last executing test programs: 1m22.696888751s ago: executing program 0 (id=659): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x1f8, 0x11, 0x148, 0x0, 0x10, 0x2e0, 0x2a8, 0x2a8, 0x2e0, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x190, 0x1f8, 0x1c, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x7, 0x13, 0x0, 'syz0\x00', 0xd}}, @common=@icmp={{0x28}, {0x5, "c8ce", 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3d8) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x1f8, 0x11, 0x148, 0x0, 0x10, 0x2e0, 0x2a8, 0x2a8, 0x2e0, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x190, 0x1f8, 0x1c, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x7, 0x13, 0x0, 'syz0\x00', 0xd}}, @common=@icmp={{0x28}, {0x5, "c8ce", 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3d8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) 1m5.555901217s ago: executing program 0 (id=659): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x1f8, 0x11, 0x148, 0x0, 0x10, 0x2e0, 0x2a8, 0x2a8, 0x2e0, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x190, 0x1f8, 0x1c, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x7, 0x13, 0x0, 'syz0\x00', 0xd}}, @common=@icmp={{0x28}, {0x5, "c8ce", 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3d8) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x1f8, 0x11, 0x148, 0x0, 0x10, 0x2e0, 0x2a8, 0x2a8, 0x2e0, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x190, 0x1f8, 0x1c, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x7, 0x13, 0x0, 'syz0\x00', 0xd}}, @common=@icmp={{0x28}, {0x5, "c8ce", 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3d8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) 49.555524082s ago: executing program 0 (id=659): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x1f8, 0x11, 0x148, 0x0, 0x10, 0x2e0, 0x2a8, 0x2a8, 0x2e0, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x190, 0x1f8, 0x1c, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x7, 0x13, 0x0, 'syz0\x00', 0xd}}, @common=@icmp={{0x28}, {0x5, "c8ce", 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3d8) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x1f8, 0x11, 0x148, 0x0, 0x10, 0x2e0, 0x2a8, 0x2a8, 0x2e0, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x190, 0x1f8, 0x1c, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x7, 0x13, 0x0, 'syz0\x00', 0xd}}, @common=@icmp={{0x28}, {0x5, "c8ce", 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3d8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) 34.091911317s ago: executing program 0 (id=659): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x1f8, 0x11, 0x148, 0x0, 0x10, 0x2e0, 0x2a8, 0x2a8, 0x2e0, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x190, 0x1f8, 0x1c, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x7, 0x13, 0x0, 'syz0\x00', 0xd}}, @common=@icmp={{0x28}, {0x5, "c8ce", 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3d8) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x1f8, 0x11, 0x148, 0x0, 0x10, 0x2e0, 0x2a8, 0x2a8, 0x2e0, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x190, 0x1f8, 0x1c, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x7, 0x13, 0x0, 'syz0\x00', 0xd}}, @common=@icmp={{0x28}, {0x5, "c8ce", 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3d8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) 20.23766509s ago: executing program 0 (id=659): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x1f8, 0x11, 0x148, 0x0, 0x10, 0x2e0, 0x2a8, 0x2a8, 0x2e0, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x190, 0x1f8, 0x1c, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x7, 0x13, 0x0, 'syz0\x00', 0xd}}, @common=@icmp={{0x28}, {0x5, "c8ce", 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3d8) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x1f8, 0x11, 0x148, 0x0, 0x10, 0x2e0, 0x2a8, 0x2a8, 0x2e0, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x190, 0x1f8, 0x1c, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x7, 0x13, 0x0, 'syz0\x00', 0xd}}, @common=@icmp={{0x28}, {0x5, "c8ce", 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3d8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) 7.787991319s ago: executing program 0 (id=659): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x1f8, 0x11, 0x148, 0x0, 0x10, 0x2e0, 0x2a8, 0x2a8, 0x2e0, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x190, 0x1f8, 0x1c, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x7, 0x13, 0x0, 'syz0\x00', 0xd}}, @common=@icmp={{0x28}, {0x5, "c8ce", 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3d8) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x1f8, 0x11, 0x148, 0x0, 0x10, 0x2e0, 0x2a8, 0x2a8, 0x2e0, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x190, 0x1f8, 0x1c, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x7, 0x13, 0x0, 'syz0\x00', 0xd}}, @common=@icmp={{0x28}, {0x5, "c8ce", 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {}, {0xff}}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x0, 0x2, 0x0, 0x18}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3d8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async) 4.49056325s ago: executing program 3 (id=1692): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0xb, 0x28, 0x7, 0x9, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e21, 0x1, @remote, 0x80000000}}]}, 0x48}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "baa32ad2976d1307d6faf33ee3a49671"}}}]}, 0x48}}, 0x8804) 3.844098294s ago: executing program 3 (id=1696): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x2b, 'memory'}, {0x2b, 'rlimit'}, {0x2b, 'rdma'}, {0x2d, 'blkio'}, {0x2d, 'blkio'}, {0x2b, 'cpuset'}, {0x2b, 'net_cls'}, {0x2b, 'net'}]}, 0x3a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = socket(0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r6 = socket(0x1, 0x803, 0x0) sendto$unix(r6, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:* mr'], 0x9) r8 = openat$cgroup_subtree(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x15, 'pids'}]}, 0x6) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80800) 3.727350518s ago: executing program 3 (id=1697): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r1, 0x5, 0x70bd25, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac05, 0xfac09, 0xfac01, 0xfac00]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) 2.029978039s ago: executing program 3 (id=1703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r4, 0x80047437, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x43, 0x3, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc0, 0x8, 0x0, 0x6}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="e029a300", @ANYRES16=r6, @ANYBLOB="000227bd7000fcdbdf250400000024000680060001000a00000008000300ac1414330800060014000000060005004e2100000800040096170a3d5400068014000400fe8000000000000000000000000000bb060001000a00000008000300ffffffff14000400fe88000000000000000000000000010108000700", @ANYRES32=r7, @ANYBLOB="0800060012000000060005004e24000044000680060001000a000000060005004e22000008000300e000000114000400fe8000000000000000000000000000bb14000400ff0100000000000000000000000000010500050007000000"], 0xe0}, 0x1, 0x0, 0x0, 0x4080}, 0x880) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000b00000040000580070001"], 0x54}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000c40)=ANY=[@ANYBLOB="8c010000518af6914dc41df340845cd468bc51853f4eb32a6dba201d5b389cab0db79cc3", @ANYRES16=r1, @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x8010}, 0x4008010) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x3, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r10, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0xd70d, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x8000) 2.027032725s ago: executing program 4 (id=1704): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf7946709}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008806) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x80006, 0x71a4dd4e) (async, rerun: 64) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000480)={0x1, 0x1, 0x1000, 0xd5, &(0x7f00000002c0)="a921b3fcba877020c7fd0b4115e1dab5781cd83e3fdb10b59b70d0f8ca7925b1afb97aa99482ee848af4b8ab56a9962302c39766899c15b660d4f0f3276fe7eefffe8bbe7f452a7bc3eba9cf0f5188b821af15a542136721b80ff66a377b4e08cab117198812e092db166e17ef345a5c462bf2e40a7e315ae23be7c7e4e9640f94544cd570a3f368e38eb63b1d27bcc846dbbc82b445304d869f5de6cabc02709fd7f5dad7bb2fa783a2dae0dcdb6b6786c4c3607dec7133304ace2e88412f366953de262df106203d739ba939a0968cb2e2fba2a9", 0xaf, 0x0, &(0x7f00000003c0)="bd5b74380885f5497819ea21552a9145804167f6ac7e3904e1e4a0d48f2c25d266e1a6d11e29f6f113f2932a23d8943548468c6879f71379c972eb0484cded5331e01b184f8b3f4663494b40a2fd5b9a7c7827eaca9b0ee363a4cccec92f29a299d73cc5b14816993ec32d78d7abaad6be6c51a4cf5c6e204623f4ec3f06b54afb9b3223f95e4c687f3818ea19cb51bb4694f7daf580f10898c63c54bca0a8a4fd03d92d6c529bffb4bcb057dac690"}) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r5, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000081) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa8, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x34}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x401}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x18, 0xbd, [0x45be, 0x2, 0x2, 0xd, 0x5, 0x9, 0xffff, 0x8001, 0x0, 0x1]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xe, 0x13, [{0xb, 0x1}, {0x18}, {0x2, 0x1}, {0x0, 0x1}, {0x36}, {0x6c, 0x1}, {0x4, 0x1}, {0x6}, {0x1}, {0xc, 0x1}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xa}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x20, 0xac, "5a4c861bdc7f0d0d412a843b72ddbb8f5cbfc65b5a88dbbe5865b2c7"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xffff, 0x2}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) (async) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000800)) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r2, 0x0, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x200040c0) (async) r7 = socket(0x2c, 0xa, 0x7) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000940)={0x0, 0x17d4}, &(0x7f0000000980)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000009c0)={0x8001, 0x5, 0x2, 0x3, 0x7, 0x1, 0x3, 0x8001, r8}, 0x20) (async) r9 = accept4(r0, &(0x7f0000000a00)=@sco={0x1f, @none}, &(0x7f0000000a80)=0x80, 0xc00) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000ac0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$PPPIOCSMAXCID(r10, 0x40047451, &(0x7f0000000b00)=0x7) (async) getsockopt$packet_int(r10, 0x107, 0x9, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) (async) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000bc0)=0x8, 0x4) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000c00), r11) (async, rerun: 64) getsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) (async, rerun: 64) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000cc0)={0x0, 0x0}, &(0x7f0000000d00)=0xc) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000d40)={{{@in6=@mcast2, @in6=@loopback, 0x4e22, 0x2, 0x4e22, 0x0, 0xa, 0xb0, 0xc0, 0x2b, 0x0, r12}, {0x100000000, 0x9, 0x7, 0x7, 0xffffffffffff58c7, 0x8, 0x7, 0x99}, {0x4, 0x7fffffffffffffff, 0x1ff, 0x6}, 0x9, 0x6e6bbf, 0x2, 0x1, 0x1}, {{@in=@multicast1, 0x4d4, 0x32}, 0x2, @in=@local, 0x3500, 0x2, 0x1, 0xf9, 0x20000000, 0x3e79e4cf, 0x8}}, 0xe8) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), r9) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f0000001180)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f0000000ec0)={0x248, r13, 0x20, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x24}, {0xc, 0x90, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xfa}, {0xc, 0x90, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x81}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x455}, {0xc, 0x90, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0xf}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0xd44a}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x100000001}}]}, 0x248}}, 0x24000000) 1.792826942s ago: executing program 4 (id=1708): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xc}, &(0x7f00000000c0)=0x8) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000440)={r3, @in6={{0xa, 0x4e22, 0xfffffff8, @local, 0x1}}}, 0x84) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$cgroup(r8, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r8, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x2c, 0x2}, @enum={0x0, 0x5, 0x0, 0x6, 0x4, [{0x0, 0x3}, {0x4, 0x9}, {0x2, 0x2008}, {0x2, 0xd2}, {0xa, 0x7fffffff}]}]}, {0x0, [0x61, 0x61, 0x30, 0x5f, 0x30, 0x0]}}, &(0x7f00000001c0)=""/30, 0x64, 0x1e, 0x0, 0x101}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7, 0x400, 0x7, 0x3884, r8, 0x5, '\x00', 0x0, r9, 0x2, 0x2, 0x4, 0xffffffffffffffff}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r7, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r10, r7, 0x26}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r3, 0x9}, 0x8) 1.518420529s ago: executing program 2 (id=1710): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0xffffffff) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x7, 0x4) (async) listen(r1, 0x3) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x4, @loopback, 0x2, 0x3}, 0x20) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) (async) socket(0x1d, 0x2, 0x6) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="00140200000000000a0003003a752f0756b80000"], 0x54}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000961122c000000000095af2b089e4cf44bfce233126feca17d32eb3bd4917692ea23ce1cd7cd29020edf9456817173e0d1e8699136a141a7508af0e4cb7a36bddc4a912bdabff6d5283683923b529a6ba8b419eab06d9a4cb9bc388fa50fd0cd305401d6"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r7 = accept4(r0, 0x0, 0x0, 0x0) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f00000003c0)={0x18, 0x0, {0x3, @random="e9e165625ac2", 'gretap0\x00'}}, 0x1e) sendmmsg(r8, &(0x7f0000007000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000007c0)="5e563da42800619c6e0c4d61bbab8106c614adee1a2deee4492ae8e300d0351da69760c4c947e1c1860c9242b22f14f79d35c03ba5aee9d6205f1f9f34b99d8bf675d5419f5b002396361da9a1582af98b7cab39e4c96d7044db710b4d7ed27ec1878ab6bfdab0e70b85dc337850cd8bcab6fa409486218c8b79218c73543e5fb0e7d875ebd7df9326f53cc08198713b5e6d7f267d3f7a5f7dae01ddb59f3d3a3b0d55cb1435c2fb88b2041465f34b781418cc3347f80a3784ce3e60f93f2719301948c976a4f800f0cd39755bc9de2341920420541e66a64f18caa9ec9a34afe629cf184ab07e554867f67c405be575662722eea3220fefecb7ab72f4dd5a6eddb4ff212db2d7c28e9453c2e42b68f377aafb2ef2bcc9eb7ec2183c4e8f1e25c4f4eac3cae993c1928d5b3c8584ff211a6ee143c6520f945576f04020d144604ad9a52906562d20b0598a8f19e275e023b076a69d7bb8adf51ecc272e5852a1efb54f2c0d9e5983361392ee897ac48ea5da8c286079caac7ed1220a629031b7cd46a0549c32b227f74b334128e0a14f661ecf3a58b9b70cb0461e3f5d413d73a4163ea4da62a5c6f22f2419506814b003702c6b44aa60afdea84539f26e842ee9f4fc49e5c771d48204787a508fd7caa5e3c25e60dc3e515ae89e98276358916595919227e2a53f0398b0381152a9be7ce5b82366460c98334bbbbde2fc28a0c669495a4e1ca5aff6c3b215edc0244827bf4baa41e48fc53690811cdea6fee254c1a27e1983c3e37d4e4dd28719d3b695415091f369d3ef1aed516e81f9df99fbe807edec17a3601c9bc40877105419aba476ed7b45bcb122e12d810cc417d33661559ea7fe1827ba438087d2af5e18b59ca4695afc82a3ad1ff793bfbe986a25069f5570423a50b81113d43a7787ceec8e8245038508d28716ea68fac56b98c43c5f6e9658dd4d42cdefbf97873bc8ef504f236e47d3eaa1643a719723e6d6378d26ec45f4916b34bbdbbd89bffa4ee5e33491cf0654fc4da490ebce8fee87b17e58ae36406f654696a82031999eb6ffe5bb0fd1a24122ee057566d74e8de5cbd1b1cc592841944a386020b12d743db9939c91535953297e3424ab5414da54616f89c14f3ae47f926f06dce5bcca3f7458e2f69d7f2a13fc47f7396dbcc9badf655a9b4271bf1c57106992ca676e46c11ed7ab0ffb079018c70eb9e5d27e31cdaac6a49f52084a4575a312ac74b88e7e318f485b70ea97e9d27fcf17f1d5230d9f606e52eebe1530095b7d17bee0b3d8064a65a780d790c6a85233a67fd8d1a791b8899c31a6b92c11a6044a70a68f483ae2fcea4e06d26c0ef51e17e9282a7d3e7d5dc1c7ca09fd3353c4eb5bb18cb0c4b686660fa0103d57c53e4eba77c7958538d1c3822e4b4881e5b9cc70de54a580b8b067ee4d1fab64d605626e0d43cd3e89967177683451131ec6ceebfe9155f83cf576b9d7203d9071528f355c5e32b6dd8259c42dd62ef6ae743b2cdf7f3823ceea9e8e8b3e6830082e403d4e30d506eb09d842bf2dacad7f098c167a459f9889c0e14e0af26712ce4c8ef30835af0b7826c7b4abfd54cbdcfc7a091aa6f1195507882e173edbc69181b8aa560c5020b0a9cb1f5467e636a507e8eba76b645e3153d826ded8028277dd76f758db9ce0f3377d4be0f32c8bb0ca43fa9883761e7f33ce58e2c89a5a92b2c86244dcf19ed88afb0375c015ec96c7ce7602ddc721a8d759446b7828f4c7128284c5d6934f1926c9a0605921502cffb6d689645618cb3c57cc54b56233e9e07f3808a29005ef4f09443c90ed9a246e8d9d36fc941c61f7dd446209998c84b6e9b5c2361e7ce482ea08250cdb194dfb12898442416747ac89adc17b7bbee27d032ab391fd90d2052a0df3d2d5105139c8dff44e159115bdab1a65ad33211356581afc46175065e2e823e2552bc7327f790330c2c94b9ccc7f1ade293178773110545e7c167adba5416daeaaaee1a3773e82eacb6532174d28f53251aede7012c3b1a587d0bff973c5974235e96c144145e53d1af9738b023385dbf9ba3a44969cc22c662e3cc31f86d7a2273d3e6c3e2780f0c20e81e634fae69a5f9395bcadb8a3990f7d2890fbc617599c818472", 0x5eb}], 0x1}}], 0x2, 0x20000800) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) (async) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10}], 0x1}, 0x4) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x0, 0xffff73b4, 0x5, 0x1, 0x4}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) (async) sendmmsg$unix(r7, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000844) (async) close(r7) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) 1.495524611s ago: executing program 4 (id=1711): getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x0, [0x46e, 0xe, 0x3ff]}, &(0x7f0000000080)=0x44) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x6b07, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={r1, 0xb9, "a9b241b3c7de43a7588ef15389aebf11e9174cbde0925091d0c3bd2d697f3d2dba426e2c6139e9bb6693fe0a0b6c225862f38d19795b55a2ce9a22ac068182a6d09550440e5ff471d7b9c7c18b825d1a352590c0fa33db6a658b964ffbcb96e30d66e3e06041876b736e1a6a522e3ed231a4d616acacfddde06750b6d6a891dc5ed669f6df4466835eaea60ed65349b2672103e4a3ae85eecaef80dcd4504345f0dbd648015c305dcafdd7f6ffef6f6ac1c53b7003d192f779"}, &(0x7f0000000240)=0xc1) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300)=0x6e) writev(r3, &(0x7f0000000680)=[{&(0x7f0000000340)="45c6b912a2e172ebd731b2bb79a3e57843b88f7251a3ad748a6456d591729bc3e996dcaea0a2c8f2941ef9c824c1caa9a096460edc2edf783402423e8ed35d826571e523cf41fb1b0f81206b45f9ac0c625e3197803c0001a37cc630", 0x5c}, {&(0x7f00000003c0)="4cb37686f1", 0x5}, {&(0x7f0000000400)="6f5502d16e6b442bd47c861da4c1556a678d6306ea3168ce359e22629314d5c6b7dd66302c72982fa45aacd28d6c1b147033df1d3fdccdcd0f168f74ac5be37b70948e20ac7d5a57839b0798d1a7bc8dbaef3a27930e1ce5ab7c5541101196ad8a385530076ed84f5b1fffb5eb8e0eabda18e17bce986ba6059189566384dca9d0143baf487c164489b7dcef4fd2d9", 0x8f}, {&(0x7f00000004c0)="900ebbcbc0042373f36b195de17fa42278fb2f2574374be391315c", 0x1b}, {&(0x7f0000000500)="adbb018bd81dc06bc727338a8c5710652232562ff7e25e80630bcf81892c65d14c0fd722d489d5f482f85236e5f280ac4c7c8e248acf85f27cd10f76d37bad665b5f8272494653907a2c", 0x4a}, {&(0x7f0000000580)="1d3bbac8f08dbe72fc18a26473de89151dcee64af3a7564ba310fb864e895cbc274ee8249c34c9beac185d88de5164155af2186e0f6c5783b52158418d71f9906dff6ca640f69c4aa95b0afbca58fea10d94cd37d6278c2ab8e97db0e68e95b14a03112f88895dd399909f8c7b11a5851e718a1e62f11cf292f0366991458f76e5c2e91540a377cbca64018a13f76d37c4c66415448355199aaa5417bb5cb306fb7ed78d1983e0c5917451e182495c62f8a2480203d11e0a0578bdeab3049415007ed13877aa8167ac6e04b0b80209d38eb340c2ed302d25f7d1cdea24d00af28cfdf7c9c567523136", 0xe9}], 0x6) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000700)={0x8000, 0x17}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000740)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) recvfrom(r3, &(0x7f00000007c0)=""/4, 0x4, 0x1, &(0x7f0000000800)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80) socket$isdn(0x22, 0x3, 0x4) recvmmsg$unix(r3, &(0x7f0000007140)=[{{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000000900)=""/146, 0x92}, {&(0x7f00000009c0)=""/195, 0xc3}, {&(0x7f0000000ac0)=""/116, 0x74}, {&(0x7f0000000b40)=""/86, 0x56}, {&(0x7f0000000bc0)=""/239, 0xef}, {&(0x7f0000000cc0)=""/157, 0x9d}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x7, &(0x7f0000001e00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001f00)=""/168, 0xa8}, {&(0x7f0000001fc0)=""/80, 0x50}, {&(0x7f0000002040)=""/157, 0x9d}, {&(0x7f0000002100)=""/34, 0x22}, {&(0x7f0000002140)=""/150, 0x96}, {&(0x7f0000002200)=""/227, 0xe3}], 0x6, &(0x7f0000002380)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000002440)=@abs, 0x6e, &(0x7f0000002740)=[{&(0x7f00000024c0)=""/175, 0xaf}, {&(0x7f0000002580)=""/185, 0xb9}, {&(0x7f0000002640)=""/40, 0x28}, {&(0x7f0000002680)=""/147, 0x93}], 0x4}}, {{&(0x7f0000002780), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002800)=""/210, 0xd2}, {&(0x7f0000002900)=""/249, 0xf9}, {&(0x7f0000002a00)=""/245, 0xf5}, {&(0x7f0000002b00)=""/84, 0x54}, {&(0x7f0000002b80)=""/115, 0x73}, {&(0x7f0000002c00)=""/135, 0x87}, {&(0x7f0000002cc0)=""/26, 0x1a}, {&(0x7f0000002d00)=""/248, 0xf8}, {&(0x7f0000002e00)=""/47, 0x2f}, {&(0x7f0000002e40)=""/241, 0xf1}], 0xa, &(0x7f0000003000)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003080), 0x6e, &(0x7f0000004100)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1, &(0x7f0000004140)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000004180)=""/166, 0xa6}, {&(0x7f0000004240)=""/87, 0x57}, {&(0x7f00000042c0)=""/141, 0x8d}, {&(0x7f0000004380)=""/212, 0xd4}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/35, 0x23}, {&(0x7f00000054c0)=""/234, 0xea}], 0x7, &(0x7f0000005640)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000005700), 0x6e, &(0x7f0000006980)=[{&(0x7f0000005780)=""/156, 0x9c}, {0x0}, {&(0x7f0000005840)=""/4096, 0x1000}, {&(0x7f0000006840)=""/20, 0x14}, {&(0x7f0000006880)=""/204, 0xcc}], 0x5, &(0x7f0000006a00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{&(0x7f0000006b80)=@abs, 0x6e, &(0x7f0000007000)=[{&(0x7f0000006c00)=""/10, 0xa}, {&(0x7f0000006c40)=""/201, 0xc9}, {&(0x7f0000006d40)=""/241, 0xf1}, {&(0x7f0000006e40)=""/155, 0x9b}, {&(0x7f0000006f00)=""/23, 0x17}, {&(0x7f0000006f40)=""/171, 0xab}], 0x6, &(0x7f0000007080)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}}], 0x8, 0x12000, 0x0) recvmmsg$unix(r6, &(0x7f0000007680)=[{{&(0x7f0000007340)=@abs, 0x6e, &(0x7f00000074c0)=[{&(0x7f00000073c0)=""/222, 0xde}], 0x1, &(0x7f0000007500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x158}}], 0x1, 0x40001001, &(0x7f00000076c0)={0x0, 0x3938700}) r19 = socket$kcm(0x29, 0x2, 0x0) write(r19, &(0x7f0000007700)="f0d906d45c4d21a799f1a48e13f3ffac745437d4dc17d3b0e30323010ff440fcfe9f731491a88dafa4933d701729b15de8770e20308ee8bcf1a2147fb405785ed4b9c1502513b17f80039bdfdc4978df83c58f7273276b7e19be66227adfd5e60dc2998d92bf447ed4dc868ca7462b55144dc7d853b61254915317e07a1b1c5ca3c94f973b9ab492421d17689c54df3def809b21f1cd3c46cef55dca5e89e870363712ffc1", 0xa5) preadv(r16, &(0x7f0000007d40)=[{&(0x7f00000077c0)=""/217, 0xd9}, {&(0x7f00000078c0)=""/130, 0x82}, {&(0x7f0000007980)=""/123, 0x7b}, {&(0x7f0000007a00)=""/183, 0xb7}, {&(0x7f0000007ac0)}, {&(0x7f0000007b00)=""/83, 0x53}, {&(0x7f0000007b80)=""/165, 0xa5}, {&(0x7f0000007c40)=""/107, 0x6b}, {&(0x7f0000007cc0)=""/118, 0x76}], 0x9, 0xfffffff9, 0x1) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000007e00)='syz_tun\x00', 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r13, 0x80489439, &(0x7f0000007e40)) sendmsg$nl_route_sched(r9, &(0x7f00000080c0)={&(0x7f0000007ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000008080)={&(0x7f0000007f00)=@deltaction={0x15c, 0x31, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff1514}}, {0x14, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x65}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe05}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4080080}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x100010, r4, 0x50f97000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg$unix(r5, &(0x7f0000009fc0)=[{{0x0, 0x0, &(0x7f0000009280)=[{&(0x7f0000008100)=""/4096, 0x1000}, {&(0x7f0000009100)=""/31, 0x1f}, {&(0x7f0000009140)=""/93, 0x5d}, {&(0x7f00000091c0)=""/176, 0xb0}], 0x4, &(0x7f00000092c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000009380), 0x6e, &(0x7f0000009840)=[{&(0x7f0000009400)=""/155, 0x9b}, {&(0x7f00000094c0)=""/78, 0x4e}, {&(0x7f0000009540)=""/32, 0x20}, {&(0x7f0000009580)=""/34, 0x22}, {&(0x7f00000095c0)=""/208, 0xd0}, {&(0x7f00000096c0)=""/51, 0x33}, {&(0x7f0000009700)=""/84, 0x54}, {&(0x7f0000009780)=""/168, 0xa8}], 0x8, &(0x7f00000098c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000009980)=@abs, 0x6e, &(0x7f0000009b00)=[{&(0x7f0000009a00)=""/193, 0xc1}], 0x1, &(0x7f0000009b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000009c40), 0x6e, &(0x7f0000009f00)=[{&(0x7f0000009cc0)=""/59, 0x3b}, {&(0x7f0000009d00)=""/169, 0xa9}, {&(0x7f0000009dc0)=""/109, 0x6d}, {&(0x7f0000009e40)=""/138, 0x8a}], 0x4, &(0x7f0000009f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}], 0x4, 0x12022, &(0x7f000000a0c0)={0x0, 0x3938700}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f000000a180)={{r4, 0xffffffffffffffff}, &(0x7f000000a100), &(0x7f000000a140)=r10}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r20, 0x89f3, &(0x7f000000a3c0)={'syztnl1\x00', &(0x7f000000a340)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x6, 0x80000000, 0x0, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x1, 0x7f, 0xfff}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f000000a440)={0xb7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000a540)={0x1e, 0x16, &(0x7f000000a1c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xa45}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r22}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f000000a280)='GPL\x00', 0x8, 0x43, &(0x7f000000a2c0)=""/67, 0x40f00, 0x4, '\x00', r23, @fallback=0x36, r7, 0x8, &(0x7f000000a400)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, r24, r8, 0x7, &(0x7f000000a480)=[r21, r15], &(0x7f000000a4c0)=[{0x2, 0x1, 0x9, 0x3e70efbbb30b8059}, {0x1, 0x2, 0x5, 0x4}, {0x3, 0x2, 0x10, 0x7}, {0x3, 0x1, 0xf, 0x4}, {0x5, 0x4, 0x9, 0x1}, {0x5, 0x3, 0x4, 0xb}, {0x0, 0x1, 0x0, 0x3}], 0x10, 0x3}, 0x94) r25 = bpf$OBJ_GET_PROG(0x7, &(0x7f000000a640)=@o_path={&(0x7f000000a600)='./file0\x00', 0x0, 0x10, r10}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000000a940)={r25, 0x0, 0x9c, 0x4c, &(0x7f000000a680)="15d7c528d02d8fcf4e31f6ce1b5976670353df138ed5a952f7f69ee73e859cc4acb996ebc2361ea26c718eb00800220f310286c281feb4bf776621792b57b1ecd2089741d7e95b236e94719b63d4768bdeb803ff17a07fb0594d797e3988a5091255fe696d74b8f990687ac8928495e62a9a08a730831e66b9ae99491d679ce2171196ac8675ec204e489bc350054a2bf85018c2de1484769e7d616a", &(0x7f000000a740)=""/76, 0x5, 0x0, 0xe0, 0x43, &(0x7f000000a7c0)="bfad2bb62326542a2a8d49705ab195e6a88ff21a3cc1ae313c3d6f6084596651eeb88618652c8b35f1f7af7e3aee69881299f9c785d4e37e02f528f60753d937534e7a25685dbf4bb3121630e861b1985045487f68d5b9bd6c44638acaffa53fffb360b623a6f67f9f0432614903c5e2a07cd5a20865bfc9433c50fd445d1e32c95c6ccda857cf6091757e9f5d344fa276c34d9edcf04b4930deda57ce4b168517a89f3ab595ca7c9be6aeb52f94dd5f226694195f8fbe08b82355a71b2cd4147aee8ce4add6f4ebc3cd5477dc263d6648341a834af0b31c457a61e56777fc73", &(0x7f000000a8c0)="3d88a1ef515fa6c462421268db4bee5e1491bacc5bff90b1c65f3e19d832e490a7f9d135e8a572b2532cf05872b4cc217498f589bc9fc76e44fa5d630826676f5b702e", 0x1, 0x0, 0x9}, 0x50) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r14, 0x84, 0x76, &(0x7f000000a9c0)={r2}, &(0x7f000000aa00)=0x8) ioctl$FS_IOC_GETFSLABEL(r18, 0x81009431, &(0x7f000000aa40)) ioctl$INCFS_IOC_FILL_BLOCKS(r17, 0x80106720, &(0x7f000000aec0)={0x5, &(0x7f000000ae00)=[{0x1, 0xa1, &(0x7f000000ab40)="e184ce12aeea2115ac920c6b881c6a9b7d3a6bae2b3989360a4eca4c1e56be46df3d73da1e8305db4e931c9e1459f09f77ac2cfd18b1bd73de00c26d2f70978be87be8356fbb7735bbaa027d6672e42accec5c90af7086eb639f5c5b09b5a6a93452f0d62c767de8a8e976b133614c64b7b4f8a13e32ae5ba419fcc4feb983d0b0f48e42e6dd48b5c676de98888c320925325adaf1b7c7b0bc9965106b45359b3d", 0x1}, {0x2, 0x8, &(0x7f000000ac00)="a58d9632aac76ead", 0x1}, {0x0, 0x10, &(0x7f000000ac40)="4126e0432c382bc14911b108139185a0", 0x0, 0x1}, {0x3, 0x44, &(0x7f000000ac80)="607e7c8dd69dee427cbb26e889192bcebc2dc3d819a4b9feae0b9c5f83226e807d343aa21251cfece69976c403d007d6e1286986ca5fba0341d2f93c861fc141697298bc"}, {0x4, 0xdb, &(0x7f000000ad00)="f4d31c52751013456d2ccc014b120677a3e262ea04129ff1a7442c71c0b8bb93d9ddccd9d33f8d819b4cee062e10e41fb242d21f575383997f9b20b406ce4b33bf6e8e59d29b02fa81309487ece7def082791e2a93d3e35f6ffd46663c8564e19a8b59861570e0e01a1d1ea8452fa4d6fa00ae4586c97f8bf147bf9a04afc8eee89ecb68b21c9eaa94dff5d96e2ab1c09b2c47d15d6efd35b5c8ab7e7e8f707f3fb97511c8d2ba1a4699ad8643d8cc400b449974ff5f0db916946d101a895adce095fc045d9eeceabcb03976425588b4bab524c89823cbb2400053", 0x1, 0x1}]}) 1.443868059s ago: executing program 1 (id=1712): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@empty, @multicast1, 0x0}, &(0x7f0000000100)=0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'ipvlan1\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'team_slave_1\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x32, 0x11, 0x4, {0x8, @tcp_ip4_spec={@remote, @empty, 0x4e21, 0x4e22, 0x4}, {0x0, @remote, 0xa7, 0x0, [0x40, 0x132]}, @ether_spec={@remote, @random="787ac0791d6b", 0x3}, {0x0, @empty, 0x0, 0x2, [0x1c00]}, 0x6, 0x7}}}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r10, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2a, r10}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=@newsa={0x114, 0x10, 0x400, 0x70bd2c, 0x25dfdbfd, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private1, 0x4e23, 0x4, 0x4e24, 0x7, 0xa, 0x80, 0xa0, 0x8, r10, r11}, {@in=@rand_addr=0x64010101, 0x4d4, 0x6c}, @in6=@private1, {0x4, 0xac, 0x4, 0x6, 0x200, 0x7, 0x7, 0x3ff}, {0x365e, 0x800, 0xffff, 0xa}, {0xc8, 0x8, 0xb1064199}, 0x70bd2d, 0x3501, 0x0, 0x4, 0xe, 0x80}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e22, 0x4e20, @in6=@private0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x114}, 0x1, 0x0, 0x0, 0x40001}, 0x8840) r12 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000002c0001c6f5e7310012a2f0c400088aed", @ANYRES32=r13, @ANYBLOB="0b000080976b6408686030001800018011000d80905176c518740da397a9423603000000"], 0x3c}], 0x1}, 0x0) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x3}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r14, 0x84, 0x17, &(0x7f0000000540)={r15, 0x4, 0xb2, "3621d83df18e94338efe8fa22916d0647ead5f88885674738be9c5245737a50616beb2f2547df3283a8d0486079d2cf0edc082f0a8cd281746f5d3dc84463c7560fdc985591216761404aba84c8a1bc6770a73a2761069f0c8b1b9054c4975bf5e27c951c14cae5eea37733421e1cd2222ae486a688b9dfc2bc0f6388a5e3682a57e93455391583d9ee236f6043d05094a9a097da2a373bdfc8deb16b3b8ab96ba28c2ff7f793ff49962ea2ee96a61096441"}, 0xba) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ac1414aa000000000000000000000000000000004e220000000000000200008000"/64, @ANYRES32=r1, @ANYRES32=r13, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000b2310000000000000000000000000000010000000000000000000000000000000000000000000000fdffffffffffffff00000800"/112], 0xb8}}, 0x0) 1.344787612s ago: executing program 2 (id=1713): socket$netlink(0x10, 0x3, 0x0) unshare(0x6020480) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18300000004e9183df454f8e100000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x3}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7e571a3df44d1d15000000000000000005000018", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000200"/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000580)=@caif, 0x80, &(0x7f0000000800)=[{&(0x7f0000000180)="fd4e5965c4fb531f218a8e09ace4dece46b1b8437dbe7d14", 0x18}, {&(0x7f0000000d40)="290380758badf1939322b1610e14bde78fa4d63992ee328bbc365b537219b87de2e58bca28d17783e3b628690409bbcf498e16fea249740ee4316923ac528e509fc5b2c319ccc03dcfbbe8388c6f370cf3876125bea6bcd30bf8a298487475051d316d40354b216458ecccbb3a8dde4da5b0770b18147fa9b2b09fcfff608790e6461968fdd127562eb0ea191ff2a769cdae704446936b9c0be84f87cc5609b98bbb2fd4b1c5541d8993cdf618db18b68464b828866bf54383127427160350f143680b7cd51a0ff176e601f855d9b29879f96de547f8c5f9e880d8638fb619fb676f09914edd5dfa763aeb5358bf6f3b5c79ee6af1f30c3abf265d442297554e3af537183b3f52b95b5eb9cc9a350ba48d81bb5274688ab5c0ecdcc8876e23d023f914a2334271352325fb0279ff18bb37c8ebd8eedb7033f3733c10aefca2194eb3a22f72aea078a39ea73e64a5f48f6a34d4b0e6b20ccb58b793224b624ccc69688cc26b810f146fd75dc5e23724095e6ff8b583a32c65c82162bef3814e8da8dc624f4f21889dd9d09450a85a89f18e1571e8c4df9933a2bcafe864f10badba54fe701e1e68e87d75914dae782e4c3be88b58447a20fd5a16696d383c2c6875fb8a22c484757636181614c61e59c84b44f80a472c976e1e69ca717a171b6d1a2d48cb9b1cbdbd93620c61ce118e6f20ffc3e171dce5dfc9314c522424c3d1444697e7684fc0496abd68960975fba119cfdcf3c81548e710f03e18736480b722c31fbf4254950f3a76c0615151e9a48b7d279d680e846002691259165e2f6dba299003d63d34d6f8eec65c31398aabc6339171752366e3f5611bbcbaa78f1d93eba9605dd8459fed0919a137084adb7040a11eb09e0dcb4aca2bcfdf9ab406eeea3a2186fa260f1cf08a66c7af50981bbfda0499c4306dcf42f441a337aa28b640d98ab5851d69ee8bf53b589bfeff351b79bd17dbf173e11f0edac2247d4c7ea928c1a466df79e927d1a3fa168ad218ec07a337442d2827d5e715744eaf400e65adf6dc6f83c51e0983e9632280e81c8b718e5f07b9c8a5e2ead8b8d8cb1a2b50d375a6c5fa6f729627652e3cdb4835fd6f1e525d93435bdee47f9959673f0a254cb20dd807bfce11e894f126fdfab090a966b7074d7d8f13d94f186b4c5114950e757bc608fa9aedbc6b18859a8be7a89382f7e277f3fc5533e8f38787c5a1fd4bcdb0c7ddc142ae2db6f1c54b1d9f4e3d1ec8e88d058ccad1a00f5ad96ed584e2d56122d430f146cda4cff756eccedac328fcf72d1982580038636ac99f4cbdee4cb2393cd40b768159e697c6155d8bf1bf3dc251752181ad409ea4676767c1dee53e26ef614a3ee5f011e62ddcbc765eab64d0cca79a4be6c52448a332ae7b3c56c5bfe207f9bc268f6ffd3f3d55804e71d576a22682cdf1e7db6fd03a3c1afb90acc7ef373d36309950e7250602b7a918f0c7c25585db035fa15aa55043c02034a3c8d4ca5c71f3ab9df322b383023093dea5462629988262ab0c931727f95b458374c4e1e09c74a861a6db6d50d8767f5261a6d12be740e18fdb56dfd17e8ffcd2b82be1b065eb3c5eef29a1947ef014e2f9afedb180c7a11a727c6ee0be0d7f735df7c87b4d2c23f2f9ff64ebfc224ae3e582d69a049fe303fe6510155ede996531ce250848b53271ed168fd2de2e6370181d323527323b0176b5590007eb4e9882623f7e3b23e549e87fd7a808e08f844cf23a2c750dc48ac6ec1cc6f698e5a68ae0e89724b2ae7575e1bff1887fd51bf52db14aeefdc9c71a26f67d2e0b03f7f3e091b177094982d96e0556b6d7126b9e3ad1574b10f2bdcd34a3b02b784d7ecf40ac7d567efe762b2dbe3d4a635778d1f0fca0438767f94c33301930f90d03626a642fac81e5842cf5afa39987bb4c3d3d69c3ca742d802cc006bd234d1d454cd01868524c6f1e6a248cdc419ce25965fc86c094e48596c62e34c6e030feeceab87dfe9915b8c7186d2dff8a25c587c0db87db559d448e3e4a14f9f9729e11ecdf1dc4566fb7699d894cb9a9e1d57bdd24ca7b3c31a8baf9b3b88d1eabdf2b4dda5fe163dd24014c9354a73e25b4372688ee0950dc333f2256545c8add41b1587ce480f91addbbe0b2bbf78a1f94dcd4a46241985c15193e142d7cdfd5320f57c93827cc48e4608d3083816eee48c5486802125fb8a7edea41d5c7359c16395bff850f3c3c22d8ebaaf1190ed7dc1e4a76daf7631ca347195edb3a79a129175ad8eab8c6d3f764388989b167a1ce83a589ed3220935d54546632ca9f2934823c747ba0f363c514a533c3bd663b3de408a255f46cb2eecac4ba674cfd7540aa2e2f58f8b3408179b879b137f6740ea33310e11581fbc0c55b3094265bcfa83a4ca1bb2350feffeb69ab9bec7079c4ffb7bd0a040538fe93bf7d5bcb49a5b38da6bfd53067798f97e49a48367e338dd8db3b8be0a805f8977ebb7413b5be99122eee043c3673ce2c3f8742517ed5c026332f16e820dd1edb21f1c71ad52385c5abf9adabf7cace032fcee70bab43464b2c8aff605a08495a16e7308a6dbd86cb2788e73d364401906cc2e9dda7c420622b962bfb1d01c6e8c50770e7b2f37d67fe330efea911911828d95064ba4fbc1e440c23d8b58f9a118a2e07b8bc6b99c164373a643c691636c35abde9a2b295d3bd0dccc7b1e621934848e3ee36b4ba0d24b41fac736a281af783f8b2b054ee119b2ad09b801b39ceade992e1300377710e983f8d976780ecbb0bd32eae161be678b66586987d7e2cac7068be3a8dbf11d0d0265d50745769b74b599c682bff18892d806a14ed0f55c6186128667c207791583a25f560cd1004acbafe387b4659edb6ca5ad97a020c7753803bc31ce6ad0551f46d57d846bc646dab71fbaa9e62ea7574e9dc9f85c8b6e75b05b68b6f93258c6b633d7e0996ee6b8f6fb022f4ad5416923819698423e7c11e73bbe87579df0f172515fabca79b80fefa0746d0510c6075a75bbf2bcf2c55553039ec5f14e87d34ef209af028410eb075a60430e12a66499a1ce35701779821f286b9ebf1d2421d0803d3be0c3d3962f2c513d20483ffac82c916b14278d2bd7153d96b49e985e2966f77807158369afa83ff871dfafbca6021f4bcd553eed67258e398575af35659ea5d92245f6f2ecffa7772c7b325c4920f3f3e1b231f985712a8d62d48e12634aa9666c8cf774f589d75205388726ebb20b526284099d315cde1b692fba9da1a58d8666cb71240f1b5871c9d6a1055f9a6556b0539c039f416ae384522c0a5dc636c376963fe1dd93844644aceb16c136836168851627e452d4934239b5852c8abe796c4aa29129d487c0fa9a9f6f8370233d6de99639ad41e8c0c7b4bba0c6c712ac35a9e146101737f388b9ee7dd8ef769f4060f72981d322dd0586912a480df1d74c4c36176c9b7a61c1787fe3d3b09c9bc8313ae2114e5427ad03892fd56945a2fd91bc83677c110f8b0550c5e982509890ba05fee57651cc1eb54355f07ca382b7f2f11d77924eeb6556527ba073f0bf0db6d435d6483b484967cd3d238fd3759359e1cd148ab00b97158197da64fe36414b26259805c15e62eebc7000522a1a2e13414c7812ce9c72e4861307298d70412dc20d17a7e7499ec6d916da66dfdbf2351935da12016c7c173a22abac973c1fd81c427845659bcf5a308d6617435471a340c60b7c073a322d965b32c43adf40d172b65d5ba2f2914fa9d644f0f48f03a4c44d4967ebdeff7f1c0a4e80cf7f27942f91a178de3135d17094b1b0d0000e2729ee1483f27da246ffb4abeea64415c85e2d432b22c20fc269e245336c671570412a9295bb6938730ad395915c02a5c2f71f870632024e02d89fc7f321631cb1950d5955c96feeb529ed07cea2139a31851035d320fdf89988230bddbfe172e15cf35227755b9089528569b4fae7ad2075b8d25221749a3f73aafec1ecf55bd4a4d5cdc7fe333e12ab62822fadf76f5d00a861f65c44122219ebb1acf2bfb64810af0ccf1f13c4d1232237de5ac19e342eaea6f49f64410a399d7d5502f3b9075d11dc5f976ac446811c4f7179a5e88b407222e9877059ecbb3800b04a919ac20571d1b5dd6cd94254f970ba57b4e29fb8538eb44b70211b7979c07544360557860d3535cf12ee20f841cb35223885144f0e30f91734a757dc2c4f6a68028ec86987f1daec1d5caf31ed627870ca40aba9fe7c7b56832de423d1aab83d81ac87090736cf09cacc2c80b18f3e9271c403eb16d07c32cef68fdf71faf9a5fe5fc048e1aba044f266787d5bd398797822bdc36e41b65f226f29b937eebf67e88959a3ed24f351ac79fb055d3d5f6a8daf61c39a4c1f940cf88178abdf25a265fa506a883ab0d1b1aa649dca6fa25c00668a8df6f74817687b820e46a20b53ee1b7ff1433967002689c29214026b8b543eef3ce5179dae0a5980c6916e798b97c929c7b894e185fa54e00fb2518e209bbf6cdf1d19c90f7c33a2592f60508649ea0bd582658010c7976b4e151657a1641e21aa0e42aac18e6d1ebe5e590e8993ebd5ea5a7a482349624db30ee07a39a8e3f18eb6e394cd8d6d068576ee56f7747f04e8f356584a45f239ee62526a275525dc28aa8005004f9c4cc132626f4e90a8edf1ffaad2f9d505e6448b50913dbbb6aded9c1cce7254b4d05ac29f300f9ef863e855f40d2f87a57a0d4ec94ab20dab70693ae366f59fbf528acd506eb2873f346f1cf0058f72b2227e706a81393c977f70a06b6bbeda4b329799a81f83dee1b38dd02e6ca3a7f1de17680b9cf2f11e9138c3955adb9a55fd6d80e5ef50e728e3b4fabd15d0ec1cf4e348b11c60eaf4c9d239bee135981c7edbb16f544de6e3d01bdbdc38dcc44d56d4910dbb12247e18aa7c76f4f451c1c108bb7a194b6a7b6b33765dea1585d4fe2afdcfc2b4622f2c480d4401b88d361d75b3cf3b0bd47ae973507cb10196cfb20ff621360bea14276877a7a1d87b617bb3aee7a6a02cacbbd95dd04f17ee60948e8c7794a7d3a4f7fc22e8b217913ce21283e5b893cc841035df66f8ebdf03e6cdbd3b0ffa504aa25254c15a805d7bc94ba806f6dc6e94b4879009ed21c1cc400419fbe2d0869b1a5b4f9922c475f29194696a007f88fce0611c50b05e2542c89e6b322197a68cb521cf967d9f02d1ab05f61763857c4ab28e6dc6f70755955b5aaae0407d0048fc8df11a4112c96d8590c27e53725b4b6f420cea90a2e00cba393b63cb64a46161d70313e3a148564bad86ac51a93d946f6be3d3872b7e1463e50b27057d8a49a8505b040be46f069b8f89775b5a7d9bf6e4eceec9fc0d7d45dfd741ffd6cb414a069d297c2d354928e16046b78ff5f5e9a9ce07c8696fd6bf80ca06991abe5e56ba2bf891dd84fd1ee2d79af12883a99f42767b1c0b79defff102fe2f6187ce12d71974347648d5896dbc14327479653395b8bd1ba082876a3bae022e5bf23abd5f17950a2cce0e8d7276794a7379748d19f62292f7da6c371cf4faa7cc3636ea7c7dead3050305ad9b2dab31b0901a750b25ccc605347cdef9df40d96130fcb3fd61c4bc96b6b82028ab0992c7ac44b8197df699c3d4fbdbf60b53a79009dabc1fbd68a96aee129443d15af79a5667ef41f57fc79ba3266db3a923af42b7dedd32f13ebf11817b81f4cafa87eca67dfe931d60d4e7f163f9e430a5d8465f476e2093ce2462188c48f74f3b8fd6baab6d25e2d5f6407a9c2dc9ef2b68dbfe1ea05620c", 0x1000}, {&(0x7f0000000600)="b30ef7b0ae351f3862981cd18060e17a273181cb2aa4f6357bff19c867823a9419754a3b03e09f3dc71317343da75cb460ae57f9ee2202c8890cdab4d5a859701fe4b192344a25b08be141b2f56bce89d528d19fa0b111e286160b002b83a3434bc7ecb02ad9e7450466cc9d366c6a208f9c36ac62da591fb327cc9dc705d13810db876f0d61d37f5e58443f75ef68e62f6cc3a148dda1952c6a007b2a0cb1fc676904", 0xa3}, {&(0x7f00000006c0)="3308cea3bd8606dc6cebdb6a10f8602e2ae270b99bed8731eca6d4e3c63db0ca92b9d7a5d3af9f84614b6ecc62cd50b67883592fbffbd5e83ae558704bc5294183381be997b1b2461046ed2c5746b0a9034481c726049d6874e96b639a47640d496706d7a8439a7fe7a3e9f15ea920050dc4d3e89ecc123fa7d2e4df2a1840e04cd0f4ea4de8b5074311687672bf5b014c5452687de9ccff7ab147efc55c646722612624a9bb305b3e56dc18f051fbc5f60a95f784003c12431d5bc4", 0xbc}, {&(0x7f0000000780)="b33a4b7b7b3e72b2ec3a40324bd71c9221f2632631d863e07ed1f8792578f8ef8921f072ec82576e810dfaaeb4966892f221f62b3349be9018bc48cf07942a35f01538defd0a62a4598a57c0d938", 0x4e}], 0x5, &(0x7f0000001f40)=ANY=[@ANYBLOB="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"], 0x328}, 0x40085) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a007d8e307108a2e99bd0231c94147790c5589b6055e1899c50ff3821cd2eaacf8e3e688989af0e15471e", @ANYRES32=r2, @ANYBLOB="04000900", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000000408010100008000000000000000b232530c3ea200188e425b3f205a001306000240180000000005000302060000"], 0x24}}, 0x0) listen(r3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) close(r8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="13000000080000000800"/20, @ANYRES32, @ANYBLOB="00000006000000000000000000000000000000008cdbef8e295912c2c8669ad0473679337ef6e6f832dbe0bf9deadec154aa75cb302eef99eded5d11af5f7fdbf9e95e50953589c3c2432054adc15c5cae32cf1092919dd01c7c9ac9df85a1f8956d24972a34722c36", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000001e00)=ANY=[@ANYBLOB="18000000000000ec7f3f7433005d0f8fd800000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r10, 0x0, 0x0}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r11}, 0x10) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r12}, 0x8) close(r13) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000c80)={0x0, 0xffffffffffffffff, 0x0, 0x5d, &(0x7f0000001ec0)='cgroup\x00e\x10\xfb\xc8\xbf\xfd \xaah3\x81\x98\xd4\xc1\x10tW\xb6\xbf\xf9\xc2o\xe0\xd7\x9d\x80\x8f)a\x9ef\xfc\xf5\xfc.\x1fU\xfd`\xc3\xc6\xfa\x1c<%e\xf5,\x19\xae\x93\x8b\xfd(\t\xe7\x11\x1b\x00\xa8\xc7\\i\xfc]j\x80\x85\xed\xf3\xa4\x8a3cgE\x0f\x14\xd2>\x1ew\xa4\xd8\xbbu'}, 0x30) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r10, 0x0, 0x0}, 0x10) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000340)=0xc6, 0x4) socket(0x1, 0x803, 0x0) 1.272857231s ago: executing program 4 (id=1714): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x310000, 0x1000, 0x4, 0x3}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0xe, r1, 0xb, r0}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1100800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48881}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00001f00000073013b00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001880)=ANY=[@ANYBLOB="0203fb021e0000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000400070c0000000005000500000000000a00000000000000000000000000000000000000000000010700e9ff000000000e00080008"], 0xf0}, 0x1, 0x7}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="32a8e0647879cdf73879dcd07f32f241e711910d7c82dbfdb2697e98b48176bf94bb2a4bb72b39230da491a6f96d72693ffa38a2462b2724b5db82aa1af588ff341eca19d1f951251b30dadfbdd0ee7f0d7014209e0379a887346c9049429e2674423361407692beff591f9d110fb234dec65aabb86a07633c7949376b5c1ee720af19ae5b8343c67be4b4a09e885a1ba35cc595531ff86ec7ca247b14eae4a434f101adb8a193fad56f810e54f9c72c", @ANYRES16=r0, @ANYBLOB="0100000000000000000002000000200001801400040000000000000000000000000000000001060001000a000000"], 0x34}}, 0x0) 1.176092779s ago: executing program 1 (id=1715): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfe, 0x40}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000906030000000000000400000a000002"], 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0xac, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfef}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x274}]}, 0xac}}, 0x40801) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x880) 1.027934994s ago: executing program 3 (id=1716): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0xfdb7) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0) 975.044953ms ago: executing program 2 (id=1717): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "2265d77eca70ffeb", "2a7490afedc2507756cce4cf72480364", "27c800", "00000000000085bc"}, 0x28) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00d700"/14], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0xc000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x800}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000000)=0x908) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='team0\x00', 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00f4b200002700001c001280e0af4405ce09000100620800030000000000000000000042964f99fedb19908f7b772461409fc3e75591b9d5ea8c03bc3384c95e2f7b86b55edd71e1da6279f31419792a907acdf4c9a6e817dab79dc1d5692c3a3cf078f33340880984f1579cc5f23c89976cd830ed1f8aa6497f2986dde38dbbeff70f415430967f82a3d53e2c5be8bfe33b83e4e6e1693443ded5259b3d1ceb6fb728c3b83d9ce99e5b1dca2cd57e20fbfaa39a8ff44b138c238ee8cb5d95126d9504d14c03b95eac43d4"], 0x3c}, 0x1, 0x0, 0x0, 0x8005}, 0x8044) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRESDEC=0x0], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 859.72238ms ago: executing program 1 (id=1718): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000040)={0x14, r1, 0x53f63307afa5bb95, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x880) 792.704141ms ago: executing program 1 (id=1719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 776.384826ms ago: executing program 3 (id=1720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'geneve0\x00', @multicast}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\a\x00', "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", '\x00', "2a1e833e7af32011"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "29a78ab9b0a4e8ae"}, 0x38) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r3, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) poll(&(0x7f0000000340)=[{r3}], 0x1, 0x4) 491.854027ms ago: executing program 4 (id=1721): r0 = socket$kcm(0xa, 0x3, 0x3a) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) ioctl$TUNSETLINK(r1, 0x400454cc, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10b402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) (async, rerun: 64) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) (async) r6 = accept4(r0, &(0x7f0000000540)=@can, &(0x7f00000005c0)=0x80, 0x1800) bind$alg(r6, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000640)="09520f00", 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="61a000fe00000000691a72000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1c12bb52ea6c767a}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x3ff, @private2, 0x7}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800053959ac75b717698c000000000000000000009861108600000000009500"/45], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) sendmsg$NL80211_CMD_PROBE_CLIENT(r8, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x44, r9, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xdd48, 0x9}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c004) 393.193873ms ago: executing program 1 (id=1722): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d8, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3ff, 0x1f}}}}, [@NL80211_ATTR_TX_RATES={0x1b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x30, 0xb, 0x1b, 0x12, 0x3a, 0x60, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0xc, 0x0, 0x9, 0x0, 0x81, 0x4, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8000, 0x2, 0x2714, 0x777, 0x3, 0x7, 0xc1e7]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff7, 0x5, 0x3, 0x8, 0xd4d, 0x7, 0x5, 0x7ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfffd, 0x8, 0x3, 0xd, 0x8000, 0x5, 0x4443]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8c0, 0xfffd, 0x1, 0xffbb, 0x41, 0x51, 0x3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x5}, {0x0, 0xa}, {0x3, 0x4}, {0x4, 0x8}, {0x7, 0x3}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x7}, {0x5, 0x2}, {}, {}, {0x7, 0x4}, {0x0, 0x2}, {0x6, 0x7}, {0x5, 0x7}, {0x2, 0x2}, {0x4, 0x2}, {0x5, 0xa}, {0x1, 0x8}, {0x7, 0x1}, {0x2, 0x2}, {0x1}, {0x1, 0x6}, {0x5, 0x7}, {0x6, 0x7}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0x7}, {0x5, 0x3}, {0x3, 0x9}, {0x5, 0xa}, {0x4, 0x7}, {0x0, 0xa}, {0x5, 0x8}, {0x6}, {0x2, 0x4}, {0x4, 0xa}, {0x4}, {0x1, 0x3}, {0x4, 0x4}, {0x1, 0x2}, {0x2, 0x5}, {0x1, 0x4}, {0x1, 0xa}, {0x1}, {0x1, 0x5}, {0x0, 0x4}, {0x1, 0x9}, {0x7, 0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x3}, {0x7, 0xa}, {0x2}, {0x1}, {0x1, 0x2}, {0x4, 0x5}, {0x0, 0x1}, {0x0, 0x3}, {0x2, 0x5}, {0x0, 0x4}, {0x2, 0xa}, {0x5, 0x3}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0x7}, {}, {0x4, 0x2}, {0x0, 0x8}, {0x2, 0x1}, {0x1, 0xa}, {0x7, 0xa}, {0x2, 0x7}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x48, 0xc, 0x1b]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x6}, {0x2, 0x2}, {0x3, 0x7}, {0x0, 0x2}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x9}, {0x3, 0x8}, {0x6}, {0x1, 0x6}, {0x6, 0x5}, {0x0, 0x5}, {0x2, 0xa}, {0x2, 0x5}, {0x1, 0x1}, {0x0, 0x7}, {0x3, 0x5}, {0x5, 0x6}, {0x3, 0x1}, {0x0, 0x4}, {0x6, 0x4}, {0x6, 0x8}, {0x2, 0x7}, {0x0, 0x6}, {0x4, 0x9}, {0x0, 0x3}, {0x4, 0x3}, {0x2, 0x8}, {0x0, 0x3}, {0x6, 0x3}, {0x0, 0x1}, {0x3, 0x9}, {0x6}, {0x1, 0x8}, {0x4, 0x5}, {0x2, 0x8}, {0x7}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x1, 0xff, 0x1, 0xfbbe, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x9, 0x17de, 0x0, 0x81, 0xc6f6, 0xffff]}}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x90}, 0x2004c800) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x9, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) 303.090045ms ago: executing program 2 (id=1723): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x17, 0x0, 0x9, 0x3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095000000000000000740c09f0e6e034f9a68263ceac6b4a05087718c84d5c1fab363d66808"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x8b, &(0x7f0000000100)=""/139}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f0000000540)=""/269, 0x10d}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/224, 0xe0}], 0x4}, 0x80000000}], 0x4, 0x20, 0x0) read(r0, &(0x7f0000000240)=""/81, 0x51) 167.906239ms ago: executing program 2 (id=1724): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x32, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbff, {}, [@IFLA_MTU={0x8, 0x4, 0x42}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x59}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) 91.695148ms ago: executing program 2 (id=1725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r1, 0xfe, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002440)={0xffffffffffffffff}) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='netdevsim0\x00') recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000007c0)=""/237, 0xed}, {&(0x7f0000005080)=""/4093, 0xffd}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x20, 0x0) 82.647707ms ago: executing program 1 (id=1726): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680)="93378efcd17301726272853a9fa88608996042ab60ae09f9a90efedde424f36d", 0x20) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c0001"], 0x92fc}}, 0x0) recvmmsg$unix(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/146, 0x92}], 0x1}}], 0x1, 0x40002023, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x37}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x39) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @void, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @multicast2}, {{0x0, 0x0, 0x41424344, r6, 0x0, 0x5, 0x5, 0x0, 0x700, 0x0, 0x12}}}}}, 0x2c) 0s ago: executing program 4 (id=1727): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x3f427542cdfac62) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x3f427542cdfac62) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x2000000000000108, &(0x7f0000000740)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x20000004}, @exit, @func], &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x1b) kernel console output (not intermixed with test programs): 941] veth0: left promiscuous mode [ 187.825489][ T7954] Cannot find add_set index 1 as target [ 188.120377][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 188.881288][ T7988] netlink: 60 bytes leftover after parsing attributes in process `syz.0.588'. [ 188.979817][ T8001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.593'. [ 189.502410][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 189.567282][ T8020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.596'. [ 189.729235][ T8029] netlink: 'syz.3.599': attribute type 8 has an invalid length. [ 189.757823][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 189.787706][ T8029] bridge0: entered allmulticast mode [ 189.994222][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.603'. [ 190.040863][ T8039] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 190.344968][ T8042] vlan2: entered allmulticast mode [ 190.364338][ T8042] veth1: entered allmulticast mode [ 190.408835][ T8042] bridge2: port 1(vlan2) entered blocking state [ 190.415331][ T8042] bridge2: port 1(vlan2) entered disabled state [ 190.444892][ T8042] vlan2: entered promiscuous mode [ 190.466984][ T8042] veth1: entered promiscuous mode [ 190.584311][ T8057] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.606'. [ 191.931588][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.617'. [ 191.968519][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.617'. [ 192.602354][ T8128] netlink: 'syz.2.622': attribute type 10 has an invalid length. [ 192.835363][ T8141] nbd: must specify at least one socket [ 193.317864][ T8154] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 193.358646][ T8154] __nla_validate_parse: 1 callbacks suppressed [ 193.358671][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'. [ 193.544570][ T8167] netlink: 36 bytes leftover after parsing attributes in process `syz.3.630'. [ 193.554924][ T8156] team0: No ports can be present during mode change [ 193.596244][ T8169] netlink: 28 bytes leftover after parsing attributes in process `syz.1.632'. [ 193.623617][ T8156] bond0: (slave bridge0): Releasing backup interface [ 193.674611][ T8156] bond0: (slave team0): Releasing backup interface [ 193.725801][ T8156] bridge_slave_0: left allmulticast mode [ 193.737339][ T8156] bridge_slave_0: left promiscuous mode [ 193.746767][ T8156] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.774317][ T8156] bridge_slave_1: left allmulticast mode [ 193.781095][ T8156] bridge_slave_1: left promiscuous mode [ 193.801412][ T8156] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.854970][ T8156] bond0: (slave bond_slave_0): Releasing backup interface [ 193.886144][ T8156] bond0: (slave bond_slave_1): Releasing backup interface [ 193.914833][ T8156] team0: Port device team_slave_0 removed [ 193.942275][ T8156] team0: Port device team_slave_1 removed [ 193.957929][ T8156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.972330][ T8156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.991939][ T8156] bond0: (slave wlan1): Releasing backup interface [ 194.600738][ T8195] !: renamed from dummy0 [ 194.616167][ T8192] netlink: 14 bytes leftover after parsing attributes in process `syz.0.640'. [ 194.805199][ T8192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.828628][ T8192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.840379][ T8192] bond0 (unregistering): Released all slaves [ 195.155460][ T8217] netlink: 56 bytes leftover after parsing attributes in process `syz.1.650'. [ 195.187490][ T8216] netlink: 44 bytes leftover after parsing attributes in process `syz.3.648'. [ 195.235749][ T8216] netlink: 43 bytes leftover after parsing attributes in process `syz.3.648'. [ 195.291557][ T8216] netlink: 'syz.3.648': attribute type 6 has an invalid length. [ 195.327202][ T8216] netlink: 'syz.3.648': attribute type 5 has an invalid length. [ 195.358228][ T8216] netlink: 43 bytes leftover after parsing attributes in process `syz.3.648'. [ 195.600706][ T8231] netlink: 'syz.1.656': attribute type 1 has an invalid length. [ 195.702891][ T8231] bond2: entered promiscuous mode [ 195.710145][ T8231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.829827][ T8237] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.873217][ T8237] bond2: (slave bond3): making interface the new active one [ 195.903067][ T8237] bond3: entered promiscuous mode [ 195.944561][ T8237] bond2: (slave bond3): Enslaving as an active interface with an up link [ 195.985684][ T8241] netlink: 'syz.2.660': attribute type 3 has an invalid length. [ 196.398430][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 196.480364][ T8251] netlink: 'syz.2.662': attribute type 2 has an invalid length. [ 196.527124][ T8251] netlink: 140 bytes leftover after parsing attributes in process `syz.2.662'. [ 196.566054][ T8253] netlink: 76 bytes leftover after parsing attributes in process `syz.1.661'. [ 197.149567][ T8268] netlink: 'syz.2.667': attribute type 14 has an invalid length. [ 197.240834][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.259143][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.289627][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.308438][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.318392][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.625259][ T8279] xt_CT: No such helper "snmp" [ 198.358026][ T8305] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 198.622201][ T8320] __nla_validate_parse: 4 callbacks suppressed [ 198.622227][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'. [ 198.683549][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.679'. [ 199.116270][ T8333] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 199.367200][ T51] Bluetooth: hci3: command tx timeout [ 200.403831][ T8274] chnl_net:caif_netlink_parms(): no params data found [ 200.817953][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.692'. [ 200.940090][ T8366] chnl_net:caif_netlink_parms(): no params data found [ 200.997759][ T8274] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.005195][ T8274] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.027664][ T8274] bridge_slave_0: entered allmulticast mode [ 201.039508][ T8274] bridge_slave_0: entered promiscuous mode [ 201.059481][ T8274] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.077372][ T8274] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.084786][ T8274] bridge_slave_1: entered allmulticast mode [ 201.094317][ T8274] bridge_slave_1: entered promiscuous mode [ 201.300215][ T8274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.335429][ T8274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.442143][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.442579][ T51] Bluetooth: hci3: command tx timeout [ 201.714074][ T8396] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 201.953321][ T8274] team0: Port device team_slave_0 added [ 202.017743][ T8274] team0: Port device team_slave_1 added [ 202.333010][ T8274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.377182][ T8274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.467910][ T8274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.524567][ T8274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.549158][ T8274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.602322][ T8274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.684015][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.703'. [ 202.760340][ T8274] hsr_slave_0: entered promiscuous mode [ 202.770428][ T8274] hsr_slave_1: entered promiscuous mode [ 202.782878][ T8274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.793643][ T8274] Cannot create hsr debugfs directory [ 203.002449][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.705'. [ 203.363079][ T8435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.477152][ T8274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.488731][ T8274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.518100][ T51] Bluetooth: hci3: command tx timeout [ 203.632344][ T8274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.657183][ T8274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.698041][ T8441] netlink: 15 bytes leftover after parsing attributes in process `syz.4.710'. [ 203.897374][ T8446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 203.913161][ T8443] Cannot find add_set index 0 as target [ 203.948177][ T8274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.966159][ T8274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.014044][ T8448] netlink: 'syz.2.712': attribute type 1 has an invalid length. [ 204.122075][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 204.193068][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 204.204364][ T8448] bond6: entered promiscuous mode [ 204.235133][ T8448] 8021q: adding VLAN 0 to HW filter on device bond6 [ 204.293937][ T8274] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.310373][ T8274] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.576543][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.715'. [ 204.587541][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.715'. [ 204.889005][ T8274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.944860][ T8473] netlink: 'syz.2.717': attribute type 39 has an invalid length. [ 204.966175][ T8274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.021811][ T8274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.221466][ T8274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.597501][ T51] Bluetooth: hci3: command tx timeout [ 205.644768][ T8274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.684113][ T8274] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.745827][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.753129][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.844145][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.851445][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.067564][ T8274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.143426][ T8504] delete_channel: no stack [ 206.509570][ T8516] netlink: 44 bytes leftover after parsing attributes in process `syz.1.733'. [ 206.943974][ T8274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.132476][ T8274] veth0_vlan: entered promiscuous mode [ 207.185617][ T8274] veth1_vlan: entered promiscuous mode [ 207.379188][ T8274] veth0_macvtap: entered promiscuous mode [ 207.415733][ T8274] veth1_macvtap: entered promiscuous mode [ 207.506366][ T8274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.581203][ T8274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.602348][ T8274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.632833][ T8274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.674793][ T8274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.704625][ T8553] netlink: 191164 bytes leftover after parsing attributes in process `syz.2.744'. [ 207.718917][ T8274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.734290][ T8553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.744'. [ 207.756952][ T8558] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 207.817469][ T8558] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 207.899595][ T8558] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 207.957852][ T8558] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 208.030820][ T8558] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 208.069791][ T8558] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 208.172156][ T8558] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 208.203647][ T8558] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 208.230483][ T8558] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 208.284491][ T8558] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 208.464919][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.505459][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.683465][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.690854][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.695135][ T8582] netlink: 'syz.3.753': attribute type 7 has an invalid length. [ 208.710316][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.719803][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.741031][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.755120][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.758692][ T8586] netlink: 32 bytes leftover after parsing attributes in process `syz.1.754'. [ 208.808854][ T8579] team0: Port device batadv0 removed [ 208.840989][ T8582] : entered promiscuous mode [ 209.680513][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.819383][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.003007][ T8613] netlink: 24 bytes leftover after parsing attributes in process `syz.4.765'. [ 210.023663][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.039568][ T8618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.762'. [ 210.270375][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.423900][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 210.839515][ T8636] bond1: entered promiscuous mode [ 210.872805][ T8636] bond1: entered allmulticast mode [ 210.917922][ T8636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.935551][ T8650] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.773'. [ 210.969474][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.988324][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.996782][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 211.020377][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 211.039639][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 211.570908][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.777'. [ 211.688215][ T56] bridge_slave_1: left allmulticast mode [ 211.709515][ T56] bridge_slave_1: left promiscuous mode [ 211.731939][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.868606][ T56] bridge_slave_0: left allmulticast mode [ 211.890366][ T56] bridge_slave_0: left promiscuous mode [ 211.917659][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.166063][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 212.366535][ T8697] netlink: 'syz.2.783': attribute type 1 has an invalid length. [ 212.377606][ T8697] netlink: 224 bytes leftover after parsing attributes in process `syz.2.783'. [ 213.072355][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.086414][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.100800][ T56] bond0 (unregistering): Released all slaves [ 213.127393][ T5845] Bluetooth: hci3: command tx timeout [ 213.186595][ T8689] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 213.239270][ T8689] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 213.253030][ T8689] gretap1: entered promiscuous mode [ 213.259012][ T8689] gretap1: entered allmulticast mode [ 213.697353][ T44] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 213.818800][ T44] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 214.021311][ T8729] netlink: 56 bytes leftover after parsing attributes in process `syz.2.790'. [ 214.156551][ T8731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.789'. [ 214.404285][ T8744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.792'. [ 214.769978][ T8752] ipt_ECN: cannot use operation on non-tcp rule [ 215.198818][ T5845] Bluetooth: hci3: command tx timeout [ 215.654668][ T8785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.800'. [ 215.778230][ T8792] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 215.786000][ T8792] netlink: 144 bytes leftover after parsing attributes in process `syz.3.800'. [ 215.868039][ T8792] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 215.914194][ T8792] netlink: 'syz.3.800': attribute type 2 has an invalid length. [ 215.978003][ T8792] netlink: 64 bytes leftover after parsing attributes in process `syz.3.800'. [ 216.133718][ T8785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.800'. [ 216.775063][ T56] hsr_slave_0: left promiscuous mode [ 216.794740][ T56] hsr_slave_1: left promiscuous mode [ 216.827947][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.835538][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.838048][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 216.898982][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.917945][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 216.927614][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.942834][ T8811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.804'. [ 217.054772][ T56] veth1_macvtap: left promiscuous mode [ 217.073787][ T56] veth0_macvtap: left promiscuous mode [ 217.090344][ T56] veth1_vlan: left promiscuous mode [ 217.102008][ T56] veth0_vlan: left promiscuous mode [ 217.288249][ T5845] Bluetooth: hci3: command tx timeout [ 217.912241][ T56] team0 (unregistering): Port device team_slave_1 removed [ 217.957179][ T56] team0 (unregistering): Port device team_slave_0 removed [ 218.742489][ T8648] chnl_net:caif_netlink_parms(): no params data found [ 218.762435][ T8823] x_tables: duplicate underflow at hook 1 [ 219.116034][ T8841] netlink: 'syz.2.810': attribute type 10 has an invalid length. [ 219.132622][ T8841] __nla_validate_parse: 1 callbacks suppressed [ 219.132646][ T8841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.810'. [ 219.272883][ T8841] geneve0: entered promiscuous mode [ 219.297588][ T8841] geneve0: entered allmulticast mode [ 219.338453][ T8841] team0: Port device geneve0 added [ 219.357557][ T5845] Bluetooth: hci3: command tx timeout [ 219.592074][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'. [ 219.606592][ T8648] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.651398][ T8648] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.674769][ T8648] bridge_slave_0: entered allmulticast mode [ 219.719037][ T8648] bridge_slave_0: entered promiscuous mode [ 219.771437][ T8648] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.788083][ T8648] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.795650][ T8648] bridge_slave_1: entered allmulticast mode [ 219.814854][ T8648] bridge_slave_1: entered promiscuous mode [ 219.920030][ T8648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.000900][ T8648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.051079][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 220.079020][ T8871] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 220.270314][ T8648] team0: Port device team_slave_0 added [ 220.332633][ T8648] team0: Port device team_slave_1 added [ 220.500011][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.533167][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.563717][ T8648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.584928][ T8648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.592531][ T8648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.629915][ T8648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.789218][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 220.823502][ T8891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.823'. [ 220.838347][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057cd1c00: rx timeout, send abort [ 220.893999][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b331800: rx timeout, send abort [ 221.134356][ T8648] hsr_slave_0: entered promiscuous mode [ 221.145128][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 221.159094][ T8648] hsr_slave_1: entered promiscuous mode [ 221.166526][ T8648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.168710][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 221.185206][ T8648] Cannot create hsr debugfs directory [ 221.192023][ T8903] netlink: 'syz.3.826': attribute type 13 has an invalid length. [ 221.208267][ T8907] No such timeout policy "syz0" [ 221.348318][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057cd1c00: abort rx timeout. Force session deactivation [ 221.402351][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b331800: abort rx timeout. Force session deactivation [ 221.622795][ T8914] net_ratelimit: 23 callbacks suppressed [ 221.622835][ T8914] openvswitch: netlink: Key type 15376 is out of range max 32 [ 221.624194][ T8913] openvswitch: netlink: Key type 15376 is out of range max 32 [ 221.767740][ T8929] netlink: 96 bytes leftover after parsing attributes in process `syz.3.831'. [ 221.813566][ T8929] 8021q: VLANs not supported on gre0 [ 221.960241][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.832'. [ 222.594055][ T8961] xt_HMARK: proto mask must be zero with L3 mode [ 222.858910][ T8968] netlink: 72 bytes leftover after parsing attributes in process `syz.4.840'. [ 223.735181][ T8648] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 223.821142][ T8648] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 223.920415][ T8648] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.989132][ T8648] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 224.001555][ T5157] Bluetooth: hci1: command 0x0406 tx timeout [ 224.011890][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 224.371954][ T8648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.419135][ T9038] __nla_validate_parse: 7 callbacks suppressed [ 224.419159][ T9038] netlink: 192 bytes leftover after parsing attributes in process `syz.4.855'. [ 224.603630][ T9041] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.611384][ T9041] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.722853][ T9041] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 224.784958][ T9051] tap0: tun_chr_ioctl cmd 1074025677 [ 224.815948][ T9051] tap0: linktype set to 65534 [ 224.904920][ T8648] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.989987][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.997288][ T8976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.063217][ T9062] netlink: 'syz.4.863': attribute type 33 has an invalid length. [ 225.071028][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.071240][ T8976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.139388][ T9062] netlink: 152 bytes leftover after parsing attributes in process `syz.4.863'. [ 225.275031][ T9075] tc_dump_action: action bad kind [ 225.286452][ T9074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.864'. [ 226.137180][ T8648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.257985][ T9115] netlink: 300 bytes leftover after parsing attributes in process `syz.1.873'. [ 226.360178][ T9127] netlink: 'syz.3.875': attribute type 10 has an invalid length. [ 226.377911][ T9127] netlink: 40 bytes leftover after parsing attributes in process `syz.3.875'. [ 226.508234][ T9127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.523468][ T9127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.532762][ T9127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.564635][ T9127] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 226.584012][ T9127] team0: Failed to send options change via netlink (err -105) [ 226.594857][ T9127] team0: Port device geneve0 added [ 226.625815][ T8648] veth0_vlan: entered promiscuous mode [ 226.683213][ T9120] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.882005][ T9120] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.003661][ T8648] veth1_vlan: entered promiscuous mode [ 227.111233][ T9120] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.333388][ T9159] vlan3: entered allmulticast mode [ 227.353668][ T9159] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 227.399365][ T9165] xt_ipcomp: unknown flags B [ 227.423231][ T8648] veth0_macvtap: entered promiscuous mode [ 227.466019][ T8648] veth1_macvtap: entered promiscuous mode [ 227.551855][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.652571][ T9120] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.718457][ T9174] netlink: 24 bytes leftover after parsing attributes in process `syz.2.887'. [ 227.722180][ T8648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.762766][ T9120] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.805867][ T9120] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.858368][ T9177] netlink: 164 bytes leftover after parsing attributes in process `syz.1.888'. [ 227.872619][ T9177] netlink: 164 bytes leftover after parsing attributes in process `syz.1.888'. [ 227.902213][ T9177] netlink: 60 bytes leftover after parsing attributes in process `syz.1.888'. [ 227.928270][ T9178] tc_dump_action: action bad kind [ 227.950449][ T9179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.888'. [ 227.985816][ T8648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.011607][ T8648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.024487][ T8648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.037632][ T8648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.118718][ T9120] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.592187][ T8973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.625909][ T8973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.729021][ T8975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.747375][ T8975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.534663][ T9230] __nla_validate_parse: 7 callbacks suppressed [ 229.534914][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.899'. [ 230.926503][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.269848][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.493310][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.583643][ T9271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.905'. [ 231.596569][ T9271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.905'. [ 231.659048][ T9273] tipc: Started in network mode [ 231.664235][ T9273] tipc: Node identity ac14140f, cluster identity 4711 [ 231.680092][ T9273] tipc: New replicast peer: 255.255.255.255 [ 231.713918][ T9273] tipc: Enabled bearer , priority 10 [ 231.743399][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.905'. [ 231.905339][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.993336][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.905'. [ 232.187460][ T9294] netlink: 'syz.3.910': attribute type 10 has an invalid length. [ 232.262544][ T9294] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.292949][ T9294] bond0: (slave team0): Enslaving as an active interface with an up link [ 232.536025][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.554736][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.568411][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.609665][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.619921][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.707292][ T44] tipc: Node number set to 2886997007 [ 233.150669][ T56] bridge_slave_1: left allmulticast mode [ 233.156440][ T56] bridge_slave_1: left promiscuous mode [ 233.175972][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.222600][ T56] bridge_slave_0: left allmulticast mode [ 233.230459][ T56] bridge_slave_0: left promiscuous mode [ 233.238722][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.117831][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.140848][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.153191][ T56] bond0 (unregistering): Released all slaves [ 234.509255][ T9369] netlink: 'syz.1.921': attribute type 11 has an invalid length. [ 234.557849][ T9369] netlink: 224 bytes leftover after parsing attributes in process `syz.1.921'. [ 234.718343][ T5854] Bluetooth: hci3: command tx timeout [ 234.877697][ T9370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.922'. [ 234.891371][ T9382] netlink: 'syz.4.924': attribute type 33 has an invalid length. [ 234.909031][ T9382] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.924'. [ 234.938592][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.922'. [ 234.940090][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.922'. [ 235.642558][ T9408] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.919761][ T8979] wlan0: Trigger new scan to find an IBSS to join [ 235.940113][ T9420] netlink: 'syz.3.931': attribute type 39 has an invalid length. [ 236.352391][ T9425] syzkaller1: entered promiscuous mode [ 236.366000][ T9425] syzkaller1: entered allmulticast mode [ 236.798128][ T5854] Bluetooth: hci3: command tx timeout [ 236.886566][ T9452] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 237.069590][ T5207] udevd[5207]: worker [6166] terminated by signal 33 (Unknown signal 33) [ 237.161538][ T5207] udevd[5207]: worker [6166] failed while handling '/devices/virtual/block/loop4' [ 237.296743][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.941'. [ 237.493490][ T9468] netlink: 'syz.3.941': attribute type 1 has an invalid length. [ 237.537755][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 237.731638][ T9468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.941'. [ 238.074883][ T9310] chnl_net:caif_netlink_parms(): no params data found [ 238.187437][ T9492] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 238.274565][ T9503] netlink: 56 bytes leftover after parsing attributes in process `syz.3.950'. [ 238.311863][ T56] hsr_slave_0: left promiscuous mode [ 238.327595][ T56] hsr_slave_1: left promiscuous mode [ 238.334697][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.346915][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.356288][ T9494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.946'. [ 238.375052][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.387216][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.483568][ T56] veth1_macvtap: left promiscuous mode [ 238.490740][ T56] veth0_macvtap: left promiscuous mode [ 238.496650][ T56] veth1_vlan: left promiscuous mode [ 238.502408][ T56] veth0_vlan: left promiscuous mode [ 238.878316][ T5854] Bluetooth: hci3: command tx timeout [ 239.177159][ T56] team0 (unregistering): Port device team_slave_1 removed [ 239.220827][ T56] team0 (unregistering): Port device team_slave_0 removed [ 240.099886][ T9535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.956'. [ 240.501916][ T9554] IPv6: NLM_F_CREATE should be specified when creating new route [ 240.580847][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'. [ 240.716275][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.743535][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.764924][ T9310] bridge_slave_0: entered allmulticast mode [ 240.792721][ T9310] bridge_slave_0: entered promiscuous mode [ 240.860399][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.888536][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.912251][ T9310] bridge_slave_1: entered allmulticast mode [ 240.947449][ T9310] bridge_slave_1: entered promiscuous mode [ 240.957885][ T8974] wlan0: Trigger new scan to find an IBSS to join [ 240.959194][ T5854] Bluetooth: hci3: command tx timeout [ 240.986626][ T9567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.963'. [ 241.325935][ T9575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.339199][ T9310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.385528][ T9586] nbd: socks must be embedded in a SOCK_ITEM attr [ 241.411416][ T9310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.505425][ T9575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.573965][ T9578] ip6gre1: entered allmulticast mode [ 241.753831][ T9310] team0: Port device team_slave_0 added [ 241.784508][ T9310] team0: Port device team_slave_1 added [ 241.910820][ T8974] wlan0: Creating new IBSS network, BSSID 96:df:f1:a5:b7:25 [ 241.944955][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.960420][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.000587][ T9310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.016218][ T9310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.025411][ T9310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.055100][ T9310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.306330][ T9310] hsr_slave_0: entered promiscuous mode [ 242.330740][ T9310] hsr_slave_1: entered promiscuous mode [ 242.354170][ T9310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.378171][ T9310] Cannot create hsr debugfs directory [ 242.594695][ T9620] netlink: 44 bytes leftover after parsing attributes in process `syz.4.974'. [ 242.934928][ T9640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.976'. [ 242.988171][ T9643] IPVS: length: 8 != 1152 [ 243.003934][ T9639] netdevsim netdevsim2: Direct firmware load for /. failed with error -2 [ 243.024435][ T9639] netdevsim netdevsim2: Falling back to sysfs fallback for: /. [ 243.032850][ T9645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.978'. [ 243.379245][ T9655] wlan1: mtu less than device minimum [ 243.506126][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 243.798358][ T9664] IPVS: Scheduler module ip_vs_sip not found [ 243.976499][ T9683] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 244.251058][ T9310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 244.310443][ T9310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 244.424620][ T9310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 244.474275][ T9310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 244.521262][ T9710] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 245.045552][ T9310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.152498][ T9310] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.179757][ T9736] syzkaller1: entered promiscuous mode [ 245.186362][ T9736] syzkaller1: entered allmulticast mode [ 245.360025][ T8974] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.368840][ T8974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.470917][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.478236][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.633385][ T9310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.660106][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1002'. [ 245.693319][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 245.992526][ T9785] openvswitch: netlink: IPv6 tunnel dst address is zero [ 246.274903][ T9794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.359404][ T9802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1010'. [ 246.610945][ T9310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.706721][ T9814] siw: device registration error -23 [ 246.823551][ T9822] netlink: 'syz.2.1015': attribute type 10 has an invalid length. [ 246.899156][ T9820] netlink: 'syz.2.1015': attribute type 23 has an invalid length. [ 246.949484][ T9310] veth0_vlan: entered promiscuous mode [ 247.047996][ T9310] veth1_vlan: entered promiscuous mode [ 247.167469][ T9839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1018'. [ 247.253032][ T9310] veth0_macvtap: entered promiscuous mode [ 247.331634][ T9310] veth1_macvtap: entered promiscuous mode [ 247.368232][ T9842] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1020'. [ 247.504117][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.641575][ T9310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.670076][ T9310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.680248][ T9310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.698572][ T9310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.708003][ T9310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.846530][ T8974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.865777][ T8974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.910802][ T8979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.920757][ T8979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.363368][ T44] IPVS: starting estimator thread 0... [ 248.480310][ T9874] IPVS: using max 28 ests per chain, 67200 per kthread [ 248.605672][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 248.683831][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 248.719350][ T8978] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.004365][ T8978] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.169225][ T8978] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.258921][ T8978] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.535037][ T8978] bridge_slave_1: left allmulticast mode [ 249.542383][ T8978] bridge_slave_1: left promiscuous mode [ 249.550014][ T8978] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.564969][ T8978] bridge_slave_0: left allmulticast mode [ 249.571436][ T8978] bridge_slave_0: left promiscuous mode [ 249.578191][ T8978] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.792611][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1034'. [ 249.817804][ T9917] netlink: 'syz.3.1034': attribute type 1 has an invalid length. [ 249.849249][ T9917] netlink: 'syz.3.1034': attribute type 1 has an invalid length. [ 249.889665][ T9917] netlink: 'syz.3.1034': attribute type 2 has an invalid length. [ 249.908458][ T9917] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1034'. [ 250.543080][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.565435][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.582222][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.598302][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.626921][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.694179][ T8978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.715948][ T8978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.739911][ T8978] bond0 (unregistering): Released all slaves [ 251.562578][ T9960] syzkaller1: entered promiscuous mode [ 251.574303][ T9960] syzkaller1: entered allmulticast mode [ 251.739294][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1042'. [ 252.212571][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 252.421946][T10008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1047'. [ 252.528158][T10010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1048'. [ 252.578080][T10010] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1048'. [ 252.724914][ T5845] Bluetooth: hci3: command tx timeout [ 253.070306][T10032] x_tables: duplicate underflow at hook 2 [ 253.643840][T10038] syzkaller1: entered promiscuous mode [ 253.677649][T10038] syzkaller1: entered allmulticast mode [ 253.749707][ T8978] hsr_slave_0: left promiscuous mode [ 253.760984][ T8978] hsr_slave_1: left promiscuous mode [ 253.769561][ T8978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.788222][ T8978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.802721][ T8978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.814127][ T8978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.847693][ T8978] veth1_macvtap: left promiscuous mode [ 253.854792][ T8978] veth0_macvtap: left promiscuous mode [ 253.860892][ T8978] veth1_vlan: left promiscuous mode [ 253.866377][ T8978] veth0_vlan: left promiscuous mode [ 253.888963][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1060'. [ 254.245450][T10062] netlink: 'syz.1.1064': attribute type 13 has an invalid length. [ 254.255895][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 254.505178][ T8978] team0 (unregistering): Port device team_slave_1 removed [ 254.564919][ T8978] team0 (unregistering): Port device team_slave_0 removed [ 254.797288][ T5845] Bluetooth: hci3: command tx timeout [ 255.193565][T10068] netlink: 'syz.3.1065': attribute type 1 has an invalid length. [ 255.256197][T10068] bond1: entered promiscuous mode [ 255.262979][T10068] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.315135][ T9938] chnl_net:caif_netlink_parms(): no params data found [ 255.430864][T10070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.446156][T10070] bond1: (slave bond2): making interface the new active one [ 255.447280][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'. [ 255.471180][T10070] bond2: entered promiscuous mode [ 255.476966][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 255.478814][T10070] bond1: (slave bond2): Enslaving as an active interface with an up link [ 255.548413][T10079] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 255.586505][T10079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.762460][T10096] netlink: 'syz.2.1072': attribute type 33 has an invalid length. [ 255.829298][T10096] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1072'. [ 255.880175][ T9938] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.912191][ T9938] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.935278][ T9938] bridge_slave_0: entered allmulticast mode [ 255.974472][ T9938] bridge_slave_0: entered promiscuous mode [ 256.018408][ T9938] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.051922][ T9938] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.061197][ T9938] bridge_slave_1: entered allmulticast mode [ 256.100050][ T9938] bridge_slave_1: entered promiscuous mode [ 256.294732][T10116] netlink: ct family unspecified [ 256.314050][T10116] openvswitch: netlink: Actions may not be safe on all matching packets [ 256.336605][ T9938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.359192][T10116] xt_policy: output policy not valid in PREROUTING and INPUT [ 256.365788][T10119] openvswitch: netlink: Multiple metadata blocks provided [ 256.404391][ T9938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.639766][T10139] tipc: Enabling of bearer rejected, media not registered [ 256.692962][ T9938] team0: Port device team_slave_0 added [ 256.746206][ T9938] team0: Port device team_slave_1 added [ 256.881862][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1083'. [ 256.882325][ T5845] Bluetooth: hci3: command tx timeout [ 257.002743][T10158] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1083'. [ 257.029345][ T9938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.036456][ T9938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.160002][ T9938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.193072][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1088'. [ 257.282928][ T9938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.343565][ T9938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.376045][ T9938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.588838][T10181] sctp: [Deprecated]: syz.4.1091 (pid 10181) Use of int in maxseg socket option. [ 257.588838][T10181] Use struct sctp_assoc_value instead [ 257.703069][ T9938] hsr_slave_0: entered promiscuous mode [ 257.734267][ T9938] hsr_slave_1: entered promiscuous mode [ 257.750318][ T9938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.771706][ T9938] Cannot create hsr debugfs directory [ 257.890591][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'. [ 257.912061][T10189] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1093'. [ 257.931440][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1093'. [ 257.958901][T10189] netem: invalid attributes len -24 [ 257.976096][T10189] netem: change failed [ 258.120363][T10195] vlan2: entered allmulticast mode [ 258.125598][T10195] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 258.679132][T10200] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 258.957174][ T5845] Bluetooth: hci3: command tx timeout [ 259.244414][T10247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1103'. [ 259.269096][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1104'. [ 259.547317][T10261] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 259.706549][ T9938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 259.850623][T10261] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.871853][T10261] bond3: (slave bond4): making interface the new active one [ 259.884512][T10261] bond3: (slave bond4): Enslaving as an active interface with an up link [ 259.896735][ T9938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 260.031111][ T9938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 260.075144][T10282] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1113'. [ 260.099442][ T9938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 260.191323][T10291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1114'. [ 260.209973][ T1330] tipc: Subscription rejected, illegal request [ 260.361026][T10300] x_tables: duplicate underflow at hook 1 [ 260.514153][T10311] netlink: 'syz.4.1119': attribute type 1 has an invalid length. [ 260.679929][ T9938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.795847][ T9938] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.844474][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.851791][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.903429][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.910702][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.140183][T10337] netlink: 'syz.3.1123': attribute type 11 has an invalid length. [ 261.178275][T10337] netlink: 'syz.3.1123': attribute type 11 has an invalid length. [ 261.862725][T10368] netlink: 'syz.2.1131': attribute type 29 has an invalid length. [ 261.917870][T10374] netlink: 'syz.2.1131': attribute type 29 has an invalid length. [ 261.956389][T10368] __nla_validate_parse: 6 callbacks suppressed [ 261.956418][T10368] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1131'. [ 262.014078][T10379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1133'. [ 262.061066][T10381] bond4: entered promiscuous mode [ 262.066199][T10381] bond4: entered allmulticast mode [ 262.079398][T10381] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.168087][ T9938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.250396][T10386] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1136'. [ 262.353530][ T9938] veth0_vlan: entered promiscuous mode [ 262.368232][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 262.412340][T10386] bond0: entered promiscuous mode [ 262.452504][T10386] team0: entered promiscuous mode [ 262.459433][T10386] geneve0: entered promiscuous mode [ 262.491348][T10386] bond0: left promiscuous mode [ 262.496232][T10386] team0: left promiscuous mode [ 262.512888][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 262.541526][T10386] geneve0: left promiscuous mode [ 262.698596][ T9938] veth1_vlan: entered promiscuous mode [ 262.865191][T10413] tipc: Started in network mode [ 262.899450][T10413] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 262.987543][T10413] tipc: Enabling of bearer rejected, failed to enable media [ 262.997996][T10416] sctp: [Deprecated]: syz.1.1143 (pid 10416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.997996][T10416] Use struct sctp_sack_info instead [ 263.027909][ T9938] veth0_macvtap: entered promiscuous mode [ 263.056651][ T9938] veth1_macvtap: entered promiscuous mode [ 263.091264][T10416] netlink: 'syz.1.1143': attribute type 11 has an invalid length. [ 263.111310][T10416] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1143'. [ 263.126098][ T9938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.191514][ T9938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.235349][ T9938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.293161][ T9938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.323660][ T9938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.333808][ T9938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.409914][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1150'. [ 263.479517][T10439] pim6reg1: entered promiscuous mode [ 263.484987][T10439] pim6reg1: entered allmulticast mode [ 263.775724][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.819098][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.074846][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.096475][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.116874][T10461] bridge0: port 3(gretap0) entered blocking state [ 264.133569][T10461] bridge0: port 3(gretap0) entered disabled state [ 264.154397][T10461] gretap0: entered allmulticast mode [ 264.169974][T10464] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 264.201106][T10461] gretap0: entered promiscuous mode [ 264.207824][T10466] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1156'. [ 264.651346][T10487] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1161'. [ 264.958017][T10461] bond0: entered promiscuous mode [ 264.963175][T10461] bond_slave_0: entered promiscuous mode [ 264.973888][T10461] bond_slave_1: entered promiscuous mode [ 264.987642][T10461] bond0: entered allmulticast mode [ 264.993287][T10461] bond_slave_0: entered allmulticast mode [ 265.017138][T10461] bond_slave_1: entered allmulticast mode [ 265.025538][T10461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.528948][T10515] bond5: entered promiscuous mode [ 265.567197][T10515] bond5: entered allmulticast mode [ 265.607753][T10515] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.715936][T10536] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1172'. [ 265.904217][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.045371][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.162696][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.261128][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.430402][ T37] bridge_slave_1: left allmulticast mode [ 266.436188][ T37] bridge_slave_1: left promiscuous mode [ 266.449518][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.463228][ T37] bridge_slave_0: left allmulticast mode [ 266.472928][ T37] bridge_slave_0: left promiscuous mode [ 266.484247][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.889762][T10565] netlink: 'syz.4.1176': attribute type 10 has an invalid length. [ 267.149460][T10575] __nla_validate_parse: 1 callbacks suppressed [ 267.149485][T10575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1177'. [ 267.568362][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 267.582199][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 267.601909][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 267.612617][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 267.622654][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.631572][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 267.646672][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.665060][ T37] bond0 (unregistering): Released all slaves [ 267.899363][T10585] Bluetooth: MGMT ver 1.23 [ 268.263915][T10611] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1185'. [ 268.478887][T10609] sch_fq: defrate 0 ignored. [ 268.833239][T10631] sctp: [Deprecated]: syz.1.1187 (pid 10631) Use of int in maxseg socket option. [ 268.833239][T10631] Use struct sctp_assoc_value instead [ 269.039637][T10638] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1190'. [ 269.071894][T10641] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 269.082343][T10638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1190'. [ 269.107102][T10638] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1190'. [ 269.233278][T10646] netlink: 'syz.2.1193': attribute type 10 has an invalid length. [ 269.252653][T10646] batman_adv: batadv0: Adding interface: team0 [ 269.292005][T10646] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.374126][T10646] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 269.681078][ T5854] Bluetooth: hci3: command tx timeout [ 269.978820][T10668] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1199'. [ 269.996432][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'. [ 270.078282][T10673] netlink: 'syz.3.1200': attribute type 11 has an invalid length. [ 270.128521][T10674] netlink: 'syz.3.1200': attribute type 11 has an invalid length. [ 270.680499][T10696] openvswitch: netlink: IPv6 tunnel dst address is zero [ 271.493092][ T37] hsr_slave_0: left promiscuous mode [ 271.578335][ T37] hsr_slave_1: left promiscuous mode [ 271.584778][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.611881][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.632754][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.642737][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.687825][T10705] netlink: 'syz.1.1206': attribute type 4 has an invalid length. [ 271.688116][ T37] veth1_macvtap: left promiscuous mode [ 271.697687][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1206'. [ 271.701707][ T37] veth0_macvtap: left promiscuous mode [ 271.716243][ T37] veth1_vlan: left promiscuous mode [ 271.721757][ T37] veth0_vlan: left promiscuous mode [ 271.757174][ T5854] Bluetooth: hci3: command tx timeout [ 271.959273][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 272.007524][T10716] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1210'. [ 272.065877][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'. [ 272.118001][T10717] block nbd0: Unsupported socket: shutdown callout must be supported. [ 272.406249][ T37] team0 (unregistering): Port device team_slave_1 removed [ 272.458388][ T37] team0 (unregistering): Port device team_slave_0 removed [ 273.332430][T10582] chnl_net:caif_netlink_parms(): no params data found [ 273.624460][T10734] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 273.761585][T10747] netlink: 'syz.2.1217': attribute type 1 has an invalid length. [ 273.769528][T10747] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1217'. [ 273.779243][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 273.837512][ T5845] Bluetooth: hci3: command tx timeout [ 273.930137][T10582] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.958524][T10582] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.976715][T10582] bridge_slave_0: entered allmulticast mode [ 274.011727][T10582] bridge_slave_0: entered promiscuous mode [ 274.050918][T10582] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.074190][T10582] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.100967][T10582] bridge_slave_1: entered allmulticast mode [ 274.128915][T10582] bridge_slave_1: entered promiscuous mode [ 274.713309][T10582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.767382][T10791] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 274.788412][T10582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.813363][T10792] xt_ecn: cannot match TCP bits for non-tcp packets [ 274.931039][T10791] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1226'. [ 275.061652][T10582] team0: Port device team_slave_0 added [ 275.112297][T10582] team0: Port device team_slave_1 added [ 275.197195][ T5845] Bluetooth: hci2: command 0x0405 tx timeout [ 275.212998][T10806] netlink: 81 bytes leftover after parsing attributes in process `syz.2.1230'. [ 275.235008][T10808] netlink: 81 bytes leftover after parsing attributes in process `syz.2.1230'. [ 275.403907][T10817] pim6reg: entered allmulticast mode [ 275.425132][T10582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.460362][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.522427][T10582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.615107][T10582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.628308][T10826] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1234'. [ 275.644448][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.751182][T10582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.911141][T10844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1237'. [ 275.923372][ T5854] Bluetooth: hci3: command tx timeout [ 276.148527][T10582] hsr_slave_0: entered promiscuous mode [ 276.156030][T10582] hsr_slave_1: entered promiscuous mode [ 276.162615][T10582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.170456][T10582] Cannot create hsr debugfs directory [ 276.516902][T10873] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.1246'. [ 276.611945][T10873] openvswitch: netlink: Message has 5 unknown bytes. [ 276.862372][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1249'. [ 277.058707][T10886] bond2 (unregistering): Released all slaves [ 277.098472][T10898] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1252'. [ 277.539797][T10913] netlink: 'syz.3.1258': attribute type 33 has an invalid length. [ 277.754286][T10921] IPv6: NLM_F_CREATE should be specified when creating new route [ 277.955969][T10582] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 278.012367][T10582] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 278.054516][T10582] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 278.109304][T10934] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 278.131531][T10582] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 278.582937][T10582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.679804][T10582] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.744271][ T8974] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.751519][ T8974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.809171][ T8974] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.816468][ T8974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.019362][T10582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.172224][T10975] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 279.207267][T10975] netlink: 'syz.3.1274': attribute type 4 has an invalid length. [ 279.215105][T10975] __nla_validate_parse: 7 callbacks suppressed [ 279.215124][T10975] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1274'. [ 279.289408][T10978] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 279.307399][T10978] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 279.596088][T10582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.820219][T10582] veth0_vlan: entered promiscuous mode [ 279.849793][T10582] veth1_vlan: entered promiscuous mode [ 280.015141][T10582] veth0_macvtap: entered promiscuous mode [ 280.041980][T10582] veth1_macvtap: entered promiscuous mode [ 280.062381][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 280.109121][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 280.114708][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1278'. [ 280.134451][T10582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.158650][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1278'. [ 280.169885][T10582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.187236][T10992] netlink: 'syz.2.1278': attribute type 15 has an invalid length. [ 280.203073][T10988] netlink: 'syz.2.1278': attribute type 15 has an invalid length. [ 280.260937][T10582] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.300632][T10582] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.331305][T10582] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.357262][T10582] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.403939][T10997] x_tables: duplicate underflow at hook 1 [ 280.826417][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.850728][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.914850][ T8978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.927377][ T8978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.985106][T11014] netlink: 'syz.3.1287': attribute type 8 has an invalid length. [ 281.431862][T11027] netlink: 'syz.3.1290': attribute type 1 has an invalid length. [ 281.814588][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.954576][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.347618][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.439353][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.589018][ T13] bridge_slave_1: left allmulticast mode [ 282.594796][ T13] bridge_slave_1: left promiscuous mode [ 282.623414][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.677725][ T13] bridge_slave_0: left allmulticast mode [ 282.683578][ T13] bridge_slave_0: left promiscuous mode [ 282.748699][T11053] netlink: 'syz.4.1299': attribute type 10 has an invalid length. [ 282.756621][T11053] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1299'. [ 282.766013][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.039994][T11062] netlink: 'syz.2.1300': attribute type 10 has an invalid length. [ 283.616926][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.631120][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.640620][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.657797][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.666935][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.914242][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.928921][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.941040][ T13] bond0 (unregistering): Released all slaves [ 284.000555][T11053] team0: Port device geneve0 added [ 284.013516][T11062] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.020859][T11062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.062450][T11062] bridge0: entered promiscuous mode [ 284.075840][T11062] bridge0: entered allmulticast mode [ 284.102390][T11062] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.108962][T11087] netlink: 'syz.4.1307': attribute type 1 has an invalid length. [ 284.117522][T11087] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1307'. [ 284.133647][T11083] veth0_to_bond: entered allmulticast mode [ 284.742523][T11100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.809432][T11102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.884025][T11112] netlink: 'syz.3.1316': attribute type 3 has an invalid length. [ 284.918094][T11112] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1316'. [ 285.462045][T11144] block nbd0: Unsupported socket: shutdown callout must be supported. [ 285.758718][T11148] nbd3: detected capacity change from 0 to 63 [ 285.765248][ T5845] Bluetooth: hci3: command tx timeout [ 285.778603][T11151] block nbd3: NBD_DISCONNECT [ 285.795899][T11151] block nbd3: Disconnected due to user request. [ 285.809016][T11151] block nbd3: shutting down sockets [ 285.824929][T10542] blk_print_req_error: 136 callbacks suppressed [ 285.824993][T10542] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.911610][T10542] buffer_io_error: 138 callbacks suppressed [ 285.911635][T10542] Buffer I/O error on dev nbd3, logical block 0, async page read [ 286.013812][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 286.013981][ T55] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0 [ 286.028665][T11163] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1329'. [ 286.037143][ T55] Buffer I/O error on dev nbd3, logical block 1, async page read [ 286.050367][ T55] Buffer I/O error on dev nbd3, logical block 2, async page read [ 286.058366][ T55] Buffer I/O error on dev nbd3, logical block 3, async page read [ 286.068219][T11163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 286.079658][T10542] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.093887][T10542] Buffer I/O error on dev nbd3, logical block 0, async page read [ 286.111266][T11167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 286.127490][T10542] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.168320][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'. [ 286.186711][T10542] Buffer I/O error on dev nbd3, logical block 1, async page read [ 286.253552][T10542] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.290873][T10542] Buffer I/O error on dev nbd3, logical block 2, async page read [ 286.324273][T10542] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.374580][T10542] Buffer I/O error on dev nbd3, logical block 3, async page read [ 286.411401][ T13] hsr_slave_0: left promiscuous mode [ 286.420468][T10542] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.436296][ T13] hsr_slave_1: left promiscuous mode [ 286.446886][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.455207][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.469556][T10542] Buffer I/O error on dev nbd3, logical block 0, async page read [ 286.492756][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.502218][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.517352][T10542] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.563574][T11186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1333'. [ 286.578387][T10542] Buffer I/O error on dev nbd3, logical block 1, async page read [ 286.596751][ T13] veth1_macvtap: left promiscuous mode [ 286.604946][T11186] openvswitch: netlink: Flow key attr not present in new flow. [ 286.618245][ T13] veth0_macvtap: left promiscuous mode [ 286.620835][T10542] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.624039][ T13] veth1_vlan: left promiscuous mode [ 286.651745][ T13] veth0_vlan: left promiscuous mode [ 286.679113][T11177] can: request_module (can-proto-5) failed. [ 286.685536][T10542] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 286.740763][T10542] ldm_validate_partition_table(): Disk read failed. [ 286.761566][T10542] Dev nbd3: unable to read RDB block 0 [ 286.786667][T10542] nbd3: unable to read partition table [ 286.832262][T10542] ldm_validate_partition_table(): Disk read failed. [ 286.848580][T10542] Dev nbd3: unable to read RDB block 0 [ 286.856299][T10542] nbd3: unable to read partition table [ 287.395116][ T13] team0 (unregistering): Port device team_slave_1 removed [ 287.444081][ T13] team0 (unregistering): Port device team_slave_0 removed [ 287.842601][ T5854] Bluetooth: hci3: command tx timeout [ 288.340409][T11203] bridge_slave_0: default FDB implementation only supports local addresses [ 288.366145][T11203] bridge_slave_0: default FDB implementation only supports local addresses [ 288.459100][T11080] chnl_net:caif_netlink_parms(): no params data found [ 288.542363][T11215] netlink: 'syz.4.1340': attribute type 11 has an invalid length. [ 288.550855][T11215] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1340'. [ 288.636875][T11203] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.814767][T11203] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.070663][T11203] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.198849][T11238] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1346'. [ 289.229026][T11239] netlink: 'syz.3.1341': attribute type 2 has an invalid length. [ 289.298006][T11203] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.376058][T11080] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.396856][T11243] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1345'. [ 289.417721][T11080] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.434621][T11080] bridge_slave_0: entered allmulticast mode [ 289.453483][T11080] bridge_slave_0: entered promiscuous mode [ 289.481275][T11080] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.493441][T11080] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.504075][T11080] bridge_slave_1: entered allmulticast mode [ 289.536931][T11080] bridge_slave_1: entered promiscuous mode [ 289.758677][T11080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.791491][T11080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.918119][ T5854] Bluetooth: hci3: command tx timeout [ 289.995554][T11203] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.029491][T11203] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.044900][T11080] team0: Port device team_slave_0 added [ 290.058918][T11080] team0: Port device team_slave_1 added [ 290.106283][T11203] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.242008][T11203] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.260074][T11080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.275972][T11080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.304224][T11080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.318071][T11080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.325191][T11080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.362283][T11080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.453603][T11266] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 290.574365][T11278] __nla_validate_parse: 1 callbacks suppressed [ 290.574390][T11278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1354'. [ 290.593629][T11278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1354'. [ 290.772269][T11080] hsr_slave_0: entered promiscuous mode [ 290.780940][T11080] hsr_slave_1: entered promiscuous mode [ 290.794868][T11080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.806268][T11080] Cannot create hsr debugfs directory [ 291.628496][T11319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1365'. [ 292.006710][ T5854] Bluetooth: hci3: command tx timeout [ 292.222823][T11340] veth0: entered promiscuous mode [ 292.294928][T11340] 8021q: adding VLAN 0 to HW filter on device bond2 [ 292.359666][T11340] bond0: (slave bond2): Enslaving as an active interface with an up link [ 292.434372][T11339] veth0: left promiscuous mode [ 292.559156][T11353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1373'. [ 292.883767][T11080] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 292.903565][T11080] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 292.941112][T11080] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.051684][T11080] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.122284][T11368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1379'. [ 293.396444][T11386] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 293.584568][T11080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.634696][T11080] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.691961][ T8975] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.699263][ T8975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.772612][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.780025][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.088857][T11423] bridge_slave_0: default FDB implementation only supports local addresses [ 294.122443][T11423] bridge_slave_0: default FDB implementation only supports local addresses [ 294.167763][T11423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'. [ 294.625296][T11080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.668932][T11445] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1398'. [ 294.947575][T11080] veth0_vlan: entered promiscuous mode [ 294.961360][T11458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1403'. [ 294.995158][T11458] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1403'. [ 295.013331][T11080] veth1_vlan: entered promiscuous mode [ 295.194790][T11080] veth0_macvtap: entered promiscuous mode [ 295.232563][T11080] veth1_macvtap: entered promiscuous mode [ 295.290712][T11469] openvswitch: netlink: Missing valid actions attribute. [ 295.317219][T11469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.360179][T11080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.396874][T11080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.429902][T11080] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.467271][T11080] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.476107][T11080] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.492436][T11080] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.729345][T11484] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1410'. [ 295.855702][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.892754][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 295.957260][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.993517][T11505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1412'. [ 296.318784][T11518] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 296.334845][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.343561][T11519] netlink: 'syz.1.1414': attribute type 10 has an invalid length. [ 296.343593][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'. [ 296.396681][T11519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.410910][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.437829][T11526] netlink: 'syz.2.1416': attribute type 39 has an invalid length. [ 296.594044][T11529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1417'. [ 296.934636][T11550] netlink: 'syz.1.1424': attribute type 1 has an invalid length. [ 296.957093][T11550] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1424'. [ 296.985689][T11547] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR' [ 297.020012][T11547] CPU: 0 UID: 0 PID: 11547 Comm: syz.4.1423 Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) [ 297.020048][T11547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.020156][T11547] Call Trace: [ 297.020193][T11547] [ 297.020208][T11547] dump_stack_lvl+0x189/0x250 [ 297.020283][T11547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.020321][T11547] ? __pfx__printk+0x10/0x10 [ 297.020346][T11547] ? kernfs_path_from_node+0x2c/0x260 [ 297.020377][T11547] ? kernfs_path_from_node+0x2c/0x260 [ 297.020399][T11547] ? kernfs_path_from_node+0x2c/0x260 [ 297.020426][T11547] ? kernfs_path_from_node+0x22c/0x260 [ 297.020448][T11547] ? kernfs_path_from_node+0x2c/0x260 [ 297.020477][T11547] sysfs_warn_dup+0x8e/0xa0 [ 297.020502][T11547] sysfs_do_create_link_sd+0xc0/0x110 [ 297.020529][T11547] device_add_class_symlinks+0x1cf/0x240 [ 297.020581][T11547] device_add+0x475/0xb50 [ 297.020609][T11547] wiphy_register+0x199a/0x26b0 [ 297.020660][T11547] ? __pfx_wiphy_register+0x10/0x10 [ 297.020682][T11547] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 297.020718][T11547] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 297.020752][T11547] ieee80211_register_hw+0x33e1/0x4120 [ 297.020803][T11547] ? ieee80211_register_hw+0x14e1/0x4120 [ 297.020842][T11547] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 297.020876][T11547] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 297.020919][T11547] ? __hrtimer_setup+0x187/0x210 [ 297.020953][T11547] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 297.020986][T11547] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 297.021046][T11547] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 297.021067][T11547] ? trace_kmalloc+0x1f/0xd0 [ 297.021086][T11547] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 297.021106][T11547] ? kstrndup+0xbf/0x160 [ 297.021144][T11547] hwsim_new_radio_nl+0xea4/0x1b10 [ 297.021170][T11547] ? __pfx___nla_validate_parse+0x10/0x10 [ 297.021231][T11547] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 297.021256][T11547] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 297.021303][T11547] ? __nla_parse+0x40/0x60 [ 297.021336][T11547] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 297.021377][T11547] genl_family_rcv_msg_doit+0x212/0x300 [ 297.021417][T11547] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 297.021463][T11547] ? bpf_lsm_capable+0x9/0x20 [ 297.021483][T11547] ? security_capable+0x7e/0x2e0 [ 297.021520][T11547] genl_rcv_msg+0x60e/0x790 [ 297.021559][T11547] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.021589][T11547] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 297.021629][T11547] netlink_rcv_skb+0x205/0x470 [ 297.021654][T11547] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.021687][T11547] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.021733][T11547] ? down_read+0x1ad/0x2e0 [ 297.021767][T11547] genl_rcv+0x28/0x40 [ 297.021795][T11547] netlink_unicast+0x758/0x8d0 [ 297.021832][T11547] netlink_sendmsg+0x805/0xb30 [ 297.021868][T11547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.021898][T11547] ? aa_sock_msg_perm+0x94/0x160 [ 297.021931][T11547] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.021957][T11547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.021983][T11547] __sock_sendmsg+0x219/0x270 [ 297.022023][T11547] ____sys_sendmsg+0x505/0x830 [ 297.022057][T11547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.022096][T11547] ? import_iovec+0x74/0xa0 [ 297.022123][T11547] ___sys_sendmsg+0x21f/0x2a0 [ 297.022153][T11547] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.022233][T11547] ? __fget_files+0x2a/0x420 [ 297.022258][T11547] ? __fget_files+0x3a0/0x420 [ 297.022294][T11547] __x64_sys_sendmsg+0x19b/0x260 [ 297.022325][T11547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.022365][T11547] ? rcu_is_watching+0x15/0xb0 [ 297.022406][T11547] ? do_syscall_64+0xbe/0x3b0 [ 297.022432][T11547] do_syscall_64+0xfa/0x3b0 [ 297.022451][T11547] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.022483][T11547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.022506][T11547] ? clear_bhb_loop+0x60/0xb0 [ 297.022531][T11547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.022592][T11547] RIP: 0033:0x7fb1fc18e929 [ 297.022625][T11547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.022648][T11547] RSP: 002b:00007fb1fcf7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.022682][T11547] RAX: ffffffffffffffda RBX: 00007fb1fc3b5fa0 RCX: 00007fb1fc18e929 [ 297.022696][T11547] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 297.022708][T11547] RBP: 00007fb1fc210b39 R08: 0000000000000000 R09: 0000000000000000 [ 297.022721][T11547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.022733][T11547] R13: 0000000000000000 R14: 00007fb1fc3b5fa0 R15: 00007fff6e601ea8 [ 297.022769][T11547] [ 297.604325][T11553] can: request_module (can-proto-0) failed. [ 297.765806][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.041493][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.110466][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.204912][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.337309][ T37] bridge_slave_1: left allmulticast mode [ 298.343064][ T37] bridge_slave_1: left promiscuous mode [ 298.353283][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.369571][ T37] bridge_slave_0: left allmulticast mode [ 298.376012][ T37] bridge_slave_0: left promiscuous mode [ 298.383280][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.517334][T11578] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1431'. [ 298.561662][T11578] openvswitch: netlink: Flow key attr not present in new flow. [ 298.735634][T11586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1432'. [ 298.930516][T11591] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1434'. [ 299.223004][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.236877][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.246097][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.254864][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.263675][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.455317][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.468246][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.480183][ T37] bond0 (unregistering): Released all slaves [ 299.659511][T11597] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 299.729904][T11603] netlink: 'syz.1.1436': attribute type 21 has an invalid length. [ 299.754051][T11603] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1436'. [ 299.954727][T11608] batadv0: Device is already in use. [ 300.033855][T11611] netlink: 'syz.4.1438': attribute type 8 has an invalid length. [ 300.144853][T11610] openvswitch: netlink: Actions may not be safe on all matching packets [ 300.409608][T11618] bond0: (slave dummy0): Releasing backup interface [ 300.458532][T11618] bond0: (slave bond_slave_0): Releasing backup interface [ 300.482128][T11618] bond0: (slave bond_slave_1): Releasing backup interface [ 300.544059][T11618] team0: Port device team_slave_0 removed [ 300.564642][T11618] team0: Port device team_slave_1 removed [ 300.609355][T11618] team0: Port device geneve0 removed [ 300.628530][T11618] bond0: (slave bond2): Releasing backup interface [ 300.644656][T11620] tipc: Invalid UDP bearer configuration [ 300.644702][T11620] tipc: Enabling of bearer rejected, failed to enable media [ 300.880306][T11639] __nla_validate_parse: 1 callbacks suppressed [ 300.880331][T11639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1451'. [ 300.952591][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 300.979797][T11640] 8021q: VLANs not supported on lo [ 301.062039][T11649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1452'. [ 301.139425][T11651] netlink: 'syz.4.1453': attribute type 11 has an invalid length. [ 301.149980][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 301.186680][T11651] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1453'. [ 301.360593][ T5845] Bluetooth: hci3: command tx timeout [ 301.525330][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 301.794188][T11681] netlink: 'syz.1.1461': attribute type 2 has an invalid length. [ 301.833386][T11681] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1461'. [ 302.117910][T11697] netlink: 'syz.3.1465': attribute type 10 has an invalid length. [ 302.156270][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1464'. [ 302.187896][T11697] team0: Device ipvlan1 failed to register rx_handler [ 302.276006][T11700] netlink: 'syz.4.1466': attribute type 2 has an invalid length. [ 302.285024][T11704] SET target dimension over the limit! [ 302.322655][T11594] chnl_net:caif_netlink_parms(): no params data found [ 302.394636][ T37] hsr_slave_0: left promiscuous mode [ 302.403785][ T37] hsr_slave_1: left promiscuous mode [ 302.416590][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.430658][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.459671][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.487348][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.584650][ T37] veth1_macvtap: left promiscuous mode [ 302.627253][ T37] veth0_macvtap: left promiscuous mode [ 302.633236][ T37] veth1_vlan: left promiscuous mode [ 302.656312][ T37] veth0_vlan: left promiscuous mode [ 303.295458][ T37] team0 (unregistering): Port device team_slave_1 removed [ 303.344195][ T37] team0 (unregistering): Port device team_slave_0 removed [ 303.440228][ T5845] Bluetooth: hci3: command tx timeout [ 304.148781][T11732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1472'. [ 304.243241][T11743] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 304.245406][T11747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1475'. [ 304.260616][ T10] IPVS: starting estimator thread 0... [ 304.286156][T11747] netlink: 'syz.2.1475': attribute type 7 has an invalid length. [ 304.295703][T11747] netlink: 'syz.2.1475': attribute type 8 has an invalid length. [ 304.369932][T11748] IPVS: using max 29 ests per chain, 69600 per kthread [ 304.453385][T11750] netlink: 'syz.3.1476': attribute type 4 has an invalid length. [ 304.475355][T11594] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.485743][T11594] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.516086][T11594] bridge_slave_0: entered allmulticast mode [ 304.547122][T11594] bridge_slave_0: entered promiscuous mode [ 304.577572][T11594] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.584834][T11594] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.608126][T11594] bridge_slave_1: entered allmulticast mode [ 304.616343][T11594] bridge_slave_1: entered promiscuous mode [ 304.724453][T11594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.751794][T11594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.769305][T11764] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 304.800238][ T5845] block nbd0: Receive control failed (result -32) [ 304.969551][T11594] team0: Port device team_slave_0 added [ 305.009161][T11594] team0: Port device team_slave_1 added [ 305.074359][T11769] tipc: Enabling of bearer rejected, media not registered [ 305.131398][T11594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.138579][T11594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.166549][T11594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.180172][T11594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.214320][T11594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.317344][T11594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.477313][T11789] hsr_slave_1 (unregistering): left promiscuous mode [ 305.517661][ T5845] Bluetooth: hci3: command tx timeout [ 305.562879][T11594] hsr_slave_0: entered promiscuous mode [ 305.586623][T11594] hsr_slave_1: entered promiscuous mode [ 305.613937][T11594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.644806][T11594] Cannot create hsr debugfs directory [ 305.734834][T11804] netlink: 'syz.4.1494': attribute type 8 has an invalid length. [ 305.832299][T11804] bridge0: entered allmulticast mode [ 305.930709][T11810] IPVS: Scheduler module ip_vs_sip not found [ 306.003941][T11817] netlink: 'syz.2.1497': attribute type 1 has an invalid length. [ 306.088642][T11817] bond10: entered promiscuous mode [ 306.094412][T11817] 8021q: adding VLAN 0 to HW filter on device bond10 [ 306.175271][T11825] FAULT_INJECTION: forcing a failure. [ 306.175271][T11825] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 306.217141][T11825] CPU: 0 UID: 0 PID: 11825 Comm: syz.4.1498 Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) [ 306.217174][T11825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.217186][T11825] Call Trace: [ 306.217195][T11825] [ 306.217203][T11825] dump_stack_lvl+0x189/0x250 [ 306.217239][T11825] ? __pfx____ratelimit+0x10/0x10 [ 306.217267][T11825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.217292][T11825] ? __pfx__printk+0x10/0x10 [ 306.217311][T11825] ? __might_fault+0xb0/0x130 [ 306.217349][T11825] should_fail_ex+0x414/0x560 [ 306.217375][T11825] _copy_from_iter+0x1db/0x16f0 [ 306.217406][T11825] ? rcu_is_watching+0x15/0xb0 [ 306.217436][T11825] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 306.217454][T11825] ? __pfx__copy_from_iter+0x10/0x10 [ 306.217478][T11825] ? __build_skb_around+0x257/0x3e0 [ 306.217501][T11825] ? netlink_sendmsg+0x642/0xb30 [ 306.217520][T11825] ? skb_put+0x11b/0x210 [ 306.217542][T11825] netlink_sendmsg+0x6b2/0xb30 [ 306.217568][T11825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.217591][T11825] ? aa_sock_msg_perm+0x94/0x160 [ 306.217618][T11825] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 306.217643][T11825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.217676][T11825] __sock_sendmsg+0x219/0x270 [ 306.217711][T11825] ____sys_sendmsg+0x505/0x830 [ 306.217761][T11825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.217796][T11825] ? import_iovec+0x74/0xa0 [ 306.217821][T11825] ___sys_sendmsg+0x21f/0x2a0 [ 306.217851][T11825] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.217917][T11825] ? __fget_files+0x2a/0x420 [ 306.217939][T11825] ? __fget_files+0x3a0/0x420 [ 306.217973][T11825] __x64_sys_sendmsg+0x19b/0x260 [ 306.218002][T11825] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 306.218039][T11825] ? __pfx_ksys_write+0x10/0x10 [ 306.218056][T11825] ? rcu_is_watching+0x15/0xb0 [ 306.218093][T11825] ? do_syscall_64+0xbe/0x3b0 [ 306.218118][T11825] do_syscall_64+0xfa/0x3b0 [ 306.218136][T11825] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.218166][T11825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.218186][T11825] ? clear_bhb_loop+0x60/0xb0 [ 306.218212][T11825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.218232][T11825] RIP: 0033:0x7fb1fc18e929 [ 306.218266][T11825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.218285][T11825] RSP: 002b:00007fb1fcf7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.218308][T11825] RAX: ffffffffffffffda RBX: 00007fb1fc3b5fa0 RCX: 00007fb1fc18e929 [ 306.218324][T11825] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 306.218338][T11825] RBP: 00007fb1fcf7c090 R08: 0000000000000000 R09: 0000000000000000 [ 306.218350][T11825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.218374][T11825] R13: 0000000000000000 R14: 00007fb1fc3b5fa0 R15: 00007fff6e601ea8 [ 306.218405][T11825] [ 306.232521][T11823] 8021q: adding VLAN 0 to HW filter on device bond10 [ 306.425133][T11833] __nla_validate_parse: 13 callbacks suppressed [ 306.425162][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1501'. [ 306.453637][T11823] bond10: (slave wireguard1): The slave device specified does not support setting the MAC address [ 306.568656][T11823] bond10: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 306.585634][T11823] bond10: (slave wireguard1): making interface the new active one [ 306.594037][T11823] wireguard1: entered promiscuous mode [ 306.608338][T11823] bond10: (slave wireguard1): Enslaving as an active interface with an up link [ 306.933991][T11847] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.079566][T11854] geneve2: entered promiscuous mode [ 307.094474][T11854] geneve2: entered allmulticast mode [ 307.354249][T11868] vlan1: entered promiscuous mode [ 307.366046][T11868] bridge0: entered promiscuous mode [ 307.597595][ T5845] Bluetooth: hci3: command tx timeout [ 307.653078][T11594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.694318][T11594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.723101][T11594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.742840][T11594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.884370][T11894] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 308.046483][T11594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.079507][T11896] netlink: 'syz.2.1517': attribute type 33 has an invalid length. [ 308.088379][T11896] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1517'. [ 308.103439][T11896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1517'. [ 308.110544][T11594] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.209788][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.217133][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.338896][T11901] bond6: entered promiscuous mode [ 308.344019][T11901] bond6: entered allmulticast mode [ 308.355647][T11901] 8021q: adding VLAN 0 to HW filter on device bond6 [ 308.575967][T11901] bond6 (unregistering): Released all slaves [ 308.633538][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.640849][ T8976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.813656][T11922] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1524'. [ 308.827784][T11922] netlink: 'syz.4.1524': attribute type 7 has an invalid length. [ 308.844660][T11916] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1524'. [ 308.872208][T11922] : entered promiscuous mode [ 308.891705][T11927] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1524'. [ 309.190284][T11941] xt_TPROXY: Can be used only with -p tcp or -p udp [ 309.331030][T11949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.346633][T11594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.364875][T11948] netlink: 'syz.1.1531': attribute type 1 has an invalid length. [ 309.384886][T11948] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1531'. [ 309.450613][T11594] veth0_vlan: entered promiscuous mode [ 309.466076][T11594] veth1_vlan: entered promiscuous mode [ 309.535261][T11956] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1532'. [ 309.558635][T11956] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1532'. [ 309.570872][T11955] netlink: 'syz.3.1533': attribute type 10 has an invalid length. [ 309.578300][T11956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1532'. [ 309.661910][T11955] veth1_vlan: entered allmulticast mode [ 309.671966][T11955] veth1_vlan: left promiscuous mode [ 309.691266][T11955] team0: Device veth1_vlan failed to register rx_handler [ 309.809634][T11594] veth0_macvtap: entered promiscuous mode [ 309.832709][T11594] veth1_macvtap: entered promiscuous mode [ 309.843184][T11965] sctp: [Deprecated]: syz.1.1535 (pid 11965) Use of int in max_burst socket option. [ 309.843184][T11965] Use struct sctp_assoc_value instead [ 309.875808][T11594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.912297][T11594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.958153][T11968] x_tables: ip_tables: udp match: only valid for protocol 17 [ 309.963842][T11594] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.991106][T11594] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.001718][T11594] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.011699][T11594] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.282245][ T8971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.296049][ T8971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.403130][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.412545][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.913338][T12007] netlink: 'syz.3.1545': attribute type 10 has an invalid length. [ 310.924977][T12007] netlink: 'syz.3.1545': attribute type 1 has an invalid length. [ 311.055950][ T8976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.373525][ T8976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.692739][ T8976] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.772589][ T8976] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.054498][ T8976] bridge_slave_1: left allmulticast mode [ 312.062610][ T8976] bridge_slave_1: left promiscuous mode [ 312.068877][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.080652][ T8976] bridge_slave_0: left allmulticast mode [ 312.086334][ T8976] bridge_slave_0: left promiscuous mode [ 312.095667][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.215013][T12019] __nla_validate_parse: 16 callbacks suppressed [ 312.215042][T12019] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1551'. [ 312.495437][T12035] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 312.746797][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.763864][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.789948][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.800995][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 312.812225][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.043778][ T8976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.055615][ T8976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.066385][ T8976] bond0 (unregistering): Released all slaves [ 313.912890][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'. [ 313.986825][T12074] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1569'. [ 314.396776][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1575'. [ 314.877345][ T5854] Bluetooth: hci3: command tx timeout [ 315.008267][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1582'. [ 315.312599][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1587'. [ 315.325482][ T8976] hsr_slave_0: left promiscuous mode [ 315.334167][ T8976] hsr_slave_1: left promiscuous mode [ 315.341516][ T8976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.349416][ T8976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.359959][ T8976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.367773][ T8976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.400274][ T8976] veth1_macvtap: left promiscuous mode [ 315.406142][ T8976] veth0_macvtap: left promiscuous mode [ 315.412104][ T8976] veth1_vlan: left promiscuous mode [ 315.417609][ T8976] veth0_vlan: left promiscuous mode [ 315.976148][ T8976] team0 (unregistering): Port device team_slave_1 removed [ 316.033722][ T8976] team0 (unregistering): Port device team_slave_0 removed [ 316.532910][T12124] syzkaller1: entered promiscuous mode [ 316.538927][T12124] syzkaller1: entered allmulticast mode [ 316.639380][T12038] chnl_net:caif_netlink_parms(): no params data found [ 316.734213][T12143] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1589'. [ 316.957882][ T5854] Bluetooth: hci3: command tx timeout [ 317.108232][T12038] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.136149][T12038] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.155199][T12038] bridge_slave_0: entered allmulticast mode [ 317.178834][T12038] bridge_slave_0: entered promiscuous mode [ 317.261144][T12038] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.300172][T12038] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.311708][T12173] netlink: 'syz.2.1594': attribute type 4 has an invalid length. [ 317.317555][T12162] netlink: 'syz.2.1594': attribute type 4 has an invalid length. [ 317.348677][T12038] bridge_slave_1: entered allmulticast mode [ 317.376832][T12038] bridge_slave_1: entered promiscuous mode [ 317.474003][T12179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1597'. [ 317.600940][T12038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.625195][T12038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.636703][T12182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1600'. [ 317.784946][T12189] tipc: Enabling of bearer rejected, failed to enable media [ 317.804853][T12038] team0: Port device team_slave_0 added [ 317.840384][T12038] team0: Port device team_slave_1 added [ 317.954559][T12038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.979510][T12038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.025753][T12038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.044388][T12038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.051977][T12038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.082188][T12038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.283213][T12038] hsr_slave_0: entered promiscuous mode [ 318.295045][T12038] hsr_slave_1: entered promiscuous mode [ 318.316906][T12038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.328261][T12038] Cannot create hsr debugfs directory [ 318.893904][T12227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1613'. [ 319.037693][ T5854] Bluetooth: hci3: command tx timeout [ 319.114779][T12239] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 319.333575][T12245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1618'. [ 319.351084][T12248] netlink: 'syz.3.1619': attribute type 2 has an invalid length. [ 319.357142][T12245] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1618'. [ 319.380969][T12248] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1619'. [ 319.461553][T12253] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1620'. [ 319.617765][T12257] tipc: Enabled bearer , priority 0 [ 319.670817][T12257] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 319.688646][T12257] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 319.937824][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'. [ 319.957607][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'. [ 319.960415][T12038] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.966561][T12262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.039151][T12038] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 320.085471][T12038] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 320.104604][T12038] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 320.286642][T12038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.359413][T12284] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1629'. [ 320.376497][T12038] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.388338][T12282] netlink: 'syz.1.1628': attribute type 3 has an invalid length. [ 320.432716][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.440005][ T8976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.491049][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.498464][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.538859][T12284] Bluetooth: MGMT ver 1.23 [ 321.077716][T12320] netlink: 'syz.4.1638': attribute type 21 has an invalid length. [ 321.095183][T12320] netlink: 'syz.4.1638': attribute type 5 has an invalid length. [ 321.119344][ T5854] Bluetooth: hci3: command tx timeout [ 321.378333][T12038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.655383][T12348] netlink: 'syz.3.1648': attribute type 1 has an invalid length. [ 321.663896][T12348] netlink: 'syz.3.1648': attribute type 1 has an invalid length. [ 321.714801][T12038] veth0_vlan: entered promiscuous mode [ 321.728947][T12348] netlink: 'syz.3.1648': attribute type 1 has an invalid length. [ 321.739426][T12348] netlink: 'syz.3.1648': attribute type 2 has an invalid length. [ 321.780416][T12038] veth1_vlan: entered promiscuous mode [ 321.844032][T12038] veth0_macvtap: entered promiscuous mode [ 321.886887][T12038] veth1_macvtap: entered promiscuous mode [ 321.955817][T12038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.992002][T12038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.043240][T12038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.071628][T12038] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.089743][T12038] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.102082][T12038] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.707448][T11514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.736367][T11514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.829017][T12380] __nla_validate_parse: 10 callbacks suppressed [ 322.829043][T12380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1657'. [ 322.857397][ T8976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.865314][ T8976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.958132][T12386] sctp: [Deprecated]: syz.3.1659 (pid 12386) Use of int in max_burst socket option. [ 322.958132][T12386] Use struct sctp_assoc_value instead [ 323.115866][T12390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1660'. [ 323.279892][T12402] validate_nla: 1 callbacks suppressed [ 323.279911][T12402] netlink: 'syz.4.1663': attribute type 1 has an invalid length. [ 323.323448][T12402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 323.383661][T12402] ip6erspan0: entered promiscuous mode [ 323.425821][T12402] bond3: (slave ip6erspan0): making interface the new active one [ 323.445525][T12402] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 323.539354][ T8976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.683816][ T8976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.752252][ T8976] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.852081][ T8976] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.246306][ T8976] bridge_slave_1: left allmulticast mode [ 324.252666][ T8976] bridge_slave_1: left promiscuous mode [ 324.259351][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.270880][ T8976] bridge_slave_0: left allmulticast mode [ 324.276574][ T8976] bridge_slave_0: left promiscuous mode [ 324.286443][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.800526][ T8976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.820186][ T8976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.832097][ T8976] bond0 (unregistering): Released all slaves [ 324.889942][T12416] bond6: entered promiscuous mode [ 324.896374][T12416] bond6: entered allmulticast mode [ 324.916946][T12416] 8021q: adding VLAN 0 to HW filter on device bond6 [ 325.158337][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.184037][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.195954][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.231678][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.243820][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.244394][T12416] bond6 (unregistering): Released all slaves [ 325.697355][T12443] netlink: 'syz.1.1676': attribute type 1 has an invalid length. [ 325.729368][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1676'. [ 326.076611][T12461] x_tables: unsorted underflow at hook 2 [ 326.194881][T12468] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 326.296765][T12472] netlink: 'syz.3.1685': attribute type 3 has an invalid length. [ 326.665739][T12485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1687'. [ 326.710542][T12487] netlink: 'syz.2.1691': attribute type 11 has an invalid length. [ 326.729131][T12487] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1691'. [ 326.738296][T12489] netlink: 'syz.4.1689': attribute type 10 has an invalid length. [ 326.776065][T12492] netlink: 'syz.2.1691': attribute type 1 has an invalid length. [ 326.778421][T12489] team0: Device veth1_macvtap failed to register rx_handler [ 326.816731][T12478] netlink: 'syz.1.1687': attribute type 2 has an invalid length. [ 326.836505][T12478] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1687'. [ 326.874431][T12478] nbd: must specify a device to reconfigure [ 327.110608][T12503] netlink: 'syz.4.1693': attribute type 11 has an invalid length. [ 327.123367][T12503] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1693'. [ 327.153532][T12500] ipvlan0: entered promiscuous mode [ 327.159239][T12500] ipvlan0: entered allmulticast mode [ 327.193618][T12500] veth0_vlan: entered allmulticast mode [ 327.358293][ T5854] Bluetooth: hci3: command tx timeout [ 327.573843][ T8976] hsr_slave_0: left promiscuous mode [ 327.598043][ T8976] hsr_slave_1: left promiscuous mode [ 327.614414][ T8976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.622825][ T8976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.651293][ T8976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.671257][ T8976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.736719][ T8976] veth1_macvtap: left promiscuous mode [ 327.746877][ T8976] veth0_macvtap: left promiscuous mode [ 327.755437][ T8976] veth1_vlan: left promiscuous mode [ 327.767516][ T8976] veth0_vlan: left promiscuous mode [ 328.445023][ T8976] team0 (unregistering): Port device team_slave_1 removed [ 328.499066][ T8976] team0 (unregistering): Port device team_slave_0 removed [ 329.008703][T12520] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 329.257250][T12547] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1703'. [ 329.375965][T12424] chnl_net:caif_netlink_parms(): no params data found [ 329.441753][ T5854] Bluetooth: hci3: command tx timeout [ 329.453990][T12554] 8021q: adding VLAN 0 to HW filter on device bond11 [ 329.462208][T12554] bridge0: port 4(bond11) entered blocking state [ 329.469449][T12554] bridge0: port 4(bond11) entered disabled state [ 329.476347][T12554] bond11: entered allmulticast mode [ 329.485945][T12554] bond11: entered promiscuous mode [ 329.740845][T12424] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.751680][T12424] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.759399][T12424] bridge_slave_0: entered allmulticast mode [ 329.769491][T12424] bridge_slave_0: entered promiscuous mode [ 329.803703][T12424] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.815523][T12424] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.828803][T12424] bridge_slave_1: entered allmulticast mode [ 329.846032][T12424] bridge_slave_1: entered promiscuous mode [ 329.942479][T12582] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1713'. [ 330.013256][T12424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.027448][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1715'. [ 330.042206][T12424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.351860][T12424] team0: Port device team_slave_0 added [ 330.392883][T12424] team0: Port device team_slave_1 added [ 330.393532][T12595] netlink: 'syz.2.1717': attribute type 1 has an invalid length. [ 330.418275][T12595] netlink: 'syz.2.1717': attribute type 2 has an invalid length. [ 330.448277][T12595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1717'. [ 330.475653][T12595] bond0: left promiscuous mode [ 330.481710][T12595] bond_slave_0: left promiscuous mode [ 330.488144][T12595] bond_slave_1: left promiscuous mode [ 330.494097][T12595] bond0: left allmulticast mode [ 330.499685][T12595] bond_slave_0: left allmulticast mode [ 330.505476][T12595] bond_slave_1: left allmulticast mode [ 330.512383][T12424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.520871][T12424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.552823][T12424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.570754][T12424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.580888][T12424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.614258][T12424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.769661][T12424] hsr_slave_0: entered promiscuous mode [ 330.776823][T12424] hsr_slave_1: entered promiscuous mode [ 330.783678][T12424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.791779][T12424] Cannot create hsr debugfs directory [ 330.848175][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1722'. [ 331.139490][ T8977] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 331.155771][ T8977] ------------[ cut here ]------------ [ 331.167177][ T8977] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 331.185429][ T8977] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 331.202008][T12623] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1726'. [ 331.212288][ T8977] CPU: 1 UID: 0 PID: 8977 Comm: kworker/u8:16 Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) [ 331.212320][ T8977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.212334][ T8977] Workqueue: events_unbound cfg80211_wiphy_work [ 331.212367][ T8977] Call Trace: [ 331.212376][ T8977] [ 331.212385][ T8977] dump_stack_lvl+0x189/0x250 [ 331.212432][ T8977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.212464][ T8977] ? __pfx__printk+0x10/0x10 [ 331.212501][ T8977] ubsan_epilogue+0xa/0x40 [ 331.212536][ T8977] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 331.212578][ T8977] ieee80211_request_ibss_scan+0x600/0x8b0 [ 331.212627][ T8977] ieee80211_ibss_work+0xd85/0x1060 [ 331.212656][ T8977] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.212689][ T8977] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 331.212719][ T8977] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 331.212745][ T8977] ? kcov_remote_stop+0x17e/0x6d0 [ 331.212774][ T8977] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 331.212809][ T8977] ? skb_dequeue+0x10e/0x150 [ 331.212829][ T8977] ? ieee80211_iface_work+0xcd4/0xfe0 [ 331.212863][ T8977] ? ieee80211_iface_work+0xf39/0xfe0 [ 331.212905][ T8977] cfg80211_wiphy_work+0x2df/0x460 [ 331.212930][ T8977] ? process_scheduled_works+0x9ef/0x17b0 [ 331.212965][ T8977] process_scheduled_works+0xae1/0x17b0 [ 331.213026][ T8977] ? __pfx_process_scheduled_works+0x10/0x10 [ 331.213076][ T8977] worker_thread+0x8a0/0xda0 [ 331.213125][ T8977] kthread+0x70e/0x8a0 [ 331.213157][ T8977] ? __pfx_worker_thread+0x10/0x10 [ 331.213187][ T8977] ? __pfx_kthread+0x10/0x10 [ 331.213211][ T8977] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.213238][ T8977] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.213265][ T8977] ? __pfx_kthread+0x10/0x10 [ 331.213289][ T8977] ret_from_fork+0x3f9/0x770 [ 331.213324][ T8977] ? __pfx_ret_from_fork+0x10/0x10 [ 331.213360][ T8977] ? __switch_to_asm+0x39/0x70 [ 331.213379][ T8977] ? __switch_to_asm+0x33/0x70 [ 331.213397][ T8977] ? __pfx_kthread+0x10/0x10 [ 331.213428][ T8977] ret_from_fork_asm+0x1a/0x30 [ 331.213469][ T8977] [ 331.213588][ T8977] ---[ end trace ]--- [ 331.456609][ T8977] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 331.463908][ T8977] CPU: 1 UID: 0 PID: 8977 Comm: kworker/u8:16 Not tainted 6.16.0-rc2-syzkaller-00177-g1fd26729e013 #0 PREEMPT(full) [ 331.476210][ T8977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.486306][ T8977] Workqueue: events_unbound cfg80211_wiphy_work [ 331.492592][ T8977] Call Trace: [ 331.495901][ T8977] [ 331.498863][ T8977] dump_stack_lvl+0x99/0x250 [ 331.503507][ T8977] ? __asan_memcpy+0x40/0x70 [ 331.508234][ T8977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.513456][ T8977] ? __pfx__printk+0x10/0x10 [ 331.518087][ T8977] panic+0x2db/0x790 [ 331.522042][ T8977] ? __pfx_panic+0x10/0x10 [ 331.526512][ T8977] ? _printk+0xcf/0x120 [ 331.530696][ T8977] ? __pfx__printk+0x10/0x10 [ 331.535326][ T8977] check_panic_on_warn+0x89/0xb0 [ 331.540316][ T8977] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 331.546079][ T8977] ieee80211_request_ibss_scan+0x600/0x8b0 [ 331.551957][ T8977] ieee80211_ibss_work+0xd85/0x1060 [ 331.557185][ T8977] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.562413][ T8977] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 331.568328][ T8977] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 331.574686][ T8977] ? kcov_remote_stop+0x17e/0x6d0 [ 331.579733][ T8977] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 331.585396][ T8977] ? skb_dequeue+0x10e/0x150 [ 331.589997][ T8977] ? ieee80211_iface_work+0xcd4/0xfe0 [ 331.595396][ T8977] ? ieee80211_iface_work+0xf39/0xfe0 [ 331.600799][ T8977] cfg80211_wiphy_work+0x2df/0x460 [ 331.605930][ T8977] ? process_scheduled_works+0x9ef/0x17b0 [ 331.611697][ T8977] process_scheduled_works+0xae1/0x17b0 [ 331.617313][ T8977] ? __pfx_process_scheduled_works+0x10/0x10 [ 331.623352][ T8977] worker_thread+0x8a0/0xda0 [ 331.627997][ T8977] kthread+0x70e/0x8a0 [ 331.632090][ T8977] ? __pfx_worker_thread+0x10/0x10 [ 331.637236][ T8977] ? __pfx_kthread+0x10/0x10 [ 331.641847][ T8977] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.647075][ T8977] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.652303][ T8977] ? __pfx_kthread+0x10/0x10 [ 331.656924][ T8977] ret_from_fork+0x3f9/0x770 [ 331.661547][ T8977] ? __pfx_ret_from_fork+0x10/0x10 [ 331.666685][ T8977] ? __switch_to_asm+0x39/0x70 [ 331.671465][ T8977] ? __switch_to_asm+0x33/0x70 [ 331.676240][ T8977] ? __pfx_kthread+0x10/0x10 [ 331.680854][ T8977] ret_from_fork_asm+0x1a/0x30 [ 331.685735][ T8977] [ 331.689283][ T8977] Kernel Offset: disabled [ 331.693739][ T8977] Rebooting in 86400 seconds..