzkaller #0 PREEMPT(full) [ 205.764424][T10883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 205.774530][T10883] Call Trace: [ 205.777852][T10883] [ 205.780880][T10883] vpanic+0x1e0/0x670 [ 205.784920][T10883] panic+0xc5/0xd0 [ 205.788789][T10883] ? __pfx_panic+0x10/0x10 [ 205.793257][T10883] ? preempt_schedule_thunk+0x16/0x30 [ 205.798675][T10883] ? cfusbl_device_notify+0x16b/0x6b0 [ 205.804194][T10883] check_panic_on_warn+0x89/0xb0 [ 205.809220][T10883] ? cfusbl_device_notify+0x16b/0x6b0 [ 205.814641][T10883] end_report+0x6f/0x140 [ 205.819034][T10883] kasan_report+0x128/0x150 [ 205.823647][T10883] ? net_generic+0x1e/0x240 [ 205.828223][T10883] ? cfusbl_device_notify+0x16b/0x6b0 [ 205.833640][T10883] cfusbl_device_notify+0x16b/0x6b0 [ 205.838884][T10883] ? net_generic+0x1e/0x240 [ 205.843447][T10883] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 205.849355][T10883] ? caif_device_notify+0x250/0xfc0 [ 205.854624][T10883] notifier_call_chain+0x19d/0x3a0 [ 205.859858][T10883] register_netdevice+0x1200/0x1aa0 [ 205.865201][T10883] ? __mutex_lock+0x5ac/0x1300 [ 205.870343][T10883] ? __pfx_register_netdevice+0x10/0x10 [ 205.876126][T10883] ? dev_addr_check+0x20/0x230 [ 205.880948][T10883] ? dev_addr_mod+0x354/0x520 [ 205.885675][T10883] register_netdev+0x40/0x60 [ 205.890356][T10883] bnep_add_connection+0x6e5/0xca0 [ 205.895538][T10883] ? __pfx_bnep_add_connection+0x10/0x10 [ 205.901352][T10883] ? __fget_files+0x3a0/0x420 [ 205.906086][T10883] do_bnep_sock_ioctl+0x40b/0x650 [ 205.911155][T10883] ? kasan_quarantine_put+0xbb/0x1f0 [ 205.916480][T10883] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 205.922065][T10883] ? tomoyo_path_number_perm+0x219/0x630 [ 205.927833][T10883] sock_do_ioctl+0x101/0x320 [ 205.932652][T10883] ? __pfx_sock_do_ioctl+0x10/0x10 [ 205.937796][T10883] ? do_futex+0x333/0x420 [ 205.942189][T10883] sock_ioctl+0x5c6/0x7f0 [ 205.946594][T10883] ? __pfx_sock_ioctl+0x10/0x10 [ 205.951684][T10883] ? __fget_files+0x2a/0x420 [ 205.956327][T10883] ? __fget_files+0x3a0/0x420 [ 205.961129][T10883] ? __fget_files+0x2a/0x420 [ 205.965765][T10883] ? bpf_lsm_file_ioctl+0x9/0x20 [ 205.971248][T10883] ? __pfx_sock_ioctl+0x10/0x10 [ 205.976157][T10883] __se_sys_ioctl+0xfc/0x170 [ 205.980794][T10883] do_syscall_64+0xe2/0xf80 [ 205.985338][T10883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.991434][T10883] ? trace_irq_disable+0x37/0x100 [ 205.996614][T10883] ? clear_bhb_loop+0x60/0xb0 [ 206.001342][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.007265][T10883] RIP: 0033:0x7fbbe659acb9 [ 206.011708][T10883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.031426][T10883] RSP: 002b:00007fbbe749e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.039878][T10883] RAX: ffffffffffffffda RBX: 00007fbbe6815fa0 RCX: 00007fbbe659acb9 [ 206.047871][T10883] RDX: 0000200000000380 RSI: 00000000400442c8 RDI: 0000000000000007 [ 206.055868][T10883] RBP: 00007fbbe6608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 206.063862][T10883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.071856][T10883] R13: 00007fbbe6816038 R14: 00007fbbe6815fa0 R15: 00007fffc3c0f228 [ 206.079886][T10883] [ 206.083529][T10883] Kernel Offset: disabled [ 206.087887][T10883] Rebooting in 86400 seconds..