last executing test programs: 1m14.750550257s ago: executing program 4 (id=1284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c000780081300000000000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574000000004b7538f66c8a32ba43b44daf640e4e2e7d35f2b3ca742fc0bb3cc8170cf02d89ca1980f71ca8a3a0eab7fd132c0f62fd52fae6063b2c99a7073a54da3324ee6e0fb8a15cb6165925e0f845f33d82f8b8e640311d5debe94df62b9ff3ad4bb0e2e7e20d2705a12534662d9da8cb9b79a0ac946c5fda"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000180)=0x3, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000002000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000200000000f812e85bf12c08000000000000020000000000674aca752e4172d20000"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x108, 0x18, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x558}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa3fa}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x28}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0xa8, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14}}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0, @ANYRES32], 0x17) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000300)=""/83, 0x53}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 1m13.880405142s ago: executing program 3 (id=1165): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) (async) unshare(0x22020400) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000040), &(0x7f0000001880)=0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c802400e73608000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008"], 0x250}}, 0x0) (async) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000600850000009e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r10}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a0000000200"/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r11}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) 1m1.102893703s ago: executing program 4 (id=1284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c000780081300000000000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574000000004b7538f66c8a32ba43b44daf640e4e2e7d35f2b3ca742fc0bb3cc8170cf02d89ca1980f71ca8a3a0eab7fd132c0f62fd52fae6063b2c99a7073a54da3324ee6e0fb8a15cb6165925e0f845f33d82f8b8e640311d5debe94df62b9ff3ad4bb0e2e7e20d2705a12534662d9da8cb9b79a0ac946c5fda"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000180)=0x3, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000002000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000200000000f812e85bf12c08000000000000020000000000674aca752e4172d20000"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x108, 0x18, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x558}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa3fa}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x28}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0xa8, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14}}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0, @ANYRES32], 0x17) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000300)=""/83, 0x53}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 1m0.102539541s ago: executing program 3 (id=1165): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) (async) unshare(0x22020400) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000040), &(0x7f0000001880)=0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c802400e73608000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008"], 0x250}}, 0x0) (async) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000600850000009e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r10}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a0000000200"/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r11}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) 46.947024629s ago: executing program 4 (id=1284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c000780081300000000000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574000000004b7538f66c8a32ba43b44daf640e4e2e7d35f2b3ca742fc0bb3cc8170cf02d89ca1980f71ca8a3a0eab7fd132c0f62fd52fae6063b2c99a7073a54da3324ee6e0fb8a15cb6165925e0f845f33d82f8b8e640311d5debe94df62b9ff3ad4bb0e2e7e20d2705a12534662d9da8cb9b79a0ac946c5fda"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000180)=0x3, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000002000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000200000000f812e85bf12c08000000000000020000000000674aca752e4172d20000"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x108, 0x18, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x558}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa3fa}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x28}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0xa8, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14}}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0, @ANYRES32], 0x17) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000300)=""/83, 0x53}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 46.495107329s ago: executing program 3 (id=1165): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) (async) unshare(0x22020400) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000040), &(0x7f0000001880)=0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c802400e73608000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008"], 0x250}}, 0x0) (async) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336dc0c", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000600850000009e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r10}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a0000000200"/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r11}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) 31.679267834s ago: executing program 4 (id=1284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c000780081300000000000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574000000004b7538f66c8a32ba43b44daf640e4e2e7d35f2b3ca742fc0bb3cc8170cf02d89ca1980f71ca8a3a0eab7fd132c0f62fd52fae6063b2c99a7073a54da3324ee6e0fb8a15cb6165925e0f845f33d82f8b8e640311d5debe94df62b9ff3ad4bb0e2e7e20d2705a12534662d9da8cb9b79a0ac946c5fda"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000180)=0x3, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000002000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000200000000f812e85bf12c08000000000000020000000000674aca752e4172d20000"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x108, 0x18, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x558}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa3fa}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x28}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0xa8, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14}}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0, @ANYRES32], 0x17) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000300)=""/83, 0x53}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 30.927163612s ago: executing program 3 (id=1165): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) (async) unshare(0x22020400) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000040), &(0x7f0000001880)=0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c802400e73608000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008"], 0x250}}, 0x0) (async) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000600850000009e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r10}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a0000000200"/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r11}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) 20.015137412s ago: executing program 4 (id=1284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c000780081300000000000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574000000004b7538f66c8a32ba43b44daf640e4e2e7d35f2b3ca742fc0bb3cc8170cf02d89ca1980f71ca8a3a0eab7fd132c0f62fd52fae6063b2c99a7073a54da3324ee6e0fb8a15cb6165925e0f845f33d82f8b8e640311d5debe94df62b9ff3ad4bb0e2e7e20d2705a12534662d9da8cb9b79a0ac946c5fda"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000180)=0x3, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000002000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000200000000f812e85bf12c08000000000000020000000000674aca752e4172d20000"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x108, 0x18, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x558}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa3fa}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x28}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0xa8, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14}}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0, @ANYRES32], 0x17) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000300)=""/83, 0x53}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 19.235491065s ago: executing program 3 (id=1165): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) (async) unshare(0x22020400) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000040), &(0x7f0000001880)=0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c802400e73608000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008"], 0x250}}, 0x0) (async) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000600850000009e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r10}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a0000000200"/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r11}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) 7.60800654s ago: executing program 0 (id=1979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x8000) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000000b06010800000000000000000500000205000100070000000c00078008000940000000a50900020073797a31"], 0x34}}, 0x4800) 7.297016374s ago: executing program 4 (id=1284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c000780081300000000000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574000000004b7538f66c8a32ba43b44daf640e4e2e7d35f2b3ca742fc0bb3cc8170cf02d89ca1980f71ca8a3a0eab7fd132c0f62fd52fae6063b2c99a7073a54da3324ee6e0fb8a15cb6165925e0f845f33d82f8b8e640311d5debe94df62b9ff3ad4bb0e2e7e20d2705a12534662d9da8cb9b79a0ac946c5fda"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000180)=0x3, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000002000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000200000000f812e85bf12c08000000000000020000000000674aca752e4172d20000"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0x108, 0x18, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x558}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa3fa}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x28}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELFLOWTABLE={0xa8, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x5c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}], {0x14}}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32=0x0, @ANYRES32], 0x17) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000300)=""/83, 0x53}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 6.41602184s ago: executing program 0 (id=1983): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'bridge_slave_0\x00', 0x7}) r1 = socket$can_raw(0x1d, 0x3, 0x1) close(r1) r2 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000040)=""/133, &(0x7f0000000100)=0x85) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @private}, &(0x7f0000000180)=0xc) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @mcast2, 0xf8000000}, 0x1c) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r3, r0, 0x9, 0x7a, &(0x7f0000000200)="86f6c4e8a37832201759b8538c6070ef3c390eb6ed770d4319215cc26df1a69948c56e13242281c280af0223982319710285b62ac60128d9624b8ce5e681e90cf1ebdd6765344c38ca3c292bde6b5c97e8d4eea00225e15862fce954567262dbea7771a633c689be7bb1d44f0af656a346f20dc4d2a5342786c8", 0x7a, 0x4, 0x2, 0xe98, 0xf, 0x2, 0x2, 'syz1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000480)='veth1_to_team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast2}}, &(0x7f0000000600)=0xe8) r9 = socket$qrtr(0x2a, 0x2, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xb, 0x0, r1, 0x2, '\x00', r4, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r13 = getuid() getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000940)=0xe8) r15 = getgid() r16 = gettid() getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000980)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@private2}}, &(0x7f0000000a80)=0xe8) r18 = getgid() r19 = accept4$unix(0xffffffffffffffff, &(0x7f0000000ac0)=@abs, &(0x7f0000000b40)=0x6e, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000b80)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000c80)=0xe8) r21 = getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f00000004c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2}, 0xc, &(0x7f0000000780)=[{&(0x7f0000000640)={0x8c, 0x42, 0x8, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x33, 0x0, 0x0, @uid=r8}, @generic="cc3263296136e40fbffb2fc76a03cc6a8c65e9d7ca6d4d0712339e8036047808173db8a89516a5b4b035333406fe556cd8a304cfd044ab3a3227db8da75f98fab4fe723217fe113fa5219607202606626ded08a6ab2b1101a869a390b610d935f65fddb002ca0bf7a044c94cbe6531d5a39bd2"]}, 0x8c}, {&(0x7f0000000700)={0x5c, 0x3e, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@generic="f82754be4eb007e49dd52f759a193b59932d0ac09f702dbb611984e1e1d3ee2c81a683901239116938e2797e5a092a9d875412eae1117e1f6c3abb0dfbcfcbfe77b8fcbb6e52585f6648dc"]}, 0x5c}], 0x2, &(0x7f0000000cc0)=[@rights={{0x20, 0x1, 0x1, [r1, r2, r9, r1]}}, @rights={{0x28, 0x1, 0x1, [r5, r10, r11, r6, r12, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, r19]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r20, r21}}}, @rights={{0x24, 0x1, 0x1, [r2, r6, r1, r1, r6]}}, @rights={{0x28, 0x1, 0x1, [r1, r6, r0, r3, r6, r0]}}], 0x150, 0x4090}, 0x4008000) 6.408853771s ago: executing program 3 (id=1165): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) (async) unshare(0x22020400) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f0000000040), &(0x7f0000001880)=0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c802400e73608000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008"], 0x250}}, 0x0) (async) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000600850000009e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r10}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a0000000200"/28], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r11}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) 3.875946666s ago: executing program 0 (id=1989): unshare(0x400) r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x9}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r0, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 3.687151731s ago: executing program 0 (id=1991): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000200)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="050000000300000004000000070000000000004c600412f8e2524c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x38, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5b}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0xd, 0xc, &(0x7f0000002b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000002b40)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008000000000000000800000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000280)=r7}, 0x20) ioctl$F2FS_IOC_COMPRESS_FILE(r9, 0xf518, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000580)="74d8c1857a03a43424634b3575b2af67a80aa565d2ab164ecf0efbdb74123dfaaddf3b29a7ab016f0129909d71d1cc7686d3bd82dae68522d675b253ab796eab410176c67f5d823a891f3c245c045539d30cd982600ce69d505ccc71f20d09a9777153d3c92ab2be6c436f7a21933c3d76f53711efbd5145b2331238204d743d04415e3dc6ac91064851a52365174ab064", 0x91, 0x44451, &(0x7f0000000540)={0xa, 0x4ea4, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x16}, 0x1ffff}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000180)={'veth0\x00', &(0x7f0000000300)=@ethtool_coalesce={0xe, 0x5, 0x81, 0x7ff, 0x1, 0x7, 0x7, 0xa, 0x7f, 0x1ff, 0xffff, 0x2, 0x1, 0x7ff, 0xffffffff, 0xfffffffa, 0x6, 0x5, 0x2, 0x1, 0x800, 0xff, 0xcf}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x17, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0xa, 0x0, 0x20, 0x11}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a4000000003280004800800024000000012080001400000000014000300776c616e31000000000000000000000014000000110001"], 0xa4}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.992089122s ago: executing program 0 (id=1993): unshare(0x68040200) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x2, "03e3"}, &(0x7f0000000180)=0xa) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 2.949132388s ago: executing program 2 (id=1994): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xcc15, @dev, 0x7}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xcc15, @dev, 0x7}, 0x1c) close(r0) (async) close(r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), 0xffffffffffffffff) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="b40500000000000061107800000000008500000084000000940000000000000085735cab7b71f18cb0ad200000021c0000950000276fe182a6268c0e11f8940ed7023c5cf08d4e6f0d5698f8624ef4abd3362b64602aad8f3a204f0b09a2bee410cfc61de276990d9e"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe9, @void, @value}, 0x94) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20) (async) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20) socket$inet6(0xa, 0x80000, 0x80000002) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b000701000000000000000004"], 0x34}}, 0xc000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200)=0x10001, 0x12) sendfile(r4, r3, 0x0, 0xf03a0005) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000900)=[{&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000780)=""/122, 0x7a}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/207, 0xcf}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000001b80)=""/196, 0xc4}], 0x7, &(0x7f0000000980)=""/169, 0xa9}, 0x7}], 0x2, 0x12141, 0x0) (async) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x20000}, {{&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000900)=[{&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000780)=""/122, 0x7a}, {&(0x7f0000000500)=""/165, 0xa5}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/207, 0xcf}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000001b80)=""/196, 0xc4}], 0x7, &(0x7f0000000980)=""/169, 0xa9}, 0x7}], 0x2, 0x12141, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b00171b3f00"], 0x58}}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b00171b3f00"], 0x58}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r9, &(0x7f00000000c0), 0x9) sendfile(r9, r8, 0x0, 0x10000) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff) 2.386236463s ago: executing program 1 (id=1998): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8402401}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x100, 0x70bd26, 0x5, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffff9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x4, 0xffff, 0x1b, @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x10, 0x20, 0x3, 0x2}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000049e5dbf24fed1e6d3f15b19d5265dcaf27fda6a95620f8a7a1f6d4caf49f5a611f9593b144a706b50186e1b59d9bcac4f75ced378de0b71707c9e1b5aea977a7e87a8071544e33b76f221fe41b85", @ANYRES16=r5, @ANYBLOB="01000000000000000000080000000c00018008000100", @ANYRES32=r6, @ANYBLOB="1c000280180003801400018005000200000000000800010000000000"], 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8d}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x80) 2.021382321s ago: executing program 2 (id=1999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x2b0, r3, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0x5f}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x234, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @device_b, @initial, {0x9, 0x7}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x5, @random=0x100, 0x60, @void, @void, @val={0x3, 0x1, 0xb1}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x7, 0x7f}}, @void, @val={0x3c, 0x4, {0x1, 0x2, 0xb, 0x6}}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x8, 0x9}}, @void, [{0xdd, 0x50, "b45f0d75daa365811fee4a8c63534f978c21f55d8abc6f8cc0389003048fc3d053fe593bffc258fb46f233d406fc2b333f67a986e6c5766edffa72b2d24e87bab662a2051bdec9ae5d1c33de59867c62"}, {0xdd, 0x4c, "029e16090467ce92c84216630bd4df31dbbd79caedae1ad2df7bdb3ad733a29a9f90704cfded62426ae103e3cc69d53d5f08db4f5dec854bfe383b4ad0213c5eb8cd63c38ac833719db3fe78"}, {0xdd, 0xef, "2202c31c0a6208225cb2a3257ffa262c6dd24bbd312cf90cd567b003e5db7b6e83fcfc54804961e2e55664be61f834ea5af790b374b61f0312cb736221b8f58d438105b306459ed3b92c56d7439aef566da4514e4a876643370f5f1588e8c72d17b39ff56ba7eae1891ec0baa54b80e75cee5f3f74c1afd7cfd389d3a6230aae67f3f23019ffb3e7d142a89d02966833b1337e261b67be058f01fb571357fc48c8cab5584083413a393bdf1d342fae132afdebb7fd1592a87917fa76860a294c8e8a60e913c91ae83cc7a7a5a4662b5c54d717f42b4ff83d9a79c8b3c0c2eda4abdcfb40d2f1384b5f0af480433838"}, {0xdd, 0x5e, "393607a960d83be0933880342a4d4988f89577f4e187e7f7d9374804df987135ee287f3d4644c6e8cd3004b09755121001e07696d296d4ccbf4db007db5d43760a02565e6f66bef3af132e714a3aa2ceb99cb61cccd03c187fe88be33e1d"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xbd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xb5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}]]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4068804}, 0x24008850) r5 = socket$inet6(0xa, 0x2, 0x3a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) connect$inet6(r5, &(0x7f0000000640)={0xa, 0x0, 0x80, @local, 0x46}, 0x1c) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf256a00000008000300", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)={0x190, r3, 0x7b95d8f2df6fd3c4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5a}}}}, [@NL80211_ATTR_TX_RATES={0x170, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x5831, 0x6cf, 0xc, 0x9, 0x1e4, 0x0, 0x2000]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x18, 0x5, 0x48, 0x6, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x3, 0xffff, 0x0, 0x6, 0x2, 0xc19e]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x3, 0xa}, {0x4, 0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x5, 0x1}, {0x2, 0x2}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0xa}, {0x6, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x5, 0x2}, {0x2}, {0x6, 0x8}, {0x7, 0x5}, {0x7}, {0x6, 0x3}, {0x7, 0x3}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0x9}, {}, {0x5, 0xa}, {0x2, 0x5}, {0x4}, {0x3, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x2, 0x5}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0x7}, {0x6, 0x4}, {0x5, 0x6}, {0x0, 0x1}, {0x3, 0x3}, {0x0, 0x1}, {0x0, 0x4}, {0x0, 0x3}, {0x3, 0x7}, {0x3, 0x1}, {0x6, 0x2}, {0x5, 0x8}, {0x0, 0x6}, {0x6, 0x4}, {0x0, 0x8}, {0x4, 0x7}, {0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x1, 0x3777, 0x7, 0x8, 0x8, 0x5, 0x1ff]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x5, 0x2}, {0x5, 0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x5}, {0x0, 0x4}, {0x5, 0x7}, {0x4, 0x8}, {0x1, 0x6}, {0x0, 0x9}, {0x6, 0x4}, {0x7, 0x8}, {0x6, 0x1}, {0x7, 0x4}, {0x5, 0x9}, {0x0, 0x6}, {0x1, 0x3}, {0x0, 0x9}, {0x2, 0xa}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x9}, {0x7, 0x6}, {0x1, 0xa}, {0x7, 0x5}, {0x6, 0xa}, {0x7, 0x6}, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x5}, {0x1, 0xa}, {0x0, 0x7}, {0x3, 0x1}, {0x4, 0x1}, {0x1}]}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x23, 0xe, 0x4, 0x8, 0x7f, 0x5, 0x8, 0xfffa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5, 0xfffe, 0x6, 0x88b0, 0x12, 0x80, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x8, 0x0, 0xfffd, 0x5, 0x9, 0x40]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x9}, {0x2, 0xa}, {0x0, 0xa}, {0x2, 0x6}, {0x3, 0x9}, {0x4, 0x9}, {}, {0x1, 0x9}, {0x2, 0x1}, {0x5, 0x6}, {0x3, 0xa}, {0x6, 0x1}, {0x6, 0x8}, {0x4, 0x9}, {0x7, 0x2}, {0x5, 0x5}, {}, {0x5, 0x2}, {0x1, 0x7}, {0x7, 0x9}, {0x1}, {0x2, 0x3}, {0x2, 0x3}, {0x1, 0x4}, {0x1, 0x7}, {0x1, 0xa}, {0x1, 0x4}, {0x3, 0x6}, {0x4, 0xa}, {0x7, 0x1}, {0x2, 0x7}, {0x1}, {0x1, 0x9}, {0x1, 0x1}, {0x5, 0x7}, {0x1, 0x7}, {0x3, 0xa}, {0x5, 0x5}, {0x1, 0xa}, {0x1, 0x7}, {0x3, 0x8}, {0x2, 0x9}, {0x6, 0x3}, {0x4, 0x7}, {0x0, 0x5}, {0x6, 0x1}, {0x1, 0x8}, {0x7, 0x5}, {0x4, 0x6}, {0x7, 0x1}, {0x0, 0x9}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x72f2, 0x6c6e, 0x0, 0xba2, 0x6, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x2000c884}, 0x24000004) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_int(r7, 0x0, 0x20, &(0x7f0000000d00)=0xfff, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000900072e01030000000000a15359b9564325f10000000000eadc0000000200"/51], 0x28}, 0x1, 0x0, 0x0, 0x94}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0xe, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r8, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff8906", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.945060124s ago: executing program 1 (id=2000): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x30, 0x1a, 0x0, 0x1, [@AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x30, 0x1a, 0x0, 0x1, [@AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) 1.871139102s ago: executing program 2 (id=2001): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 880.509719ms ago: executing program 1 (id=2002): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x14, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001540)={&(0x7f0000000300)=@qipcrtr={0x2a, 0x2}, 0x80, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002c40)="f0", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fd, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x431, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x3, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x40002, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x0, 0x0, 0x0, 0x400}}}]}}]}, 0x45c}}, 0x0) 813.142395ms ago: executing program 2 (id=2003): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff5, 0xfff2}, {}, {0x10, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_MASK={0x4, 0x5, 0x2}, @TCA_FW_CLASSID={0x0, 0x1, {0x10, 0x10}}]}}]}, 0x4c}}, 0x44) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000580)={0x724, 0x4, 0x7, 0x2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000ab80)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x2e, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}}, 0xc000) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00e75f4500090000e70000008cf652ddec9662e86ad9d4a04baa090ffc4faac0a6340669a55292a81a090fdf21d46e6574dd92a7f8a66508c709dc3f3071b6bb3b5a2a8183d965c52161", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x24000020}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000002c0)=0x400, 0x4) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x1f0, r10, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "1c837d7e5a5115659c600151659569c656fa89440c9d2aecc51c6116ac"}}]}, @TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x3a, 0x3, "c7e1f14fcb2f5ad6cefafab3758dc74541d5bf7676d37233e419d7b5a9d21e1264d84975feef6f52263d7a53774465dae537f78dd16e"}, @TIPC_NLA_NODE_ID={0x9a, 0x3, "106d6f949848e1472f5725fdc24bd7ed32c95e3393ee68693295481afd0a4657fbc5c06d87097b0cd02ffa3db0c27b78d1e787432d520fad0a1fea87c11415199f582dfe36b3ec12099e9f37bbb40380dc41099c9f4fa58ef7fd6398cd064095cf122fd512c6abe15506c01b5ad7630d02e766c3d3289b0eb968b7f650ddee02255cef1b21c7ad5537bca6aa6da70583024d97607cad"}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffd}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x804}, 0x4800) sendto$packet(r6, &(0x7f0000000140), 0x0, 0x40000, &(0x7f00000001c0)={0x11, 0x1, r5, 0x1, 0x70, 0x6, @local}, 0x14) r13 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r13, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x7848800}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x0) writev(r13, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1000000000000083) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x4c}}, 0x0) 701.719723ms ago: executing program 1 (id=2004): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000014c0)={&(0x7f0000000080)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000000340)="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", 0xff7}, {0x0}], 0x2, &(0x7f00000002c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x3c}}}], 0x18}, 0x0) (async, rerun: 64) r1 = socket$inet6(0xa, 0x3, 0x7) (async, rerun: 64) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006110040000000000630afcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast1, 0x800, 0x0, 0x1, 0x9}, 0x20) 540.103625ms ago: executing program 1 (id=2005): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x9}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001200000", 0x24) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x14, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote, {[@timestamp_addr={0x44, 0x3c, 0xfb, 0x1, 0x4, [{@empty, 0x3}, {@rand_addr=0x64010102, 0x6}, {@loopback, 0x140}, {@loopback, 0x9}, {@remote, 0xfff}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x1}]}]}}, {{0x0, 0x400, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x3}}}}}}, 0x0) 467.989649ms ago: executing program 2 (id=2006): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100000000000000000007"], 0x14}], 0x1}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000800)={0x9, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @loopback}}]}, 0x190) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000005180)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000029"], 0x30}}], 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 380.238922ms ago: executing program 2 (id=2007): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20048810, &(0x7f0000000000)={0x2, 0xfffc, @broadcast}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x81}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000880) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x82, &(0x7f00000001c0)={r5}, 0x8) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x50, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x4050) sendmmsg$inet6(r1, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)="d01d4881040cc19a2d2902fdf1d9752173744eebf9f976c207090ab9fc54e1fb15e5ffa4c7270a3d53d0f32cc6327d256ad8a00d8e75f29964d103fdc71b9908bc4ab7d37ecfbbbf3bc0b0c479e116d2218b3925993d746023936cea5863e7848744fd9d5c6edbb2c1d983acf3c2306c2836e49c43ff2c73fd63e5053796d286fbc5668bd46a24b6bade7fd81722cdd380d60d2d766d423d39a44bee9338bcfdbc5b7f9aaaa7272204318eb1", 0xac}, {&(0x7f0000000600)="2f93d03e2cfb89899731ed288170cddf5b2574413b", 0x15}, {0x0}], 0x3}}], 0x1, 0x4040800) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="10000000181401"], 0x10}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000040)={0x79, 0x6, 0x7fff, 0x3}, 0x10) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r10, 0x8}}}}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}}, 0x0) 353.103151ms ago: executing program 1 (id=2008): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x439, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x102}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x3}]}}}]}, 0x44}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x100}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000007000000080001"], 0x1c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r5 = socket$netlink(0x10, 0x3, 0xe) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x8) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r5) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r11, 0x8, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8818}, 0x40000) ioctl$SIOCAX25OPTRT(r10, 0x89e7, &(0x7f0000001c00)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x20}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200), r6) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aa00001cfffe0000a02f90787f000001e0000001209078"], 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x2c, 0x2c, 0x100, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004091}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x4, &(0x7f00000000c0)=0x4) 0s ago: executing program 0 (id=2009): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000060000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b7030000000080008500000006000000b7080000ff000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) kernel console output (not intermixed with test programs): 4] veth0_macvtap: entered promiscuous mode [ 250.959926][T11634] veth1_macvtap: entered promiscuous mode [ 250.979664][T11634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.991199][T11634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.001582][T11634] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.010648][T11634] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.019785][T11634] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.029081][T11634] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.307168][ T7533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.315034][ T7533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.407464][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.428664][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.439720][T11671] veth0_vlan: entered promiscuous mode [ 251.477879][T11671] veth1_vlan: entered promiscuous mode [ 251.567928][T11671] veth0_macvtap: entered promiscuous mode [ 251.577568][T11671] veth1_macvtap: entered promiscuous mode [ 251.618976][T11671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.649329][T11671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.683070][T11671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.739015][T11671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.775871][T11671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.793697][T11671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.859526][T11671] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.872579][T11671] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.883510][T11671] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.912380][T11671] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.059240][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.074181][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.128483][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.156643][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.214489][T11853] FAULT_INJECTION: forcing a failure. [ 252.214489][T11853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.246106][T11853] CPU: 0 UID: 0 PID: 11853 Comm: syz.2.1505 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0 [ 252.246135][T11853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 252.246145][T11853] Call Trace: [ 252.246151][T11853] [ 252.246159][T11853] dump_stack_lvl+0x241/0x360 [ 252.246185][T11853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.246209][T11853] ? __pfx__printk+0x10/0x10 [ 252.246228][T11853] ? __pfx_lock_release+0x10/0x10 [ 252.246250][T11853] ? __lock_acquire+0x1397/0x2100 [ 252.246279][T11853] should_fail_ex+0x40a/0x550 [ 252.246305][T11853] _copy_from_user+0x2d/0xb0 [ 252.246326][T11853] kstrtouint_from_user+0xc6/0x190 [ 252.246353][T11853] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 252.246379][T11853] ? __pfx_lock_acquire+0x10/0x10 [ 252.246409][T11853] proc_fail_nth_write+0xaa/0x2d0 [ 252.246430][T11853] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 252.246450][T11853] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 252.246476][T11853] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 252.246499][T11853] vfs_write+0x29f/0xd10 [ 252.246517][T11853] ? fdget_pos+0x254/0x320 [ 252.246537][T11853] ? __mutex_unlock_slowpath+0x227/0x800 [ 252.246561][T11853] ? __pfx_vfs_write+0x10/0x10 [ 252.246575][T11853] ? do_sys_openat2+0x17a/0x1d0 [ 252.246599][T11853] ? __fget_files+0x2a/0x410 [ 252.246621][T11853] ? __fget_files+0x395/0x410 [ 252.246640][T11853] ? __fget_files+0x2a/0x410 [ 252.246688][T11853] ksys_write+0x18f/0x2b0 [ 252.246707][T11853] ? __pfx_ksys_write+0x10/0x10 [ 252.246724][T11853] ? do_syscall_64+0x100/0x230 [ 252.246747][T11853] ? do_syscall_64+0xb6/0x230 [ 252.246768][T11853] do_syscall_64+0xf3/0x230 [ 252.246787][T11853] ? clear_bhb_loop+0x35/0x90 [ 252.246812][T11853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.246832][T11853] RIP: 0033:0x7fa72a98b89f [ 252.246847][T11853] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 252.246861][T11853] RSP: 002b:00007fa7287f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 252.246880][T11853] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa72a98b89f [ 252.246891][T11853] RDX: 0000000000000001 RSI: 00007fa7287f60a0 RDI: 0000000000000004 [ 252.246901][T11853] RBP: 00007fa7287f6090 R08: 0000000000000000 R09: 0000000000000000 [ 252.246912][T11853] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 252.246922][T11853] R13: 0000000000000000 R14: 00007fa72aba5fa0 R15: 00007ffce8ec8758 [ 252.246950][T11853] [ 252.520497][ T7529] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.649749][ T7529] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.307838][ T7529] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.410725][T11868] netlink: 'syz.2.1508': attribute type 10 has an invalid length. [ 253.477077][ T7529] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.497179][T11869] netlink: 'syz.2.1508': attribute type 10 has an invalid length. [ 253.551217][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.563314][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.577236][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.585283][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.592912][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 253.602366][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.650127][T11872] lo speed is unknown, defaulting to 1000 [ 253.663356][ T7529] bridge_slave_1: left allmulticast mode [ 253.670466][ T7529] bridge_slave_1: left promiscuous mode [ 253.676287][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.684677][ T7529] bridge_slave_0: left allmulticast mode [ 253.690716][ T7529] bridge_slave_0: left promiscuous mode [ 253.696509][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.048316][ T7529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.058929][ T7529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.071969][ T7529] bond0 (unregistering): Released all slaves [ 254.130008][T11872] lo speed is unknown, defaulting to 1000 [ 254.435885][T11872] lo speed is unknown, defaulting to 1000 [ 254.582864][T11897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1515'. [ 254.767812][T11905] batman_adv: batadv0: Removing interface: dummy0 [ 254.814427][T11909] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 254.856471][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.874631][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.884137][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.893680][T11905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.905642][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.933543][ T5835] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 254.955656][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.997728][T11905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.048272][T11905] batman_adv: batadv0: Removing interface: macsec1 [ 255.185447][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 255.224887][ T7529] hsr_slave_0: left promiscuous mode [ 255.240675][ T7529] hsr_slave_1: left promiscuous mode [ 255.246889][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.254368][ T7529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.277470][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.293887][ T7529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.325676][ T7529] veth1_macvtap: left promiscuous mode [ 255.331479][ T7529] veth0_macvtap: left promiscuous mode [ 255.337652][ T7529] veth1_vlan: left promiscuous mode [ 255.343110][ T7529] veth0_vlan: left promiscuous mode [ 255.689413][ T5835] Bluetooth: hci1: command tx timeout [ 255.941537][ T7529] team0 (unregistering): Port device team_slave_1 removed [ 255.999715][ T7529] team0 (unregistering): Port device team_slave_0 removed [ 256.087342][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.708937][T11934] lo speed is unknown, defaulting to 1000 [ 256.756526][T11906] lo speed is unknown, defaulting to 1000 [ 256.763731][T11934] lo speed is unknown, defaulting to 1000 [ 256.807299][T11872] chnl_net:caif_netlink_parms(): no params data found [ 256.976166][T11872] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.986986][T11872] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.994386][T11872] bridge_slave_0: entered allmulticast mode [ 257.016714][T11872] bridge_slave_0: entered promiscuous mode [ 257.036633][T11872] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.045539][ T5835] Bluetooth: hci2: command tx timeout [ 257.058087][T11872] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.065527][T11872] bridge_slave_1: entered allmulticast mode [ 257.072732][T11872] bridge_slave_1: entered promiscuous mode [ 257.084760][T11947] lo speed is unknown, defaulting to 1000 [ 257.090813][T11906] lo speed is unknown, defaulting to 1000 [ 257.122411][T11934] lo speed is unknown, defaulting to 1000 [ 257.190606][T11872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.239476][T11872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.250087][T11947] lo speed is unknown, defaulting to 1000 [ 257.264868][T11906] lo speed is unknown, defaulting to 1000 [ 257.348629][T11872] team0: Port device team_slave_0 added [ 257.419874][T11962] FAULT_INJECTION: forcing a failure. [ 257.419874][T11962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.440338][T11962] CPU: 0 UID: 0 PID: 11962 Comm: syz.2.1530 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0 [ 257.440364][T11962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 257.440374][T11962] Call Trace: [ 257.440381][T11962] [ 257.440388][T11962] dump_stack_lvl+0x241/0x360 [ 257.440414][T11962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.440432][T11962] ? __pfx__printk+0x10/0x10 [ 257.440455][T11962] ? snprintf+0xda/0x120 [ 257.440481][T11962] should_fail_ex+0x40a/0x550 [ 257.440507][T11962] _copy_to_user+0x31/0xb0 [ 257.440528][T11962] simple_read_from_buffer+0xca/0x150 [ 257.440552][T11962] proc_fail_nth_read+0x1e9/0x250 [ 257.440576][T11962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.440598][T11962] ? rw_verify_area+0x243/0x630 [ 257.440622][T11962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.440644][T11962] vfs_read+0x1f8/0xb40 [ 257.440661][T11962] ? fdget_pos+0x254/0x320 [ 257.440683][T11962] ? __pfx___mutex_lock+0x10/0x10 [ 257.440703][T11962] ? __pfx_vfs_read+0x10/0x10 [ 257.440716][T11962] ? do_sys_openat2+0x17a/0x1d0 [ 257.440740][T11962] ? __fget_files+0x2a/0x410 [ 257.440762][T11962] ? __fget_files+0x395/0x410 [ 257.440780][T11962] ? __fget_files+0x2a/0x410 [ 257.440809][T11962] ksys_read+0x18f/0x2b0 [ 257.440827][T11962] ? __pfx_ksys_read+0x10/0x10 [ 257.440844][T11962] ? do_syscall_64+0x100/0x230 [ 257.440866][T11962] ? do_syscall_64+0xb6/0x230 [ 257.440888][T11962] do_syscall_64+0xf3/0x230 [ 257.440906][T11962] ? clear_bhb_loop+0x35/0x90 [ 257.440930][T11962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.440949][T11962] RIP: 0033:0x7fa72a98b7fc [ 257.440963][T11962] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 257.440977][T11962] RSP: 002b:00007fa7287f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.440995][T11962] RAX: ffffffffffffffda RBX: 00007fa72aba5fa0 RCX: 00007fa72a98b7fc [ 257.441007][T11962] RDX: 000000000000000f RSI: 00007fa7287f60a0 RDI: 0000000000000005 [ 257.441017][T11962] RBP: 00007fa7287f6090 R08: 0000000000000000 R09: 0000000000000000 [ 257.441027][T11962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.441037][T11962] R13: 0000000000000000 R14: 00007fa72aba5fa0 R15: 00007ffce8ec8758 [ 257.441064][T11962] [ 257.758052][T11872] team0: Port device team_slave_1 added [ 257.765424][ T5835] Bluetooth: hci1: command tx timeout [ 257.821503][ T7529] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.841616][T11947] lo speed is unknown, defaulting to 1000 [ 257.867307][T11966] pim6reg: entered allmulticast mode [ 258.017849][T11872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.024833][T11872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.051050][T11872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.078653][T11967] netlink: set zone limit has 4 unknown bytes [ 258.105968][ T7529] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.178359][T11872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.195242][T11872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.237085][T11872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.274975][ T7529] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.403921][ T7529] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.465132][T11872] hsr_slave_0: entered promiscuous mode [ 258.479968][T11872] hsr_slave_1: entered promiscuous mode [ 258.498654][T11872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.507867][T11872] Cannot create hsr debugfs directory [ 258.828986][ T7529] bridge_slave_1: left allmulticast mode [ 258.834971][ T7529] bridge_slave_1: left promiscuous mode [ 258.840798][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.850324][ T7529] bridge_slave_0: left allmulticast mode [ 258.857061][ T7529] bridge_slave_0: left promiscuous mode [ 258.862893][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.129990][ T5835] Bluetooth: hci2: command tx timeout [ 259.230822][ T7529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.241757][ T7529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.251869][ T7529] bond0 (unregistering): Released all slaves [ 259.270276][T11906] chnl_net:caif_netlink_parms(): no params data found [ 259.579559][T12001] lo speed is unknown, defaulting to 1000 [ 259.627370][T12001] lo speed is unknown, defaulting to 1000 [ 259.661640][T12006] lo speed is unknown, defaulting to 1000 [ 259.822044][T12014] netlink: 'syz.1.1543': attribute type 2 has an invalid length. [ 259.835025][T12014] fþ²¹¥‰: entered promiscuous mode [ 259.845610][ T5835] Bluetooth: hci1: command tx timeout [ 259.917799][T12008] batadv_slave_1: entered promiscuous mode [ 259.996153][T12006] lo speed is unknown, defaulting to 1000 [ 260.005440][T12001] lo speed is unknown, defaulting to 1000 [ 260.029112][T11906] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.036891][T11906] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.044733][T11906] bridge_slave_0: entered allmulticast mode [ 260.053600][T11906] bridge_slave_0: entered promiscuous mode [ 260.100637][T11906] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.175706][T11906] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.182932][T11906] bridge_slave_1: entered allmulticast mode [ 260.201026][T11906] bridge_slave_1: entered promiscuous mode [ 260.278414][T12006] lo speed is unknown, defaulting to 1000 [ 260.368886][T12023] x_tables: unsorted underflow at hook 3 [ 260.406216][T11906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.483431][ T7529] hsr_slave_0: left promiscuous mode [ 260.495993][ T7529] hsr_slave_1: left promiscuous mode [ 260.501929][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.512498][ T7529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.520617][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.528625][ T7529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.553260][ T7529] veth1_macvtap: left promiscuous mode [ 260.559001][ T7529] veth0_macvtap: left promiscuous mode [ 260.564592][ T7529] veth1_vlan: left promiscuous mode [ 260.570279][ T7529] veth0_vlan: left promiscuous mode [ 261.090927][ T7529] team0 (unregistering): Port device team_slave_1 removed [ 261.137858][ T7529] team0 (unregistering): Port device team_slave_0 removed [ 261.208392][ T5835] Bluetooth: hci2: command tx timeout [ 261.925624][ T5835] Bluetooth: hci1: command tx timeout [ 261.967897][T12005] batadv_slave_1: left promiscuous mode [ 261.976404][T11906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.032852][T12031] syzkaller1: entered promiscuous mode [ 262.045525][T12031] syzkaller1: entered allmulticast mode [ 262.191073][T11906] team0: Port device team_slave_0 added [ 262.205806][T11872] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 262.308290][T11906] team0: Port device team_slave_1 added [ 262.346777][T11872] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 262.412070][T12042] netlink: 'syz.2.1551': attribute type 1 has an invalid length. [ 262.420924][T11872] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 262.421561][T12045] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1550'. [ 262.453603][T11906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.461088][T11906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.505386][T11906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.532636][T11872] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 262.559061][T12039] netlink: 'syz.1.1550': attribute type 1 has an invalid length. [ 262.576811][T11906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.605303][T11906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.671277][T11906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.832355][T11906] hsr_slave_0: entered promiscuous mode [ 262.844797][T11906] hsr_slave_1: entered promiscuous mode [ 262.853132][T11906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.868490][T11906] Cannot create hsr debugfs directory [ 262.880953][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 262.905544][T12059] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1556'. [ 263.258790][T11872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.286709][ T5849] Bluetooth: hci2: command tx timeout [ 263.310006][T11872] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.323631][ T7534] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.330810][ T7534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.386724][ T7534] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.393921][ T7534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.620008][T11906] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.658087][T11906] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.680234][T11906] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 263.681367][T12075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1561'. [ 263.727948][T11906] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 263.850178][T11906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.894835][T11872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.928930][T11906] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.960487][ T7533] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.967682][ T7533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.049987][ T7533] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.057191][ T7533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.138857][T12093] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1566'. [ 264.148939][T11906] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.176858][T11906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.487620][T11872] veth0_vlan: entered promiscuous mode [ 264.512779][T11872] veth1_vlan: entered promiscuous mode [ 264.544618][T11906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.656565][T11872] veth0_macvtap: entered promiscuous mode [ 264.687864][T11872] veth1_macvtap: entered promiscuous mode [ 264.710079][T12117] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1573'. [ 264.710224][T11906] veth0_vlan: entered promiscuous mode [ 264.759822][T11872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.787773][T11906] veth1_vlan: entered promiscuous mode [ 264.798775][T11872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.815075][T11872] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.841931][T11872] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.841972][T12119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1574'. [ 264.871248][T11872] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.884109][T11872] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.890141][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1574'. [ 264.927652][T12119] netlink: 'syz.2.1574': attribute type 2 has an invalid length. [ 264.939247][T12123] syzkaller1: entered promiscuous mode [ 264.944749][T12123] syzkaller1: entered allmulticast mode [ 264.954144][T12119] netlink: 'syz.2.1574': attribute type 9 has an invalid length. [ 264.969599][T12119] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1574'. [ 265.009861][T12122] x_tables: duplicate underflow at hook 1 [ 265.029849][T11906] veth0_macvtap: entered promiscuous mode [ 265.050214][T11906] veth1_macvtap: entered promiscuous mode [ 265.191276][T11906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.206613][T11906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.219252][T11906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.249683][T11906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.261455][T11906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.273430][T11906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.338320][ T7540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.345998][T12137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1580'. [ 265.353426][ T7540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.366001][ T5849] Bluetooth: hci2: command 0x0405 tx timeout [ 265.391321][T12138] netlink: 'syz.2.1579': attribute type 8 has an invalid length. [ 265.429027][T11906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.447432][T11906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.475353][T11906] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.484123][T11906] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.522466][ T7529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.558230][ T7529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.692133][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.727737][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.792103][T12145] lo speed is unknown, defaulting to 1000 [ 265.798231][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.814035][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.832176][T12145] lo speed is unknown, defaulting to 1000 [ 266.190912][T12145] lo speed is unknown, defaulting to 1000 [ 266.528591][ T7529] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.668246][ T7529] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.888875][ T7529] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.978592][ T7529] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.099532][ T7529] bridge_slave_1: left allmulticast mode [ 267.111075][ T7529] bridge_slave_1: left promiscuous mode [ 267.121426][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.140219][ T7529] bridge_slave_0: left allmulticast mode [ 267.151774][ T7529] bridge_slave_0: left promiscuous mode [ 267.161180][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.521779][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.535925][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.544451][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.566321][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.573960][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 267.595343][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 267.781925][ T7529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.792488][ T7529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.803151][ T7529] bond0 (unregistering): Released all slaves [ 267.834206][T12205] lo speed is unknown, defaulting to 1000 [ 267.869288][T12205] lo speed is unknown, defaulting to 1000 [ 268.138770][T12205] lo speed is unknown, defaulting to 1000 [ 268.167205][T12212] lo speed is unknown, defaulting to 1000 [ 268.216420][T12213] __nla_validate_parse: 2 callbacks suppressed [ 268.216436][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1592'. [ 268.237188][T12212] lo speed is unknown, defaulting to 1000 [ 268.473140][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 268.484582][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 268.493874][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 268.506354][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 268.515495][ T5851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 268.523826][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 268.534691][T12229] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1595'. [ 268.602465][T12212] lo speed is unknown, defaulting to 1000 [ 268.623946][T12205] chnl_net:caif_netlink_parms(): no params data found [ 268.656577][T12224] lo speed is unknown, defaulting to 1000 [ 268.697243][T12224] lo speed is unknown, defaulting to 1000 [ 268.856608][ T7529] hsr_slave_0: left promiscuous mode [ 268.920845][ T7529] hsr_slave_1: left promiscuous mode [ 268.938944][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.957150][ T7529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.973871][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.984177][ T7529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.009667][T12237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1596'. [ 269.021429][ T7529] veth1_macvtap: left promiscuous mode [ 269.027182][ T7529] veth0_macvtap: left promiscuous mode [ 269.032860][ T7529] veth1_vlan: left promiscuous mode [ 269.038643][ T7529] veth0_vlan: left promiscuous mode [ 269.687585][ T5851] Bluetooth: hci1: command tx timeout [ 269.866590][ T7529] team0 (unregistering): Port device team_slave_1 removed [ 269.957902][ T7529] team0 (unregistering): Port device team_slave_0 removed [ 270.457562][T12224] lo speed is unknown, defaulting to 1000 [ 270.478762][T12256] netlink: 'syz.2.1600': attribute type 7 has an invalid length. [ 270.487453][T12256] netlink: 'syz.2.1600': attribute type 8 has an invalid length. [ 270.552527][T12236] lo speed is unknown, defaulting to 1000 [ 270.553186][T12205] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.566162][ T5851] Bluetooth: hci2: command tx timeout [ 270.582161][T12205] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.590185][T12205] bridge_slave_0: entered allmulticast mode [ 270.597359][T12205] bridge_slave_0: entered promiscuous mode [ 270.610260][T12236] lo speed is unknown, defaulting to 1000 [ 270.614414][T12238] lo speed is unknown, defaulting to 1000 [ 270.621953][T12205] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.645674][T12205] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.653099][T12205] bridge_slave_1: entered allmulticast mode [ 270.671098][T12205] bridge_slave_1: entered promiscuous mode [ 270.716818][T12270] netlink: 'syz.2.1601': attribute type 10 has an invalid length. [ 270.809195][T12205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.843670][T12205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.880046][T12236] lo speed is unknown, defaulting to 1000 [ 270.906861][T12238] lo speed is unknown, defaulting to 1000 [ 270.967783][T12276] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1604'. [ 271.087344][T12205] team0: Port device team_slave_0 added [ 271.151334][T12205] team0: Port device team_slave_1 added [ 271.177424][T12282] netlink: 'syz.0.1606': attribute type 10 has an invalid length. [ 271.224050][T12205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.228528][T12238] lo speed is unknown, defaulting to 1000 [ 271.262453][T12205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.300471][T12205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.370056][T12224] chnl_net:caif_netlink_parms(): no params data found [ 271.408563][T12205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.423464][T12205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.469156][T12205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.513946][T12287] netlink: 4112 bytes leftover after parsing attributes in process `syz.0.1608'. [ 271.711289][T12205] hsr_slave_0: entered promiscuous mode [ 271.732311][T12205] hsr_slave_1: entered promiscuous mode [ 271.757028][T12205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.765451][ T5851] Bluetooth: hci1: command tx timeout [ 271.781742][T12205] Cannot create hsr debugfs directory [ 271.973517][ T7529] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.179327][ T7529] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.327629][ T7529] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.397757][T12224] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.406518][T12224] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.413837][T12224] bridge_slave_0: entered allmulticast mode [ 272.423419][T12224] bridge_slave_0: entered promiscuous mode [ 272.440573][T12319] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1615'. [ 272.452934][ T7529] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.483490][T12224] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.500280][T12224] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.507855][T12224] bridge_slave_1: entered allmulticast mode [ 272.514863][T12224] bridge_slave_1: entered promiscuous mode [ 272.613811][T12224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.631559][T12224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.645406][ T5851] Bluetooth: hci2: command tx timeout [ 272.771065][T12224] team0: Port device team_slave_0 added [ 272.788632][T12224] team0: Port device team_slave_1 added [ 272.794773][ T7529] bridge_slave_1: left allmulticast mode [ 272.820900][ T7529] bridge_slave_1: left promiscuous mode [ 272.838763][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.901496][ T7529] bridge_slave_0: left allmulticast mode [ 272.916808][ T7529] bridge_slave_0: left promiscuous mode [ 272.922591][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.035463][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 273.480913][ T7529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.492571][ T7529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.502564][ T7529] bond0 (unregistering): Released all slaves [ 273.541611][T12327] netlink: 'syz.1.1619': attribute type 13 has an invalid length. [ 273.647763][T12224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.654760][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.695004][T12224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.772843][T12341] netlink: 'syz.0.1623': attribute type 2 has an invalid length. [ 273.788005][T12224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.795011][T12224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.825812][T12341] netlink: 'syz.0.1623': attribute type 2 has an invalid length. [ 273.846437][ T5851] Bluetooth: hci1: command tx timeout [ 273.927329][T12224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.178465][T12359] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1629'. [ 274.251937][T12224] hsr_slave_0: entered promiscuous mode [ 274.259342][T12224] hsr_slave_1: entered promiscuous mode [ 274.269924][T12224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.283885][T12224] Cannot create hsr debugfs directory [ 274.725783][ T5851] Bluetooth: hci2: command tx timeout [ 274.775941][T12205] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 274.806682][T12205] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 274.865033][T12205] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 274.899288][T12205] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 275.071745][ T7529] hsr_slave_0: left promiscuous mode [ 275.089015][T12387] No such timeout policy "syz0" [ 275.094796][T12388] can: request_module (can-proto-0) failed. [ 275.116693][ T7529] hsr_slave_1: left promiscuous mode [ 275.135964][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.143435][ T7529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.156598][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.170144][ T7529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.202474][ T7529] veth1_macvtap: left promiscuous mode [ 275.212798][ T7529] veth0_macvtap: left promiscuous mode [ 275.219026][ T7529] veth1_vlan: left promiscuous mode [ 275.224383][ T7529] veth0_vlan: left promiscuous mode [ 275.242353][T12393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1641'. [ 275.275958][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1641'. [ 275.853484][ T7529] team0 (unregistering): Port device team_slave_1 removed [ 275.904050][ T7529] team0 (unregistering): Port device team_slave_0 removed [ 275.925708][ T5851] Bluetooth: hci1: command tx timeout [ 276.371369][T12388] IPVS: Unknown mcast interface: vcan0 [ 276.791820][T12205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.814984][ T5851] Bluetooth: hci2: command tx timeout [ 276.867708][T12419] netlink: 'syz.1.1648': attribute type 10 has an invalid length. [ 276.947647][T12423] openvswitch: netlink: Actions may not be safe on all matching packets [ 276.969196][T12205] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.990163][T12224] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 277.021788][ T7533] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.029050][ T7533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.068706][T12428] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1651'. [ 277.083697][T12224] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 277.107913][ T7533] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.115090][ T7533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.132689][T12428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.136230][T12224] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 277.217852][T12224] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 277.269282][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1652'. [ 277.354239][T12430] netlink: 'syz.2.1652': attribute type 1 has an invalid length. [ 277.362214][T12430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1652'. [ 277.493498][T12442] netlink: 'syz.2.1656': attribute type 1 has an invalid length. [ 277.498764][T12224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.516361][T12442] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1656'. [ 277.567393][T12224] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.606464][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.613583][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.679603][ T7531] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.686805][ T7531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.790459][T12224] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 277.807888][T12224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.823628][T12205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.296904][T12470] team0 (unregistering): Port device team_slave_0 removed [ 278.328909][T12470] team0 (unregistering): Port device team_slave_1 removed [ 278.419312][T12224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.474070][T12205] veth0_vlan: entered promiscuous mode [ 278.507749][T12205] veth1_vlan: entered promiscuous mode [ 278.612499][T12224] veth0_vlan: entered promiscuous mode [ 278.636347][T12475] lo speed is unknown, defaulting to 1000 [ 278.652004][T12224] veth1_vlan: entered promiscuous mode [ 278.678784][T12475] lo speed is unknown, defaulting to 1000 [ 278.691694][T12205] veth0_macvtap: entered promiscuous mode [ 278.719117][T12205] veth1_macvtap: entered promiscuous mode [ 278.740958][T12205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.763881][T12224] veth0_macvtap: entered promiscuous mode [ 278.798082][T12205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.828660][T12224] veth1_macvtap: entered promiscuous mode [ 278.849576][T12205] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.861450][T12205] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.870859][T12205] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.886605][T12205] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.918568][T12224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.934195][T12224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.967034][T12224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.000554][T12224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.025372][T12224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.044442][T12224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.071852][T12224] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.085089][T12224] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.095016][T12224] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.105927][T12224] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.116721][T12475] lo speed is unknown, defaulting to 1000 [ 279.247360][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1668'. [ 279.280999][ T7533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.298017][ T7533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.431633][ T7533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.465239][ T7533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.489588][ T7533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.544489][ T7533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.778317][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.807828][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.188883][ T7531] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.277061][ T7531] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.479691][ T7531] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.552265][ T7531] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.712654][ T7531] bridge_slave_1: left allmulticast mode [ 280.718589][ T7531] bridge_slave_1: left promiscuous mode [ 280.724304][ T7531] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.734413][ T7531] bridge_slave_0: left allmulticast mode [ 280.740384][ T7531] bridge_slave_0: left promiscuous mode [ 280.748306][ T7531] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.095758][T12527] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1678'. [ 281.357646][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.378976][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.390258][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.418540][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.435486][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 281.443889][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.540699][ T7531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.555868][ T7531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.567071][ T7531] bond0 (unregistering): Released all slaves [ 281.626610][T12533] lo speed is unknown, defaulting to 1000 [ 281.632934][T12533] lo speed is unknown, defaulting to 1000 [ 281.760380][T12533] lo speed is unknown, defaulting to 1000 [ 281.950752][ T7531] hsr_slave_0: left promiscuous mode [ 281.959997][ T7531] hsr_slave_1: left promiscuous mode [ 281.966358][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.973786][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.981618][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.990954][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.012860][ T7531] veth1_macvtap: left promiscuous mode [ 282.018627][ T7531] veth0_macvtap: left promiscuous mode [ 282.024534][ T7531] veth1_vlan: left promiscuous mode [ 282.030055][ T7531] veth0_vlan: left promiscuous mode [ 282.210061][T12545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1682'. [ 282.628657][T12556] netlink: 'syz.0.1684': attribute type 1 has an invalid length. [ 282.645769][T12556] netlink: 'syz.0.1684': attribute type 4 has an invalid length. [ 282.653544][T12556] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1684'. [ 282.694867][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.709405][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.717961][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.729426][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.752633][ T5851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.760323][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.188120][ T7531] team0 (unregistering): Port device team_slave_1 removed [ 283.230153][ T7531] team0 (unregistering): Port device team_slave_0 removed [ 283.533587][ T5849] Bluetooth: hci1: command tx timeout [ 283.698420][T12547] IPv6: Can't replace route, no match found [ 283.741043][T12533] chnl_net:caif_netlink_parms(): no params data found [ 283.777740][T12557] lo speed is unknown, defaulting to 1000 [ 283.784514][T12557] lo speed is unknown, defaulting to 1000 [ 284.094704][T12557] lo speed is unknown, defaulting to 1000 [ 284.144977][T12589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1691'. [ 284.172950][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1691'. [ 284.213565][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1694'. [ 284.315415][T12533] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.322587][T12533] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.340078][T12533] bridge_slave_0: entered allmulticast mode [ 284.353025][T12533] bridge_slave_0: entered promiscuous mode [ 284.414413][T12533] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.431313][T12533] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.456122][T12533] bridge_slave_1: entered allmulticast mode [ 284.463703][T12533] bridge_slave_1: entered promiscuous mode [ 284.600283][T12533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.625382][T12533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.753203][T12611] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1699'. [ 284.794333][T12533] team0: Port device team_slave_0 added [ 284.815522][ T5849] Bluetooth: hci2: command tx timeout [ 284.848628][T12533] team0: Port device team_slave_1 added [ 284.909907][ T7531] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.944698][T12557] chnl_net:caif_netlink_parms(): no params data found [ 285.116949][T12616] bridge_slave_0: left allmulticast mode [ 285.343731][T12616] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 285.354847][T12616] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 285.363650][T12616] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 285.372384][T12616] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 285.446675][T12636] netlink: 'syz.2.1702': attribute type 10 has an invalid length. [ 285.565398][T12616] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 285.595105][T12616] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 285.602222][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1702'. [ 285.612599][ T5849] Bluetooth: hci1: command tx timeout [ 285.612813][T12616] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 285.627286][T12616] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 285.713481][T12616] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 285.851881][T12533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.865821][T12533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.903024][T12533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.028525][ T7531] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.216717][T12533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.223970][T12533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.282087][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1707'. [ 286.292034][T12656] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1707'. [ 286.301497][T12533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.329327][ T7531] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.459625][ T7531] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.502905][T12665] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 286.556554][T12557] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.563790][T12557] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.582414][T12557] bridge_slave_0: entered allmulticast mode [ 286.592443][T12557] bridge_slave_0: entered promiscuous mode [ 286.610354][T12557] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.628097][T12557] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.641429][T12557] bridge_slave_1: entered allmulticast mode [ 286.666759][T12557] bridge_slave_1: entered promiscuous mode [ 286.696413][T12533] hsr_slave_0: entered promiscuous mode [ 286.702815][T12533] hsr_slave_1: entered promiscuous mode [ 286.719346][T12533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.733599][T12533] Cannot create hsr debugfs directory [ 286.743337][T12670] tipc: Enabled bearer , priority 0 [ 286.762277][T12667] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 286.825249][T12667] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 286.870956][T12557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.885618][ T5835] Bluetooth: hci2: command tx timeout [ 286.913699][T12557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.989821][T12674] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1711'. [ 287.063275][T12557] team0: Port device team_slave_0 added [ 287.084059][T12674] veth4: entered allmulticast mode [ 287.140301][T12557] team0: Port device team_slave_1 added [ 287.287171][ T7531] bridge_slave_1: left allmulticast mode [ 287.305905][ T7531] bridge_slave_1: left promiscuous mode [ 287.322105][ T7531] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.373268][ T7531] bridge_slave_0: left allmulticast mode [ 287.404263][ T7531] bridge_slave_0: left promiscuous mode [ 287.410708][ T7531] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.685887][ T5835] Bluetooth: hci1: command tx timeout [ 287.838725][ T7531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.850721][ T7531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.861486][ T7531] bond0 (unregistering): Released all slaves [ 287.872457][T12683] netlink: 'syz.2.1715': attribute type 1 has an invalid length. [ 287.883678][T12557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.891380][T12557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.917650][T12557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.003492][T12557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.023716][T12702] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1720'. [ 288.023973][T12557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.060791][T12557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.304929][T12557] hsr_slave_0: entered promiscuous mode [ 288.325805][T12557] hsr_slave_1: entered promiscuous mode [ 288.331719][T12557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.356251][T12557] Cannot create hsr debugfs directory [ 288.472991][T12716] IPVS: wrr: TCP 172.20.20.170:0 - no destination available [ 288.735587][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1726'. [ 288.767584][T12721] bond0: (slave team0): Releasing backup interface [ 288.779021][T12721] team0 (unregistering): Port device team_slave_0 removed [ 288.791624][T12721] team0 (unregistering): Port device team_slave_1 removed [ 288.857464][ T7531] hsr_slave_0: left promiscuous mode [ 288.867376][ T7531] hsr_slave_1: left promiscuous mode [ 288.873340][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.882557][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.892495][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 288.905079][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.912790][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.935391][ T7531] veth1_macvtap: left promiscuous mode [ 288.940960][ T7531] veth0_macvtap: left promiscuous mode [ 288.947183][ T7531] veth1_vlan: left promiscuous mode [ 288.952460][ T7531] veth0_vlan: left promiscuous mode [ 288.975402][ T5851] Bluetooth: hci2: command 0x040f tx timeout [ 289.443481][ T7531] team0 (unregistering): Port device team_slave_1 removed [ 289.494147][ T7531] team0 (unregistering): Port device team_slave_0 removed [ 289.776140][ T5851] Bluetooth: hci1: command tx timeout [ 290.015957][T12732] pimreg: entered allmulticast mode [ 290.051898][T12733] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1728'. [ 290.086528][T12733] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1728'. [ 290.099853][T12734] pimreg: left allmulticast mode [ 290.175501][T12736] lo speed is unknown, defaulting to 1000 [ 290.329700][T12736] lo speed is unknown, defaulting to 1000 [ 290.369113][T12533] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 290.407305][T12533] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 290.448209][T12533] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 290.570526][T12533] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 290.725245][T12736] lo speed is unknown, defaulting to 1000 [ 290.974984][T12743] lo speed is unknown, defaulting to 1000 [ 291.022772][T12743] lo speed is unknown, defaulting to 1000 [ 291.045386][ T5851] Bluetooth: hci2: command 0x040f tx timeout [ 291.180995][T12743] lo speed is unknown, defaulting to 1000 [ 291.201754][T12533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.324715][T12533] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.352208][T12557] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 291.371371][T12557] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 291.425605][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.432751][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.447407][T12780] netlink: 'syz.2.1740': attribute type 6 has an invalid length. [ 291.462539][T12557] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 291.481892][T12557] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 291.514095][ T7534] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.521249][ T7534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.738593][T12788] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 291.888404][T12794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1743'. [ 291.894313][T12557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.940411][T12557] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.962560][ T7531] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.969782][ T7531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.003712][ T7531] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.010898][ T7531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.095132][T12533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.391467][T12557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.469832][T12557] veth0_vlan: entered promiscuous mode [ 292.495878][T12557] veth1_vlan: entered promiscuous mode [ 292.505084][T12533] veth0_vlan: entered promiscuous mode [ 292.523912][T12533] veth1_vlan: entered promiscuous mode [ 292.553626][T12557] veth0_macvtap: entered promiscuous mode [ 292.572947][T12557] veth1_macvtap: entered promiscuous mode [ 292.591724][T12533] veth0_macvtap: entered promiscuous mode [ 292.612993][T12533] veth1_macvtap: entered promiscuous mode [ 292.627177][T12557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.643180][T12533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.654892][T12533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.667435][T12533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.677617][T12557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.692160][T12557] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.706562][T12557] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.720042][T12557] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.730848][T12557] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.742881][T12533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.754428][T12533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.765335][T12533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.790289][T12533] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.799661][T12533] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.808473][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.820723][T12533] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.829552][T12533] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.939810][ T7534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.955403][ T7534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.993857][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.006408][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.049067][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.070776][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.109580][ T7534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.126337][ T5851] Bluetooth: hci2: command 0x040f tx timeout [ 293.134118][ T7534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.475979][T12834] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 293.783693][T12838] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1754'. [ 293.793737][T12838] netlink: 'syz.2.1754': attribute type 1 has an invalid length. [ 293.802007][T12838] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1754'. [ 293.845420][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 294.094960][T12855] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1760'. [ 294.168304][ T7531] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.267013][T12850] lo speed is unknown, defaulting to 1000 [ 294.296294][T12850] lo speed is unknown, defaulting to 1000 [ 294.632089][ T7531] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.706863][T12850] lo speed is unknown, defaulting to 1000 [ 294.924588][ T7531] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.972580][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 294.981847][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 294.990576][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 295.014359][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 295.023253][ T7531] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.040498][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 295.049368][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 295.100266][T12864] lo speed is unknown, defaulting to 1000 [ 295.116318][T12864] lo speed is unknown, defaulting to 1000 [ 295.174603][ T7531] bridge_slave_1: left allmulticast mode [ 295.180774][ T7531] bridge_slave_1: left promiscuous mode [ 295.194731][ T7531] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.204395][ T7531] bridge_slave_0: left allmulticast mode [ 295.215933][ T7531] bridge_slave_0: left promiscuous mode [ 295.221705][ T7531] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.572602][T12871] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1763'. [ 295.773936][ T7531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.795770][ T7531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.831474][ T7531] bond0 (unregistering): Released all slaves [ 295.855824][T12864] lo speed is unknown, defaulting to 1000 [ 295.861794][T12870] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 295.869891][T12873] netlink: 'syz.0.1762': attribute type 29 has an invalid length. [ 295.886978][T12876] netlink: 'syz.0.1762': attribute type 29 has an invalid length. [ 295.960376][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.972131][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.981610][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.990516][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.999844][ T5851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 296.016650][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.278451][T12882] lo speed is unknown, defaulting to 1000 [ 296.302821][T12882] lo speed is unknown, defaulting to 1000 [ 296.431941][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1770'. [ 296.478403][T12864] chnl_net:caif_netlink_parms(): no params data found [ 296.501060][T12901] lo speed is unknown, defaulting to 1000 [ 296.531520][T12901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1770'. [ 296.690666][T12910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1773'. [ 296.696031][T12901] nbd: socks must be embedded in a SOCK_ITEM attr [ 296.726476][ T7531] hsr_slave_0: left promiscuous mode [ 296.759705][ T7531] hsr_slave_1: left promiscuous mode [ 296.820160][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.845115][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.956636][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.971325][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.132126][ T5851] Bluetooth: hci1: command tx timeout [ 297.154431][ T7531] veth1_macvtap: left promiscuous mode [ 297.163820][ T7531] veth0_macvtap: left promiscuous mode [ 297.179948][ T7531] veth1_vlan: left promiscuous mode [ 297.190247][ T7531] veth0_vlan: left promiscuous mode [ 297.821665][ T7531] team0 (unregistering): Port device team_slave_1 removed [ 297.871877][ T7531] team0 (unregistering): Port device team_slave_0 removed [ 298.085335][ T5851] Bluetooth: hci2: command tx timeout [ 298.342831][T12882] lo speed is unknown, defaulting to 1000 [ 298.375016][T12864] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.382372][T12864] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.389928][T12864] bridge_slave_0: entered allmulticast mode [ 298.397265][T12864] bridge_slave_0: entered promiscuous mode [ 298.406858][T12925] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 298.445575][T12864] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.455974][T12864] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.463242][T12864] bridge_slave_1: entered allmulticast mode [ 298.497285][T12864] bridge_slave_1: entered promiscuous mode [ 298.556719][T12931] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1778'. [ 298.574762][T12934] x_tables: duplicate underflow at hook 3 [ 298.592526][T12864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.618247][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1779'. [ 298.628859][T12934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.690744][T12864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.839733][T12942] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 298.841443][T12864] team0: Port device team_slave_0 added [ 298.936746][T12864] team0: Port device team_slave_1 added [ 298.979728][T12951] pimreg3: entered allmulticast mode [ 299.054354][T12864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.062454][T12864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.088746][T12864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.106568][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1783'. [ 299.124995][T12956] tipc: Enabling of bearer rejected, already enabled [ 299.181347][T12864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.205983][T12864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.213330][ T5849] Bluetooth: hci1: command tx timeout [ 299.262717][T12864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.278509][T12961] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 299.358941][ T7531] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.384436][T12882] chnl_net:caif_netlink_parms(): no params data found [ 299.493956][ T7531] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.559721][T12864] hsr_slave_0: entered promiscuous mode [ 299.580253][T12864] hsr_slave_1: entered promiscuous mode [ 299.587679][T12864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.604575][T12864] Cannot create hsr debugfs directory [ 299.659871][ T7531] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.701258][T12966] xt_hashlimit: invalid interval [ 299.760832][ T7531] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.048705][T12882] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.122280][T12882] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.144210][T12882] bridge_slave_0: entered allmulticast mode [ 300.165361][ T5849] Bluetooth: hci2: command tx timeout [ 300.172093][T12882] bridge_slave_0: entered promiscuous mode [ 300.198534][T12882] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.234260][T12986] xt_nfacct: accounting object `syz1' does not exists [ 300.260866][T12882] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.285865][T12882] bridge_slave_1: entered allmulticast mode [ 300.302676][T12882] bridge_slave_1: entered promiscuous mode [ 300.487594][ T7531] bridge_slave_1: left allmulticast mode [ 300.493301][ T7531] bridge_slave_1: left promiscuous mode [ 300.505413][ T7531] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.533434][ T7531] bridge_slave_0: left allmulticast mode [ 300.539696][ T7531] bridge_slave_0: left promiscuous mode [ 300.546003][ T7531] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.006803][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1793'. [ 301.016190][T13008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1793'. [ 301.042115][ T7531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.059102][ T7531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.070975][ T7531] bond0 (unregistering): Released all slaves [ 301.082998][T12882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.111447][T12994] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 301.121515][T12994] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 301.130793][T12994] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 301.140631][T12994] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 301.172017][T12994] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 301.181262][T12994] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 301.190554][T12994] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 301.199761][T12994] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 301.285628][ T5849] Bluetooth: hci1: command tx timeout [ 301.291882][T13001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.301938][T13001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.326957][T13005] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 301.334559][T13005] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 301.362356][T12882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.410206][ T5884] lo speed is unknown, defaulting to 1000 [ 301.410233][T12627] lo speed is unknown, defaulting to 1000 [ 301.614283][T12882] team0: Port device team_slave_0 added [ 301.631140][T13014] batadv0: entered promiscuous mode [ 301.647311][T13014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.684495][T13019] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1796'. [ 301.730701][T12882] team0: Port device team_slave_1 added [ 301.753920][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'. [ 301.771372][T13023] netlink: 'syz.0.1796': attribute type 1 has an invalid length. [ 301.845478][T13023] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1796'. [ 301.927115][T12882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.949487][T12882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.989397][T12882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.062929][T12882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.095638][T12882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.205289][T12882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.245937][ T5849] Bluetooth: hci2: command 0x040f tx timeout [ 302.572253][T12882] hsr_slave_0: entered promiscuous mode [ 302.594569][T12882] hsr_slave_1: entered promiscuous mode [ 302.601119][T12882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.608902][T12882] Cannot create hsr debugfs directory [ 302.623223][ T7531] hsr_slave_0: left promiscuous mode [ 302.632049][ T7531] hsr_slave_1: left promiscuous mode [ 302.639370][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.677706][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.696850][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 302.707232][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.714681][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.829850][ T7531] veth1_macvtap: left promiscuous mode [ 302.915693][ T7531] veth0_macvtap: left promiscuous mode [ 302.921364][ T7531] veth1_vlan: left promiscuous mode [ 302.946943][ T7531] veth0_vlan: left promiscuous mode [ 302.998425][T13063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1808'. [ 303.125549][T13065] netlink: 'syz.2.1808': attribute type 1 has an invalid length. [ 303.136747][T13065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1808'. [ 303.365642][ T5851] Bluetooth: hci1: command tx timeout [ 303.754928][ T7531] team0 (unregistering): Port device team_slave_1 removed [ 303.812320][ T7531] team0 (unregistering): Port device team_slave_0 removed [ 304.325632][ T5851] Bluetooth: hci2: command 0x040f tx timeout [ 304.529243][T13057] lo speed is unknown, defaulting to 1000 [ 304.566904][T13064] ipvlan0: entered promiscuous mode [ 304.573274][T13064] bridge6: port 1(ipvlan0) entered blocking state [ 304.580077][T13064] bridge6: port 1(ipvlan0) entered disabled state [ 304.595601][T13064] ipvlan0: entered allmulticast mode [ 304.600947][T13064] bridge6: entered allmulticast mode [ 304.609123][T13064] ipvlan0: left allmulticast mode [ 304.614198][T13064] bridge6: left allmulticast mode [ 304.650076][T13057] lo speed is unknown, defaulting to 1000 [ 304.709606][T12864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 304.815222][T12864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 304.826231][T12864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 304.901102][T12864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 304.926490][T13057] lo speed is unknown, defaulting to 1000 [ 305.004337][T13069] lo speed is unknown, defaulting to 1000 [ 305.103564][T13069] lo speed is unknown, defaulting to 1000 [ 305.485810][T12864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.553889][T12864] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.591322][T13069] lo speed is unknown, defaulting to 1000 [ 305.602301][ T7537] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.609500][ T7537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.644121][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.651366][ T7537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.079232][T12882] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 306.126170][T12882] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 306.190265][T12882] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 306.223177][T12882] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 306.406395][ T5851] Bluetooth: hci2: command 0x040f tx timeout [ 306.563426][T13081] netlink: 'syz.2.1810': attribute type 3 has an invalid length. [ 306.572861][T13081] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1810'. [ 306.577437][T12882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.610502][T12864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.660227][T12882] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.706680][ T7537] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.713812][ T7537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.762830][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.770030][ T7537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.914603][T13088] lo speed is unknown, defaulting to 1000 [ 306.947502][T13088] lo speed is unknown, defaulting to 1000 [ 307.123122][T13103] netlink: 'syz.0.1815': attribute type 10 has an invalid length. [ 307.217330][T12864] veth0_vlan: entered promiscuous mode [ 307.277975][T12864] veth1_vlan: entered promiscuous mode [ 307.360648][T12882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.411996][T12864] veth0_macvtap: entered promiscuous mode [ 307.476724][T13110] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.499216][T12864] veth1_macvtap: entered promiscuous mode [ 307.539059][T13088] lo speed is unknown, defaulting to 1000 [ 307.562508][T13110] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.594320][T13114] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1818'. [ 307.611707][T13114] openvswitch: netlink: Message has 12 unknown bytes. [ 307.611929][T12864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.677429][T12882] veth0_vlan: entered promiscuous mode [ 307.694247][T13110] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.750389][T12864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.781057][T12864] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.790216][T12864] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.799725][T12864] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.808647][T12864] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.824072][T13110] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.857943][T12882] veth1_vlan: entered promiscuous mode [ 307.986363][T13110] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.059820][T13110] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.079537][T13110] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.102179][T13110] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.140645][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1821'. [ 308.233801][T12882] veth0_macvtap: entered promiscuous mode [ 308.303224][T12882] veth1_macvtap: entered promiscuous mode [ 308.334698][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.367410][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.394419][T12882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.413875][ T7529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.442895][ T7529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.464542][T12882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.492703][T12882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.515365][T12882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.622586][T12882] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.651776][T12882] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.682197][T12882] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.699186][T12882] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.733978][T13134] tipc: Enabled bearer , priority 0 [ 308.783671][ T7534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.800653][ T7534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.923364][ T7534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.948764][ T7534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.039858][ T7534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.080899][ T7534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.681113][ T7537] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.767362][ T7537] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.846832][ T7537] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.912430][ T7537] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.114910][ T7537] bridge_slave_1: left allmulticast mode [ 310.121869][ T7537] bridge_slave_1: left promiscuous mode [ 310.135464][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.169946][ T7537] bridge_slave_0: left allmulticast mode [ 310.183886][ T7537] bridge_slave_0: left promiscuous mode [ 310.210618][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.219887][T13169] netlink: 'syz.0.1830': attribute type 4 has an invalid length. [ 310.492428][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.507038][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.517145][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.538526][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.552051][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 310.565078][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.774273][ T7537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.785134][ T7537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.795119][ T7537] bond0 (unregistering): Released all slaves [ 310.805527][T13167] sch_tbf: burst 0 is lower than device lo mtu (84) ! [ 310.859933][T13172] lo speed is unknown, defaulting to 1000 [ 310.872931][T13172] lo speed is unknown, defaulting to 1000 [ 310.973484][T13172] lo speed is unknown, defaulting to 1000 [ 311.095036][T13172] chnl_net:caif_netlink_parms(): no params data found [ 311.268635][T13184] bridge2: entered promiscuous mode [ 311.273896][T13184] bridge2: entered allmulticast mode [ 311.397809][ T7537] hsr_slave_0: left promiscuous mode [ 311.435528][ T7537] hsr_slave_1: left promiscuous mode [ 311.463260][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.492260][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.512840][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.521525][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.559534][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.571392][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.580971][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.590267][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.599020][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 311.609388][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.609748][ T7537] veth1_macvtap: left promiscuous mode [ 311.631578][ T7537] veth0_macvtap: left promiscuous mode [ 311.639306][ T7537] veth1_vlan: left promiscuous mode [ 311.644870][ T7537] veth0_vlan: left promiscuous mode [ 312.223183][ T7537] team0 (unregistering): Port device team_slave_1 removed [ 312.275128][ T7537] team0 (unregistering): Port device team_slave_0 removed [ 312.652556][ T5849] Bluetooth: hci1: command tx timeout [ 312.746315][T13209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1838'. [ 312.811828][T13172] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.834561][T13172] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.854903][T13172] bridge_slave_0: entered allmulticast mode [ 312.863170][T13172] bridge_slave_0: entered promiscuous mode [ 312.880148][T13200] lo speed is unknown, defaulting to 1000 [ 312.886159][T13210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1838'. [ 312.926292][T13216] macsec0: entered allmulticast mode [ 312.931639][T13216] ip6gretap0: entered allmulticast mode [ 312.954916][T13216] ip6gretap0: left allmulticast mode [ 312.997463][T13172] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.004805][T13172] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.013266][T13172] bridge_slave_1: entered allmulticast mode [ 313.020689][T13172] bridge_slave_1: entered promiscuous mode [ 313.033992][T13200] lo speed is unknown, defaulting to 1000 [ 313.142963][T13172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.198029][T13172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.306285][T13200] lo speed is unknown, defaulting to 1000 [ 313.319754][T13172] team0: Port device team_slave_0 added [ 313.337846][T13172] team0: Port device team_slave_1 added [ 313.399225][T13230] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 313.409367][T13172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.428073][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.464285][T13172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.477531][T13172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.502101][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.536781][T13172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.611558][T13172] hsr_slave_0: entered promiscuous mode [ 313.618745][T13172] hsr_slave_1: entered promiscuous mode [ 313.624942][T13172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.632646][T13172] Cannot create hsr debugfs directory [ 313.685450][ T5849] Bluetooth: hci2: command tx timeout [ 313.757989][ T7537] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.933048][ T7537] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.961279][T13200] chnl_net:caif_netlink_parms(): no params data found [ 314.029213][ T7537] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.092749][T13254] bond5: entered promiscuous mode [ 314.098602][T13254] 8021q: adding VLAN 0 to HW filter on device bond5 [ 314.183381][ T7537] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.255103][T13200] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.262743][T13200] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.280345][T13200] bridge_slave_0: entered allmulticast mode [ 314.294030][T13200] bridge_slave_0: entered promiscuous mode [ 314.316737][T13200] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.335871][T13200] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.343125][T13200] bridge_slave_1: entered allmulticast mode [ 314.358486][T13200] bridge_slave_1: entered promiscuous mode [ 314.444291][T13200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.466385][T13200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.570830][T13200] team0: Port device team_slave_0 added [ 314.591475][T13200] team0: Port device team_slave_1 added [ 314.711265][T13200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.726500][ T5849] Bluetooth: hci1: command tx timeout [ 314.732340][T13200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.801308][T13200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.856112][T13284] FAULT_INJECTION: forcing a failure. [ 314.856112][T13284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.870276][ T7537] bridge_slave_1: left allmulticast mode [ 314.876282][T13284] CPU: 0 UID: 0 PID: 13284 Comm: syz.0.1857 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0 [ 314.876306][T13284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 314.876316][T13284] Call Trace: [ 314.876323][T13284] [ 314.876330][T13284] dump_stack_lvl+0x241/0x360 [ 314.876356][T13284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.876371][T13284] ? __pfx__printk+0x10/0x10 [ 314.876389][T13284] ? __pfx_lock_release+0x10/0x10 [ 314.876418][T13284] should_fail_ex+0x40a/0x550 [ 314.876444][T13284] _copy_from_user+0x2d/0xb0 [ 314.876462][T13284] copy_msghdr_from_user+0xae/0x680 [ 314.876484][T13284] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 314.876506][T13284] ? __fget_files+0x2a/0x410 [ 314.876529][T13284] ? __fget_files+0x2a/0x410 [ 314.876556][T13284] __sys_sendmsg+0x209/0x350 [ 314.876582][T13284] ? __pfx___sys_sendmsg+0x10/0x10 [ 314.876613][T13284] ? do_sys_openat2+0x17a/0x1d0 [ 314.876657][T13284] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 314.876680][T13284] ? do_syscall_64+0x100/0x230 [ 314.876702][T13284] ? do_syscall_64+0xb6/0x230 [ 314.876722][T13284] do_syscall_64+0xf3/0x230 [ 314.876740][T13284] ? clear_bhb_loop+0x35/0x90 [ 314.876764][T13284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.876783][T13284] RIP: 0033:0x7fd8eb38cde9 [ 314.876798][T13284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.876811][T13284] RSP: 002b:00007fd8ec28f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.876828][T13284] RAX: ffffffffffffffda RBX: 00007fd8eb5a5fa0 RCX: 00007fd8eb38cde9 [ 314.876839][T13284] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000003 [ 314.876850][T13284] RBP: 00007fd8ec28f090 R08: 0000000000000000 R09: 0000000000000000 [ 314.876859][T13284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.876869][T13284] R13: 0000000000000000 R14: 00007fd8eb5a5fa0 R15: 00007ffed4bfd828 [ 314.876894][T13284] [ 315.075908][ T7537] bridge_slave_1: left promiscuous mode [ 315.081711][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.097425][ T7537] bridge_slave_0: left allmulticast mode [ 315.103132][ T7537] bridge_slave_0: left promiscuous mode [ 315.109083][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.574103][ T7537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.586349][ T7537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.598002][ T7537] bond0 (unregistering): Released all slaves [ 315.611419][T13280] sch_tbf: burst 0 is lower than device lo mtu (84) ! [ 315.623679][T13200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.631170][T13200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.732856][T13200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.775613][ T5849] Bluetooth: hci2: command tx timeout [ 315.811102][T13295] lo speed is unknown, defaulting to 1000 [ 315.887466][T13301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'. [ 315.920347][T13295] lo speed is unknown, defaulting to 1000 [ 316.023445][T13200] hsr_slave_0: entered promiscuous mode [ 316.040436][T13200] hsr_slave_1: entered promiscuous mode [ 316.047110][T13200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.054711][T13200] Cannot create hsr debugfs directory [ 316.129895][T13302] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1863'. [ 316.150400][T13308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1864'. [ 316.182083][T13295] lo speed is unknown, defaulting to 1000 [ 316.298324][T13172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 316.356968][T13313] netlink: 'syz.1.1866': attribute type 21 has an invalid length. [ 316.372916][T13313] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1866'. [ 316.384684][T13172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 316.475852][ T7537] hsr_slave_0: left promiscuous mode [ 316.483557][ T7537] hsr_slave_1: left promiscuous mode [ 316.494079][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.506084][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.524028][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.531949][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.561015][ T7537] veth1_macvtap: left promiscuous mode [ 316.567091][ T7537] veth0_macvtap: left promiscuous mode [ 316.572724][ T7537] veth1_vlan: left promiscuous mode [ 316.588414][ T7537] veth0_vlan: left promiscuous mode [ 316.806874][ T5849] Bluetooth: hci1: command tx timeout [ 317.073241][ T7537] team0 (unregistering): Port device team_slave_1 removed [ 317.119983][ T7537] team0 (unregistering): Port device team_slave_0 removed [ 317.533536][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.600425][T13172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.634283][T13172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 317.846074][ T5849] Bluetooth: hci2: command tx timeout [ 317.949223][T13172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.003563][T13172] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.048770][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.055984][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.077630][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.084813][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.563049][T13172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.651025][T13200] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 318.707695][T13200] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 318.759958][T13200] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 318.800841][T13200] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 318.844595][T13360] xt_TCPMSS: Only works on TCP SYN packets [ 318.862780][T13360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1877'. [ 318.886629][ T5849] Bluetooth: hci1: command tx timeout [ 318.913045][T13360] netlink: 'syz.2.1877': attribute type 7 has an invalid length. [ 318.922191][T13360] netlink: 'syz.2.1877': attribute type 8 has an invalid length. [ 318.930384][T13360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 319.007439][T13200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.045658][T13364] macsec1: entered promiscuous mode [ 319.060449][T13364] macsec1: entered allmulticast mode [ 319.088084][T13200] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.110906][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.118102][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.149318][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.156653][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.209631][T13372] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 319.250688][T13172] veth0_vlan: entered promiscuous mode [ 319.286639][T13172] veth1_vlan: entered promiscuous mode [ 319.412252][T13172] veth0_macvtap: entered promiscuous mode [ 319.433384][T13172] veth1_macvtap: entered promiscuous mode [ 319.471740][T13385] netlink: 'syz.1.1884': attribute type 27 has an invalid length. [ 319.495298][T13172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.525035][T13172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.547489][T13172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.567022][T13172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.584809][T13172] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.601852][T13172] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.669357][T13390] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1886'. [ 319.720881][T13390] ieee802154 phy0 wpan0: encryption failed: -90 [ 319.764745][ T7534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.783592][T13200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.784010][ T7534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.881274][ T7531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.903055][ T7531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.926416][ T5849] Bluetooth: hci2: command tx timeout [ 319.957253][T13200] veth0_vlan: entered promiscuous mode [ 320.006975][T13200] veth1_vlan: entered promiscuous mode [ 320.126965][T13200] veth0_macvtap: entered promiscuous mode [ 320.237801][T13200] veth1_macvtap: entered promiscuous mode [ 320.280648][T13200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.305019][T13200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.344669][T13200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.372236][T13200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.387068][T13200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.401170][T13200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.412497][T13422] netlink: 'syz.1.1892': attribute type 4 has an invalid length. [ 320.417405][T13200] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.430487][T13200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.444851][T13200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.457116][T13200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.476793][ T9] lo speed is unknown, defaulting to 1000 [ 320.483388][T13422] netlink: 'syz.1.1892': attribute type 4 has an invalid length. [ 320.505038][ T9] lo speed is unknown, defaulting to 1000 [ 320.632728][ T7534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.653000][ T7534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.704803][ T7537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.743801][ T7537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.004225][T13436] netlink: 'syz.1.1895': attribute type 1 has an invalid length. [ 321.082788][T13440] bond6: (slave gretap1): making interface the new active one [ 321.092210][T13440] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 321.179257][ T7529] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.231202][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1896'. [ 321.537798][ T7529] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.825636][ T7529] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.906783][T13449] netlink: 'syz.1.1898': attribute type 6 has an invalid length. [ 321.997278][ T7529] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.132510][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.142285][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.150544][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.160997][ T7529] bridge_slave_1: left allmulticast mode [ 322.161872][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.175129][ T5851] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 322.175234][ T7529] bridge_slave_1: left promiscuous mode [ 322.177951][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.182358][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.204268][ T7529] bridge_slave_0: left allmulticast mode [ 322.210193][ T7529] bridge_slave_0: left promiscuous mode [ 322.216167][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.578928][ T7529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.589793][ T7529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.599773][ T7529] bond0 (unregistering): Released all slaves [ 322.623940][T13452] lo speed is unknown, defaulting to 1000 [ 322.632372][T13452] lo speed is unknown, defaulting to 1000 [ 322.773045][T13452] lo speed is unknown, defaulting to 1000 [ 323.190438][T13465] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 323.236100][T13452] chnl_net:caif_netlink_parms(): no params data found [ 323.331238][ T7529] hsr_slave_0: left promiscuous mode [ 323.362753][ T7529] hsr_slave_1: left promiscuous mode [ 323.373020][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.387050][ T7529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.412177][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.432403][ T7529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.510020][ T7529] veth1_macvtap: left promiscuous mode [ 323.525447][ T7529] veth0_macvtap: left promiscuous mode [ 323.534719][ T7529] veth1_vlan: left promiscuous mode [ 323.545266][ T7529] veth0_vlan: left promiscuous mode [ 323.736076][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.750067][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.771927][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.788400][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.811172][ T5851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 323.818931][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.169966][ T7529] team0 (unregistering): Port device team_slave_1 removed [ 324.226399][ T7529] team0 (unregistering): Port device team_slave_0 removed [ 324.250647][ T5851] Bluetooth: hci1: command tx timeout [ 324.839206][T13479] lo speed is unknown, defaulting to 1000 [ 324.892299][T13452] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.903953][T13452] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.928663][T13452] bridge_slave_0: entered allmulticast mode [ 324.935923][T13452] bridge_slave_0: entered promiscuous mode [ 324.942677][T13479] lo speed is unknown, defaulting to 1000 [ 324.944499][T13490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1907'. [ 325.015770][T13452] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.022903][T13452] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.040122][T13452] bridge_slave_1: entered allmulticast mode [ 325.053537][T13452] bridge_slave_1: entered promiscuous mode [ 325.144967][T13479] lo speed is unknown, defaulting to 1000 [ 325.166375][T13487] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.194173][T13452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.227547][T13487] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.249154][T13452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.263048][T13487] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.284733][T13487] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 325.389798][ T7529] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.426924][T13452] team0: Port device team_slave_0 added [ 325.442343][T13487] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.458978][T13452] team0: Port device team_slave_1 added [ 325.478536][ T7529] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.496883][T13487] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.520972][T13487] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.598199][T13487] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.606354][T13452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.613343][T13452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.698473][T13452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.720225][T13452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.738864][T13452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.767768][T13520] netlink: 'syz.2.1917': attribute type 10 has an invalid length. [ 325.773924][T13452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.776215][T13520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1917'. [ 325.829373][ T7529] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.846146][ T5851] Bluetooth: hci2: command tx timeout [ 325.864180][T13487] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.903253][T13487] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.991742][ T7529] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.051580][T13479] chnl_net:caif_netlink_parms(): no params data found [ 326.120496][T13452] hsr_slave_0: entered promiscuous mode [ 326.128656][T13452] hsr_slave_1: entered promiscuous mode [ 326.135913][T13452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.143740][T13452] Cannot create hsr debugfs directory [ 326.325636][ T5851] Bluetooth: hci1: command tx timeout [ 326.441293][T13479] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.454163][T13479] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.461993][T13479] bridge_slave_0: entered allmulticast mode [ 326.469422][T13479] bridge_slave_0: entered promiscuous mode [ 326.497717][T13479] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.509905][T13479] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.526062][T13479] bridge_slave_1: entered allmulticast mode [ 326.536538][T13479] bridge_slave_1: entered promiscuous mode [ 326.553244][ T7529] bridge_slave_1: left allmulticast mode [ 326.565342][ T7529] bridge_slave_1: left promiscuous mode [ 326.571111][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.598443][ T7529] bridge_slave_0: left allmulticast mode [ 326.604163][ T7529] bridge_slave_0: left promiscuous mode [ 326.617823][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.137389][ T7529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.147920][ T7529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.159031][ T7529] bond0 (unregistering): Released all slaves [ 327.243203][T13479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.352485][T13479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.559154][T13479] team0: Port device team_slave_0 added [ 327.587639][T13479] team0: Port device team_slave_1 added [ 327.732097][T13479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.756463][T13479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.792436][T13479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.854484][T13479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.874117][T13479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.913536][T13479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.925368][ T5851] Bluetooth: hci2: command tx timeout [ 328.174685][ T7529] hsr_slave_0: left promiscuous mode [ 328.201147][ T7529] hsr_slave_1: left promiscuous mode [ 328.211889][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.223039][ T7529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.246900][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.256276][ T7529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.386899][ T7529] veth1_macvtap: left promiscuous mode [ 328.399384][ T7529] veth0_macvtap: left promiscuous mode [ 328.405604][ T5851] Bluetooth: hci1: command tx timeout [ 328.416804][ T7529] veth1_vlan: left promiscuous mode [ 328.451988][ T7529] veth0_vlan: left promiscuous mode [ 329.074989][T13638] netlink: 'syz.0.1945': attribute type 10 has an invalid length. [ 329.199693][ T7529] team0 (unregistering): Port device team_slave_1 removed [ 329.259970][ T7529] team0 (unregistering): Port device team_slave_0 removed [ 329.869729][T13479] hsr_slave_0: entered promiscuous mode [ 329.881111][T13479] hsr_slave_1: entered promiscuous mode [ 329.888820][T13479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.896668][T13479] Cannot create hsr debugfs directory [ 330.014694][ T5851] Bluetooth: hci2: command tx timeout [ 330.203614][T13646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1948'. [ 330.488125][ T5851] Bluetooth: hci1: command tx timeout [ 330.632028][T13452] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 330.659033][T13452] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 330.700817][T13452] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.720528][T13452] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 330.798197][T13452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.866973][T13452] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.903711][ T7537] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.910954][ T7537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.974289][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.981471][ T7537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.357733][T13479] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 331.378448][T13479] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 331.391603][T13479] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 331.407251][T13479] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 331.458304][T13452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.683408][T13479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.767898][T13479] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.803474][ T7533] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.810662][ T7533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.855165][ T7531] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.862377][ T7531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.915968][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 331.988155][T13736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1963'. [ 332.085444][ T5851] Bluetooth: hci2: command tx timeout [ 332.112815][T13452] veth0_vlan: entered promiscuous mode [ 332.161024][T13452] veth1_vlan: entered promiscuous mode [ 332.214966][T13452] veth0_macvtap: entered promiscuous mode [ 332.231129][T13746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1967'. [ 332.243427][T13452] veth1_macvtap: entered promiscuous mode [ 332.279691][T13746] 8021q: adding VLAN 0 to HW filter on device bond7 [ 332.290487][T13452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.298192][T13746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1967'. [ 332.312688][T13452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.322725][T13452] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.331977][T13452] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.342714][T13452] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.351842][T13452] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.497365][T13479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.580830][T13761] dvmrp1: entered allmulticast mode [ 332.596963][T13758] netlink: 'syz.2.1970': attribute type 1 has an invalid length. [ 332.629710][T13756] dvmrp1: left allmulticast mode [ 332.707838][ T7533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.731495][ T7533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.752653][T13479] veth0_vlan: entered promiscuous mode [ 332.813257][T13767] pimreg: entered allmulticast mode [ 332.816295][ T7541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.822926][T13479] veth1_vlan: entered promiscuous mode [ 332.836250][ T7541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.930946][T13479] veth0_macvtap: entered promiscuous mode [ 332.964641][T13479] veth1_macvtap: entered promiscuous mode [ 333.054539][T13479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.086432][T13479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.101416][T13479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.118988][T13479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.140641][T13479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.152991][T13782] nbd: must specify a size in bytes for the device [ 333.196730][T13479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.307248][T13479] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.322864][T13479] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.334847][T13479] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.343809][T13479] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.361756][T13789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1977'. [ 333.514776][ T7531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.533104][ T7531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.570330][ T7568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.591240][ T7568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.599068][T13797] sock: sock_timestamping_bind_phc: sock not bind to device [ 333.717220][T13806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1982'. [ 333.727713][T13807] tipc: Enabled bearer , priority 0 [ 333.785900][T13807] syzkaller0: entered promiscuous mode [ 333.797479][T13807] syzkaller0: entered allmulticast mode [ 333.814311][T13807] tipc: Resetting bearer [ 333.995048][ T7541] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.205114][ T7531] tipc: Resetting bearer [ 334.268952][ T7541] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.394804][ T7541] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.454535][T13794] tipc: Resetting bearer [ 334.966244][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.994616][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.004374][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.020772][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 335.031264][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 335.045521][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 335.954469][T13828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1986'. [ 336.274492][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.292656][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.302395][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.324965][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.348509][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.360310][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.032003][T13794] tipc: Disabling bearer [ 337.057820][ T7541] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.086572][T13830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1987'. [ 337.119442][T13821] lo speed is unknown, defaulting to 1000 [ 337.125321][ T5851] Bluetooth: hci1: command tx timeout [ 337.170067][T13821] lo speed is unknown, defaulting to 1000 [ 337.183426][T13835] lo speed is unknown, defaulting to 1000 [ 337.269770][T13835] lo speed is unknown, defaulting to 1000 [ 337.281908][T13821] lo speed is unknown, defaulting to 1000 [ 337.305761][T13821] virt_wifi0 speed is unknown, defaulting to 1000 [ 337.446061][ T7541] bridge_slave_1: left allmulticast mode [ 337.462039][ T7541] bridge_slave_1: left promiscuous mode [ 337.476250][ T7541] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.501555][ T7541] bridge_slave_0: left allmulticast mode [ 337.509767][ T7541] bridge_slave_0: left promiscuous mode [ 337.519152][ T7541] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.626614][T13852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 337.951462][ T7541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.962981][ T7541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.973247][ T7541] bond0 (unregistering): Released all slaves [ 338.013749][T13835] lo speed is unknown, defaulting to 1000 [ 338.038632][T13835] virt_wifi0 speed is unknown, defaulting to 1000 [ 338.134662][T13854] lo speed is unknown, defaulting to 1000 [ 338.194613][T13860] netlink: 'syz.2.1994': attribute type 27 has an invalid length. [ 338.205030][T13862] netlink: 'syz.2.1994': attribute type 27 has an invalid length. [ 338.240679][T13854] lo speed is unknown, defaulting to 1000 [ 338.453004][T13854] lo speed is unknown, defaulting to 1000 [ 338.485602][ T5851] Bluetooth: hci2: command tx timeout [ 338.515668][T13854] virt_wifi0 speed is unknown, defaulting to 1000 [ 338.772639][ T7541] hsr_slave_0: left promiscuous mode [ 338.779265][ T7541] hsr_slave_1: left promiscuous mode [ 338.785377][ T7541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.793017][ T7541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.806375][ T7541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.814088][ T7541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.862921][ T7541] veth1_macvtap: left promiscuous mode [ 338.885676][ T7541] veth0_macvtap: left promiscuous mode [ 338.891329][ T7541] veth1_vlan: left promiscuous mode [ 338.935564][ T7541] veth0_vlan: left promiscuous mode [ 339.209780][ T5851] Bluetooth: hci1: command tx timeout [ 339.543652][ T7541] team0 (unregistering): Port device team_slave_1 removed [ 339.600224][ T7541] team0 (unregistering): Port device team_slave_0 removed [ 340.082504][T13821] chnl_net:caif_netlink_parms(): no params data found [ 340.102223][T13886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.122429][T13888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.234279][T13835] chnl_net:caif_netlink_parms(): no params data found [ 340.258592][T13894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2003'. [ 340.274043][T13895] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 340.356969][T13897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2003'. [ 340.478303][T13904] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 340.565346][ T5851] Bluetooth: hci2: command tx timeout [ 340.666418][T13835] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.674268][T13835] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.694970][T13835] bridge_slave_0: entered allmulticast mode [ 340.706488][T13835] bridge_slave_0: entered promiscuous mode [ 340.723236][T13835] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.730744][T13835] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.738648][T13835] bridge_slave_1: entered allmulticast mode [ 340.746405][T13835] bridge_slave_1: entered promiscuous mode [ 340.769152][T13914] lo speed is unknown, defaulting to 1000 [ 340.787447][T13914] lo speed is unknown, defaulting to 1000 [ 340.846331][T13821] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.859548][T13821] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.884241][T13821] bridge_slave_0: entered allmulticast mode [ 340.893599][T13821] bridge_slave_0: entered promiscuous mode [ 340.929292][T13821] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.948830][T13821] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.979337][T13821] bridge_slave_1: entered allmulticast mode [ 340.998090][T13821] bridge_slave_1: entered promiscuous mode [ 341.037924][T13835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.071178][T13914] lo speed is unknown, defaulting to 1000 [ 341.073081][T13835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.147397][ T7541] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.216895][T13914] virt_wifi0 speed is unknown, defaulting to 1000 [ 341.258532][T13923] bond0 (unregistering): Error: No native XDP support for the current bonding mode [ 341.268915][T13923] ------------[ cut here ]------------ [ 341.274424][T13923] WARNING: CPU: 0 PID: 13923 at net/core/dev.c:9832 unregister_netdevice_many_notify+0x1b5c/0x2070 [ 341.285336][T13923] Modules linked in: [ 341.285571][ T5851] Bluetooth: hci1: command tx timeout [ 341.289240][T13923] CPU: 0 UID: 0 PID: 13923 Comm: syz.0.2009 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0 [ 341.305509][T13923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 341.315913][T13923] RIP: 0010:unregister_netdevice_many_notify+0x1b5c/0x2070 [ 341.323145][T13923] Code: f5 f7 90 0f 0b 90 e9 49 ff ff ff e8 2e 16 f5 f7 90 0f 0b 90 eb 97 e8 23 16 f5 f7 90 0f 0b 90 e9 99 f0 ff ff e8 15 16 f5 f7 90 <0f> 0b 90 e9 09 f2 ff ff e8 07 16 f5 f7 90 0f 0b 90 e9 71 f3 ff ff [ 341.343214][T13923] RSP: 0018:ffffc9000440efa0 EFLAGS: 00010283 [ 341.349418][T13923] RAX: ffffffff89cca14b RBX: 00000000ffffffa1 RCX: 0000000000080000 [ 341.357481][T13923] RDX: ffffc90004bd1000 RSI: 00000000000041c7 RDI: 00000000000041c8 [ 341.365565][T13923] RBP: ffffc9000440f190 R08: ffffffff89cc9350 R09: fffffbfff1d3a614 [ 341.373573][T13923] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffffc90004a75000 [ 341.381723][T13923] R13: 1ffff1100bdc6186 R14: ffff88805ee30c30 R15: ffff88805ee30c28 [ 341.390001][T13923] FS: 00007fd8ec28f6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 341.399020][T13923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.405815][T13923] CR2: 000000110c244ef7 CR3: 000000007f11e000 CR4: 00000000003526f0 [ 341.413817][T13923] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 341.422103][T13923] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 341.430488][T13923] Call Trace: [ 341.433795][T13923] [ 341.436993][T13923] ? __warn+0x165/0x4d0 [ 341.441269][T13923] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 341.448176][T13923] ? report_bug+0x2b3/0x500 [ 341.452702][T13923] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 341.459529][T13923] ? handle_bug+0x60/0x90 [ 341.463872][T13923] ? exc_invalid_op+0x1a/0x50 [ 341.468814][T13923] ? asm_exc_invalid_op+0x1a/0x20 [ 341.473865][T13923] ? unregister_netdevice_many_notify+0xd60/0x2070 [ 341.480559][T13923] ? unregister_netdevice_many_notify+0x1b5b/0x2070 [ 341.487335][T13923] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 341.494048][T13923] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 341.500888][T13923] ? rtnl_dellink+0x394/0x8d0 [ 341.505638][T13923] ? unregister_netdevice_queue+0x26b/0x370 [ 341.511559][T13923] ? __nla_parse+0x40/0x60 [ 341.516045][T13923] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 341.522623][T13923] rtnl_dellink+0x52b/0x8d0 [ 341.527504][T13923] ? __pfx_rtnl_dellink+0x10/0x10 [ 341.532563][T13923] ? validate_chain+0x11e/0x5920 [ 341.537572][T13923] ? __pfx_lock_acquire+0x10/0x10 [ 341.542643][T13923] ? __pfx_lock_release+0x10/0x10 [ 341.547798][T13923] ? __pfx_rtnl_dellink+0x10/0x10 [ 341.552841][T13923] rtnetlink_rcv_msg+0x791/0xcf0 [ 341.557879][T13923] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 341.563029][T13923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 341.568623][T13923] netlink_rcv_skb+0x206/0x480 [ 341.573430][T13923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 341.579011][T13923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 341.584357][T13923] ? netlink_deliver_tap+0x2e/0x1b0 [ 341.589653][T13923] netlink_unicast+0x7f6/0x990 [ 341.594478][T13923] ? __pfx_netlink_unicast+0x10/0x10 [ 341.599825][T13923] ? __virt_addr_valid+0x45f/0x530 [ 341.604938][T13923] ? __phys_addr_symbol+0x2f/0x70 [ 341.610220][T13923] ? __check_object_size+0x47a/0x730 [ 341.615596][T13923] netlink_sendmsg+0x8de/0xcb0 [ 341.620575][T13923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.626190][T13923] ? aa_sock_msg_perm+0x91/0x160 [ 341.631158][T13923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.636534][T13923] __sock_sendmsg+0x221/0x270 [ 341.641256][T13923] ____sys_sendmsg+0x53a/0x860 [ 341.646209][T13923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.651506][T13923] ? __fget_files+0x2a/0x410 [ 341.656326][T13923] ? __fget_files+0x2a/0x410 [ 341.660933][T13923] __sys_sendmsg+0x269/0x350 [ 341.665584][T13923] ? __pfx___sys_sendmsg+0x10/0x10 [ 341.670757][T13923] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 341.677193][T13923] ? do_syscall_64+0x100/0x230 [ 341.681977][T13923] ? do_syscall_64+0xb6/0x230 [ 341.686791][T13923] do_syscall_64+0xf3/0x230 [ 341.691317][T13923] ? clear_bhb_loop+0x35/0x90 [ 341.696079][T13923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.702001][T13923] RIP: 0033:0x7fd8eb38cde9 [ 341.706485][T13923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.726432][T13923] RSP: 002b:00007fd8ec28f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.734875][T13923] RAX: ffffffffffffffda RBX: 00007fd8eb5a5fa0 RCX: 00007fd8eb38cde9 [ 341.743117][T13923] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000005 [ 341.751165][T13923] RBP: 00007fd8eb40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 341.759238][T13923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.767354][T13923] R13: 0000000000000000 R14: 00007fd8eb5a5fa0 R15: 00007ffed4bfd828 [ 341.775441][T13923] [ 341.778488][T13923] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 341.785780][T13923] CPU: 0 UID: 0 PID: 13923 Comm: syz.0.2009 Not tainted 6.14.0-rc2-syzkaller-00428-g7a7e0197133d #0 [ 341.796542][T13923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 341.806588][T13923] Call Trace: [ 341.809863][T13923] [ 341.812888][T13923] dump_stack_lvl+0x241/0x360 [ 341.817632][T13923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.822824][T13923] ? __pfx__printk+0x10/0x10 [ 341.827401][T13923] ? _printk+0xd5/0x120 [ 341.831547][T13923] ? __init_begin+0x41000/0x41000 [ 341.836678][T13923] ? vscnprintf+0x5d/0x90 [ 341.841018][T13923] panic+0x349/0x880 [ 341.844918][T13923] ? __warn+0x174/0x4d0 [ 341.849074][T13923] ? __pfx_panic+0x10/0x10 [ 341.853503][T13923] __warn+0x344/0x4d0 [ 341.857509][T13923] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 341.864103][T13923] report_bug+0x2b3/0x500 [ 341.868432][T13923] ? unregister_netdevice_many_notify+0x1b5c/0x2070 [ 341.875028][T13923] handle_bug+0x60/0x90 [ 341.879188][T13923] exc_invalid_op+0x1a/0x50 [ 341.883692][T13923] asm_exc_invalid_op+0x1a/0x20 [ 341.888551][T13923] RIP: 0010:unregister_netdevice_many_notify+0x1b5c/0x2070 [ 341.896188][T13923] Code: f5 f7 90 0f 0b 90 e9 49 ff ff ff e8 2e 16 f5 f7 90 0f 0b 90 eb 97 e8 23 16 f5 f7 90 0f 0b 90 e9 99 f0 ff ff e8 15 16 f5 f7 90 <0f> 0b 90 e9 09 f2 ff ff e8 07 16 f5 f7 90 0f 0b 90 e9 71 f3 ff ff [ 341.915795][T13923] RSP: 0018:ffffc9000440efa0 EFLAGS: 00010283 [ 341.921870][T13923] RAX: ffffffff89cca14b RBX: 00000000ffffffa1 RCX: 0000000000080000 [ 341.929836][T13923] RDX: ffffc90004bd1000 RSI: 00000000000041c7 RDI: 00000000000041c8 [ 341.937804][T13923] RBP: ffffc9000440f190 R08: ffffffff89cc9350 R09: fffffbfff1d3a614 [ 341.945775][T13923] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffffc90004a75000 [ 341.953742][T13923] R13: 1ffff1100bdc6186 R14: ffff88805ee30c30 R15: ffff88805ee30c28 [ 341.961716][T13923] ? unregister_netdevice_many_notify+0xd60/0x2070 [ 341.968228][T13923] ? unregister_netdevice_many_notify+0x1b5b/0x2070 [ 341.974833][T13923] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 341.981606][T13923] ? rtnl_dellink+0x394/0x8d0 [ 341.986291][T13923] ? unregister_netdevice_queue+0x26b/0x370 [ 341.992190][T13923] ? __nla_parse+0x40/0x60 [ 341.996615][T13923] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 342.002856][T13923] rtnl_dellink+0x52b/0x8d0 [ 342.007357][T13923] ? __pfx_rtnl_dellink+0x10/0x10 [ 342.012377][T13923] ? validate_chain+0x11e/0x5920 [ 342.017309][T13923] ? __pfx_lock_acquire+0x10/0x10 [ 342.022335][T13923] ? __pfx_lock_release+0x10/0x10 [ 342.027404][T13923] ? __pfx_rtnl_dellink+0x10/0x10 [ 342.032422][T13923] rtnetlink_rcv_msg+0x791/0xcf0 [ 342.037353][T13923] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 342.042462][T13923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.047927][T13923] netlink_rcv_skb+0x206/0x480 [ 342.052694][T13923] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 342.058151][T13923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.063461][T13923] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.068662][T13923] netlink_unicast+0x7f6/0x990 [ 342.073428][T13923] ? __pfx_netlink_unicast+0x10/0x10 [ 342.078706][T13923] ? __virt_addr_valid+0x45f/0x530 [ 342.083813][T13923] ? __phys_addr_symbol+0x2f/0x70 [ 342.088835][T13923] ? __check_object_size+0x47a/0x730 [ 342.094120][T13923] netlink_sendmsg+0x8de/0xcb0 [ 342.098887][T13923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.104166][T13923] ? aa_sock_msg_perm+0x91/0x160 [ 342.109108][T13923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.114435][T13923] __sock_sendmsg+0x221/0x270 [ 342.119109][T13923] ____sys_sendmsg+0x53a/0x860 [ 342.123877][T13923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.129158][T13923] ? __fget_files+0x2a/0x410 [ 342.133748][T13923] ? __fget_files+0x2a/0x410 [ 342.138341][T13923] __sys_sendmsg+0x269/0x350 [ 342.142933][T13923] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.148073][T13923] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 342.154408][T13923] ? do_syscall_64+0x100/0x230 [ 342.159168][T13923] ? do_syscall_64+0xb6/0x230 [ 342.163840][T13923] do_syscall_64+0xf3/0x230 [ 342.168343][T13923] ? clear_bhb_loop+0x35/0x90 [ 342.173036][T13923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.179186][T13923] RIP: 0033:0x7fd8eb38cde9 [ 342.183601][T13923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.203203][T13923] RSP: 002b:00007fd8ec28f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.211618][T13923] RAX: ffffffffffffffda RBX: 00007fd8eb5a5fa0 RCX: 00007fd8eb38cde9 [ 342.219588][T13923] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000005 [ 342.227551][T13923] RBP: 00007fd8eb40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 342.235527][T13923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.243488][T13923] R13: 0000000000000000 R14: 00007fd8eb5a5fa0 R15: 00007ffed4bfd828 [ 342.251467][T13923] [ 342.254805][T13923] Kernel Offset: disabled [ 342.259117][T13923] Rebooting in 86400 seconds..