last executing test programs: 47.661666345s ago: executing program 4 (id=565): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc00000000000000000000000000000c3eb505bcb357773934fe4100fc00000000000000000000000000000000000400000000000a006000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900"/112], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0xe9d8, 0x1, 0xc4, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x80000001}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="0965a0d130ba3c57bb292345b75a8f5f89435e869bc555b6fba0ee570e68995dbbc21a555876ff3198e435e0d8e7fcf8ff54fb7fd3d5040171953cafae324cf063e4c461e90bd4d3181d060de7abea2775d805ebdfcb61a284b34ed7"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={0x0, 0x800}, 0x8) (async) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=':\b', 0x2}], 0x1}, 0x3) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x4000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="14000d00", @ANYRES16=r10, @ANYBLOB="010000000000fddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x8040044}, 0x4088800) 47.424916736s ago: executing program 4 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111520000000000850000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1}, 0x48) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="080027226da0d6c1", 0x8}], 0x1}, 0x31c467c443849ffc) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000440)=@nfc_llcp, 0x80, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/176, 0xb0}, {&(0x7f0000000580)=""/180, 0xb4}], 0x2, &(0x7f0000000640)=""/78, 0x4e}, 0x2000) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000000000)=0x8000, 0x4) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r8, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000007"], 0x20}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) 40.365724554s ago: executing program 4 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111520000000000850000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1}, 0x48) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="080027226da0d6c1", 0x8}], 0x1}, 0x31c467c443849ffc) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000440)=@nfc_llcp, 0x80, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/176, 0xb0}, {&(0x7f0000000580)=""/180, 0xb4}], 0x2, &(0x7f0000000640)=""/78, 0x4e}, 0x2000) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000000000)=0x8000, 0x4) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r8, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000007"], 0x20}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) 28.673647113s ago: executing program 4 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111520000000000850000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1}, 0x48) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="080027226da0d6c1", 0x8}], 0x1}, 0x31c467c443849ffc) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000440)=@nfc_llcp, 0x80, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/176, 0xb0}, {&(0x7f0000000580)=""/180, 0xb4}], 0x2, &(0x7f0000000640)=""/78, 0x4e}, 0x2000) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000000000)=0x8000, 0x4) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r8, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000007"], 0x20}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) 15.942723784s ago: executing program 4 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111520000000000850000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1}, 0x48) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="080027226da0d6c1", 0x8}], 0x1}, 0x31c467c443849ffc) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000440)=@nfc_llcp, 0x80, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/176, 0xb0}, {&(0x7f0000000580)=""/180, 0xb4}], 0x2, &(0x7f0000000640)=""/78, 0x4e}, 0x2000) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000000000)=0x8000, 0x4) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r8, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000007"], 0x20}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) 5.495368107s ago: executing program 4 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111520000000000850000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1}, 0x48) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="080027226da0d6c1", 0x8}], 0x1}, 0x31c467c443849ffc) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000440)=@nfc_llcp, 0x80, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/176, 0xb0}, {&(0x7f0000000580)=""/180, 0xb4}], 0x2, &(0x7f0000000640)=""/78, 0x4e}, 0x2000) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, &(0x7f0000000000)=0x8000, 0x4) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r8, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000007"], 0x20}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xb9}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) 2.000075571s ago: executing program 3 (id=1036): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x21}, {&(0x7f0000003c80)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x10020, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x0, 0x0, 0x1a8, 0x3d8, 0x1a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) 1.842910949s ago: executing program 3 (id=1038): ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0xfa, 0xfa, 0xfd, 0x3c, 0x8, 0x4, 0x9, 0xf9, 0xc7, 0x6, 0xba, 0x4, 0x3, 0x6}, 0xe) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000003c0)=""/244, 0xf4}], 0x1, &(0x7f0000000680)=""/9, 0x9}, 0x40000200) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r3, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xffe0, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) 1.445298602s ago: executing program 2 (id=1041): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000bbfdb538df44862505000000087266000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040084) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x11, 0xa, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x88) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x800443d3, 0x20000002) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x18, r6, 0x7, 0x0, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040884}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, 0x0, 0x2a}, 0x20) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1", 0x12}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r7, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r6, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e60a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x346135654aeb2d6c) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r5) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@rand_addr, 0x0}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r9, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000891}, 0x8005) 1.327915716s ago: executing program 0 (id=1043): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x6000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073117000000000008510000002000000850000000500010095000000000000009500a505000000009e3c5012d001cd60cd367e723983fe12f001bbc74ec6009f7b78abf5d31bb8b9a7ffbe741a957146d6366d93f6c2a3ea91921bac7551cf105c2b71be23f6099b4811193b2a22b41308da5c4ea5c4d0e798527ebb720848ba65d359070b5a092f6f5f7e65c0ef1f6ad70c1f18d5508ec353876a032f8b0674bc194ad2073619bf3b1beeae23884eb2aacbe52fd0d2bb7fa0a07d15142c915f6f9613"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.257157485s ago: executing program 2 (id=1044): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811005000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140)=0x1, 0x4) (async, rerun: 64) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') (rerun: 64) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) accept4(r0, &(0x7f0000000580)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000600)=0x80, 0x800) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) r5 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4e23, 0x0, 0x4e22, 0x0, 0x2, 0xa0, 0x20, 0x89, 0x0, r5}, {0x2, 0x5, 0x8, 0x2, 0x800000, 0xcb5, 0x0, 0xa0}, {0xbef0, 0xffffffffffffffff, 0x3, 0xfffffffffffffff9}, 0xfffffff8, 0x6e6bb1, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d4, 0xd4}, 0xa, @in6=@mcast1, 0x3501, 0x3, 0x0, 0x96, 0x7, 0x4, 0xff}}, 0xe8) (async, rerun: 64) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) syz_emit_ethernet(0xcf, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x5, 0x0, 0x4}}, {@llc={0x4, {@snap={0x0, 0xaa, "ad", "f0b51a", 0x1aa03, "7670414ebd76c14a877d23eeb1dd7b98d5d46a4d7c817d8e81328f8251a192251fd5b24657c3df0e42093cd345029b1a8ec7e98c1aabfb38d3894f4ad28b8cb5d2fac5cafb0796a1fe346a03af6d153d95fca65f2fe0c797b19ea937e36522cc1c1419ebb509b3e0a917e596ea78b9977d99eb47fe6a04c69a19e638fa27f9e6158f773410215420966654a042f915193e7290d6e1e919eb33548dd550596e72d45950cc4acfb3e936bf8e4034294cd58ecc954186"}}}}}, &(0x7f0000000000)={0x0, 0x1, [0x6c1, 0xe2b, 0x6b8, 0x11e]}) 1.244294442s ago: executing program 1 (id=1045): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000001940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001980)=0x14) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x8929, &(0x7f0000000600)={'ip6tnl0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ac0)={&(0x7f00000019c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3e, 0x3e, 0x8, [@func={0x9, 0x0, 0x0, 0xc, 0x4}, @fwd={0x10}, @func={0xd, 0x0, 0x0, 0xc, 0x1}, @datasec={0x6, 0x1, 0x0, 0xf, 0x2, [{0x4, 0xb270b62, 0x1}], "d8a3"}]}, {0x0, [0x0, 0x30, 0x5f, 0x5f, 0x5f, 0x61]}}, &(0x7f0000001a40)=""/116, 0x60, 0x74, 0x1, 0x5, 0x10000}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@bloom_filter={0x1e, 0x8, 0x7, 0x22, 0x100, 0xffffffffffffffff, 0xfffffffd, '\x00', r1, r3, 0x5, 0x3, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x0, 0x0, 0x2}}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x16, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x35288}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x7}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) sendmmsg(r6, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="1f974559bab46a5236e909a2ddd26c1e65a8921b64252c8f0ffb2bd1d6fc44b5994e4466cb5ba459d4fa99d13bcedfe17dadcc8777ef66ea8e255d08fdad0b0c5658d47c82de9f44644b5f54db487cd14d1700eee695bc52c264c128d6a9d377d969c9ea50faadf41135641b5b6d432a7ebe89b01ab916a4e5ad8292d226383a74d972da5a79d00e9013cadfd858", 0x8e}, {&(0x7f0000000080)="6af88083d4e20475934c5aa5c5f56b47e59c13715c3ad27e4becdbaa6b91dcde82f44d1c158082716581e64b93d3a3c3bbd904f4ec1c619b69a364737b7d279c1045", 0x42}, {&(0x7f00000002c0)="3901fcebf1566f8baf3df605f11b1aa1b8d8d087cd03811a1540be09d66617fc565f22e06cc6d8c6b4dc4d6981191da48ba306f59c754bb4e1990007e7adc7b2a1fc553b78caa8e9eb76e742ed18ebcdfd4da55937c5a3216d8e7ec3704275a0474fa8dad570edf1ec967137facd0ef5e002e1feebcf489dd16de97d1b19c17ab687442be75a106e47531ad6921de023415bfb6d3f9c368477be497a5f4004c08dc09c226d15331e7859aca7d06d2a393d5942446037fad4278015469dc2cccafca3b5a181c886c0a127bcbf5684d58604a3d9dc", 0xd4}], 0x3}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="be0614a29b44e0cae86dad2522aba9259cbbb2ae4e1eb889210a06518517e70dbf0f6926987d17c99cec8cdb397ec0fedce934242aedecd4c333380c8f27ee11310bf3a29e88856f153f51433a1382a3a0a0168f236947d27f619d51c11b25c7f401eae59ecb09ee73c9795a3c88ca56d91fec3a7f922b80175538f9", 0x7c}, {&(0x7f0000000440)="673af0eea3aba85752a0c4f73209b54dbf220acad46db212e0bd019009abf2cd9ae9ba9761726900863e7b3e866b2bf0052ed7d5cd2bcded704ecec52c7c8cacfbacf2f6430cb25057273e16997b3a100c8ee12a9ca81a62bb36f3a8e41200f606782e485d9124cb7f9f4d5ee405e07ed8e9c220a06c0f61ef14f65c100391ef3ebdae3d1992d8c7089b0534ec21292ccd46a8560f509056162e03c81a684c2967af4cd66bc4f303650cb4dd2c8abf8bc1809969e2f7a70d2a937cc4e567b1c02bf75c6d08072f6380201ed9fd02fb6fd4ad457d50dc7106d15bf0eabdd416f20598", 0xe2}], 0x2}}, {{&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x2, 0x1, 0x3, 0x3, {0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x101}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)="371c02d83cec156ff622b3c6f267042cf7ecdb9f886e282228e91977ae17f374eee9c5dec4405a57aa8eece2370709b9d47dd056cbe4f7c23d90a7e19ad0a971", 0x40}, {&(0x7f0000000640)="3d3d3d9406ca6a6f96fbb672c9fbf302849a56f3548cd76f06cb5856acc6d1db8e605beed43447373cb963df72a62c86ac179c102d78844437e793c2f8d0381c770fa81e3548", 0x46}, {&(0x7f00000006c0)="b1540ad4d25f426633de9a5cafab5c0284878f6e7f817c32f30dab083fde636c8b5065782ddac2e71894bd3bee3e08150c687e3c8ec04a9d0b4ac82ffcb85ab731470d739ef009208e5419c9025e1eb27673976301c5cf44e7ad6055524aaa7a54eb965158f34bf8a918e1f38d1e70e78025caed15f7ab18452f729f5453ead59b72e34f353806e87707f604e2c09c0d027b315a0517d9151e1b9aa9397d221279dff95aaeded768896c97adf86e", 0xae}], 0x3, &(0x7f00000007c0)=[{0x1010, 0x107, 0x2, "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"}, {0xa0, 0x116, 0xf284, "16264837325027625edc2cf957dad4bcb3fb1793d34b1ecf13736d487c62f20d002d9cff6fdca14d3f5f19b331e0a9b36112a1923576e1785d26f39531ac22cb1d399faf716a4babcd305d99b6b99f292f34951ad20c73458cc74819362aa938377dfab5cef2d6b7f656b74264e3fd800cfe0e170142bfacbadae3ce14ecc56ac5a3738e56eac75ace"}], 0x10b0}}], 0x3, 0x20000000) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'bridge0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4f}}) 1.192498024s ago: executing program 0 (id=1046): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) (async) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x2, {0x0, 0xff, 0x5}, 0xfd}, 0x18) (async) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x2, {0x0, 0xff, 0x5}, 0xfd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r3, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x24000000) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket(0x11, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) setsockopt(r6, 0x107, 0x1, &(0x7f00000001c0)="010000009700060000071a80010061cc", 0x10) (async) setsockopt(r6, 0x107, 0x1, &(0x7f00000001c0)="010000009700060000071a80010061cc", 0x10) close(r6) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000800)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1}}], 0x48, 0xc800}, 0x0) 1.000081047s ago: executing program 1 (id=1047): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x804) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(r2) unshare(0x20000400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r6 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x5411, &(0x7f0000000040)) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x24}}, 0x40000) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) 895.882909ms ago: executing program 0 (id=1048): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0xffff, @rand_addr=0x64010101}}}, 0x108) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.swap.events\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0x10c, 0x30, 0x25, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_ctinfo={0xf4, 0xc, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x0, 0x0, 0xa8, 0x4}}]}, {0xae, 0x6, "19e1616fb0c57c2212cd9488876778cf5b8a143d9a8e36ae6344c6cf6712d643535929b0178df2994139f5110779429b545519cdf9d10139159009413099b645e0dab78dd93af07146ce5960ed934eadae237671d9135b9fbac7877fa66c335284afff4c64cadd8278a906a28ba96d1ea36567fc7be05ace8cb3187f84c551e14cf830e05df3ad95ceb1e9f53e9aa899589220232a5e0474e12785e6fd2abba636064f6b6c4b728cf75b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x10c}}, 0x0) 859.77477ms ago: executing program 3 (id=1049): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"1ff7e88af3bd26f9b111d04e69a16c52", r0, 0x0, {0x80000001, 0xfffffffd}, {0x8000000000000001, 0x9}, 0x81, [0x9, 0x9, 0x7, 0x4, 0x2, 0xff0000000, 0x7, 0xd9a, 0x0, 0x4, 0x10001, 0xe6e8, 0x0, 0x80000001, 0x3b, 0x40]}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000140)=0x9, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xd}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000002c0)=0x8) r2 = socket(0x23, 0x1, 0x38) sendmsg$inet6(r2, &(0x7f0000000580)={&(0x7f0000000300)={0xa, 0x4e20, 0x10, @private1, 0x401}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000340)="0bc5ea9e8abf3a1d477f0d02483dccc34b6793f43ed5ece4c52aea85920084dafbaa11f376296d412e7fee0b73f8cde51bebc5ae7e661d05a30ce706bb4377fc78fadae6e56cdf6e0d3a4776508bca295226691e7f0887192fa0808d887ad326869606dda62c0d181abf3bc3189643b1c2e6660789aa67c63677d7d5440cebef76b7b11e72b63205c39d78a894474401b9d2015445ce977a46ce89de08e3f09021c941d1f8d4a457b6bbb9da64baa901191ee1045b41e665c8ab88a25bbb599c947810379733e16fa25b11a800dda77a28fc7e3c2bd7", 0xd6}, {&(0x7f0000000440)="03b317bdea7d3c16982ae6fd8a817781bcc41168057e08120c9d0b9df4da962dfd668a390109f46895112608f211d6c61375448488caaa07c495623a917151d6d4c76724075962123a8f529ba5a4e67453f6c5c406b66193bb221d50c64ac22400615497ce2380cf16cc25daf5c23ed2bfff666cfd1fc101b0cff6339ae01ae37e027b", 0x83}], 0x2, &(0x7f0000000540)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3c, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0x8}]}}}], 0x30}, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x64, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_EXPRESSIONS={0x54, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xc5}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_EXPR={0xb4, 0x11, 0x0, 0x1, @match={{0xa}, @val={0xa4, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'multiport\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'tcp\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xa, 0x1, 'realm\x00'}, @NFTA_MATCH_INFO={0x58, 0x3, "4f6245e6494ac159353e789aefdaeddc911516ec82dac30abba347dd444f0f0d1e50d8450a3ae7bb628382900b4e6befe5ae60f5dd92e9eb9904df2ea2582e9151b4eca254a1e7649cd267f9b398ae9ec65dc4bb"}, @NFTA_MATCH_NAME={0xc, 0x1, 'cluster\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "f1b22352ea99695129813595"}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x1d8}, 0x1, 0x0, 0x0, 0x20008801}, 0xc0) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x7, 0x3, 0x0, 0x880f, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x9}, 0x50) (rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000980)={r4, &(0x7f0000000900), &(0x7f0000000940)=@udp=r2, 0x4}, 0x20) (async, rerun: 32) close(r3) (rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000001080)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001040)={&(0x7f0000000a40)={0x5f8, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x228, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xba, 0x5, "2c09bacaf996cb31a4b3d5ce07f362946e2577f9e5ddeb06a9d0ab0af544afaa95c1207f88c08d28fcca9d5306dbbabb761c5902f85934df5593397206dc6bb0e7b8622638e09e914e24c69e29ca1a2752ccbcc146499bb6c2b5653428f115912bde6faf9049e02bdc0e503b3ce4d07b22ed8fe568f97a51872a2843e6ac4553feb356b50e186e909e5339a1500dff26e514b82fa2ea6e568ac8af80a1411031e075a517646d22257d17fc7e925f295f29d907debdc7"}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ca}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'dup\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\,:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'multiport\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xb5, 0x5, "e004a8b260f0dffc984e531952136e3cba967300acdca84b7dfdbbd318365e5385c08517b1552e7e2864861939054ae703a77dd2dc5706ece67c75aa8d49acd65db1c9646e97013d0a0b9dc7975c1e5f50dd862bae08aa8866d8ef094f30c5fc39c03c8ee4a9df3946f39d94e0ce916a359199ad2fb5430e06382139a6b30cd1a9fe3197d9659fce7b28fbe8bf98f50d9f45290604621b1fed562e1f6424c1be91ae795ef779499acb827fc47ad245e9fd"}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'byteorder\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd0}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x58b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x164, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x5b, 0x5, "5bf457c3ee638ba2f061e3b3f933f1ac48ebc553670bfd003f0e33f6a0476e40587b51893280d057d02b6f63820582a48362c830fce87b6f5eb33f4a865777c9dd59c1c6d71343699e655556a0f596ed15aee7fd6e04a0"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xfa, 0x4, "6f9d5b62f48df19a37ea42315b4fb8c3057951f71af446fe5d06be6945509ecde1e9b542c7f46b875a68e8bef424cc13250fb7fe101623996c032fa874b882aeb453fe73cf3d4cbedd2f5bfef16555020dedc918550e7b7aff92c28ef84c1198a8624f8f6b150b1ba9ac03901376d9cd0b27099dfa2000a516cd77b76e73150c1b276cd72d17bf79c06de8dcea16f104b6eed481c61e10eb4444eee75c13827ba16484c5de0408de87b65030b630c8651fd9e15437ea11e0c60f526c4d76221705d6aa64e90447e2906661d2c7095c5632e4e1c136cdc4beb69c579613c01d5ea3fc945818aa313d055a6fae2731de824cefc598981d"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x14c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf0, 0x5, "a4c51ba20dbfd40bf3633297fd37fe829e4fbba0964931285aa1a25b1eed6656ef2e418a5f0a70ce5f21013b5f25ef48b7505f595eadd33f6c411f1d5cbba6a9e3b5456281df4b2d64139eb874bac5eff4f4ff059a2b14f22b3375fcd1a81ef7e750b7ddbf120659c8d905e08e9a6e27d5d5fd73a69e5df3cdc3e0364ec6a6d29f9ac8efc8ba81f6833ed83bbf32d4f0f8a824755e2c8d33b11bcb778b49651b147adebf6638d2a73aa61fa6d5244f79140ff2fc1f8886083a92a69899bd9684a374ff3ed5251710a93ad74bc4dad983f05d965ea4cd2158acb996071ecb912d622fe63c08465fbf52ab20c6"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x45, 0x4, "2106c37eeceeab54451f17a5d48d902bdc1fd3951a02baa3050117eb9c7ec5a0860ee1ede276652f3348ef0861734dd96cc47658dc54bcdd5d65375dc8624d5dda"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x9, 0x4, "38ef5efdf6"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7e, 0x5, "7359d867883c37ef84bea9c84921bd448d3bf6832c1cf9a21199b5565b03e4e67aa351f64f46581c76a31bb8f5c5c18a9719ee8ed2e25dfd27834cf5a588c09645761e0bf413608c7668c88762124fb13b4f8227e08c8be9bf07469124035b924bae66344ef2168a0c59fd92ef3ec0f9500b32c3b66e074f9b14"}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'dup\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x24000004}, 0x20004090) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000010c0)={0x0, 0x3b, "3cd7aeaf7b9960bf2e57b77dc24e8f2e77276a23f9a4b32a3f3a7d7b5300be6cf5c29c2301433549fbd9058cba9d56ee491c086379ff52dede83c7"}, &(0x7f0000001140)=0x43) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000001180)={r8, 0x558}, &(0x7f00000011c0)=0x8) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001200)={'pim6reg0\x00'}) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f0000001240)={'icmp6\x00'}, &(0x7f0000001280)=0x1e) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x70, 0x1405, 0x10, 0x70bd2b, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8}}, {{0x8}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x50}, 0x4008010) openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x62a200, 0x0) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x24, 0x28, 0x100, 0x70bd2a, 0x25dfdbfe, {0x1d}, [@typed={0xc, 0x8c, 0x0, 0x0, @u64=0x45a6}, @nested={0x4, 0x70}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x44000) (async, rerun: 64) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000001540)={0x29, 0x0, '\x00', [@pad1]}, 0x10) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000001580)=0x8) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001600), r1) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x30, r9, 0x52e7742e03ee90d9, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x43}]}, 0x30}}, 0x20000000) 795.155635ms ago: executing program 2 (id=1050): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5b}}, &(0x7f0000000480)='GPL\x00'}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xf4, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0xf4}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x6) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5b}}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0xf4, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0xf4}}, 0x4000) (async) 762.167169ms ago: executing program 1 (id=1051): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x3, 0xff) sendto$inet(r2, &(0x7f0000000040)="b401fcc8070000090000008e052af9c34b7d7494", 0xffffffe1, 0x4085, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010102}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x2, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffff17}}}]}, 0x58}}, 0x0) 749.92421ms ago: executing program 0 (id=1052): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0xc}, {0xfffffffffffffd4b}}}]}]}, 0x48}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r2, 0x11, 0xa, 0x0, &(0x7f0000000100)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000002b000bf50ef81eb6205c4c01"], 0x28}}, 0x0) 599.774685ms ago: executing program 3 (id=1053): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0100391c4e5f8d79ffa2e744b3a593f4fef11800002b"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x10, 0x51, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x91}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$ieee802154(0x0, r7) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000a80)) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000a40)={'veth0_to_bridge\x00', &(0x7f0000000800)=@ethtool_per_queue_op={0x4b, 0xe, [0x6, 0x9, 0x8001, 0x9, 0x71, 0x0, 0x8, 0x0, 0x7, 0x8, 0x8, 0x7a, 0x8, 0x7205, 0x2, 0x1000, 0x7, 0x1, 0x7f, 0x7fffffff, 0x3, 0xad, 0x720, 0x9, 0x17f4, 0x8, 0x7, 0x5, 0x6, 0x7, 0x7, 0x5, 0x9, 0x455, 0xa, 0x1, 0xe, 0x0, 0x6, 0x2d, 0x7, 0xffffffef, 0x827, 0x3, 0x8, 0x10, 0x77, 0x6, 0x5, 0x3, 0x11e, 0xe7f3, 0x9, 0x5, 0xd, 0xfb93fb84, 0x400, 0x80000001, 0xf48b, 0x10, 0xa14, 0x3, 0x80000000, 0xb, 0x1fd, 0xff, 0xfffffff9, 0x5, 0xb6ae, 0x6, 0xf8, 0x2, 0xa8, 0x7, 0x6, 0x72, 0x3, 0xff, 0x0, 0x0, 0x9, 0x9, 0x7, 0xffffffff, 0x8001, 0x5, 0x0, 0xf, 0x9, 0xd6dc, 0x101, 0x1ff, 0x8, 0x10, 0xf, 0x3ff, 0x8, 0x81, 0x1, 0x0, 0x6c4, 0x8, 0x93f, 0x4a, 0x3, 0x2, 0x81, 0x200, 0xfffffffa, 0x3b, 0x80000000, 0x2, 0x5, 0x7, 0x8000, 0x8, 0xf, 0x9, 0xfd0, 0xffffffb5, 0x0, 0xd9e, 0x0, 0x0, 0x6, 0x380, 0x6, 0x80000001], "f1133596ac6380fdca0690295351b378ea12289a0a2c6e46"}}) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002d00090027bd700000000000"], 0x14}}, 0x4000080) close(r2) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000000007800000d0a0000000d000000000000010000000003004a010000000002000006040000000c0000000101000008000000010000800f00000003000005fc0000000300000000000000070000000e00000005000000d50000000300000005000000f9ffffff090000000000000a020000000400000000000001000000006b007e01005f003003305f003000"], &(0x7f00000001c0), 0x9a, 0x0, 0x0, 0xfffffff9, 0x33dc95d435104b8a}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x4, &(0x7f0000000140)=""/4, 0x41100, 0x8, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f0000000580)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0xc, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r0, r0, r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x3}, 0x94) 554.843087ms ago: executing program 2 (id=1054): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x48, r5, 0x100, 0x70bd2b, 0x2, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48011}, 0x40000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xb, 0x27}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4006000) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'vcan0\x00'}}, 0x1e) close(r8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x48}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c0001000000000000000000020000800c000000000000000000000014"], 0x114}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000580)=0x8, 0x6d5a0a95) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r1) sendmsg$GTP_CMD_ECHOREQ(r12, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r13, 0x20, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x40000) sendmsg$BATADV_CMD_SET_VLAN(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r10, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf3c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r10, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000}, 0x800) 516.231764ms ago: executing program 0 (id=1055): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="10e6ffffffffffff280000000b000000"], 0x10}}], 0x2, 0x0) r1 = socket$inet6(0xa, 0x80803, 0x88) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') ioctl$TUNSETIFF(r2, 0xb701, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa0}, {}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0x1}, {{@in=@empty}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000200)={0x3, 0x401, 0x64, &(0x7f0000000280)=""/100}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000190001000000000000000000001467153984ff000000000008608bc12650c5c32c1b5ed514adae87"], 0x1c}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'veth1_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0xfffffffe, 0x0, 0x4, 0x1, 0x1, 0x7, 0x2f4}}) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="89f71175a29e012abd7000fedbdf250000000014e20b00fc010000000000000006000800020c00030003000006000000000000010000"], 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0xc0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="128e70ce", @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf2503000000400001802c0004001400010002000000ac14142f000000000000000014000200020000000000000000000000000000000d0001007564703a73797a3200000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='`B\x00\x00', @ANYRES16=r5, @ANYBLOB="99742dbd7000fbdbdf25150000004c000180380004001400010002004e20ac14141d0000000000000000200002000a004e2300000002fe8000000000000000000000000000aa050000000d0001007564703a73797a3200000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x40, r11, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x4004841) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x414801, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xd4, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1fc0000, 0x2b}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0xa3, 0x5b, "1fc0eee81557a689bb0e88567bd5d232dd77c7769cd704889394c62499ea5fc55299ebbdf466beb76720d481ec63e2133608d52472113f90b94f270e3f7ffb428106e68a2aac2c6f7684f7d7ec1ec8411a0ced704108c665a24126a94368e6256a317506d6c7a3ae18dca3043f4247a976163e25cac39de4a65801ec0aafcaf2b996c120aaf4d46a51991c40e2bd89678c3d27a45d2c4ff3841457e9a32d68"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x20004001) 383.401441ms ago: executing program 1 (id=1056): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x14) (async) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000015c0)={&(0x7f0000000280)=@isdn={0x22, 0x9, 0x3, 0xff}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)="46d82297320d57c2cd444ad45d3677e8ca3fc5e8729518fcc32c09319f00a1593dc259a79603ab0015f9f58a8df0e9cd9c8978cf6e0b923588334d34575e9106ec6c8321d3eab3b1dc63441efdccaffcc0bb051c43161d6909541cead687cd9456a99300c3cab743f8b122cdcd1aea0f43ef66d21831dbfb7f74a7b8873ba0dae72edb044a90d1730fc2206f3673e721176e477ec7102baa4b1640200dcb3b7496", 0xa1}], 0x1, &(0x7f0000000400)=[{0x1010, 0x1, 0x6e8a, "a2736bc6519c8f88fec1a367f4afff8287dfdfd5840ea273902038b62894bef21c7a4660c7a2c3003ce85247278e0023df908244bcbda3a1b5fc9804f32ee417c97eb606fb969b5b8c1d83fc1ef8de0cc5511c015e2ca4d3f4a4ce0c61d60d25930b0df8c078d7cc7c7896aa15f8dcbf6066060a9a61e2e0c87eecf40ec2fdef8ec181f84d6ec008eefde416befdc584c3dfa7e960ce805408e2ff81932324f2e5c5c726ab747fec4678c548b8872ba949a0cbaccb45a4fd616f3d002db98ad84ddf8cbcd9a2863f02f3fd8b6969dd1205d98d2d9bca664e014aa45d130ef654c8f40fcc0104a932ef6dad7a835024b127f17e30a12d38b9987f036e73b175656a754bf4af32f12e223e86c74a3979752f6ef9eddb5e0dceebc8a20f02266ff6aa792cb3d392f4e89ec97463a2869cb77d44145a623a5a16e938aa664097240a40d0aab5c3d8c3efc4e24f4127e9ee2fe0a13149686995148429dfd6defe7c2eefb24c6238721662bbd241df0a70aa569d6b183f353209880e4c5bedd16aab4c15edbf05692c46ed9b4e7e5a66d5b15305c54f0fcf6440f6c36795c15158e90e853c1def16f942ffccc555a222d9fc468918d31ee978b8c9c0a4af3d3183c6f092bb36e4a88e72ae2f0170df596a7ce380e3e237bdee9b7cca90e3e65906f256e273e41f6223feb38358a83563ff7a7a769bdfc37ddd67ed50ed395d76440c29ce6a089c9aab8154a36e06d103ca5a08662e3f0238a7e314fbf05971d68e29e04748a0d4e85ad2b586720443e9ea554afbf50afe27e3551457d43d5b85baf4e33644543f05ae509a37f703e5dbd7068644eb543521c3ea9ec4517304cd254590a24b6783e6f8f294d52891d386de80030ece88d170dae6a682f4886a73c963c6d1e3cbdfe1f83345706193837cd18d8add97327bc30dcefcea345372884bed7ad1bbcb4ba66ac0cd134664b4b92f65af5fa23d7c1cbacd37a49bd1b67830ff8f5297109396c0443542574ec4350e42265799c5d0458a6f3b2c1bf57ea1565a0aa402dc2fa67df78a79afa6a2e41e8bb636895d45ede377079582da3b5988f2603f3dc28a38fdc9ae661636f2e4a2ee55ca9917d3e23fa8e3c4e16e338b8da3a7e8f2ea18a4bfe7e607f97bc2dbb4a12fb9d5753b9f4fa9d3ff2ad01852e03e1d3f0bc20b03d0154582054ec1aca96b1cd5b575f66d3d67e81a3a667797513d70fc8fe0036713f10cdd4b18be3d469b75fe9c3942e1f4c6dd5c783894f9f5d42b7c3a825c6465c38470f7582bf00f81e10ae53e2e193b0f1d7d1ac8d41ba0dbce5a874df55486fc92de39757a5c777bcd1b030533b43c7e45f7f21c42b3355e5461ac0476ee321c8909e57adc2723879cfb6bd746c69f4853819d45202ee15a5714179e2ffd8c780b8aab755c5452a95fd0f412ac94e774baf10f70f8fbce2d10f35379733e30e244cceb25fc1456cf7b78125bab02f1c78a5215536775aa938011007dbf6254eed7e435c1c89e0771248bca2aa707403bb177ebe0d4c9cd0a83a29ef4d85f9e032d2ca7603417cc5ab4b91ece40e86bbd6632bb63c505b8d33987dd510fa1ef920b56200c6941f15aa39e3b9218ab4b27edfc36bdee4c6727e3be9e70229db3a94c4f61bc227e4e40d0218739a93fb97a1a59ad52dde6e5f3b7255f2543dc6ad646148100a4ab212720baafbd6eb93e24c1e3513e43a0a2071e188386eb2ba6d0546e89c6a22033396d23e97d7551d5d99f7d9250eda68be95880c74ab83ffae5b9b41521c1f1bc6b37ef4792623ccb88623fde1efea741cd7b1a9b3fb81754b4870056c42928607d8cb331cf952d0c6786df9ea29d2d14e6221389a6f26c462609e1a1d98975b8d1ea19d7d1c24ad28f1af2dab4621ef812152668f9d025fecab5611d8dc4f35484410c00e4e2bbd7a599af06e3babc092c9af27ba8073db219237d68ae4867f30e9ed39eb0334f4ad357ecc55497f7e4994296895337d792322ee678f998a3ed96e1b833da10714687a8771f790e02bd6c7fdce3923c7a55fefc20a86eff875102c86c9a5593814452f0817af897f5e89123b09ab22482aa4b010cfb107b893c1706ba52c568e0f2842dcca61dc098f55fb5a8a545e1da145a4996d6be41fd286cf33ebef564f44e1763d47de93c62cd8ac6bf3c3de6e8385e679cb5587b75230ee87e1fcff4f4959aac7a1d99775f86b5df38b8a7bec84a95716c5a7bc9c0b4b0e18debcf6c91b599a7a726c1076bd010e602b806cf4ec2dd19c6683608b5c857e20a38148eb799b9bcc5d115899220657894867322129e1b7184d403f8108c85a5ad4d27abf8043c6b38d0d023f2fa731f9f505e13873d21b88cae8df39f6809250cc1305a781344a91ac64dc266ae703980ad0c3aaf7473b350d85391da5c72269eaa237ba837bb31b7836d73b85b8b89a5beaaf7821450a9118ee439894f8c305f42b35e70a9984838caea5ce3b11fd5a52b74631b893fd38e88c89c0fd8c6803de14f859a542fb3f6e9b3a426f1e092536402d2cecb952ce4d421945d8aee45767cabf6250df942b9daf8f91d7d41276b050bfb9bc5ea083540c0baab98f4d9c9b52df993a2ea1304bc482155aa0d31a8d8a30e66776e4ebcc8e8b3c3d708002e941a429ad7251df7e567de4a8343727e49f02ce26c21ba1389fb3dea10ad18a9641ca02f7a25fb0f2672300cf6af992e533f93f21e0d1e0d115a45dcc4e58df67113a8e5165714924010acecb17e2f8d0691565943c9a5c6a78b4117ebef7d39648fc711540d23b93492109a07f664a246b2602ec15b389966cbd567c7f95e2856f1f941556b3d6f6625db1e239123b9b27a8af0a2d87ec031638d497992d8097f3be6a9a332b6f30797cb597b57a264cf1ec9da99514f5c65e93bf629ba4c2da8f7841621bb16a7dc6c167defae9edf28a12da1710f063ec95682353583fb7a316eebee1ff2b7af530058af0a4e9c7e0e97080deeeb81e9c2fd4549c19d4bef9d3c985d7eda42cca5044b814e9dc73d6b7b037bf83ec2d25060dc01586bc2914e3ee5c17c189bd7ac005bc49fefe5d05122e5ebc4ec91558bf033e4bdd73c84fec0d1488bc5b545ce19c516edabe846fd40626bc2301e7dc849c67443938867a29449f012ff8e77dc311e617c638404ac87a2662cc692f8bc2ca29d20aca3b1c9f2aa646b2d93096a8abed0dae699af86697936630df8ebfc59c44427489ee5ea0df29e344bf3450ef4ca3cbab2128515b9ea5b1d56838f47987127cba1f54d874bc60195ca09d3cad9a29682b35f0bd7a0799866cbcda48b16f6650a1f0de1928611d739b947d128253933550b2826ee9489752df3804078ef0f31768b8b7dce94315d3ca1e26b9d6724372954f0b0f16f0b63f2abbf17ed3a62d66f931344e862a110753af79ccb4a7e5a4280d7c89d49d9aaac854edb9866acf3b878b89bfe4ab687d5d8f04e9dac45ddf1ee8014280c2748b6da827e2e82dd9c1eedd97d6040da3991df2703e4a79349b8b612d158ce77b511cc1217721a1b2e0f950de8204db61d8b27d6b96aed38994cbadbf7f15ce4c872893aa564af6683b668dd0ac22f4e908e789f38fba94576c257d6a47640663567da129bd14f0bb52b38ec7615ddca3f694110b7215833791e30433cffe879885cce646f9f9f406990e1dbb6fdd1e1cf04a33a33ca673519f62ed8c05b1d77b4b0b77a7834b66fb3c62d14a862d53e2ca8e4e687d743488a8819ef5b9c976ecbae8cfe4855d95d4ef1768199a775862d1f09529c8403b751850d733ce61603121f7b79c1f34e80b3dd3efa09368838f89c6334a1dbf116b64254f7c7320657a47357c2b34ce3f6077b3ddd1e51c16aa523f9a627827a032c3ae62a45f863bbd37853b27863c1a8ebb57a47600f3e90f4ceaca4bf18cddfba1ef4665e0a05397b091d7d61a99ed1f571883fd9b7c2a5708e27cf09bf2ac5542f9eaeda4a249a11c1acf56882c21e890a4abf7939c0307935f551eeccefb18819af3c99fdb744f705fb39cce3c4f55425c2e20d2fa94ce4b6efd8cef95e6f1b5029906220760844ddfc8e378d8fab5d629413c3ce4ebcacffa3fd886dfff22a66d9b22a624c305c832b732e20496b142c7e6777a763980496b760c821f76fe00151825839210eedf8ecaedeb37a69c27192ef06c3f7ee3ccc664da1e62d82d5be0565e99dc0fe65ec1da3ac90eb228c42cdd2c55b6464944656c2601a711a205b6cedcf8e5d245d50e2119462e55072c04e2a13a79a74300e70f07ec2e11beb6c8d43e4aae9e93d791c873c25c4c19833d78f64a9c18c0f53fa6c1a0def7cc3e4f19d68e5de0b5c4b10a5fd8b9cc7e441091b0f1b255e2bf0e8b0da0f150cd6401c1c1748b0764145480dc408e71ec01d27985ce7b4d4cf1fdbb5a4b91c5e410e01b9d3691372bf6ef0953c7e60e226832e3453916e0796bd7d358ae0d3066db538398a0335832387113eced878b51e62524fc7082d8c999d93e2958653c28a4470bb665f21ebf4d2fa270067616100c1dd077f2a1bf1129132207945e99460f04a534b243bac9ff447df825856e04802d3aec7bedceda649d2a57aefd975aaa632296f5dca2f1221449e173977bf0c96dc069545148a4466a37f95971a37d580338b1029aaad93ac8731e3cc4295f92a6796796de2e286a0adbd632d3c7b03ec2b9ec26b0165006616adb8fd04f7f701c110ef2950842e55f13728778ec901ca6c4e1473d6f9d77ea361149cb801c151877c2c56d9a544eeea072691e8a23db48386a362202fdeed9c3d5e428b12cfca4eda71950e8300e73dfa546644b411c432097e782b80c843b2e6b74dfe5d10b874b1734a34aeb919d8000bbe8901cfcd9fec4d7f4d249195d760c65a7ba7e84c277deb10ac05a1e4abc9205ed77cb22a523f27f63260ce0e2069ad08f146f6f5030d2199e0e7ab42f2d04c814a814621b5fe1014ee3870d1bd01c5c35beda2290daad0d2f6cec5ca810cbf0fa857c15d183540b6530282301581321001dca8686f3a4f0818e779f9fa2918104e1754ff8f5033396b47cea3445a4e4e4fc9bed1bff0fa26cf95ab562876c72a18245364ef919e4c4eadd51166859a0ec8018950f47ff6aee70707476e2123f5b8a46d4e946c27153f161e6176272dea5280d61444e82f64ef2f83d959b64a4ebe4ff6c168b6c04fa06bce108c3b85f12d28f61adf4124a4d75771b1f48df6cc59d59d2dd48cfa24c176f401269c09f2dd491ef665fcd302541c446d4a7b1ae3b8bdb6e906fae7fe826c749279e7478041fd00e15ea5d096fdc91d4b43ab4a810e5ffc2f2f8d11571d036ebd81c0a8c53668e399717d073da188d604b452871986e53213e5740af1beeba1c0f181742170a9199e65985f5ba76693b5518ec71ba461cdf2bcbb5e8ab4b7dbc1d97c816ff0971a28ad570e0f261191a148bf4927c4fa6ff0fa2e4ec456e1b6f0f440af3fe925bb2f6a84d6b3d792137890fc1db4459e81bcdb05a9a05c7ab48f7952ed658bb1ced4e50dd909f8c5b7cc1fda556966566c01b2075330c9ef95998612b44f45b650b8d157df10d4cfc0c048b5b314ba2ff26369f4b4fb9daed61412082aaecd1b2625aa00e2d3c90664df094c2ef1951afea27c085ef331330ae0aaa9bda6f5878804c3788ff6828353b18cce4e8c3553c232eadc1efc16c60dd031fbf848de1f1770e0a2d84505d61c47bd8c7f31c606368385bffc5462321dad647bac03c06e315991d084b7f75fcf4c8912e04c9d23d36bde8d"}, {0xb0, 0x108, 0x5, "57d0ffdd543e7260face9126fdccf037b9cf26bd6cfd4897e24ea20e83a41467247c9acb0144921cac38fdb44f5797ab82d465aa3a2ab55ac329fac30c1f90ed06f1f62a0ec188d674aeb992623c7ddfb05e2518474551c669fb266d28a53324272cf2ad2d22c67545be0f4e3ccd73981a3f4970a42ebda9e02746e2c37b15437fe7e25fa39b03a5f6453535fee2523b6aba91d11621e9e767da06"}, {0x80, 0x108, 0x3, "4e22b50c6397f5f77cf5eb49f0bb83c830615193e0ed12bf7bb52b6da1730f80f5538877015e27c7521d7c4cebfcdbc699bbfad743e4c67f5c7ae5fc9c7f58c15071a6a068287f5e64c07757385379cf07236cf24934d19221499d043111ae248c5bd8c1b85e6880a6175eca86"}, {0x50, 0x101, 0x1, "eb3435d4d12b4c2efb0d851e9b97a02927098a477b0af0a4bdbf2f34dc9db971d5c001b14ae86cc505e290490f14b7c1dfb1815de0c2ac55b5"}], 0x1190}, 0x24000881) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001640)={'rose0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)=@ipv6_getaddrlabel={0x30, 0x4a, 0x100, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x18, 0x0, r6, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x44094) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001740)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000001780)=r7) setsockopt$sock_void(r4, 0x1, 0x1b, 0x0, 0x0) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x74, r2, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x57}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x88f0}, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000001900)="8327f62089f786fb4e88d58a66ee03fa5f1869457f35680fb02cd4509cdaf5dd00d3c2ff0a5f8e7701a4ac83775ee2b2", 0x30) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000001940)) (async) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001980)={'security\x00', 0x1000, "9a6fd1bf086b28d1d8fe33c80100987707fadf17c8932881a5bc1325122c6fa990df1e3f09621b3e3539379f7914d1a31e570a91d8fe13f3e2ad43ff8f24fec3ca6a071b7baacfdb121acb86eed012351ea20ca1886be5983708d7b0ac9af403e00bf48070b1ed60d0f4f585aa7d7f211149b43842bb0810e8062dd69a87b39a1abd5b9694f592a0165e8df1d572d50840eec161605c3cc65db8b45c1730b78fa1d0d034e8479ff1d0cf0f54ab1bb4387c4e6fd4c30e17d71b5d6ff335e1db21e598b2dd13e20484d6e3354c3bbec7ed6dd89028054d33b070a33569907d070e3c02574a8acba075d721669ffffb052212bd761d70d80ce69fd1490dae698a2368526dbd546235d4be877dfe3738dac5f80a07f45b91ff49e128c69ea310e7392b8eaf3bb7666b06ee8606f202496927f823566a84479561e25081d2331514f3b5f9edaab852a9bc82b9436b0aadc8295f54758ff11118137d0906a9347d70320eff321f599ee25e20b0adb5fca01e708a2b1cdaa5c49e36dceba5d9f5fc07f63f906237970a2f14e0d8145d81d5da1c430d71b248f4bbc16fc186c44710b933311bf7d0cc1297a81eb4a3fddf75715a5aa2e31d61d1c05b93dcaa85b0603ab4b9e3fe099236f2ecf443d36a4af63ae11e13ac0157552eddb3b68437e063e13a1f954cb930f7d9c0179fc0589a0183403e47c3956034206595860ec224049bb6d875abc43396aa81eacd014859873f0e1e84869e417b58565db60d794cbf0d642be60d015473fa45c91790d64fcfe438d506848d3c8a286a114e157ef3a6f5ed9f560608843c1ee2e6cfdb6e9c845bf53d0eb747c6f511d54cf4f07c2f1871629831147dfa1ae2f112b0d108a9cdf5782cee16fab3811f871a34d5c0e26b49af50a86a263dc003d46f148a1eedc69f264d4a223a35abfe12c124d7a4818098a4874a28ec5c18cfcedc3a4775955945d8d53ebd803bb1abceb0f5644f98d47852654e2254cf4e31904f886254022f814cfe6e1c40c49b47dbf2211a6df2fd90549f79a941f7eaf6453b40a75aa9b56c2229e0f7ac166cbe3679ccfbd789519024110f7babddff26f034a5dbbaded93d180447496fd34b6ec5df59c0362935a825a7d0629a8046002e399303493714ac7a3dbc0f134f87236be8fe81215357dd213a2c510e58dc00ff8b77ed1579f8c808aa157376e19023bdb430dd89d826a8c347abcb0ca9fbc9cf5cc9f227b409de696da0266f0ffa64c419d84f741891062007dc2acd601e880e0e2126d8094b9241d3a613ee6dd221e524f0e7bd3401ba55203bf5db8ddf6781cc058fe15249a9f8f9fcda1afd752b4dd7e3e47cf3068b54d7085d161e1d10cc7f5dab60efb745037d8229c7186d840e7bf56157500a26c0dc60a5b34bf4af28b3077e9c43cc19d462102cf235b2ab6506c204ef6a63e99e3e21b1c3bfad14ddea1cc9db4cfaacebc6f52ddd7c9d5ab9ccde2a8c1a198df6fc0251dca6c6386209b3c40b2c6316c73854d2baf0af23b3e5bdcae3ad194ecc1089753f0a29483b0aa9561b23d7981c68fdc2b142784195869a3a121915aea07d56d9a70d8b110d8bb57836101734c648cd4a0d87025126866a423fe7c26d09507ba17ae30a3f2ddba9af9f44fdc9dc268b69665888899a5c239f1a7fff393297d9af972b8bb408b5ff5f83428ff6f863d782bbd09eb4b375bc81bef9c3ac42290d79d534e0663dfea9eb8e49e87eb842ee0211983ea52a00541e8dcb396695abe7a966881b41f42206144e1ef030730bff9ada5e4a07714c8aab001cdb71a11e8bfd890a058087a04e379948b03bbfdcfba1ec756b7cc4d24f6b62b0c54c123ae849fd2bae2daa412f322cbc9c658b6518431678eea12a842421b609bdb8b541e295caa4e6f45ef38c1873981a3c78ad07368babc95fc1070680df6db3fba92ce4a99fb06968763b625518eb562eb3e8c7c6adf37b51f1674ceba26bb93ddb97aa68cb5387318bba89b47a53943dabc65f8ef1020775282b5ccb02f6211f04097899c142598815124a3819124807e3470b4f90274e496838928937aaea533ea32fe42bb7996e117c67e436c8d82c1ae24f7d89cf98a47f164d1d041f500885946dbc6330204cb34c272d27d95e7a393cbed61638aa0066e50ac44850d84550ae00da28b9c6cbd376db6cfd4ac6d36b9df9a5fbff3552586a85ca2aa0d40413c73a11c0098537fb227eaf5b19f5c8c99563b0616ab0bca99fa2868337e25d42ec0acc8f0b2716543203c0648323911ac66ed4cb7d4f4cfb21f77b82d782b87a995ecbf639c0a64addd1e2cdda1a9ec29f59c1263d0a22355465ee6f31794d2ab63aa46d732bde5aa42b571806818075306964597a763b1649846d6293a2604d343c9f991a4a4280d18278eeda8e3e8701cb29dc3984ef0eb04c5c512fc1e9843921b35d1b395cd41eb1c9994fdeb19b0bee3c6c2d09c0f47bbfa6cbf836e27d9684c960930fc57f29c6ed6202e92c2f10fed314ebb9bba9d6eb41ac2712901212eb5602a1edb2b666448e06d847d0a92831bbabc66e794190f89a66c0f708fd7817cedadb65735001561314121e8c4702ca4ba9feaeb03750400b7b95808a74b13ec9397daca5dfafb4f1a4736756684186e52bd9129862dfdd03dc40f5c4b0a6c3f7ded0fed7ed495891c432124195753a4a4161b684799949349292262cd8abe856edd46bb463648792aa0c9705b243f9501c5b1555627ec5e260d6be37c257c533083f6fd52ea261f8057cd01a0e556bc84a63790b4a875262e6a2d5386a6cab6bd945a1fb2a71056547a85d75d14b00cea6d96c2ac3200a5434538cba484674b990f35e957a7e3039fa6035e1a8dc2575cb670938f1dcf4c8e38421ed35a7a9bf166e74cfcdf30f0554f42ef5d71e627c7d50eb56eb48ef7c38f12c8574d90c5c7344357ff6a8752e633eed11eb4cf6a09e727fe58a9e1f5b33641ba321b4be2d7cca4b62fc5f7d68e5d90fb9c733885402e37d128ae974fd427db9b705681cae9ff1a5e60e3e4bdb4ea3136062a94bbef6142356417214833198362609cf87fb54c798b1a7f848a54d875bf0c13c5c4ac19e90145406ea0ac98c69d9f1bd10885b43726988663f29658368d9fd302b90b1578c6bf6261ee4cf88344ab36c2161010b0ac4e91b691f3c004198d7c42ed1a8e468d74f8f5f7497c1f6882b0bef6d42d1b7c7ceee78235ab6d402eab2aacd34062e74deffeb92cd9cc08316e47bbe9016aa8a097454e3a272c2a9ef00d186f89a5d837f1a4f603416ddb32ff9d1c098b7adbf749d1189cc16a2c8916216788a7c052afab54f412799206aa76f165634ad38fe0e508b815d1c914ab31f87d3193585f438e8a02a8ff76a22ccb3898af6ef953478cf777bd5894d62e03624c7750d6ae67707d9b19c45ab11d9797826995c8874589885299650257e28d31b31f90377d002e803c33acd12cfa1ff0595c76e436fc408f88f7e31e3d11a78a33b626edbd54965691b695a481880c0280a61af2f79b44fb8e216e2c9c9c0edb762c3b78f845d334ffcb2632c1943c01b1ba51399cc3bd72209802ec6a8cc255c0cc957271a4694d0d9f919ed9659b0e6b20da3dc5d1740f7f10e9db6ced981adc6220922f4115cd73b8578aa2d159a6caacb9a9687f4847f9709928bafff30c8779904e170e07ef146dc59d1eb0e061ba66ce81180a82aef49a15d7ac847cde5e2be3de52adb03196f057e0ac6f25dde9d418d0553e847edf51fbeed42402f2f06dbe146817c684cb06c020fc23bec92970baa8d618fec353cef8a57975dcf1a16981841131277f3b98eb1f34632e70197fb456574308050e89d4a87da02295308784580ce5938053a0c37e9e83a3627422c0854ea149441b8bf7dbbaac2cc7f1f1f840570ecc9d2ea7b4d08d39947e90b295b69377ca5d99d840e54ed56a00adcba3528edd226e1ec96ea07b866dcaeb74f3bc1af8085bd365d61f2eac68541970a990ed2833524c67943e8693bfae3aed12ccd0c107b7c143bc61182f2446c158f3371e51753f91758ff1ab7bbef9d0a4851ccb05f59a14bfcb05bbb9db8d34fac9b5df07f94bdbde662e091adc38b75f869c8ef9f2fe7bce1c828fac7c3e3d7389e10846d37a8220bfc721d3b11f0c7bd88a0ba1e8ef118c70fcaa12451651d1411d48816de2d5dd610f5ff0674264ec4d11750649ef951d61ffca766baba1acd813a9d5cd0aae0e0086c548d8cb44af80d79f99dd1b3dbc45a9ac91e5ffd9c5097efcbf1ed46defd6b8e94233bf2187ba7f95d0972f3683aa0cb31a6b578e20ea12c6b1f8069146b97def6ed5c35d24afea5ecf5cbb5601d79bc2230091710252b110a15eaa12791a57a72abef90a2463913c3213b183ba8430ca957f25da66661b02b4060782f7867e054420d60112928ffadbd3a5d7a451fa8e6dc17fb67616f6b12442f339b64ea46b56c836be1f388f875307685cb5b9c31b9125a89ae7f1a5dd94b766b6c358bf63e94336eaf72ce260509edcfb2b497ac714d038989cc9ff881380fd4ce7298fad9a740f7d20526917db30628cfba51d83ccceb56e58caafbf3547d0effd0e0e5ee054558fba8d2d422e54ac6c99fcd4aad84bc938f2b3e8ff662e98120ddd31dd6b6b1f60946ddf87eb8272a36685402ec643e518a31bdbb0bd5fd2b811a2ee7fe19a74d742873165cec7069075ff371e1204164ad18cbccfe25fa05c2980761f659574b44197915259f56a260a44c503d3e2a0eaf274caaff8df4269388b116a6f040fe8702d0982dd119fefc3dcc5536f54dea1a475115d2d39f26f3654dd70ec28ace4aa3231eec98026690fd57d50d3bad1a757b025b7cab553dff0e44066cb4f5095adb4d276e55c88aa632460de8820049fde3e4b43e58020428b1ce4e6761eb0ed1db984f57dbda5bd17ece5497927b90a46d6317101170c40e319be286ff58604f4e549a9b233b3aefc7f8daadb2e81d919ab957425a8e6cd2c611eb86bf74845017ccf8ad8454024830a87441271bce0b1b1b660f5de58400465d5308608a8d165c490d1faace4e01a116d54db9d3c21af56211732d9651490fcc48fe6dd48b5cbb91c569d0d8d6c91d32d0805557f49cdc08450712e6349fcb33e0747830438a5720aab371805d603454e3bd5b69230c282e3cb8ad3a2e69941bc243922a203518ec3e0b9d89ff446c21700817da9bf476b42d33d63929f73677ca80fdcb5060af8ec57db8c390e5431bed5e5f119c70bc8b7867cecdf7030e139b50f5e2127226e3917179b57d4a475ab52b7e5c52704146ab94870e75c0bbc584c01bfd5c832d66d84887973b1fab6254f4e18906df6aac2ee6118ea76f7bbd366fe020988f60c1be602f294120697283388a48fe50f0104e31bd592274e12a821c821fedd432ac98191686b53f511f991ff4b76f19c1583c619db8cd1ee28705da9211cf6aedca85f7bdf360f1175a79ccbb0063b79b4a88275351f8b49d3a0886314c613a7ad487fd2f3c1d9df4cd1f44b2cabb7547122c7fb09d02788f1b52fc65a9de4c803e8b282916428d5d05fde284f7d83800e5eb6306a34c974bce18c95f631fb46e8bdacd8a799ace4387b508ab0c7b78ac598e5372de5718975ac2de9f5d999e4055b84981ccca34cf6449909ddffc59c33bb665109fa9e2981f6877b54da7f59360334496ed9f721790d3bf6e3573d88588e2849dc4974a63b2cf09eaeae3e12d911a83ae9c34dab689a5b870291e7c7414ff17633452f3efb8dae523"}, &(0x7f00000029c0)=0x1024) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000002a40), r0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000002b40)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x44, r9, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0xc0c1) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000002b80)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002ec0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002e80)={&(0x7f0000002c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x22c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x80000001}, @NFTA_SET_EXPRESSIONS={0x18c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xa4, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x94, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x90, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6a, 0x1, "50102e1b865aa06da5f9e951a59f42ed51d99b9b829c455f068679cce07f9a4da4e4594176085c2094d4ef3781d9e666c7f6dd12f495f2c111914440c5f940492e2887227e34716a9c4104ee444723524e2d14d95c3f022ae1a53c09c74b3099873b6b823f8f"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x58, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_USERDATA={0x25, 0xd, 0x1, 0x0, "3a87651385cc1b7ba4952e08d8105df219381372065f61038420efa1231ffeacf8"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x102}, @NFTA_SET_DESC={0x44, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}]}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x254}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r10 = accept4(r4, &(0x7f0000002f00)=@llc, &(0x7f0000002f80)=0x80, 0x80800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000003340)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003300)={&(0x7f0000003000)={0x2e4, r2, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x104, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x5, 0x55, 0xb, 0x6c, 0x36, 0x48, 0x18, 0x48, 0x6c, 0x16, 0x60, 0x3, 0x9, 0xc, 0x6, 0x12, 0x4, 0x30, 0x6]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0xfffd, 0x0, 0x4, 0x0, 0x0, 0x10]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xd, 0xfff, 0x1, 0x8, 0xff, 0x44, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x4, 0x1, 0x2, 0x24, 0xfd405030c67e59db, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x8, 0xb, 0x8, 0xfffe, 0xfff9, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x96b6, 0x7fff, 0x9, 0x3, 0x6, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x3, 0x8a, 0xa, 0x2, 0x800, 0x2, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x9, 0x3, 0xfffd, 0x9, 0xfdc7, 0x3]}}]}]}, @NL80211_ATTR_TX_RATES={0x1cc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x3, 0x4, 0xff, 0x1, 0x7, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x5, 0x18, 0x3, 0x48, 0x6c, 0x0, 0x5, 0x36, 0x60, 0x6, 0x16, 0x16, 0x9, 0x9, 0x5, 0x5, 0x9, 0x9, 0x60, 0x4f]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xb, 0x6c, 0x2, 0x12, 0x5, 0x60, 0xc, 0x3, 0x1, 0x4, 0x60, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc0, 0x9, 0xe, 0xaae2, 0x101, 0x3, 0x0, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfc01, 0xfffe, 0x2, 0x3, 0x9, 0x25c3, 0x1ff, 0x37]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x5, 0x70, 0x4, 0x5, 0x3, 0x4]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x3, 0x9, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5127, 0x4e, 0x3, 0xdb, 0x9, 0x3, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0xed84a650907eba26}]}, @NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x24, 0x5735f0f58c7c2637, 0x60, 0x6c, 0x12, 0x4, 0x30, 0x1b, 0x16, 0xb, 0x6, 0x3, 0x1b, 0x30, 0x4, 0x6, 0x3, 0x6, 0x1, 0x1e, 0x12, 0x3, 0x48, 0x30, 0xb, 0x1b, 0xd]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x5, 0x100, 0x6f6, 0x7, 0xfffe, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x57d7, 0x4, 0x3, 0x5, 0x2b, 0x3c, 0x96]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x3, 0x0, 0x1, 0x3be3, 0x6, 0x2, 0xfffc]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x16, 0x1, 0x12, 0x18, 0x24, 0x36, 0x6, 0x1b, 0x6c, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x362, 0x68, 0xfff5, 0x424, 0xfb96, 0x4, 0x23]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x2}, {0x2, 0x8}, {0x7, 0x8}, {0x6, 0x7}, {0x1, 0x3}, {0x1}, {0x4, 0x3}, {0x1}, {0x4, 0x7}, {0x1, 0x5}, {0x0, 0x9}, {0x1, 0x9}, {0x4, 0x6}, {0x6, 0x8}, {0x4, 0x8}, {0x4, 0x5}, {0x4, 0xa}, {0x7, 0x4}, {0x6, 0x8}, {0x7, 0x1}, {0x3, 0x5}, {0x2, 0x6}, {0x3, 0x6}, {0x1, 0x9}, {0x4, 0x3}, {0x0, 0x9}, {0x4}, {0x0, 0x9}, {0x5, 0x1}]}]}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x48004}, 0x4004000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000003380)={'batadv_slave_1\x00'}) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r8, 0xc0096616, &(0x7f00000033c0)={0x1, [0x0]}) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f0000003400)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f00000034c0)=0x84) bind$inet(r10, &(0x7f0000003500)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet6(r10, &(0x7f0000003540)={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) 320.149044ms ago: executing program 2 (id=1057): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0xfffffffc}, 0x80, 0x0}, 0x640ce0c0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x1c, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x20004080) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 233.525734ms ago: executing program 1 (id=1058): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x2) ppoll(&(0x7f0000000000)=[{r0, 0x400}], 0x1, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) write$cgroup_int(r1, &(0x7f0000000040)=0x3, 0x12) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@broadcast}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) 172.057814ms ago: executing program 0 (id=1059): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000140)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000210000000000000005000000000000005f"], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110580000000000c6000000000000009500001000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x3}]}}]}, 0x40}}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x8001, 0x10001, 0x11000, 0x1, 0x7, '\x00', r4, r5, 0x3, 0x4, 0x0, 0x3, @void, @value, @value=r1}, 0x50) 165.243866ms ago: executing program 3 (id=1060): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000000011000300686173683a69702c6d61726b"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) (async) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x2}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r2}, 0x94) 108.549259ms ago: executing program 3 (id=1061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000000000000000a010400000000000000000100000008000b4000000000200004801c0001800b0001007470726f787900000c00028008000140000000020900010073797a3000000000140000001100010000000000000000000000000a"], 0xbc}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="24000000240035b90000000000000000fcb9d671a9d33ee3060003000000000000f10000"], 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x48, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x48}}, 0x0) (async) r4 = socket$rds(0x15, 0x5, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) (async) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000", 0x12}], 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x49, 0x800000, 0x8, 0x7, 0x8000}) write$bt_hci(r7, &(0x7f0000000080)=ANY=[], 0x6) 88.025432ms ago: executing program 1 (id=1062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001740)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0x11, 0x148, 0x128, 0x10, 0x260, 0x2a8, 0x2a8, 0x260, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x100, 0x128, 0x1c, {}, [@common=@unspec=@rateest={{0x68}, {'macsec0\x00', 'veth0_to_team\x00', 0x22, 0x3, 0x619, 0x10001, 0x4, 0x80, {0x7}, {0x100000}}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0xf001}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'netpci0\x00', 'veth1_to_batadv\x00', {}, {}, 0x0, 0x0, 0x65}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {}, 'ip6tnl0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x2400, 0xa, [0x6, 0x3f, 0x17, 0x3b, 0x1a, 0xd, 0x1a, 0x29, 0x20, 0x2f, 0x13, 0x19, 0x28, 0x12, 0x0, 0x1b], 0x2, 0x7fff, 0x3}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0xfece) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f00000001c0)='./file0\x00', r0}, 0x18) 0s ago: executing program 2 (id=1063): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000280)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x80, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e600", 0x4}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cdeae62faa71a5f2383e963aba417592d7a84958b0378e15fa25bca4ceabb5", 0x7e}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000240)=0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x401c5820, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socket$packet(0x11, 0x3, 0x300) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x8}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. [ 83.097135][ T5836] cgroup: Unknown subsys name 'net' [ 83.293141][ T5836] cgroup: Unknown subsys name 'cpuset' [ 83.303241][ T5836] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.880695][ T5836] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.113017][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.122097][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.139605][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.142543][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.146972][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.154423][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.169368][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.169482][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.176828][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.191370][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.198691][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.198855][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.210734][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.214493][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.227893][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.249715][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.262500][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.269956][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.277930][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.279187][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.335888][ T5170] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.344628][ T5170] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.352410][ T5170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.364396][ T5170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.379883][ T5170] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.929313][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 89.038017][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 89.107706][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 89.135802][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 89.188828][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 89.361109][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.369089][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.376341][ T5857] bridge_slave_0: entered allmulticast mode [ 89.383769][ T5857] bridge_slave_0: entered promiscuous mode [ 89.392948][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.400230][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.407350][ T5860] bridge_slave_0: entered allmulticast mode [ 89.415330][ T5860] bridge_slave_0: entered promiscuous mode [ 89.452037][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.459351][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.466541][ T5857] bridge_slave_1: entered allmulticast mode [ 89.473784][ T5857] bridge_slave_1: entered promiscuous mode [ 89.481352][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.488662][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.495784][ T5860] bridge_slave_1: entered allmulticast mode [ 89.503171][ T5860] bridge_slave_1: entered promiscuous mode [ 89.598631][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.605772][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.613273][ T5851] bridge_slave_0: entered allmulticast mode [ 89.620613][ T5851] bridge_slave_0: entered promiscuous mode [ 89.628108][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.635584][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.643179][ T5851] bridge_slave_1: entered allmulticast mode [ 89.650378][ T5851] bridge_slave_1: entered promiscuous mode [ 89.657689][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.665026][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.672296][ T5852] bridge_slave_0: entered allmulticast mode [ 89.680037][ T5852] bridge_slave_0: entered promiscuous mode [ 89.706607][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.718971][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.778831][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.786007][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.793753][ T5852] bridge_slave_1: entered allmulticast mode [ 89.801707][ T5852] bridge_slave_1: entered promiscuous mode [ 89.811643][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.851168][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.858699][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.865844][ T5871] bridge_slave_0: entered allmulticast mode [ 89.874413][ T5871] bridge_slave_0: entered promiscuous mode [ 89.884342][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.907522][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.933131][ T5860] team0: Port device team_slave_0 added [ 89.942791][ T5860] team0: Port device team_slave_1 added [ 89.949507][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.956672][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.964383][ T5871] bridge_slave_1: entered allmulticast mode [ 89.972147][ T5871] bridge_slave_1: entered promiscuous mode [ 89.995008][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.020682][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.045348][ T5857] team0: Port device team_slave_0 added [ 90.117030][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.127772][ T5857] team0: Port device team_slave_1 added [ 90.147899][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.155200][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.181329][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.195277][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.207163][ T5851] team0: Port device team_slave_0 added [ 90.216357][ T5851] team0: Port device team_slave_1 added [ 90.246178][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.253802][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.280019][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.299559][ T5868] Bluetooth: hci0: command tx timeout [ 90.299592][ T5170] Bluetooth: hci3: command tx timeout [ 90.310319][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.345248][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.352607][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.378826][ T5170] Bluetooth: hci1: command tx timeout [ 90.379128][ T5170] Bluetooth: hci2: command tx timeout [ 90.384519][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.402238][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.409305][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.435273][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.460207][ T5170] Bluetooth: hci4: command tx timeout [ 90.483618][ T5852] team0: Port device team_slave_0 added [ 90.493977][ T5852] team0: Port device team_slave_1 added [ 90.531155][ T5871] team0: Port device team_slave_0 added [ 90.537775][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.545381][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.572552][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.624193][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.631673][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.657857][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.671568][ T5871] team0: Port device team_slave_1 added [ 90.678170][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.685277][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.712051][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.723799][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.731204][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.757433][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.779841][ T5860] hsr_slave_0: entered promiscuous mode [ 90.786182][ T5860] hsr_slave_1: entered promiscuous mode [ 90.927417][ T5857] hsr_slave_0: entered promiscuous mode [ 90.934226][ T5857] hsr_slave_1: entered promiscuous mode [ 90.940768][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.948561][ T5857] Cannot create hsr debugfs directory [ 90.954787][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.964630][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.990939][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.033360][ T5851] hsr_slave_0: entered promiscuous mode [ 91.039922][ T5851] hsr_slave_1: entered promiscuous mode [ 91.046138][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.053803][ T5851] Cannot create hsr debugfs directory [ 91.076791][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.083890][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.110485][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.127618][ T5852] hsr_slave_0: entered promiscuous mode [ 91.136053][ T5852] hsr_slave_1: entered promiscuous mode [ 91.142499][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.150109][ T5852] Cannot create hsr debugfs directory [ 91.342847][ T5871] hsr_slave_0: entered promiscuous mode [ 91.350034][ T5871] hsr_slave_1: entered promiscuous mode [ 91.356131][ T5871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.363880][ T5871] Cannot create hsr debugfs directory [ 91.744949][ T44] cfg80211: failed to load regulatory.db [ 91.786678][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.804333][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.819401][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.832350][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.893380][ T5860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.905739][ T5860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.934588][ T5860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.945360][ T5860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.005529][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.019452][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.035754][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.046304][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.133355][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.147116][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.166284][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.177499][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.304916][ T5871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.315480][ T5871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.346182][ T5871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.372450][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.380469][ T5170] Bluetooth: hci0: command tx timeout [ 92.387736][ T5871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.391213][ T5170] Bluetooth: hci3: command tx timeout [ 92.439869][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.458871][ T5170] Bluetooth: hci2: command tx timeout [ 92.458963][ T5868] Bluetooth: hci1: command tx timeout [ 92.491036][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.498332][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.531701][ T2990] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.539006][ T2990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.547125][ T5868] Bluetooth: hci4: command tx timeout [ 92.566484][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.650833][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.662099][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.686254][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.693368][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.706915][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.730224][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.737403][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.784482][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.805971][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.823769][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.833633][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.840838][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.853880][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.861075][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.903621][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.910855][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.946470][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.953654][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.048213][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.104453][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.111657][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.181754][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.188954][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.311652][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.485511][ T5857] veth0_vlan: entered promiscuous mode [ 93.554234][ T5857] veth1_vlan: entered promiscuous mode [ 93.630216][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.690224][ T5857] veth0_macvtap: entered promiscuous mode [ 93.719309][ T5857] veth1_macvtap: entered promiscuous mode [ 93.775291][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.833997][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.856073][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.880847][ T5860] veth0_vlan: entered promiscuous mode [ 93.907047][ T5857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.917890][ T5857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.930786][ T5857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.940562][ T5857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.955267][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.984272][ T5860] veth1_vlan: entered promiscuous mode [ 94.017818][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.145497][ T5860] veth0_macvtap: entered promiscuous mode [ 94.184422][ T5860] veth1_macvtap: entered promiscuous mode [ 94.232993][ T5851] veth0_vlan: entered promiscuous mode [ 94.296404][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.331417][ T5871] veth0_vlan: entered promiscuous mode [ 94.337663][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.358063][ T5851] veth1_vlan: entered promiscuous mode [ 94.371965][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.385096][ T5871] veth1_vlan: entered promiscuous mode [ 94.424851][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.435717][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.453366][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.456410][ T5860] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.471254][ T5860] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.480139][ T5868] Bluetooth: hci0: command tx timeout [ 94.480740][ T5170] Bluetooth: hci3: command tx timeout [ 94.485757][ T5860] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.500610][ T5860] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.538965][ T5170] Bluetooth: hci1: command tx timeout [ 94.540723][ T5868] Bluetooth: hci2: command tx timeout [ 94.585937][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.594464][ T5851] veth0_macvtap: entered promiscuous mode [ 94.620357][ T5852] veth0_vlan: entered promiscuous mode [ 94.627820][ T5851] veth1_macvtap: entered promiscuous mode [ 94.634195][ T5868] Bluetooth: hci4: command tx timeout [ 94.674412][ T5852] veth1_vlan: entered promiscuous mode [ 94.720476][ T5968] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.730413][ T5871] veth0_macvtap: entered promiscuous mode [ 94.755493][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.770455][ T5871] veth1_macvtap: entered promiscuous mode [ 94.802229][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.813923][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.823162][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.832146][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.841182][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.862363][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.873981][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.876920][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 94.945317][ T5852] veth0_macvtap: entered promiscuous mode [ 94.982738][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.003798][ T5852] veth1_macvtap: entered promiscuous mode [ 95.042772][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.057199][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.067897][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.131579][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.158177][ T5871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.169461][ T5871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.179603][ T5871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.188747][ T5871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.227122][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.269751][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.277620][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.324994][ T5852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.335630][ T5852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.358504][ T5852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.373429][ T5982] netlink: 'syz.0.8': attribute type 4 has an invalid length. [ 95.383170][ T5852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.392337][ T5982] netlink: 17 bytes leftover after parsing attributes in process `syz.0.8'. [ 95.419067][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.448956][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.596280][ T5983] syz.3.4 (5983) used greatest stack depth: 20152 bytes left [ 95.735678][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.761743][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.864255][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.924664][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.092717][ T6009] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.136524][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.168048][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.205145][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.251337][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.538607][ T5868] Bluetooth: hci3: command tx timeout [ 96.538809][ T5170] Bluetooth: hci0: command tx timeout [ 96.581190][ T6020] FAULT_INJECTION: forcing a failure. [ 96.581190][ T6020] name failslab, interval 1, probability 0, space 0, times 1 [ 96.621900][ T5170] Bluetooth: hci1: command tx timeout [ 96.627391][ T5170] Bluetooth: hci2: command tx timeout [ 96.633218][ T6023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13'. [ 96.645149][ T6020] CPU: 0 UID: 0 PID: 6020 Comm: syz.0.14 Not tainted 6.16.0-rc5-syzkaller-00191-g0e9418961f89 #0 PREEMPT(full) [ 96.645174][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.645192][ T6020] Call Trace: [ 96.645199][ T6020] [ 96.645206][ T6020] dump_stack_lvl+0x189/0x250 [ 96.645235][ T6020] ? __pfx____ratelimit+0x10/0x10 [ 96.645262][ T6020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.645282][ T6020] ? __pfx__printk+0x10/0x10 [ 96.645310][ T6020] ? __pfx___might_resched+0x10/0x10 [ 96.645353][ T6020] should_fail_ex+0x414/0x560 [ 96.645382][ T6020] should_failslab+0xa8/0x100 [ 96.645407][ T6020] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 96.645429][ T6020] ? __alloc_skb+0x112/0x2d0 [ 96.645453][ T6020] __alloc_skb+0x112/0x2d0 [ 96.645476][ T6020] netlink_sendmsg+0x5c6/0xb30 [ 96.645505][ T6020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.645530][ T6020] ? aa_sock_msg_perm+0x94/0x160 [ 96.645558][ T6020] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 96.645584][ T6020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.645624][ T6020] __sock_sendmsg+0x219/0x270 [ 96.645644][ T6020] ____sys_sendmsg+0x505/0x830 [ 96.645671][ T6020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.645701][ T6020] ? import_iovec+0x74/0xa0 [ 96.645725][ T6020] ___sys_sendmsg+0x21f/0x2a0 [ 96.645750][ T6020] ? __pfx____sys_sendmsg+0x10/0x10 [ 96.645802][ T6020] ? __fget_files+0x2a/0x420 [ 96.645831][ T6020] ? __fget_files+0x3a0/0x420 [ 96.645863][ T6020] __x64_sys_sendmsg+0x19b/0x260 [ 96.645888][ T6020] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 96.645927][ T6020] ? __pfx_ksys_write+0x10/0x10 [ 96.645945][ T6020] ? rcu_is_watching+0x15/0xb0 [ 96.645970][ T6020] ? do_syscall_64+0xbe/0x3b0 [ 96.645990][ T6020] do_syscall_64+0xfa/0x3b0 [ 96.646006][ T6020] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.646033][ T6020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.646050][ T6020] ? clear_bhb_loop+0x60/0xb0 [ 96.646076][ T6020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.646099][ T6020] RIP: 0033:0x7fcc3ab8e929 [ 96.646123][ T6020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.646137][ T6020] RSP: 002b:00007fcc3b985038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.646155][ T6020] RAX: ffffffffffffffda RBX: 00007fcc3adb5fa0 RCX: 00007fcc3ab8e929 [ 96.646167][ T6020] RDX: 0000000000000850 RSI: 00002000000002c0 RDI: 0000000000000003 [ 96.646178][ T6020] RBP: 00007fcc3b985090 R08: 0000000000000000 R09: 0000000000000000 [ 96.646189][ T6020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.646198][ T6020] R13: 0000000000000000 R14: 00007fcc3adb5fa0 R15: 00007fff1b92bca8 [ 96.646223][ T6020] [ 96.668489][ T6023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13'. [ 96.758602][ T5170] Bluetooth: hci4: command tx timeout [ 96.842096][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054950c00: rx timeout, send abort [ 96.933002][ T6029] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.176653][ T6038] netlink: 'syz.1.17': attribute type 1 has an invalid length. [ 97.186931][ T6038] netlink: 'syz.1.17': attribute type 1 has an invalid length. [ 97.217391][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 97.253157][ T6033] openvswitch: netlink: Flow key attr not present in new flow. [ 97.304609][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 97.331043][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054951000: rx timeout, send abort [ 97.342395][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054950c00: abort rx timeout. Force session deactivation [ 97.780793][ T6061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'. [ 97.782775][ T6062] netlink: 260 bytes leftover after parsing attributes in process `syz.1.23'. [ 97.841793][ C0] vcan0: j1939_tp_rxtimer: 0xffff888054951000: abort rx timeout. Force session deactivation [ 97.906179][ T6062] syz.1.23 uses obsolete (PF_INET,SOCK_PACKET) [ 97.979377][ T6070] Zero length message leads to an empty skb [ 98.289243][ T6079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.764890][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880301e3800: rx timeout, send abort [ 98.814543][ T6106] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 98.824513][ T6108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.37'. [ 98.841706][ T6106] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 98.920946][ T6111] netlink: 244 bytes leftover after parsing attributes in process `syz.2.38'. [ 99.056070][ T6111] netlink: 'syz.2.38': attribute type 33 has an invalid length. [ 99.264965][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880301e3400: rx timeout, send abort [ 99.274057][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880301e3800: abort rx timeout. Force session deactivation [ 99.294871][ T6131] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 99.773256][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880301e3400: abort rx timeout. Force session deactivation [ 100.054081][ T6169] xt_l2tp: missing protocol rule (udp|l2tpip) [ 100.064066][ T6169] openvswitch: netlink: Message has 199 unknown bytes. [ 100.075461][ T6169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.175043][ T6172] __nla_validate_parse: 2 callbacks suppressed [ 100.175062][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 100.728127][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 100.783985][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.792077][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.886366][ T6199] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 100.911854][ T6199] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 101.059469][ T6205] FAULT_INJECTION: forcing a failure. [ 101.059469][ T6205] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 101.107983][ T6205] CPU: 1 UID: 0 PID: 6205 Comm: syz.2.70 Not tainted 6.16.0-rc5-syzkaller-00191-g0e9418961f89 #0 PREEMPT(full) [ 101.108010][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.108022][ T6205] Call Trace: [ 101.108029][ T6205] [ 101.108037][ T6205] dump_stack_lvl+0x189/0x250 [ 101.108066][ T6205] ? __pfx____ratelimit+0x10/0x10 [ 101.108097][ T6205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.108120][ T6205] ? __pfx__printk+0x10/0x10 [ 101.108147][ T6205] ? __might_fault+0xb0/0x130 [ 101.108189][ T6205] should_fail_ex+0x414/0x560 [ 101.108222][ T6205] _copy_from_user+0x2d/0xb0 [ 101.108245][ T6205] ___sys_recvmsg+0x12e/0x510 [ 101.108282][ T6205] ? __pfx____sys_recvmsg+0x10/0x10 [ 101.108332][ T6205] ? __fget_files+0x3a0/0x420 [ 101.108369][ T6205] do_recvmmsg+0x307/0x770 [ 101.108404][ T6205] ? __pfx_do_recvmmsg+0x10/0x10 [ 101.108442][ T6205] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.108480][ T6205] __x64_sys_recvmmsg+0x190/0x240 [ 101.108509][ T6205] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 101.108534][ T6205] ? rcu_is_watching+0x15/0xb0 [ 101.108561][ T6205] ? do_syscall_64+0xbe/0x3b0 [ 101.108590][ T6205] do_syscall_64+0xfa/0x3b0 [ 101.108608][ T6205] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.108637][ T6205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.108655][ T6205] ? clear_bhb_loop+0x60/0xb0 [ 101.108679][ T6205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.108697][ T6205] RIP: 0033:0x7fcc8ed8e929 [ 101.108714][ T6205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.108729][ T6205] RSP: 002b:00007fcc8fc32038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 101.108749][ T6205] RAX: ffffffffffffffda RBX: 00007fcc8efb5fa0 RCX: 00007fcc8ed8e929 [ 101.108763][ T6205] RDX: 0000000000000001 RSI: 0000200000001140 RDI: 0000000000000004 [ 101.108775][ T6205] RBP: 00007fcc8fc32090 R08: 0000000000000000 R09: 0000000000000000 [ 101.108787][ T6205] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 101.108798][ T6205] R13: 0000000000000000 R14: 00007fcc8efb5fa0 R15: 00007ffecbece808 [ 101.108826][ T6205] [ 101.146109][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.72'. [ 101.428084][ T6208] openvswitch: netlink: Actions may not be safe on all matching packets [ 101.581434][ T6219] netlink: 32 bytes leftover after parsing attributes in process `syz.4.72'. [ 101.610165][ T6223] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 101.642355][ T6223] netlink: 20 bytes leftover after parsing attributes in process `syz.2.74'. [ 101.925452][ T6239] netlink: 20 bytes leftover after parsing attributes in process `syz.1.82'. [ 101.968824][ T6239] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 102.212077][ T6252] veth0: entered promiscuous mode [ 102.230724][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 102.251388][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 102.262569][ T6256] FAULT_INJECTION: forcing a failure. [ 102.262569][ T6256] name failslab, interval 1, probability 0, space 0, times 0 [ 102.284001][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.87'. [ 102.303107][ T6256] CPU: 0 UID: 0 PID: 6256 Comm: syz.3.85 Not tainted 6.16.0-rc5-syzkaller-00191-g0e9418961f89 #0 PREEMPT(full) [ 102.303135][ T6256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.303148][ T6256] Call Trace: [ 102.303157][ T6256] [ 102.303166][ T6256] dump_stack_lvl+0x189/0x250 [ 102.303197][ T6256] ? __pfx____ratelimit+0x10/0x10 [ 102.303242][ T6256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.303268][ T6256] ? __pfx__printk+0x10/0x10 [ 102.303304][ T6256] ? __pfx___might_resched+0x10/0x10 [ 102.303336][ T6256] should_fail_ex+0x414/0x560 [ 102.303374][ T6256] should_failslab+0xa8/0x100 [ 102.303403][ T6256] __kmalloc_noprof+0xcb/0x4f0 [ 102.303428][ T6256] ? sock_kmalloc+0xd6/0x160 [ 102.303463][ T6256] sock_kmalloc+0xd6/0x160 [ 102.303497][ T6256] af_alg_alloc_areq+0x8d/0x260 [ 102.303529][ T6256] skcipher_recvmsg+0x356/0x11c0 [ 102.303566][ T6256] ? aa_sk_perm+0x81e/0x950 [ 102.303606][ T6256] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 102.303637][ T6256] ? __lock_acquire+0xab9/0xd20 [ 102.303663][ T6256] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 102.303705][ T6256] ? security_socket_recvmsg+0x7e/0x2e0 [ 102.303728][ T6256] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 102.303760][ T6256] sock_recvmsg+0x229/0x270 [ 102.303784][ T6256] ____sys_recvmsg+0x1c9/0x460 [ 102.303821][ T6256] ? __pfx_____sys_recvmsg+0x10/0x10 [ 102.303866][ T6256] ? import_iovec+0x74/0xa0 [ 102.303894][ T6256] ___sys_recvmsg+0x1b5/0x510 [ 102.303928][ T6256] ? __pfx____sys_recvmsg+0x10/0x10 [ 102.303983][ T6256] ? __fget_files+0x3a0/0x420 [ 102.304027][ T6256] do_recvmmsg+0x307/0x770 [ 102.304065][ T6256] ? __pfx_do_recvmmsg+0x10/0x10 [ 102.304106][ T6256] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 102.304147][ T6256] __x64_sys_recvmmsg+0x190/0x240 [ 102.304179][ T6256] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 102.304206][ T6256] ? rcu_is_watching+0x15/0xb0 [ 102.304245][ T6256] ? do_syscall_64+0xbe/0x3b0 [ 102.304270][ T6256] do_syscall_64+0xfa/0x3b0 [ 102.304289][ T6256] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.304320][ T6256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.304340][ T6256] ? clear_bhb_loop+0x60/0xb0 [ 102.304383][ T6256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.304403][ T6256] RIP: 0033:0x7f0ec578e929 [ 102.304423][ T6256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.304440][ T6256] RSP: 002b:00007f0ec6582038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 102.304462][ T6256] RAX: ffffffffffffffda RBX: 00007f0ec59b5fa0 RCX: 00007f0ec578e929 [ 102.304478][ T6256] RDX: 0000000000000001 RSI: 0000200000001140 RDI: 0000000000000004 [ 102.304491][ T6256] RBP: 00007f0ec6582090 R08: 0000000000000000 R09: 0000000000000000 [ 102.304504][ T6256] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 102.304516][ T6256] R13: 0000000000000000 R14: 00007f0ec59b5fa0 R15: 00007ffc3a94cca8 [ 102.304549][ T6256] [ 102.326397][ T6255] netlink: 'syz.1.87': attribute type 7 has an invalid length. [ 102.659453][ T6258] tipc: Started in network mode [ 102.664619][ T6258] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 102.676988][ T6258] tipc: Enabled bearer , priority 12 [ 102.855228][ T6270] syzkaller0: entered promiscuous mode [ 102.886779][ T6270] syzkaller0: entered allmulticast mode [ 103.022749][ T6280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.306304][ T6295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95'. [ 103.548482][ T6299] syz.2.96 (6299) used greatest stack depth: 17992 bytes left [ 103.788923][ T5854] tipc: Node number set to 10070698 [ 104.269655][ T6336] Bluetooth: MGMT ver 1.23 [ 104.342101][ T6340] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 104.585868][ T6343] netlink: 'syz.1.109': attribute type 1 has an invalid length. [ 104.630869][ T6343] netlink: 'syz.1.109': attribute type 2 has an invalid length. [ 104.686219][ T6343] netlink: 'syz.1.109': attribute type 1 has an invalid length. [ 105.593916][ T6371] __nla_validate_parse: 6 callbacks suppressed [ 105.593935][ T6371] netlink: 16 bytes leftover after parsing attributes in process `syz.4.115'. [ 105.649264][ T6373] netlink: 132 bytes leftover after parsing attributes in process `syz.0.117'. [ 106.437238][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 106.511710][ T6393] raw_sendmsg: syz.4.123 forgot to set AF_INET. Fix it! [ 106.717631][ T6397] netlink: zone id is out of range [ 106.735840][ T6397] netlink: zone id is out of range [ 106.755823][ T6397] netlink: zone id is out of range [ 106.771252][ T6397] netlink: zone id is out of range [ 106.786684][ T6397] netlink: zone id is out of range [ 106.796812][ T6397] netlink: zone id is out of range [ 106.831749][ T6397] netlink: zone id is out of range [ 106.837350][ T6397] netlink: zone id is out of range [ 106.882484][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 106.917611][ T6407] netlink: 232 bytes leftover after parsing attributes in process `syz.4.128'. [ 106.937861][ T6409] netlink: 'syz.3.130': attribute type 18 has an invalid length. [ 106.977638][ T6409] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.987352][ T6409] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.996363][ T6409] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.005146][ T6409] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.133179][ T6422] syz_tun: entered allmulticast mode [ 107.231232][ T6422] syz_tun: left allmulticast mode [ 107.267150][ T6431] netlink: 'syz.3.134': attribute type 12 has an invalid length. [ 107.311723][ T6431] netlink: 'syz.3.134': attribute type 29 has an invalid length. [ 107.320507][ T6435] netlink: 'syz.1.137': attribute type 5 has an invalid length. [ 107.333647][ T6431] netlink: 148 bytes leftover after parsing attributes in process `syz.3.134'. [ 107.347915][ T6431] netlink: 'syz.3.134': attribute type 2 has an invalid length. [ 107.361627][ T6431] netlink: 'syz.3.134': attribute type 3 has an invalid length. [ 107.373147][ T6431] netlink: 15 bytes leftover after parsing attributes in process `syz.3.134'. [ 107.393030][ T6435] netlink: 'syz.1.137': attribute type 8 has an invalid length. [ 107.559789][ T6449] netlink: 'syz.2.141': attribute type 64 has an invalid length. [ 107.583171][ T6449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.141'. [ 107.701623][ T5854] IPVS: starting estimator thread 0... [ 107.707760][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 107.788743][ T6456] IPVS: using max 25 ests per chain, 60000 per kthread [ 107.833438][ T6458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.146'. [ 107.846296][ T6460] netlink: 'syz.2.145': attribute type 1 has an invalid length. [ 108.117444][ T6470] net_ratelimit: 20 callbacks suppressed [ 108.117461][ T6470] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 108.338408][ T6477] sctp: failed to load transform for md5: -4 [ 108.725878][ T6497] netlink: 'syz.3.158': attribute type 25 has an invalid length. [ 108.940929][ T6512] tipc: Enabled bearer , priority 0 [ 108.952828][ T6512] tipc: Resetting bearer [ 109.050503][ T6511] tipc: Disabling bearer [ 109.152287][ T6524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.187939][ T6526] bridge: RTM_NEWNEIGH with invalid state 0xf801 [ 109.404499][ T6536] unknown channel width for channel at 909000KHz? [ 109.685255][ T6546] (unnamed net_device) (uninitialized): (slave gretap0): Device is not bonding slave [ 109.697762][ T6546] (unnamed net_device) (uninitialized): option active_slave: invalid value (gretap0) [ 109.719720][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.727496][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.757818][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.765312][ T6554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.772861][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.780119][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.815421][ T6554] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 109.853976][ T6558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.948027][ T6558] veth0_vlan: entered allmulticast mode [ 110.009917][ T6558] tipc: Resetting bearer [ 110.102065][ T6558] veth0_vlan: left promiscuous mode [ 110.137230][ T6574] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 110.154028][ T6558] veth0_vlan: entered promiscuous mode [ 110.199391][ T6574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.223969][ T6558] team0: Device veth0_vlan failed to register rx_handler [ 110.297586][ T6558] tipc: Resetting bearer [ 110.371348][ T6581] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 110.880708][ T6603] __nla_validate_parse: 11 callbacks suppressed [ 110.880728][ T6603] netlink: 44 bytes leftover after parsing attributes in process `syz.3.191'. [ 111.001168][ T6611] netlink: 232 bytes leftover after parsing attributes in process `syz.2.193'. [ 111.080698][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.193'. [ 111.195102][ T6621] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 111.247496][ T6620] netlink: 220 bytes leftover after parsing attributes in process `syz.0.195'. [ 111.537839][ T6631] syz.0.200 (6631) used obsolete PPPIOCDETACH ioctl [ 111.568924][ T6639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.202'. [ 111.628020][ T6639] netlink: 104 bytes leftover after parsing attributes in process `syz.3.202'. [ 111.846890][ T6649] netlink: 244 bytes leftover after parsing attributes in process `syz.2.204'. [ 111.917279][ T6652] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 111.962703][ T6653] validate_nla: 6 callbacks suppressed [ 111.962719][ T6653] netlink: 'syz.3.205': attribute type 1 has an invalid length. [ 111.999470][ T6659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.208'. [ 112.039216][ T6653] netlink: 'syz.3.205': attribute type 3 has an invalid length. [ 112.057417][ T6653] netlink: 224 bytes leftover after parsing attributes in process `syz.3.205'. [ 112.094446][ T6662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.209'. [ 112.190260][ T6665] netlink: zone id is out of range [ 112.198723][ T6665] netlink: zone id is out of range [ 112.216511][ T6665] netlink: zone id is out of range [ 113.358856][ T6698] team0 (unregistering): Port device team_slave_0 removed [ 113.414747][ T6698] team0 (unregistering): Port device team_slave_1 removed [ 113.524314][ T6714] netlink: 'syz.3.224': attribute type 10 has an invalid length. [ 113.924221][ T6739] trusted_key: syz.0.232 sent an empty control message without MSG_MORE. [ 114.002818][ T6748] netlink: 'syz.1.235': attribute type 1 has an invalid length. [ 114.016821][ T6737] bond1: entered promiscuous mode [ 114.022704][ T6737] bond1: entered allmulticast mode [ 114.028535][ T6737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.042747][ T6748] net_ratelimit: 10 callbacks suppressed [ 114.042761][ T6748] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 114.409889][ T6769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.623957][ T6782] x_tables: duplicate underflow at hook 2 [ 114.634694][ T6782] x_tables: duplicate underflow at hook 2 [ 114.733544][ T6788] netlink: 'syz.1.247': attribute type 1 has an invalid length. [ 114.815307][ T6788] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.834833][ T6788] gretap1: entered promiscuous mode [ 114.865333][ T6788] bond1: (slave gretap1): making interface the new active one [ 114.897238][ T6788] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 114.932985][ T6793] macvlan2: entered promiscuous mode [ 114.947236][ T6793] macvlan2: entered allmulticast mode [ 114.956774][ T6793] bond1: entered promiscuous mode [ 114.967690][ T6793] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 115.009277][ T6793] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 115.040600][ T6793] bond1: left promiscuous mode [ 115.077430][ T6802] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 115.362893][ T6808] netlink: 'syz.0.254': attribute type 1 has an invalid length. [ 115.374995][ T6806] netlink: 'syz.1.253': attribute type 4 has an invalid length. [ 115.846976][ T6830] bond2: entered promiscuous mode [ 115.853200][ T6830] bond2: entered allmulticast mode [ 115.865312][ T6830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.191099][ T6836] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 116.424074][ T6853] __nla_validate_parse: 10 callbacks suppressed [ 116.424094][ T6853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.266'. [ 116.474585][ T6853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.266'. [ 116.589621][ T6862] netlink: 5 bytes leftover after parsing attributes in process `syz.2.268'. [ 117.144740][ T6877] sctp: [Deprecated]: syz.3.275 (pid 6877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.144740][ T6877] Use struct sctp_sack_info instead [ 117.208576][ T6896] netlink: 60 bytes leftover after parsing attributes in process `syz.0.274'. [ 117.293590][ T6904] netlink: 164 bytes leftover after parsing attributes in process `syz.4.279'. [ 117.316992][ T6876] netlink: 60 bytes leftover after parsing attributes in process `syz.0.274'. [ 117.354077][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 117.733663][ T6918] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.823403][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.285'. [ 117.834685][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.285'. [ 117.926053][ T6922] team_slave_0: entered promiscuous mode [ 117.931962][ T6922] team_slave_1: entered promiscuous mode [ 118.257790][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.292'. [ 118.414347][ T6952] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 118.476987][ T6952] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 118.852783][ T6928] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 119.180711][ T6980] xt_CT: No such helper "syz0" [ 119.391635][ T6997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.148598][ T5170] Bluetooth: hci0: command 0x080f tx timeout [ 121.238763][ T7049] x_tables: duplicate underflow at hook 1 [ 121.290658][ T7049] x_tables: duplicate underflow at hook 1 [ 121.347526][ T7049] x_tables: duplicate underflow at hook 1 [ 121.359727][ T7049] x_tables: duplicate underflow at hook 1 [ 121.366298][ T7049] x_tables: duplicate underflow at hook 1 [ 121.375175][ T7049] x_tables: duplicate underflow at hook 1 [ 121.381300][ T7049] x_tables: duplicate underflow at hook 1 [ 121.389471][ T7049] x_tables: duplicate underflow at hook 1 [ 121.399917][ T7049] x_tables: duplicate underflow at hook 1 [ 121.709372][ T7072] netlink: 'syz.1.332': attribute type 4 has an invalid length. [ 121.853972][ T7080] tipc: Started in network mode [ 121.862823][ T7080] tipc: Node identity , cluster identity 4711 [ 121.871010][ T7080] tipc: Failed to obtain node identity [ 121.876673][ T7080] tipc: Enabling of bearer rejected, failed to enable media [ 121.959938][ T7083] __nla_validate_parse: 32 callbacks suppressed [ 121.959960][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'. [ 122.049002][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 122.101569][ T7086] netlink: 'syz.3.334': attribute type 20 has an invalid length. [ 122.290623][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 122.323294][ T7086] netlink: 'syz.3.334': attribute type 20 has an invalid length. [ 122.419490][ T7065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.433778][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.341'. [ 122.572602][ T7119] geneve1: entered promiscuous mode [ 122.577865][ T7119] geneve1: entered allmulticast mode [ 122.586751][ T7118] netlink: 'syz.2.342': attribute type 1 has an invalid length. [ 122.682556][ T7118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.720529][ T7122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.733562][ T7122] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 122.746664][ T7122] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 122.854670][ T7131] veth3: entered promiscuous mode [ 122.884338][ T7131] bond1: (slave veth3): Enslaving as an active interface with a down link [ 122.962721][ T7134] vlan2: entered allmulticast mode [ 122.986163][ T7134] bond1: entered allmulticast mode [ 123.306246][ T7143] veth3: entered allmulticast mode [ 123.421443][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 123.618230][ T7157] can: request_module (can-proto-3) failed. [ 123.665903][ T7167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.352'. [ 123.859784][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 123.909263][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.356'. [ 123.982183][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 124.005574][ T7187] netlink: 'syz.2.359': attribute type 33 has an invalid length. [ 124.029796][ T7187] netlink: 152 bytes leftover after parsing attributes in process `syz.2.359'. [ 124.052707][ T7191] netlink: 'syz.4.360': attribute type 1 has an invalid length. [ 124.098816][ T7191] netlink: 'syz.4.360': attribute type 2 has an invalid length. [ 132.703183][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.709802][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 148.278570][ T7260] netlink: 'syz.0.377': attribute type 10 has an invalid length. [ 148.286786][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.295121][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.353614][ T7270] __nla_validate_parse: 3 callbacks suppressed [ 148.353630][ T7270] netlink: 44 bytes leftover after parsing attributes in process `syz.4.384'. [ 148.390103][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.397312][ T7260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.401450][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.384'. [ 148.404903][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.420666][ T7260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.485290][ T7260] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 148.829887][ T7292] netlink: 'syz.4.388': attribute type 23 has an invalid length. [ 149.085490][ T7297] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.389'. [ 149.117493][ T7297] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 149.592009][ T7320] netlink: 36 bytes leftover after parsing attributes in process `syz.2.396'. [ 150.176754][ T7351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.408'. [ 150.211717][ T7351] netlink: 'syz.0.408': attribute type 7 has an invalid length. [ 150.239137][ T7351] netlink: 'syz.0.408': attribute type 8 has an invalid length. [ 150.246825][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 150.259653][ T7357] ipt_REJECT: TCP_RESET invalid for non-tcp [ 150.450679][ T7367] erspan0: entered promiscuous mode [ 150.456218][ T7367] vlan2: entered promiscuous mode [ 150.520179][ T7372] netlink: 'syz.2.416': attribute type 1 has an invalid length. [ 150.581390][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.417'. [ 150.627562][ T7377] netlink: 16 bytes leftover after parsing attributes in process `syz.1.419'. [ 150.636745][ T7377] nbd: must specify at least one socket [ 150.767214][ T7381] tipc: Started in network mode [ 150.774543][ T7381] tipc: Node identity ac14140f, cluster identity 4711 [ 150.787847][ T7381] tipc: New replicast peer: 255.255.255.255 [ 150.798038][ T7381] tipc: Enabled bearer , priority 10 [ 150.849611][ T7380] netlink: 32 bytes leftover after parsing attributes in process `syz.4.417'. [ 150.981069][ T7397] netlink: 348 bytes leftover after parsing attributes in process `syz.2.423'. [ 151.695465][ T7450] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 151.729578][ T7450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.929282][ T6572] tipc: Node number set to 2886997007 [ 152.324739][ T7472] Bluetooth: MGMT ver 1.23 [ 152.341382][ T7470] ipvlan0: entered promiscuous mode [ 152.365449][ T7470] ipvlan0: entered allmulticast mode [ 152.384817][ T7470] veth0_vlan: entered allmulticast mode [ 152.836312][ T7495] netlink: 'syz.0.448': attribute type 11 has an invalid length. [ 153.120087][ T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 153.694453][ T7543] __nla_validate_parse: 21 callbacks suppressed [ 153.694473][ T7543] netlink: 32 bytes leftover after parsing attributes in process `syz.2.462'. [ 153.774325][ T7545] netlink: 48 bytes leftover after parsing attributes in process `syz.2.463'. [ 154.145560][ T7558] netlink: 80 bytes leftover after parsing attributes in process `syz.4.467'. [ 154.155273][ T7552] netlink: 14 bytes leftover after parsing attributes in process `syz.3.465'. [ 154.299984][ T7552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.312676][ T7552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.325675][ T7552] bond0 (unregistering): Released all slaves [ 154.359524][ T7558] netlink: 'syz.4.467': attribute type 4 has an invalid length. [ 154.434778][ T7577] netlink: 96 bytes leftover after parsing attributes in process `syz.1.472'. [ 154.525148][ T7574] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 154.588026][ T7580] netlink: 108 bytes leftover after parsing attributes in process `syz.4.473'. [ 154.905753][ T7600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.479'. [ 154.943736][ T7600] netlink: 36 bytes leftover after parsing attributes in process `syz.1.479'. [ 154.958999][ T7600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.479'. [ 155.202248][ T7621] netlink: 'syz.1.483': attribute type 3 has an invalid length. [ 155.242764][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 155.727301][ T7651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.856631][ T7663] netlink: 'syz.1.494': attribute type 4 has an invalid length. [ 155.979226][ T7670] netlink: 'syz.4.496': attribute type 1 has an invalid length. [ 156.112691][ T7670] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.351011][ T7689] x_tables: duplicate underflow at hook 1 [ 156.492051][ T7696] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 156.522536][ T7697] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 156.700823][ T5170] Bluetooth: hci4: command tx timeout [ 158.014529][ T7726] netlink: 'syz.1.512': attribute type 8 has an invalid length. [ 158.170851][ T7730] team1: entered promiscuous mode [ 158.190986][ T7741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.194230][ T7730] team1: entered allmulticast mode [ 158.276910][ T7746] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 158.336551][ T7741] openvswitch: netlink: Actions may not be safe on all matching packets [ 158.555971][ T7751] erspan0: entered promiscuous mode [ 158.564742][ T7751] vlan2: entered promiscuous mode [ 158.915682][ T7774] __nla_validate_parse: 12 callbacks suppressed [ 158.915701][ T7774] netlink: 232 bytes leftover after parsing attributes in process `syz.2.526'. [ 158.958920][ T7774] netlink: 'syz.2.526': attribute type 21 has an invalid length. [ 158.966879][ T7774] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.977282][ T7774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 158.984756][ T7774] IPv6: NLM_F_CREATE should be set when creating new route [ 158.992146][ T7774] IPv6: NLM_F_CREATE should be set when creating new route [ 158.999411][ T7774] IPv6: NLM_F_CREATE should be set when creating new route [ 159.223644][ T7792] netlink: 40 bytes leftover after parsing attributes in process `syz.2.533'. [ 159.483545][ T7812] netlink: 108 bytes leftover after parsing attributes in process `syz.4.538'. [ 159.562453][ T7816] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.539'. [ 160.409183][ T7845] bridge: RTM_NEWNEIGH with invalid ether address [ 160.437483][ T7846] netlink: 'syz.4.551': attribute type 7 has an invalid length. [ 160.447356][ T7847] netlink: zone id is out of range [ 160.471426][ T7846] : entered promiscuous mode [ 160.490529][ T7847] netlink: zone id is out of range [ 160.496810][ T7847] netlink: zone id is out of range [ 160.503008][ T7847] netlink: zone id is out of range [ 160.532214][ T7847] netlink: zone id is out of range [ 160.558464][ T7847] netlink: zone id is out of range [ 160.577622][ T7847] netlink: zone id is out of range [ 160.603101][ T7847] netlink: zone id is out of range [ 160.625441][ T7847] netlink: zone id is out of range [ 160.924936][ T7874] syzkaller1: entered promiscuous mode [ 160.943551][ T7874] syzkaller1: entered allmulticast mode [ 161.456842][ T7900] netlink: 'syz.3.567': attribute type 2 has an invalid length. [ 161.467596][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.567'. [ 161.522883][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 161.533341][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.567'. [ 161.542798][ T7900] netlink: 'syz.3.567': attribute type 15 has an invalid length. [ 161.759289][ T7904] netlink: 24 bytes leftover after parsing attributes in process `syz.3.570'. [ 161.937034][ T7915] netlink: 'syz.2.571': attribute type 9 has an invalid length. [ 161.956672][ T7914] netlink: 'syz.2.571': attribute type 9 has an invalid length. [ 162.127241][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 162.349679][ T7934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.578'. [ 162.379636][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.398775][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.443233][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.465196][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.478998][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.594138][ T7931] netlink: 'syz.1.577': attribute type 5 has an invalid length. [ 162.977672][ T7967] syz_tun: entered promiscuous mode [ 163.221493][ T7937] chnl_net:caif_netlink_parms(): no params data found [ 163.521537][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.540924][ T7937] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.558458][ T7937] bridge_slave_0: entered allmulticast mode [ 163.574017][ T7937] bridge_slave_0: entered promiscuous mode [ 163.605933][ T7937] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.613755][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.626327][ T7937] bridge_slave_1: entered allmulticast mode [ 163.638039][ T7937] bridge_slave_1: entered promiscuous mode [ 163.747227][ T7937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.762637][ T7937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.774203][ T8004] netlink: 'syz.0.599': attribute type 4 has an invalid length. [ 163.817740][ T7937] team0: Port device team_slave_0 added [ 163.836637][ T7937] team0: Port device team_slave_1 added [ 163.882830][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.891176][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.924295][ T7937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.944805][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.952002][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.981074][ T7937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.224349][ T7937] hsr_slave_0: entered promiscuous mode [ 164.256698][ T7937] hsr_slave_1: entered promiscuous mode [ 164.268652][ T7937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.276239][ T7937] Cannot create hsr debugfs directory [ 164.496714][ T8034] __nla_validate_parse: 8 callbacks suppressed [ 164.496732][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 164.543681][ T5868] Bluetooth: hci0: command tx timeout [ 164.560006][ T7937] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.614933][ T8036] syz.1.608 uses old SIOCAX25GETINFO [ 164.623183][ T8040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 164.692727][ T7937] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.747222][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 164.761895][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.610'. [ 164.775985][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 164.807589][ T7937] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.880742][ T7937] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.917963][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 164.988141][ T8052] net_ratelimit: 4 callbacks suppressed [ 165.001861][ T8052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.070868][ T8054] netlink: 'syz.1.614': attribute type 13 has an invalid length. [ 165.105679][ T7937] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.122515][ T7937] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.127279][ T8056] netlink: 596 bytes leftover after parsing attributes in process `syz.3.615'. [ 165.160684][ T7937] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.184468][ T7937] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.228046][ T8059] netlink: 'syz.2.616': attribute type 1 has an invalid length. [ 165.238180][ T8059] netlink: 'syz.2.616': attribute type 1 has an invalid length. [ 165.416177][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.619'. [ 165.441574][ T7937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.492518][ T7937] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.509918][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.517149][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.559191][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.566341][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.586829][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.622'. [ 166.044474][ T8106] netlink: 'syz.1.630': attribute type 1 has an invalid length. [ 166.067189][ T7937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.163502][ T8106] bond3: entered promiscuous mode [ 166.183320][ T8106] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.235595][ T8112] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.260471][ T8112] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 166.276818][ T8112] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 166.297009][ T8112] bond3: (slave wireguard0): making interface the new active one [ 166.306020][ T8112] wireguard0: entered promiscuous mode [ 166.316409][ T8112] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 166.606496][ T8125] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.606950][ T7937] veth0_vlan: entered promiscuous mode [ 166.618393][ T5868] Bluetooth: hci0: command tx timeout [ 166.639288][ T7937] veth1_vlan: entered promiscuous mode [ 166.685026][ T7937] veth0_macvtap: entered promiscuous mode [ 166.697437][ T7937] veth1_macvtap: entered promiscuous mode [ 166.739662][ T7937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.758787][ T7937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.772940][ T7937] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.787374][ T7937] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.796649][ T7937] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.811187][ T7937] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.912775][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.927842][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.994234][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.014507][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.395413][ T8136] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.403149][ T8136] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.464015][ T8136] team_slave_0: left promiscuous mode [ 167.478972][ T8136] team_slave_1: left promiscuous mode [ 167.586133][ T8136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.613582][ T8136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.858415][ T8136] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.867373][ T8136] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.892337][ T8136] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.903410][ T8136] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.920404][ T8136] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 168.021042][ T8136] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.030323][ T8136] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.039296][ T8136] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.048173][ T8136] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.069979][ T8136] bond1: left promiscuous mode [ 168.075493][ T8136] bond1: left allmulticast mode [ 168.089781][ T8136] veth3: left allmulticast mode [ 168.117985][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.639'. [ 168.277458][ T8176] netlink: 'syz.3.645': attribute type 6 has an invalid length. [ 168.551432][ T2990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.185007][ T5170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.195311][ T2990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.206053][ T5170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.215989][ T5170] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.224779][ T5170] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.233300][ T5170] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.403300][ T2990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.554014][ T2990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.818111][ T8204] chnl_net:caif_netlink_parms(): no params data found [ 169.954216][ T8229] wg2: entered promiscuous mode [ 169.960243][ T8229] wg2: entered allmulticast mode [ 169.973088][ T8231] Bluetooth: MGMT ver 1.23 [ 170.068138][ T8236] No such timeout policy "syz0" [ 170.094860][ T8204] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.095153][ T8236] netlink: 'syz.2.664': attribute type 2 has an invalid length. [ 170.105326][ T8204] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.120305][ T8204] bridge_slave_0: entered allmulticast mode [ 170.134760][ T8204] bridge_slave_0: entered promiscuous mode [ 170.143655][ T8239] No such timeout policy "syz0" [ 170.149565][ T8238] __nla_validate_parse: 3 callbacks suppressed [ 170.149580][ T8238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.665'. [ 170.167157][ T8204] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.182354][ T8204] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.191741][ T8204] bridge_slave_1: entered allmulticast mode [ 170.200503][ T8204] bridge_slave_1: entered promiscuous mode [ 170.291655][ T8204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.305289][ T8204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.353457][ T8244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.666'. [ 170.415475][ T8247] SET target dimension over the limit! [ 170.427730][ T2990] bridge_slave_1: left allmulticast mode [ 170.436417][ T8248] xt_hashlimit: size too large, truncated to 1048576 [ 170.444157][ T2990] bridge_slave_1: left promiscuous mode [ 170.451493][ T2990] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.478094][ T2990] bridge_slave_0: left allmulticast mode [ 170.484509][ T2990] bridge_slave_0: left promiscuous mode [ 170.490972][ T2990] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.850903][ T8263] netlink: 44 bytes leftover after parsing attributes in process `syz.0.671'. [ 170.862276][ T8264] netlink: 44 bytes leftover after parsing attributes in process `syz.0.671'. [ 171.003060][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 171.041837][ T2990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.054679][ T2990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.066477][ T2990] bond0 (unregistering): Released all slaves [ 171.087992][ T8204] team0: Port device team_slave_0 added [ 171.094523][ T8249] : renamed from bridge_slave_0 (while UP) [ 171.135893][ T8204] team0: Port device team_slave_1 added [ 171.258701][ T5170] Bluetooth: hci0: command tx timeout [ 171.499613][ T8204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.506792][ T8204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.533399][ T8204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.560509][ T8204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.584941][ T8204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.623593][ T8204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.018747][ T8204] hsr_slave_0: entered promiscuous mode [ 172.025482][ T8204] hsr_slave_1: entered promiscuous mode [ 172.050252][ T8204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.070046][ T8204] Cannot create hsr debugfs directory [ 172.167156][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 172.190461][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'. [ 172.285512][ T8322] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.329927][ T8322] bridge_slave_1 (unregistering): left allmulticast mode [ 172.344546][ T8322] bridge_slave_1 (unregistering): left promiscuous mode [ 172.351722][ T8322] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.400969][ T2990] hsr_slave_0: left promiscuous mode [ 172.419337][ T2990] hsr_slave_1: left promiscuous mode [ 172.425406][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.444801][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.471723][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.483079][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.552098][ T2990] veth1_macvtap: left promiscuous mode [ 172.560941][ T2990] veth0_macvtap: left promiscuous mode [ 172.567461][ T2990] veth1_vlan: left promiscuous mode [ 172.573890][ T2990] veth0_vlan: left promiscuous mode [ 173.338424][ T5170] Bluetooth: hci0: command tx timeout [ 173.394459][ T8365] netlink: 36 bytes leftover after parsing attributes in process `syz.1.694'. [ 173.501161][ T2990] team0 (unregistering): Port device team_slave_1 removed [ 173.538116][ T2990] team0 (unregistering): Port device team_slave_0 removed [ 174.194780][ T8381] netlink: zone id is out of range [ 174.215792][ T8381] netlink: zone id is out of range [ 174.247627][ T8381] netlink: zone id is out of range [ 174.256982][ T8381] netlink: zone id is out of range [ 174.267139][ T8381] netlink: zone id is out of range [ 174.276355][ T8381] netlink: zone id is out of range [ 174.285582][ T8381] netlink: zone id is out of range [ 174.292888][ T8381] netlink: zone id is out of range [ 174.298104][ T8381] netlink: zone id is out of range [ 174.307326][ T8381] netlink: zone id is out of range [ 174.322754][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.701'. [ 174.500397][ T8396] netlink: 72 bytes leftover after parsing attributes in process `syz.0.702'. [ 174.511410][ T8391] netlink: 'syz.2.701': attribute type 5 has an invalid length. [ 174.658957][ T8398] pimreg: entered allmulticast mode [ 174.664538][ T8401] pimreg: left allmulticast mode [ 174.780181][ T8403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.177203][ T8425] __nla_validate_parse: 1 callbacks suppressed [ 175.177232][ T8425] netlink: 252 bytes leftover after parsing attributes in process `syz.1.712'. [ 175.260607][ T8432] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 175.294297][ T8432] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 175.418533][ T5170] Bluetooth: hci0: command tx timeout [ 175.591602][ T8204] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 175.623227][ T8204] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 175.662285][ T8204] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 175.727422][ T8450] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 175.744175][ T8459] Unsupported ieee802154 address type: 0 [ 175.785461][ T8204] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.815677][ T8462] netlink: 'syz.0.720': attribute type 10 has an invalid length. [ 176.009263][ T8476] netlink: 196 bytes leftover after parsing attributes in process `syz.0.723'. [ 176.110088][ T8204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.173742][ T8204] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.216915][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.224143][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.273772][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.281053][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.438121][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.721'. [ 176.561933][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.726'. [ 176.667046][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 177.073421][ T8516] netlink: 44 bytes leftover after parsing attributes in process `syz.0.733'. [ 177.131939][ T8204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.192546][ T8529] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 177.394334][ T8539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.446292][ T8543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.503455][ T5170] Bluetooth: hci0: command tx timeout [ 177.533887][ T8539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.648703][ T8553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.729205][ T8555] netlink: 'syz.1.743': attribute type 3 has an invalid length. [ 177.776659][ T8553] netlink: 'syz.1.743': attribute type 10 has an invalid length. [ 177.926537][ T8553] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 177.982420][ T8571] netlink: 'syz.2.745': attribute type 1 has an invalid length. [ 177.994925][ T8571] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.745'. [ 178.122702][ T8204] veth0_vlan: entered promiscuous mode [ 178.181099][ T8204] veth1_vlan: entered promiscuous mode [ 178.303630][ T8204] veth0_macvtap: entered promiscuous mode [ 178.328407][ T8204] veth1_macvtap: entered promiscuous mode [ 178.390469][ T8587] macvtap1: entered allmulticast mode [ 178.403495][ T8587] veth0_macvtap: entered allmulticast mode [ 178.455082][ T8592] lo: entered promiscuous mode [ 178.491864][ T8592] tunl0: entered promiscuous mode [ 178.503854][ T8597] x_tables: duplicate underflow at hook 1 [ 178.583319][ T8592] gre0: entered promiscuous mode [ 178.624007][ T8607] netlink: 60 bytes leftover after parsing attributes in process `syz.1.753'. [ 178.633448][ T8592] gretap0: entered promiscuous mode [ 178.643635][ T8592] erspan0: entered promiscuous mode [ 178.672860][ T8592] ip_vti0: entered promiscuous mode [ 178.724997][ T8204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.807553][ T8204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.835184][ T8204] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.894567][ T8204] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.947573][ T8204] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.982885][ T8204] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.312954][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.338562][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.380599][ T8645] netlink: 'syz.1.761': attribute type 30 has an invalid length. [ 179.394852][ T8645] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 179.406140][ T8645] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 179.432152][ T8647] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.441347][ T8647] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.450521][ T8647] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.459832][ T8647] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.471581][ T8627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 179.575810][ T8652] netlink: 'syz.1.762': attribute type 23 has an invalid length. [ 179.632771][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.653224][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.804030][ T8658] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.764'. [ 179.819201][ T8659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'. [ 180.031912][ T8666] net_ratelimit: 16 callbacks suppressed [ 180.031933][ T8666] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 180.069001][ T8666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.342195][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.473651][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.754616][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.762741][ T8690] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 180.771452][ T8690] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 180.809832][ T8690] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 180.816321][ T8690] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 180.836791][ T8690] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 180.843259][ T8690] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 180.870469][ T8697] netlink: 'syz.3.775': attribute type 21 has an invalid length. [ 180.904618][ T8697] netlink: 'syz.3.775': attribute type 22 has an invalid length. [ 180.931849][ T8690] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 180.938438][ T8690] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 180.945446][ T8697] netlink: 'syz.3.775': attribute type 23 has an invalid length. [ 180.994950][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.005454][ T8697] netlink: 'syz.3.775': attribute type 25 has an invalid length. [ 181.058420][ T8697] __nla_validate_parse: 9 callbacks suppressed [ 181.058436][ T8697] netlink: 96 bytes leftover after parsing attributes in process `syz.3.775'. [ 181.402404][ T8717] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 181.416294][ T8717] netlink: 228 bytes leftover after parsing attributes in process `syz.2.778'. [ 181.543983][ T13] bridge_slave_1: left allmulticast mode [ 181.580499][ T13] bridge_slave_1: left promiscuous mode [ 181.586329][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.595274][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.619326][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.628840][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.646455][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.659375][ T13] bridge_slave_0: left allmulticast mode [ 181.665050][ T13] bridge_slave_0: left promiscuous mode [ 181.693586][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.735795][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.795324][ T8740] nbd: must specify at least one socket [ 181.843182][ T8743] netlink: 32 bytes leftover after parsing attributes in process `syz.1.782'. [ 181.926789][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 181.943800][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'. [ 182.337384][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.354395][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.366882][ T13] bond0 (unregistering): Released all slaves [ 182.486272][ T8740] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 182.496217][ T8743] netlink: 160 bytes leftover after parsing attributes in process `syz.1.782'. [ 182.506075][ T8743] ip6gretap0: entered promiscuous mode [ 182.697280][ T8743] netlink: 160 bytes leftover after parsing attributes in process `syz.1.782'. [ 182.868627][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'. [ 182.921378][ T8779] netlink: 'syz.1.791': attribute type 39 has an invalid length. [ 183.204662][ T13] hsr_slave_0: left promiscuous mode [ 183.216773][ T13] hsr_slave_1: left promiscuous mode [ 183.228990][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.246579][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.266497][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.278004][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.346372][ T13] veth1_macvtap: left promiscuous mode [ 183.354383][ T13] veth0_macvtap: left promiscuous mode [ 183.360767][ T13] veth1_vlan: left promiscuous mode [ 183.366189][ T13] veth0_vlan: left promiscuous mode [ 183.742547][ T5170] Bluetooth: hci0: command tx timeout [ 184.462386][ T8844] netlink: 'syz.0.801': attribute type 2 has an invalid length. [ 184.534936][ T13] team0 (unregistering): Port device team_slave_1 removed [ 184.604212][ T13] team0 (unregistering): Port device team_slave_0 removed [ 185.174553][ T8808] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 185.448140][ T8873] netlink: 'syz.3.806': attribute type 1 has an invalid length. [ 185.527177][ T8874] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.584664][ T8727] chnl_net:caif_netlink_parms(): no params data found [ 185.818933][ T5170] Bluetooth: hci0: command tx timeout [ 186.136905][ T8727] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.147804][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.157387][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.815'. [ 186.176629][ T8727] bridge_slave_0: entered allmulticast mode [ 186.185980][ T8727] bridge_slave_0: entered promiscuous mode [ 186.211532][ T8901] ip6gre2: entered allmulticast mode [ 186.219594][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 186.229577][ T8727] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.232278][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.816'. [ 186.250116][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.291083][ T8727] bridge_slave_1: entered allmulticast mode [ 186.315166][ T8727] bridge_slave_1: entered promiscuous mode [ 186.366544][ T8915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.814'. [ 186.503587][ T8727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.537073][ T8727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.688017][ T8727] team0: Port device team_slave_0 added [ 186.724252][ T8727] team0: Port device team_slave_1 added [ 186.932644][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.957526][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.046175][ T8727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.248032][ T8938] netlink: 36 bytes leftover after parsing attributes in process `syz.2.823'. [ 187.286940][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.303465][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.365857][ T8727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.439719][ T8947] netlink: 156 bytes leftover after parsing attributes in process `syz.2.827'. [ 187.538964][ T8951] netlink: 'syz.0.828': attribute type 1 has an invalid length. [ 187.549343][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'. [ 187.571366][ T8727] hsr_slave_0: entered promiscuous mode [ 187.577949][ T8727] hsr_slave_1: entered promiscuous mode [ 187.599219][ T8727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.613883][ T8727] Cannot create hsr debugfs directory [ 187.670846][ T8951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.704920][ T8954] bond1: (slave veth1): Enslaving as an active interface with a down link [ 187.757348][ T8951] netlink: 'syz.0.828': attribute type 1 has an invalid length. [ 187.775213][ T8951] netlink: 'syz.0.828': attribute type 1 has an invalid length. [ 187.824699][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 187.836273][ T8970] net_ratelimit: 58 callbacks suppressed [ 187.836286][ T8970] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 187.850153][ T8970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.865139][ T8961] bond1: (slave veth0_to_bond): making interface the new active one [ 187.898896][ T5170] Bluetooth: hci0: command tx timeout [ 187.909020][ T8961] veth0_to_bond: entered promiscuous mode [ 187.918698][ T8961] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 188.001540][ T8951] vlan2: entered allmulticast mode [ 188.019339][ T8951] veth1: entered allmulticast mode [ 188.025479][ T8951] veth1: entered promiscuous mode [ 188.032160][ T8951] veth1: left promiscuous mode [ 188.037391][ T8951] veth1: entered promiscuous mode [ 188.050472][ T8951] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 188.088906][ T8951] veth1: left promiscuous mode [ 188.200392][ T8984] Bluetooth: MGMT ver 1.23 [ 188.409756][ T8992] netlink: 'syz.2.838': attribute type 4 has an invalid length. [ 188.439480][ T8988] netlink: 'syz.2.838': attribute type 4 has an invalid length. [ 188.544810][ T8996] Bluetooth: MGMT ver 1.23 [ 188.603126][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 188.633353][ T9001] netlink: 132 bytes leftover after parsing attributes in process `syz.0.841'. [ 188.962598][ T3533] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 189.647064][ T8727] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.681433][ T8727] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.694878][ T8727] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.705539][ T8727] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.789991][ T8727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.867631][ T9021] veth3: entered allmulticast mode [ 189.891936][ T8727] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.961876][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.969097][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.991243][ T5170] Bluetooth: hci0: command tx timeout [ 190.056758][ T9039] openvswitch: netlink: Flow actions attr not present in new flow. [ 190.086715][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.093916][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.110541][ T9039] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 190.168970][ T9044] netlink: 'syz.3.851': attribute type 2 has an invalid length. [ 190.270657][ T9047] xt_hashlimit: size too large, truncated to 1048576 [ 190.350957][ T9052] : renamed from bridge_slave_0 (while UP) [ 190.852927][ T9073] veth3: entered allmulticast mode [ 190.912303][ T8727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.503244][ T8727] veth0_vlan: entered promiscuous mode [ 191.517664][ T9120] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 191.542321][ T9120] __nla_validate_parse: 9 callbacks suppressed [ 191.542336][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 191.558304][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 191.569315][ T8727] veth1_vlan: entered promiscuous mode [ 191.625720][ T8727] veth0_macvtap: entered promiscuous mode [ 191.647058][ T8727] veth1_macvtap: entered promiscuous mode [ 191.681842][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.703991][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.731018][ T8727] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.740982][ T8727] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.751099][ T8727] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.760990][ T8727] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.914403][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.946230][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.965126][ T9131] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 191.973099][ T9133] netlink: 'syz.1.877': attribute type 39 has an invalid length. [ 191.975706][ T9131] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 192.041680][ T9133] veth0_macvtap: left promiscuous mode [ 192.047807][ T9135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.877'. [ 192.119978][ T9136] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 192.244749][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.264561][ T9140] tipc: Enabling of bearer rejected, media not registered [ 192.272746][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.333983][ T9139] tipc: Enabling of bearer rejected, media not registered [ 192.377512][ T9143] dvmrp8: entered allmulticast mode [ 192.681505][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'. [ 192.712710][ T9164] netlink: 'syz.0.884': attribute type 2 has an invalid length. [ 192.782857][ T9168] Unsupported ieee802154 address type: 0 [ 192.791379][ T9168] ieee802154 phy0 wpan0: encryption failed: -90 [ 192.813688][ T9167] netlink: 'syz.3.886': attribute type 64 has an invalid length. [ 192.833277][ T9167] netlink: 5 bytes leftover after parsing attributes in process `syz.3.886'. [ 192.975181][ T3533] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.090238][ T3533] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.251736][ T3533] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.312921][ T3533] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.598034][ T3533] bridge_slave_1: left allmulticast mode [ 193.604129][ T3533] bridge_slave_1: left promiscuous mode [ 193.610983][ T3533] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.621006][ T3533] bridge_slave_0: left allmulticast mode [ 193.626673][ T3533] bridge_slave_0: left promiscuous mode [ 193.634020][ T3533] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.142912][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.153065][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.297061][ T3533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.319547][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.327965][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.336443][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.347383][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.348160][ T3533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.367166][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.370468][ T3533] bond0 (unregistering): Released all slaves [ 194.661120][ T9216] Cannot find add_set index 4 as target [ 194.927842][ T9228] ip6tnl1: entered promiscuous mode [ 194.942169][ T9228] ip6tnl1: entered allmulticast mode [ 194.974480][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.900'. [ 195.082584][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.901'. [ 195.142118][ T9206] chnl_net:caif_netlink_parms(): no params data found [ 195.222481][ T9233] : left allmulticast mode [ 195.232438][ T9237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.901'. [ 195.234686][ T9233] : left promiscuous mode [ 195.279630][ T9233] bridge0: port 1() entered disabled state [ 195.359141][ T9233] bond0: (slave bridge0): Releasing backup interface [ 195.522464][ T3533] hsr_slave_0: left promiscuous mode [ 195.554108][ T3533] hsr_slave_1: left promiscuous mode [ 195.568461][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.585462][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.598136][ T9261] netlink: 48 bytes leftover after parsing attributes in process `syz.1.909'. [ 195.618723][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.640866][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.699951][ T3533] veth1_macvtap: left promiscuous mode [ 195.713608][ T3533] veth0_macvtap: left promiscuous mode [ 195.728399][ T3533] veth1_vlan: left promiscuous mode [ 195.744414][ T3533] veth0_vlan: left promiscuous mode [ 195.756093][ T9273] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.912'. [ 196.174943][ T3533] team0 (unregistering): Port device team_slave_1 removed [ 196.209335][ T3533] team0 (unregistering): Port device team_slave_0 removed [ 196.471792][ T5170] Bluetooth: hci0: command tx timeout [ 196.549616][ T9247] syzkaller1: entered promiscuous mode [ 196.555424][ T9247] syzkaller1: entered allmulticast mode [ 196.817601][ T9285] __nla_validate_parse: 1 callbacks suppressed [ 196.817618][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 196.946152][ T9206] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.001557][ T9206] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.009002][ T9206] bridge_slave_0: entered allmulticast mode [ 197.040050][ T9206] bridge_slave_0: entered promiscuous mode [ 197.058078][ T9206] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.070646][ T9206] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.082963][ T9206] bridge_slave_1: entered allmulticast mode [ 197.091435][ T9206] bridge_slave_1: entered promiscuous mode [ 197.414348][ T9206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.460730][ T9206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.510120][ T9319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.926'. [ 197.525545][ T9319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 197.536846][ T9319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.926'. [ 197.574634][ T9319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.926'. [ 197.593251][ T9206] team0: Port device team_slave_0 added [ 197.602654][ T9206] team0: Port device team_slave_1 added [ 197.626874][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 197.729811][ T9206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.746781][ T9206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.783751][ T9329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.927'. [ 197.803692][ T9206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.825279][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.931'. [ 197.842357][ T9206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.850846][ T9206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.882172][ T9206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.081762][ T9206] hsr_slave_0: entered promiscuous mode [ 198.099114][ T9206] hsr_slave_1: entered promiscuous mode [ 198.117618][ T9206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.148886][ T9206] Cannot create hsr debugfs directory [ 198.158685][ T9347] wg2: left promiscuous mode [ 198.163327][ T9347] wg2: left allmulticast mode [ 198.235807][ T9356] wg2: entered promiscuous mode [ 198.244020][ T9356] wg2: entered allmulticast mode [ 198.529541][ T9371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.940'. [ 198.539629][ T5170] Bluetooth: hci0: command tx timeout [ 198.572145][ T9371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.940'. [ 198.901542][ T9392] lo speed is unknown, defaulting to 1000 [ 198.928494][ T9392] lo speed is unknown, defaulting to 1000 [ 198.974298][ T9392] lo speed is unknown, defaulting to 1000 [ 198.992839][ T9392] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 199.025862][ T9392] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 199.057803][ T9404] netlink: 'syz.2.950': attribute type 33 has an invalid length. [ 199.133671][ T9392] lo speed is unknown, defaulting to 1000 [ 199.161552][ T9392] lo speed is unknown, defaulting to 1000 [ 199.209941][ T9392] lo speed is unknown, defaulting to 1000 [ 199.244534][ T9392] lo speed is unknown, defaulting to 1000 [ 199.263297][ T1148] veth0_to_bond: left promiscuous mode [ 199.357496][ T9392] lo speed is unknown, defaulting to 1000 [ 199.416256][ T9392] lo speed is unknown, defaulting to 1000 [ 199.424935][ T9392] lo speed is unknown, defaulting to 1000 [ 199.440937][ T9411] x_tables: duplicate underflow at hook 3 [ 199.576174][ T9206] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 199.606715][ T9206] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 199.650718][ T9206] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 199.675810][ T9206] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 199.684938][ T9420] can: request_module (can-proto-0) failed. [ 199.930514][ T9206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.964011][ T9206] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.992835][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.000100][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.024983][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.032204][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.200119][ T9206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.618966][ T5170] Bluetooth: hci0: command tx timeout [ 200.814588][ T9206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.201116][ T9511] lo speed is unknown, defaulting to 1000 [ 201.307801][ T9517] netlink: 'syz.1.978': attribute type 15 has an invalid length. [ 201.676937][ T9530] veth0: entered promiscuous mode [ 201.688001][ T977] IPVS: starting estimator thread 0... [ 201.704560][ T9528] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 201.727572][ T9530] netlink: 'syz.0.983': attribute type 1 has an invalid length. [ 201.757626][ T9529] veth0: left promiscuous mode [ 201.806964][ T9206] veth0_vlan: entered promiscuous mode [ 201.813153][ T9536] IPVS: using max 26 ests per chain, 62400 per kthread [ 201.834347][ T9206] veth1_vlan: entered promiscuous mode [ 202.123463][ T9206] veth0_macvtap: entered promiscuous mode [ 202.163463][ T9206] veth1_macvtap: entered promiscuous mode [ 202.232622][ T9206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.250129][ T9206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.381044][ T9206] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.405202][ T9206] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.420087][ T9206] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.448320][ T9206] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.496257][ T9577] sit0: Master is either lo or non-ether device [ 202.676616][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.697397][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.708886][ T5170] Bluetooth: hci0: command tx timeout [ 202.746314][ T9596] __nla_validate_parse: 57 callbacks suppressed [ 202.746329][ T9596] netlink: 96 bytes leftover after parsing attributes in process `syz.0.996'. [ 202.789124][ T9596] netlink: 96 bytes leftover after parsing attributes in process `syz.0.996'. [ 202.832469][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.857020][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.236587][ T9624] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 203.394894][ T3495] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.523672][ T3495] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.620139][ T3495] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.782938][ T3495] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.929379][ T3495] bridge_slave_1: left allmulticast mode [ 203.935104][ T3495] bridge_slave_1: left promiscuous mode [ 203.941148][ T3495] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.950861][ T3495] bridge_slave_0: left allmulticast mode [ 203.956542][ T3495] bridge_slave_0: left promiscuous mode [ 203.963373][ T3495] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.309987][ T9641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 204.435447][ T9649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.435652][ T3495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.495817][ T3495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.511782][ T3495] bond0 (unregistering): Released all slaves [ 204.587365][ T9641] netlink: 'syz.0.1011': attribute type 3 has an invalid length. [ 204.631434][ T9655] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1018'. [ 204.665145][ T9653] team_slave_0: entered promiscuous mode [ 204.670969][ T9653] team_slave_1: entered promiscuous mode [ 204.755929][ T9653] macsec2: entered allmulticast mode [ 204.763652][ T9653] team0: entered allmulticast mode [ 204.772711][ T9653] team_slave_0: entered allmulticast mode [ 204.785736][ T9653] team_slave_1: entered allmulticast mode [ 204.813079][ T9653] team0: left allmulticast mode [ 204.813942][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.826883][ T9653] team_slave_0: left allmulticast mode [ 204.827985][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.840695][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.849599][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.851058][ T9653] team_slave_1: left allmulticast mode [ 204.857361][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.885204][ T9653] team_slave_0: left promiscuous mode [ 204.890753][ T9653] team_slave_1: left promiscuous mode [ 204.933892][ T9662] tipc: Started in network mode [ 204.939081][ T9662] tipc: Node identity 000000005f0000000000000000000001, cluster identity 4711 [ 204.948033][ T9662] tipc: Enabling of bearer rejected, failed to enable media [ 204.984103][ T9663] lo: left promiscuous mode [ 204.989364][ T9663] tunl0: left promiscuous mode [ 204.994486][ T9663] gre0: left promiscuous mode [ 204.999663][ T9663] gretap0: left promiscuous mode [ 205.005250][ T9663] erspan0: left promiscuous mode [ 205.017962][ T9663] ip_vti0: left promiscuous mode [ 205.106581][ T9663] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 205.284392][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 205.447442][ T9664] lo speed is unknown, defaulting to 1000 [ 205.649814][ T3495] hsr_slave_0: left promiscuous mode [ 205.669658][ T3495] hsr_slave_1: left promiscuous mode [ 205.677764][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.692249][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.705016][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.719430][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.740148][ T59] wlan1: Trigger new scan to find an IBSS to join [ 205.756172][ T3495] veth1_macvtap: left promiscuous mode [ 205.763496][ T3495] veth0_macvtap: left promiscuous mode [ 205.769523][ T3495] veth1_vlan: left promiscuous mode [ 205.777168][ T3495] veth0_vlan: left promiscuous mode [ 206.157088][ T3495] team0 (unregistering): Port device team_slave_1 removed [ 206.190638][ T3495] team0 (unregistering): Port device team_slave_0 removed [ 206.514911][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 206.662240][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1031'. [ 206.691385][ T9712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1031'. [ 206.834895][ T9719] x_tables: duplicate underflow at hook 1 [ 206.870935][ T9722] ipt_ECN: cannot use operation on non-tcp rule [ 206.927819][ T9664] chnl_net:caif_netlink_parms(): no params data found [ 206.953332][ T5868] Bluetooth: hci0: command tx timeout [ 207.052816][ T9729] netlink: 'syz.1.1037': attribute type 13 has an invalid length. [ 207.297767][ T9729] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.328020][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 207.553809][ T9664] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.570742][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.596161][ T9664] bridge_slave_0: entered allmulticast mode [ 207.610332][ T9664] bridge_slave_0: entered promiscuous mode [ 207.635982][ T9664] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.652820][ T9761] vxcan1: tx address claim with dlc 0 [ 207.661295][ T9664] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.669351][ T9664] bridge_slave_1: entered allmulticast mode [ 207.690865][ T9664] bridge_slave_1: entered promiscuous mode [ 207.836003][ T9664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.862787][ T9664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.013936][ T9781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1050'. [ 208.031138][ T9664] team0: Port device team_slave_0 added [ 208.062125][ T9664] team0: Port device team_slave_1 added [ 208.193947][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1052'. [ 208.206607][ T9793] tc_dump_action: action bad kind [ 208.249098][ T9664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.264132][ T9664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.305698][ T9664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.324295][ T9792] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1051'. [ 208.377252][ T9664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.391208][ T9664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.417356][ T9664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.446409][ T9804] netlink: 'syz.2.1054': attribute type 1 has an invalid length. [ 208.454556][ T9804] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1054'. [ 208.676615][ T9813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.727709][ T9664] hsr_slave_0: entered promiscuous mode [ 208.741841][ T9664] hsr_slave_1: entered promiscuous mode [ 208.748512][ T9664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.756138][ T9664] Cannot create hsr debugfs directory [ 208.779590][ T3533] wlan1: Trigger new scan to find an IBSS to join [ 208.789993][ T3533] ------------[ cut here ]------------ [ 208.796276][ T3533] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 208.804437][ T3533] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 208.827191][ T9824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1061'. [ 208.844791][ T3533] CPU: 1 UID: 0 PID: 3533 Comm: kworker/u8:11 Not tainted 6.16.0-rc5-syzkaller-00191-g0e9418961f89 #0 PREEMPT(full) [ 208.844815][ T3533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.844827][ T3533] Workqueue: events_unbound cfg80211_wiphy_work [ 208.844869][ T3533] Call Trace: [ 208.844876][ T3533] [ 208.844884][ T3533] dump_stack_lvl+0x189/0x250 [ 208.844910][ T3533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.844932][ T3533] ? __pfx__printk+0x10/0x10 [ 208.845001][ T3533] ubsan_epilogue+0xa/0x40 [ 208.845027][ T3533] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 208.845055][ T3533] ieee80211_request_ibss_scan+0x600/0x8b0 [ 208.845096][ T3533] ieee80211_ibss_work+0xde7/0x1060 [ 208.845132][ T3533] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 208.845170][ T3533] ? ieee80211_iface_work+0xf39/0xfe0 [ 208.845190][ T3533] ? rcu_is_watching+0x15/0xb0 [ 208.845216][ T3533] cfg80211_wiphy_work+0x2dc/0x460 [ 208.845238][ T3533] ? process_scheduled_works+0x9ef/0x17b0 [ 208.845261][ T3533] process_scheduled_works+0xae1/0x17b0 [ 208.845308][ T3533] ? __pfx_process_scheduled_works+0x10/0x10 [ 208.845348][ T3533] worker_thread+0x8a0/0xda0 [ 208.845372][ T3533] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 208.845409][ T3533] ? __kthread_parkme+0x7b/0x200 [ 208.845450][ T3533] kthread+0x70e/0x8a0 [ 208.845479][ T3533] ? __pfx_worker_thread+0x10/0x10 [ 208.845500][ T3533] ? __pfx_kthread+0x10/0x10 [ 208.845528][ T3533] ? _raw_spin_unlock_irq+0x23/0x50 [ 208.845554][ T3533] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.845579][ T3533] ? __pfx_kthread+0x10/0x10 [ 208.845606][ T3533] ret_from_fork+0x3fc/0x770 [ 208.845628][ T3533] ? __pfx_ret_from_fork+0x10/0x10 [ 208.845654][ T3533] ? __switch_to_asm+0x39/0x70 [ 208.845677][ T3533] ? __switch_to_asm+0x33/0x70 [ 208.845699][ T3533] ? __pfx_kthread+0x10/0x10 [ 208.845726][ T3533] ret_from_fork_asm+0x1a/0x30 [ 208.845766][ T3533] [ 208.845779][ T3533] ---[ end trace ]--- [ 209.054242][ T5868] Bluetooth: hci0: command tx timeout [ 209.059576][ T3533] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 209.059596][ T3533] CPU: 1 UID: 0 PID: 3533 Comm: kworker/u8:11 Not tainted 6.16.0-rc5-syzkaller-00191-g0e9418961f89 #0 PREEMPT(full) [ 209.059621][ T3533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.059636][ T3533] Workqueue: events_unbound cfg80211_wiphy_work [ 209.059662][ T3533] Call Trace: [ 209.059671][ T3533] [ 209.059679][ T3533] dump_stack_lvl+0x99/0x250 [ 209.059705][ T3533] ? __asan_memcpy+0x40/0x70 [ 209.059725][ T3533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.059748][ T3533] ? __pfx__printk+0x10/0x10 [ 209.059788][ T3533] panic+0x2db/0x790 [ 209.059814][ T3533] ? __pfx_panic+0x10/0x10 [ 209.128955][ T3533] ? _printk+0xcf/0x120 [ 209.133142][ T3533] ? __pfx__printk+0x10/0x10 [ 209.137767][ T3533] check_panic_on_warn+0x89/0xb0 [ 209.142729][ T3533] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 209.148465][ T3533] ieee80211_request_ibss_scan+0x600/0x8b0 [ 209.154298][ T3533] ieee80211_ibss_work+0xde7/0x1060 [ 209.159516][ T3533] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 209.165187][ T3533] ? ieee80211_iface_work+0xf39/0xfe0 [ 209.170580][ T3533] ? rcu_is_watching+0x15/0xb0 [ 209.175368][ T3533] cfg80211_wiphy_work+0x2dc/0x460 [ 209.180496][ T3533] ? process_scheduled_works+0x9ef/0x17b0 [ 209.186234][ T3533] process_scheduled_works+0xae1/0x17b0 [ 209.191809][ T3533] ? __pfx_process_scheduled_works+0x10/0x10 [ 209.197819][ T3533] worker_thread+0x8a0/0xda0 [ 209.202422][ T3533] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 209.208773][ T3533] ? __kthread_parkme+0x7b/0x200 [ 209.213760][ T3533] kthread+0x70e/0x8a0 [ 209.217846][ T3533] ? __pfx_worker_thread+0x10/0x10 [ 209.222966][ T3533] ? __pfx_kthread+0x10/0x10 [ 209.227578][ T3533] ? _raw_spin_unlock_irq+0x23/0x50 [ 209.232801][ T3533] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.238023][ T3533] ? __pfx_kthread+0x10/0x10 [ 209.242628][ T3533] ret_from_fork+0x3fc/0x770 [ 209.247231][ T3533] ? __pfx_ret_from_fork+0x10/0x10 [ 209.252359][ T3533] ? __switch_to_asm+0x39/0x70 [ 209.257136][ T3533] ? __switch_to_asm+0x33/0x70 [ 209.261939][ T3533] ? __pfx_kthread+0x10/0x10 [ 209.266545][ T3533] ret_from_fork_asm+0x1a/0x30 [ 209.271341][ T3533] [ 209.274688][ T3533] Kernel Offset: disabled [ 209.279066][ T3533] Rebooting in 86400 seconds..