last executing test programs: 31.318632225s ago: executing program 3 (id=459): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 30.679509258s ago: executing program 3 (id=465): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='9p_client_req\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r3, @ANYBLOB="5ab5534596"], 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r6, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r7, @ANYBLOB="520200a4ad793a69beeb0d6ee7e1d22ece67b522"], 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x34}}, 0x0) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x103, 0x120a1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES16=r3], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r11 = gettid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630000ff000000009500680000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x62, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r11], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 29.024651511s ago: executing program 3 (id=481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) sendto$inet6(r4, &(0x7f0000003380)='K', 0xfffffe42, 0x44008011, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, &(0x7f0000000180)=0x40) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x10000, {0x0, 0x0, 0x0, r3, {}, {0x8}, {0xfff3}}}, 0xfffffffffffffd5e}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x2022) ioctl$SIOCSIFHWADDR(r8, 0xff04, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) unshare(0x8000400) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r9, 0x20, &(0x7f0000000a40)={0x0, 0x0, 0x0, &(0x7f0000000a00)=""/56, 0x38}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000280)={r6, 0x80000001, 0x1bd2, 0x2}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000004c0)={r10}) sendto$inet(r8, &(0x7f0000000040)="ebc45976839504ef00b5fe5a72924f0273a5feb19e70d1d9524a03454b2bb0c2a742d27d7c3d231ede3b7c99e1c8de6d40561bdb9c9a3c6eb86bc5df2e0f49d1b9cd94d4b686b671866181e403a20b7442ffd4aa1b2c078432c1c1744dcd0623b2ff1a656057dd63a8cab65aeab7485d67f06e660bb4feeaefc542f13cdd4469bd79af38b0ee0ab994f0d2f6c47f129c7359f5eca15617d8bf2f021116f5a6b0a2d1ce81ca7365ab9173f52184911c2d3e69d087250a80838ac760531864393306593ada809d4d1d43ec6e95421d26ed46d32c805f3cc8bb182d2afeb35852f0d3c1590d44bc65ec", 0xe8, 0x4, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 28.074317357s ago: executing program 3 (id=489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f00005d6000/0x1000)=nil, 0x1000, 0x200000b, 0x13, r3, 0x1c08c000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r7, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x1000}}, 0x0, 0x69}, 0x9c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0x4d}, 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) recvmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x1b, &(0x7f0000000040)=[{&(0x7f0000001540)=""/4102, 0x1006}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r10, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c000180"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 27.886808333s ago: executing program 3 (id=490): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES64=r0], 0x18}, 0x1, 0x0, 0x0, 0x400c040}, 0x40044) 27.707845862s ago: executing program 3 (id=492): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x8000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000004c0)=[{0x3, 0x4, {0x2, 0x0, 0x4}, {0x1, 0x1, 0x2}, 0x1, 0xfe}], 0x20) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)=@bridge_getneigh={0x90, 0x1e, 0x200, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x2, 0x40525}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x40}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_team\x00'}, {0x14, 0x35, 'ip6erspan0\x00'}, {0x14, 0x35, 'veth0_macvtap\x00'}, {0x14, 0x35, 'veth0_to_team\x00'}, {0x14, 0x35, 'veth1_vlan\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x3a, &(0x7f00000001c0)=0xfffffffe, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@delchain={0x34, 0x65, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xfff3}, {0xffff, 0xffe8}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x6d}}, @TCA_CHAIN={0x8, 0xb, 0xa6}]}, 0x34}}, 0x40054) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000380), 0x0) (async) r10 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @multicast2}, &(0x7f0000000440)=0xc) 12.534780825s ago: executing program 32 (id=492): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x8000) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000004c0)=[{0x3, 0x4, {0x2, 0x0, 0x4}, {0x1, 0x1, 0x2}, 0x1, 0xfe}], 0x20) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000040)=@bridge_getneigh={0x90, 0x1e, 0x200, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x2, 0x40525}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x40}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_team\x00'}, {0x14, 0x35, 'ip6erspan0\x00'}, {0x14, 0x35, 'veth0_macvtap\x00'}, {0x14, 0x35, 'veth0_to_team\x00'}, {0x14, 0x35, 'veth1_vlan\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x3a, &(0x7f00000001c0)=0xfffffffe, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@delchain={0x34, 0x65, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xfff3}, {0xffff, 0xffe8}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x6d}}, @TCA_CHAIN={0x8, 0xb, 0xa6}]}, 0x34}}, 0x40054) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000380), 0x0) (async) r10 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @multicast2}, &(0x7f0000000440)=0xc) 2.638799442s ago: executing program 1 (id=777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000240)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1}, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000080)=0x8) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)={0x300, r9, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x2ec, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2e1, 0x4, "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"}]}]}, 0x300}, 0x1, 0x0, 0x0, 0x10}, 0x40000) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x148, r9, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x79a940de6997950a}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r5) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, r11, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80020}, 0x4000000) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x10) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x90, 0x10, 0x10, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x4}, @IFLA_VFINFO_LIST={0x68, 0x16, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x8001}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0xa}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0xe80, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x7f}}]}, {0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r13 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r13, 0x80089419, &(0x7f0000000200)) 1.882793616s ago: executing program 4 (id=787): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000001c0)=0x40000001, 0x4) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x1, 0x65, 0xc, 0x2}, 0x10) 1.880130711s ago: executing program 0 (id=788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'xfrm0\x00', @local}) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000080)=0x1) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x1c}, 0x32}) (async) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="b835222cfd546934551eecc7adeb2db854121f9f63b9c36b0b4544536f6f53d19e61abf5283ae3af6bcd0d2f33c1c131f01042f8119d69897e5ad27150ddad233a5e097647ec51e0c5d3b267ba2bc94d9281daa75085281d8dc9a2cea8f386cbd001f7a25062f677615bfbe99b8b1109a2822c5a3452ab42f4dc1d002ea9dd8b0a2e55fb6bf860591403750f3def9e433286108a38880020c554536ec0ba4fe1ed0759e882f569bb6119f7fc2907169203", 0xb1}, {&(0x7f00000001c0)="468dbf9567e393cb34ae9e3be898b62af8d47430e8c7dab93330d839ad2001287b0aa1", 0x23}, {&(0x7f0000000200)="db", 0x1}], 0x3, 0xffffff00, 0x0) (async) ioctl$FIOCLEX(r0, 0x5451) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'veth1_to_bond\x00', 0x1000}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@bridge_setlink={0x94, 0x13, 0x100, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x59040, 0x2000}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}, @IFLA_ADDRESS={0xa, 0x1, @random="e83230adaec6"}, @IFLA_IFALIASn={0x4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x9}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bond_slave_1\x00'}, {0x14, 0x35, 'netpci0\x00'}, {0x14, 0x35, 'wg2\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20040044}, 0x34008040) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r0}, 0x8) r2 = openat$cgroup_ro(r1, &(0x7f0000000480)='memory.swap.current\x00', 0x0, 0x0) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f00000004c0)={0x1d, @rand_addr=0x64010102, 0x4e23, 0x0, 'lblc\x00', 0x8, 0xfd, 0x75}, 0x2c) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r4, 0x300, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r2}, 0x20) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'ip6gre0\x00', 0x0, 0x29, 0xf9, 0x4, 0x8, 0xd, @empty, @loopback, 0x0, 0x700, 0x4, 0x5}}) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r2, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%pB \x00'}, 0x20) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={r2, 0xffffffffffffffff}, 0x4) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x14, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffb}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}]}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0xf3, &(0x7f0000000800)=""/243, 0x41100, 0x50, '\x00', r6, 0x0, r2, 0x8, &(0x7f00000009c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0x1, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000b40)=[r7, r1, r8, r1, r1, r2], &(0x7f0000000b80)=[{0x2, 0x5, 0xf, 0x7}, {0x2, 0x1, 0xd, 0x5}, {0x5, 0x2, 0xd, 0x2}, {0x5, 0x3, 0xd, 0x8}, {0x5, 0x1, 0x10, 0x9}, {0x3, 0x4, 0xa, 0x7}, {0x1, 0x3, 0x3, 0x6}], 0x10, 0x6, @void, @value}, 0x94) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000cc0)={0x9, 0x820d, 0x6c, 0x5, 0x0}, &(0x7f0000000d00)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000d40)={r10, 0x72}, &(0x7f0000000d80)=0x8) (async) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000dc0)="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") getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4) (async) bind$isdn_base(r2, &(0x7f0000000f40)={0x22, 0xe5, 0xd, 0x3, 0x3}, 0x6) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000f80)={r11, 0xda, "5967962a7a07a9b3352e64b400e61a84663db9e9ebef6e1b94729fed3a55e1d880515860e457379699ad071b57c7420e47d45ac96cb4aeb21ebe696db7e19093a936ea2b76ea901552571a7d90e7492a5b27f797b844770b280968380853eb83e6bc92cce838ce4eeed8076c4ac549d747c72d474131405bdcd7ff52089973512d9fb9eb4abf5fb7cb6d3ce2983adb1d1c75123beef11123a69c2068adf32b120508d3ea68736a6264579d70712af0baa0fe3465cabca6e3456bf767ead37e11c775592c144a7c222cb625b45b6c7900c7014ceaa399c789cb9c"}, &(0x7f0000001080)=0xe2) (async) clock_gettime(0x2, &(0x7f00000010c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000001140)=@rose={'rose', 0x0}, 0x10) (async, rerun: 32) setsockopt$inet_opts(r1, 0x0, 0x16, &(0x7f0000001180)="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", 0x1000) (rerun: 32) 1.749759981s ago: executing program 4 (id=790): r0 = socket$inet(0x2, 0x5, 0x6) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0x0, 0x3, 0xb0, 0xfa6, 0x80000000}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x13, 0x8}}) r2 = socket$inet6(0xa, 0x2, 0x8) setsockopt$sock_int(r2, 0x1, 0x13, &(0x7f0000000140)=0x20000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8045) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x1ff, 0x2, 0x48a3, 0x80, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={&(0x7f00000002c0)="98d626d9a67c8e17c37c524f90e42d2278d03db9c2fcb37aa45ca4c37aecd4cbe68804234acafe26db9b3e331dedf732d1ccf4df91f1a2dcd9930d75c5192137a5b3c3c06ddf91d75bddac02f08e6499b36066d21567144630d72a970bb9274dfe5f7001d2bc935135d38520ed0feb4c4295e4a4090c910f8dec2fa33ff473f14e0624c5034db78b113daff48690cde672219cd5237b52d22bd6691a301594cd6232c99b48b6781d198eadee48a7b3ef58bb42f2416045d106617897f8e8fa7ae5c5c6", &(0x7f00000003c0)=""/163, &(0x7f0000000480)="e1ed", &(0x7f00000004c0)="f84cbe5be6bb6c21760c3ddca887c36c209d76de6cf98acb521fc7a54fddedfa9d14573d748886b8a57fa8f7063f96d7c636f30b037dc62e3438a3756b5c", 0x1, r5, 0x4}, 0x38) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x7c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}], @NL80211_ATTR_SSID={0x1c, 0x34, @random="dfb2e8a9949a2157d2402b23d0f06a8ef8594ee6e7e3d10e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xd, 0x34, @random="b9b782890825215901"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004014}, 0x14) connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @private=0xa010100}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000780)={r1}, &(0x7f00000007c0)=0x8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) ioctl$NS_GET_USERNS(r7, 0xb701, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000840)={r1, 0x3ff}, &(0x7f0000000880)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000008c0)={r8, 0x9}, &(0x7f0000000900)=0x8) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000940)) r10 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000980)="d948aec0ad6afafae0a3b19bc62206eebd506f80ce1bb537f77b4d93fd4ea65a84bf0eee1b481aad6d563ad347d4d4a4b0d651d15cd0e355acf8e2cfda2c83d2982baf98a0b3927744c91de2b35951e2112caa83d38b7dd51197e88b40791cdac4ee", 0x62) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000a00)='br_fdb_external_learn_add\x00', r7, 0x0, 0x7fffffff}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x2, 0x6, 0x12, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x80, 0x2, 0x1}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x2, '\x00', r11, r7, 0x549, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000bc0)={r9, 0x2}, &(0x7f0000000c00)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000c40)={r12, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x9, 0xcb4, 0x6f, 0x84, 0x8a6a0c9, 0xe}, 0x9c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r7) 1.748821214s ago: executing program 0 (id=792): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) bind$tipc(r2, 0x0, 0x0) (async) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x1f0, 0x118, 0x1f0, 0xffffffff, 0xffffffff, 0x3b8, 0x3b8, 0x3b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1, @mcast2, [0x0, 0xff000000], [0xff, 0xff000000, 0x0, 0x100fffffe], 'caif0\x00', 'nr0\x00', {0xff}, {}, 0x67, 0x4, 0x7c29c6f1f2abaa33, 0x42}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [0xffffffff, 0xff, 0x0, 0xff000000], [0xff000000, 0x0, 0xffffffff, 0xffffff00], 'lo\x00', 'syz_tun\x00', {0xff}, {}, 0x0, 0x8, 0x4, 0x40}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x5, 0x2}, {0x0, 0x5, 0x5}, 0x81, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x4, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfc, 0x0, 0xfc, 0x9, 0x0, 0x401, 0xfffe, 0x0, 0x0, 0x9, [0x2]}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0x64, 0x4, 0x278, 0x100000c, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x460, 0x460, 0x460, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @rand_addr=0x64010100, 0xff000000, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00', {}, {}, 0xff, 0x3}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'syz_tun\x00', 'lo\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7f, 0x9, 0x4, 0x6, 0x1, 0x7f, 0x1, 0x40]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) (async) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0x0, @void, @value, @void, @value}, 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) unshare(0x8000400) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x4f0, 0x0, 0x110, 0x110, 0x408, 0x408, 0x408, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @multicast2, 0xf}}}, {{@arp={@loopback, @multicast2, 0xff000000, 0xffffff00, 0x3, 0x8, {@empty, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x7fff, 0x3, 0xbd2, 0x2, 0xd69e, 0xfff7, 'ipvlan1\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x1d}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:audisp_remote_exec_t:s0\x00'}}}, {{@arp={@loopback, @multicast1, 0x0, 0x0, 0xe, 0xa, {}, {@mac=@local, {[0x0, 0xff]}}, 0x8000, 0x6, 0x0, 0xfffd, 0x6, 0x2, 'nr0\x00', 'macvtap0\x00', {0x7f}, {0xff}, 0x0, 0x42}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @empty, @dev={0xac, 0x14, 0x14, 0x40}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) (async) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) 1.672168097s ago: executing program 1 (id=793): ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000000)={0xcbb, 'syz1\x00'}) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1f4, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x16c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000001}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffff9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x9c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}]}]}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7b0}]}, @NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x4c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2000000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x101}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x10}, 0x40) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000b40)={&(0x7f0000000400)=@caif, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000480)="5920738232b43b7df058bd3a8ff3494bfcb60144d4cd964d6ecb7c2f343577749b9840013b8101af5723b0c58880d2f8c9a0686ee301424faeb06d9d816371b0db497e2b1ead9c7532d13b0307320c4fe54cf095d4546adf2fbcb6234a2b5d3430e1932600f3973d6ddfe5a6661a752e0853bea7a67d066f1c72379ac2473d6216470b93019c375ed4f64aec9d1daf0e6640dc5d", 0x94}, {&(0x7f0000000540)="2ccc947a93a3206852c98fe307f3750dc5400329937365f80ab51fc62cc5714fa34cdaf8974740b7fe602888913aa572ff50a9351afb14035c591e87b3465f56c887cb4a23602b4698d333173c55b6afd2cf10e588f7ea39eea1a829a4bb69e63f9b7dc6f6ef881a8a54cb4f708d903edbf62d96a4b942767ec0559afda9a29a32c423ce12a88a59fd3d50d6168a85de4397505e2a4d", 0x96}, {&(0x7f0000000600)="b71de4ee4456a8f3c3f883c3627a2cffac90797d5a2cbffdd573afdbb1f980f962435253c8bdc2e6ecc08dca711aa9836a6767f4f09af526c5137052082a67f1a8ae4de49ceb464fbfc268629d1afa65a5d2282e37e67ea5d8545dec44a6b678f1f999d3924a5f4e81ac2297717ae4a32d11cf53226a15411fce613accee23fe0d2a81c57631114cf7d050", 0x8b}, {&(0x7f00000006c0)="61a9c460cb3353cd00975929cc4e1f62b7cacc9529d73c49de62c1a4efac20105524dc5a4c056ea18ffad12f996eda0a0433c52760f73d48ebbc1449eb7da6be91e962b28e91bba9603b2b4d5b8b171aef5a84f1d9db5ba6dd158cabfb2626a19f8fa6cb8a4c0df649780784e624c4147cd679a1c308f63983120b80e100664b284b9e6d26f0af42f44d064c20f2802d30e29416fc164ffdb1b5488772dd15f98dd91ad6c58407043bb33eaafa1cbebb65a63a6cab3cc187e763f24143a5887f9f0289e9af88669d9b9d736f87f1e27012c3050e410c30", 0xd7}, {&(0x7f00000007c0)="5546f1de50b55692c16f25b8812ebf921fbdaf2ac97ecac9ef1da6a3a88d4945fed6f2ab65292354e0a15182b9", 0x2d}, {&(0x7f0000000800)="2cdd76b6cc08066afc830772b1593d1c0a91c48e955cc5ce12d7292a7473a8b2580c918dcacf1ebc65b9b8107804cd5c8e4cc23d8e425dcdc2a82e546d4b0d2cbf3ddc5fe39fc8470928df54020b4dac1523e5a2ccce194f820d831380cda62ebec2c6f63b2afef9ae2e7fd0ab64bed04452a746500bad4f0a90de19bea6", 0x7e}, {&(0x7f0000000880)="f109d8eba03acaf3c811e15a968190cacd420f7b9ab785ade48789a78ed9a7e3df2c2c", 0x23}, {&(0x7f00000008c0)="4e2fb5d36f27a236ffd70cbca3a618b8a3f7118336c1a0ca7eb4506b9139d30b561f6dd8f3df0e915e96f633ea6b0f70bf547e8b9b38f0770ba00522a3d7d0afb9d614c3ee754414ac52ac882044730234305712973d9db30f586f28fad6cd1acb022d85ed6dff5e2e41953f14d1c66dab3c25b23f582fff", 0x78}, {&(0x7f0000000940)="7e09344cd5b6c8ababbb75d4c1295e7ba30308af724ccd340dda7b8e46ed2af0878f2cb2416af8446ea5857e9805fd0ff06f3645488da7d45c322103a2a7d6e17104058399e6e4ace4bf5d5f2f67d3ad6ee606914fda54fa34ee713b5e9000ddc08251543e7276", 0x67}], 0x9, &(0x7f0000000a80)=[{0xb0, 0x10d, 0x1000, "7d8259cc8bbad1acde255859296af53b7687bfe22f84a36553de0652cebf1c1f1ab901e165701b3e83bd3181b822ef3145bb197a6f44b3d6ff9651d2dd621eaac4465e8735d45c98aab6e8b3179cf104d65095db99e9a5c09313e2379c65aac98f9c98cbf2b0f753564dc947dbaa1a3ca1dc93d41e2500a6509c14b17a76cfa4b5b1b6eb8b089cd19ec8862185e38a73ba7e31e3ba8e5d555c6346cebe"}], 0xb0}, 0x8000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x8c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffffff}]}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r5) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0x99, 0x80000000, 0x1, 0x26, 0xffffffffffffffff, 0x6, '\x00', r7, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INFO(r8, 0x0, 0x80, &(0x7f0000000f40)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0x3, 0x5, 0x0, 0x6, 0xc]}, &(0x7f0000000fc0)=0x78) socket$inet_icmp(0x2, 0x2, 0x1) sendto(r8, &(0x7f0000001000)="82829a33e537b805b9fcb4a994cda2b473ef64434bbe46efce420b9827a83f0ac10ed8e567a5110ec1df34ce927f4471308966348c92", 0x36, 0x20000040, &(0x7f0000001040)=@qipcrtr={0x2a, 0xffffffff, 0x1}, 0x80) r9 = accept$packet(0xffffffffffffffff, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001100)=0x14) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000001140)=@req3={0x7, 0x4, 0x7, 0x800, 0x8, 0xe4, 0x5}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001300)={&(0x7f00000011c0)={0x124, 0x3, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_PROTOINFO={0x68, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x64, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x80000000}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9f}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xec}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x8}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x10}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x3}]}}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0xfffffffa, 0x7, 0x428, 0x81, 0x6, 0x0, 0x4, 0x10001]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1404}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x124}, 0x1, 0x0, 0x0, 0x804}, 0x4000002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000013c0)="1c2fd64695fa239f51e9f79c956288f50d189f76d1e18c2f5c27de814cba88cf1efa7f970019bb5982876e04f01815304ab326490de6ebebe7efadd3f6d8c2429765e4be65c03ffed7874a7008129b21f612c8da459fe315a54ae98c1614859afecb6a37fd60ff59ec05b4357bcf33ac5d6fc345de9f5b656575da756c1b3cedd28255017002c9c54846affb733906cd95b5e15b17856297fe971cd20b385bf2cdf3a876079dfc6d", 0xa8}, {&(0x7f0000001480)="ba44af1e6f039950b93eb827622cc49193a9c510fb2c4404fd7886d3935883cb7e335f7c9df41eb801bee10a9ca06fa0e367b47b05869e0597f4", 0x3a}, {&(0x7f00000014c0)="2ebe1b7fe629c946b344a2154e3ba3196d4fcb28314fa079335720e9446338aca0447b1e30daa6246e7478ce51f6dc6c7b4f04a5cbb0b9081ec6f1d8bffc79879c43d4da0837b83b38d0e5ca67b81bdbd9bca13d336b5395c3dbb87feb7febe5b7db7ed3129e7f1ce6901138496d24bc8e528eb59982a076f82b1adcbdb4d26bd0f9ddab7505f4f90affcaa71f8b3b79036e6dd1630664a59654cf535affad61adee2c7bb52b186dec5a2e0f877225a67bebac0d24a5ccd44ab0b49170ea1f1359e26d2696985e41f560dffab5815533", 0xd0}], 0x3, &(0x7f0000001600)=[@hopopts_2292={{0xc8, 0x29, 0x36, {0x5e, 0x15, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @pad1, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x50, {0x2, 0x12, 0x4, 0x6, [0x0, 0x0, 0x1, 0xfffffffffffffffb, 0x7, 0x80000001, 0xf96, 0xffffffffffffff01, 0x229]}}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x4}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x38, {0x3, 0xc, 0x1, 0x1, [0x1, 0xcb, 0x8001, 0x7, 0xa9b6, 0x9]}}]}}}, @dstopts={{0x18, 0x29, 0x37, {0x11}}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x0, 0xa, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x9, 0x26, [0x10, 0x400, 0x0, 0x8, 0x3]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x40, 0xe0a9, [0x5, 0x7, 0x4]}}]}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x2c, 0x6, '\x00', [@hao={0xc9, 0x10, @private0}, @enc_lim, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0x4}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x1000}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @rthdrdstopts={{0x88, 0x29, 0x37, {0x0, 0xd, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x4, [0xe5b, 0x1]}}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x38, {0x3, 0xc, 0x71, 0x0, [0x104, 0x200, 0x1, 0xb, 0x4800000000000, 0x40]}}, @hao={0xc9, 0x10, @private2}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x3a, 0x6, '\x00', [@generic={0x5, 0x32, "185412f71e1473583a994f75e88a33e5e9b510c48a279c0fda88c5aa2bbad4d12b9674816f62e837d18072678984611e390d"}]}}}], 0x290}}], 0x1, 0x20000000) ioctl$VFAT_IOCTL_READDIR_SHORT(r10, 0x82307202, &(0x7f0000001900)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000001c40)={&(0x7f0000001b40), 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x54, 0x0, 0x102, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008890}, 0x4000000) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r11, 0x29, 0xd2, &(0x7f0000001c80)={{0xa, 0x4e20, 0x800000, @empty, 0x426b}, {0xa, 0x4e22, 0x17a, @private2, 0x10}, 0x1, {[0x9, 0x4, 0x4, 0xe, 0x80, 0x7f72, 0x100]}}, 0x5c) socket$nl_netfilter(0x10, 0x3, 0xc) 1.590775099s ago: executing program 2 (id=794): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1410, 0x34, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048000}, 0x40) 1.488483438s ago: executing program 1 (id=796): r0 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, 0x0, 0x0) (async) unshare(0x62040200) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) (async, rerun: 32) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req={0x400, 0x80000000, 0x99c7, 0x8}, 0x10) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) shutdown(r4, 0x2) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, r3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYBLOB="a1800000000053a230151280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="204c020000000000"], 0x48}}, 0x0) 1.386852149s ago: executing program 4 (id=797): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xdbd76c996685eb82, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffc}, {0x0, '\x00', 0x0, 0xfffffffc}]}, 0x108) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="49d6ca7c2bc241c852dc3a2cbb10c32a", 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 1.377579935s ago: executing program 2 (id=798): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0xc, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0xfffffffc}, 0x1c, 0x0}}], 0x1, 0x44) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x9, 'syz1\x00', @null, 0x6, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @null, @bcast]}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7}, {0xd}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1.370252681s ago: executing program 1 (id=799): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="4b780ebf00010000000000fe1c1f4e81fd13e4f9daa619dbdf2506000000089207e72a00fb000600010000000000010000f500ee1990a380ecab90050000000000000000000061bcd9b97154f9b861175dffb815ed791690e32f6957ecb96e032591"], 0x34}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001100), &(0x7f0000001140)='%pS \x00'}, 0x20) pipe(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x19, 0x23, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000008500ffdfa500000018460000fcffffff000000000000000018120000", @ANYRES32=0x1, @ANYRESHEX=r1], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0xb0, &(0x7f0000000880)=""/176, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3], &(0x7f0000001280)=[{0x4, 0x2, 0x200006, 0xb}], 0x10, 0xffff4be4, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/147, 0x93}, 0x6}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20000080, &(0x7f0000000300)={0xa, 0x4e1c, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) sendmsg$inet6(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/84, 0x54}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f4060000", @ANYRES8=0x0, @ANYRESDEC=r2, @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.22553561s ago: executing program 4 (id=801): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000004c0)=[{0x3, 0x4, {0x2, 0x0, 0x2}, {0x1, 0x1, 0x2}, 0x1, 0xfe}, {0x2, 0x1, {0x2, 0xf0}, {0x2, 0xff, 0x4}, 0xfe, 0x3}], 0x40) r4 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f00000009c0)=0x2, 0x4) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f00000001c0)={0x1d, r3, 0x3, {0x0, 0x1, 0x2}, 0x1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1.010398193s ago: executing program 5 (id=802): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911300000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000dc0)={0x24, @short={0x2, 0x1}}, 0x14) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x8, &(0x7f0000000980)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f00000009c0)='GPL\x00', 0x4d73, 0x52, &(0x7f0000000a00)=""/82, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000a80)=[r3, r1, r1, r1], &(0x7f0000000ac0)=[{0x3, 0x1, 0xe, 0x5}, {0x4, 0x2, 0x4, 0x7}, {0x2, 0x4, 0xd, 0x8}], 0x10, 0xc7, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000bc0)=@o_path={&(0x7f0000000940)='./file1\x00', r6, 0x4000, r2}, 0x18) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r5, 0x1f4d2000) close(r5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x700, 0x1, 0x60, 0x0, {{0x2d, 0x4, 0x1, 0x26, 0xb4, 0x68, 0x0, 0x7, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x44, 0xa4, 0x1, 0x7, [{@private=0xa010102, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7a26}, {@private=0xa010100, 0x5}, {@remote, 0x554}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@private=0xa010100, 0x70}]}, @end, @timestamp_addr={0x44, 0xc, 0xf0, 0x1, 0x1, [{@remote, 0x4}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0xba, 0x0, 0x4, [0x0, 0x7, 0x8, 0x1, 0x0, 0x5, 0x1000]}, @ssrr={0x89, 0x17, 0x43, [@broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast]}, @lsrr={0x83, 0x13, 0x18, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local]}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000680)={r0, 0x6, 0xcf, 0x75}) r10 = socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004800)=ANY=[], 0x1b4}}, 0x0) getsockopt$packet_int(r10, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x2a, &(0x7f0000000c00)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000182a0000", @ANYRES32, @ANYBLOB="000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ce0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850083943ab08bf6d98ea77273bd00ed964b93995aeb9793baaa96fd5738720cf3176a6b804f1f3b1caebde32b922f4ef2758e57611974a238cb5d3c9815c8971e"], &(0x7f0000000400)='syzkaller\x00', 0xb, 0xfb, &(0x7f0000000440)=""/251, 0x40f00, 0x1, '\x00', r8, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000007c0)=[r11, r12, r13], &(0x7f0000000800)=[{0x4, 0x1, 0x5, 0xc}, {0x5, 0x1, 0xc, 0xb}, {0x5, 0x1, 0x10}, {0x3, 0x1, 0x10, 0xc}, {0x1, 0x3, 0xe, 0xe}], 0x10, 0x8, @void, @value}, 0x94) 954.557577ms ago: executing program 2 (id=803): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=ANY=[@ANYBLOB="3950f514", @ANYRES16=r2, @ANYBLOB="410328bd7000fddbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000900)={0x458, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0x134, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xe4, 0x3, "47f876cd270704c69693750d3e5164f3b9dbb9b60a7d5634886b9f3c9a00de24e3bfb91701622f937f5c291ce226191612b850b385da7b47e9731f11d7d071a3d8499103cbc944be3fc792d68e439287749baee343b2a8d7b16d05263917c15f0ab6af83cb7267565492c9d105b1f0be39a6b75a43a425af588c76181d9535d5c297ca4abafc10cf0d63fa2649770864b06547d654ecaf1faada778eb61eb6f4fa582ce8ec22595a8cce731fb6e0058085da6d6eb46fd891d30b789dd6321cd43cb3f3ba1597ecb6e331d0833a847756c79796695283ba8c08602a21361ee906"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "6a99c73c3e803063522f949d37bae1df99c550e1d02337390d56"}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x73f1, @private1, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @loopback, 0xc53}}}}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xddce}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f02}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8887}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xcad}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc43}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x9ecd, @local, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @local}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffff8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77892ac3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x96f1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x32a741c2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffeff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x74a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x458}, 0x1, 0x0, 0x0, 0x44044000}, 0x240400e6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = getpid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000180)=r5) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)='g', 0x1}], 0x1}, 0x11) 945.392662ms ago: executing program 4 (id=804): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910446000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x28, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910446000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x28, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001440)={'ipvlan1\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/cgroup\x00') 912.371717ms ago: executing program 0 (id=805): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xf8, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0000001400010000000000fbdbdf25e0000001000000040000000000000000ac1414aa00000000000000000000001000000000000600000000802067000000", @ANYRES32=0x0, @ANYRES16=r5, @ANYBLOB="0000000003d531000a00100010", @ANYRES8=r5, @ANYRES64=r0, @ANYBLOB="f290b5c303d1a3e8894d7a21eac175bf18993fa21e5b0dbe0a60a334cb9e6ec589f5ac48479d6414741183ce5039757ff2b2d2a75b9db57a99ae7b2aff8ff2e68cfe06bca70be08e0c44dd0457130a4f47420857602abe21ec99d7c8c928391ad68fca45c10bf475f7eefe3003bb90b73d09e82b22262df2d01ffeddbaddb9ef1986a8b095b454da2ab9171c7380cebd0519b8daffc7cb561c2aa69d6599da9657c32469b14e34c62bf6562e776775e7781e79d8744e873cd1896369542390324be14f00e38c4bd295a182cb8c1faebc368f9cbd98f282b61bcc979ba8bb8f17eb568a81acaf3ad91a153e76e2fa64f7f582964150548c0e19377e476c", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRESOCT=r1, @ANYRESOCT=r1], 0x5c}}, 0x8000) 838.648664ms ago: executing program 2 (id=806): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='svc_unregister\x00', r1, 0x0, 0x6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000008b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000008b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r3) (async) close(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) pwritev(r3, &(0x7f0000000440)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x4000000, 0x80) sendfile(r2, r3, 0x0, 0x7ffff000) 823.687921ms ago: executing program 4 (id=807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000440), 0x4) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x200048c1) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) sendmsg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)='x', 0x1}], 0x1}, 0x4) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$tun(r6, &(0x7f0000007fc0)={@void, @val={0x0, 0x1, 0x5, 0x7ff, 0x5, 0x7fff}, @ipv6=@udp={0x2, 0x6, "6a64c4", 0x10, 0x11, 0x1, @mcast2, @mcast1, {[@routing={0x3a, 0x0, 0x2, 0xfd}], {0x4e23, 0x4e22, 0x8}}}}, 0x42) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000003db8a1c5f7f13c5cdb3409a66b227470d38652c4e4b7636d8f3c06d511e3980ac7c6875f3f121e7686f37006f8dd1bc58000a832f522099e986ae19038a06dcf6ee57911c756e9265533d157fea6ae511d7321fadb7f5b42bdf318c465903bb84ff6f54759a8d04081a4f700e1aa7402991fa01aa3ac2f0b9e590bc85a9f", @ANYRES16=r7, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r8, @ANYBLOB="06001200000000000600cd13000a00060008021100000000000c00430000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40404}, 0x0) 810.882328ms ago: executing program 5 (id=808): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x25dfdbff, {0x81, 0x80, 0x80}, [@FRA_SRC={0x14, 0x2, @mcast1}]}, 0x30}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x50) 586.782954ms ago: executing program 5 (id=809): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=@can={{}, 0x9, 0x0, 0x0, 0x0, "7eff90ddef5e1ea0"}, 0x10}, 0x2}, 0x404) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{0x7}, {0xfffffffe, 0x80003}]}}) 554.333868ms ago: executing program 0 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000040)=0xfff, 0x4) shutdown(r1, 0x8c5d47e95537ac9b) connect$llc(r2, &(0x7f0000000080)={0x1a, 0x302, 0x6, 0x53, 0x8, 0x2, @local}, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000108020000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0000100040000000ef4b1b0000000093bcffffff00000000000000"], 0x3c}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async) ioctl$FICLONE(r1, 0x40049409, r0) (async) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000040)=0xfff, 0x4) (async) shutdown(r1, 0x8c5d47e95537ac9b) (async) connect$llc(r2, &(0x7f0000000080)={0x1a, 0x302, 0x6, 0x53, 0x8, 0x2, @local}, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000108020000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0000100040000000ef4b1b0000000093bcffffff00000000000000"], 0x3c}}, 0x40) (async) 507.003067ms ago: executing program 5 (id=811): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0xa}]}]}]}]}, 0x34}}, 0x4000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000018000109000000000010000002180000ff0000060000000008000100ac1414"], 0x24}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) close(r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000008e04"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) recvmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)=""/112, 0x70}], 0x1}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x44050) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='$'], 0x20) unshare(0x2a020480) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r10, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r10, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r10, 0x1) r11 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="f2ffffffff07000000d2ede6d8e58657d93bc18e", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 409.258088ms ago: executing program 1 (id=812): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000001c0)=0x40000001, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r2, 0x0, r4, 0x0, 0x10d00, 0xf) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r9, 0x100}, 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x10, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2000c890}, 0x4) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x1, 0x65, 0xc, 0x2, 0x4, @multicast}, 0x10) 294.176856ms ago: executing program 0 (id=813): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003c00)=@newae={0x5c, 0x1e, 0x401, 0x70bd29, 0x25dfdbff, {{@in6=@loopback, 0x4d4, 0x2, 0xff}, @in6=@mcast2, 0xb5, 0x3507}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2b, 0x70bd2c, 0x70bd2c, 0x70bd2a, 0xfffffffe}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x2, 0x1, 0x3}, 0xfffffffffffffd8c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 180.941695ms ago: executing program 2 (id=814): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0xff], [], '\x00', 'veth0_to_team\x00'}, 0x0, 0x118, 0x178, 0x700, {}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@unspec=@limit={{0x48}, {0x0, 0x3, 0x0, 0x0, 0x20000}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xff0000ff, 0x0, 0xffffff00, 0xffffff00], 0x4e23, 0x4e23, 0x4e23, 0x4e20, 0xfffffff4, 0x0, 0x0, 0x8, 0x9}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xff000000, 0xd73e1135d3f8cc97], 'team_slave_0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x2e, 0xb, 0x0, 0x12}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0xff], [], '\x00', 'veth0_to_team\x00'}, 0x0, 0x118, 0x178, 0x700, {}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@unspec=@limit={{0x48}, {0x0, 0x3, 0x0, 0x0, 0x20000}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xff0000ff, 0x0, 0xffffff00, 0xffffff00], 0x4e23, 0x4e23, 0x4e23, 0x4e20, 0xfffffff4, 0x0, 0x0, 0x8, 0x9}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xff000000, 0xd73e1135d3f8cc97], 'team_slave_0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x2e, 0xb, 0x0, 0x12}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) 157.401245ms ago: executing program 1 (id=815): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) r2 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r2, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="8bed6b7ee1425d224c", 0x9}, {0x0}], 0x2}}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getchain={0x2c, 0x66, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x1b, 0x9}, {0x8, 0x4}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4001) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000000c0)=0xf, 0x4) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000320, 0x1, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff5, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20050800) 141.893965ms ago: executing program 0 (id=816): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000008000000000000000000000000000000d6d7ba000000b773c0f0a16aee94ca3a7294f067f39bd0cd0bdf59702b4defe46d93da2150ca8c6161799fbfa9189f7683c6bd2b780371e068ce6d6fcb388632b095b31d9c05952421975e70407a3b82534186e4a8242467649cc7926d06a60108593606ea26133abc46516ea213e47a", @ANYRES32=0x0, @ANYBLOB="2004020000000000240012800b00010065727370616e00001400028008001400000000000500160000000000"], 0x44}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000008000000000000000000000000000000d6d7ba000000b773c0f0a16aee94ca3a7294f067f39bd0cd0bdf59702b4defe46d93da2150ca8c6161799fbfa9189f7683c6bd2b780371e068ce6d6fcb388632b095b31d9c05952421975e70407a3b82534186e4a8242467649cc7926d06a60108593606ea26133abc46516ea213e47a", @ANYRES32=0x0, @ANYBLOB="2004020000000000240012800b00010065727370616e00001400028008001400000000000500160000000000"], 0x44}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0xf, 0x0, &(0x7f0000000040)) socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x2c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8}]}, 0x2c}}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @dev={0xac, 0x14, 0x14, 0x34}}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01050008000a00", @ANYRES32=r8, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r9], 0x24}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01050008000a00", @ANYRES32=r8, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r9], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TARGET={0x8}, @TCA_PIE_TUPDATE={0x8}]}}]}, 0x40}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5, 0x81, 0x3, 0x400, 0x9, 0x200, r10}) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) r12 = openat$cgroup_ro(r11, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r12, &(0x7f00000000c0), 0x12) (async) write$cgroup_int(r12, &(0x7f00000000c0), 0x12) sendmsg$NL80211_CMD_NEW_KEY(r12, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9345b61440f1c79683b35340ee"}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e9357204395a2b6c0d9e70d673"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8fc342a561"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "33557118c863236a521bcd57d7"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "66bceaa5bf"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "410bbf999e"}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x4000084) 62.522161ms ago: executing program 5 (id=817): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket(0x18, 0x3, 0x0) unshare(0x60480) (async) unshare(0x8000000) (async) getpeername$packet(r1, 0x0, &(0x7f00000001c0)=0x6c) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/19, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00,'], 0x4c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800"], 0x3c}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r6 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r6, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) (async) connect$netlink(r6, &(0x7f0000000000)=@unspec, 0xc) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000001c0)={0x7, [0x3, 0x6, 0xb6c, 0x3, 0x5, 0x4, 0xe]}, 0x12) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="2c000180"], 0x44}}, 0x2000000) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r2, 0x5}, 0x8) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="600000000314010029bd7000fddbdf250900020073797a3000000000040041"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=@bridge_newneigh={0x9c, 0x1c, 0x400, 0x70bd27, 0x25dfdbfc, {0x1c, 0x0, 0x0, r5, 0x2, 0x2, 0xa}, [@NDA_MASTER={0x8, 0x9, 0x571}, @NDA_MASTER={0x8, 0x9, 0xc6}, @NDA_FDB_EXT_ATTRS={0x1c, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x6}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}]}, @NDA_FDB_EXT_ATTRS={0x28, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x2}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}]}, @NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x29}}, @NDA_LINK_NETNSID={0x8, 0xa, 0xa}, @NDA_PROBES={0x8}, @NDA_PROTOCOL={0x5, 0xc, 0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40015}, 0x40010) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000006d00673c25bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0110040004e8020018003480140035006d3e6376746170300000000000000000140003"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001200937f2dbd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0044070000aff20900004280c9046fc003e5ca9fc1a068aa47d10500"], 0x28}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000004200)="2000000021008108090f9becdb4cb92e02000069fe6b02015400000000000000", 0x20}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@ipv6_deladdr={0x3c, 0x15, 0x400, 0x70bd2d, 0x25dfdbfe, {0xa, 0x1, 0x31, 0xc8, r12}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_CACHEINFO={0x14, 0x6, {0x3, 0x5, 0x1fc, 0xbe}}, @IFA_FLAGS={0x8, 0x8, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x811}, 0x0) 10.32292ms ago: executing program 2 (id=818): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x1, 0xffffffff, 0x5, 0x101}, 0x6, 0x1, 0x5, 0x0, 0x65, 0x9, 0xe, 0xa, 0x6, 0x80000001, {0x2, 0x5, 0x1ff, 0x6, 0xe7b, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x522, 0xffff41bd, 0x8, 0x20, 0x1, 0x4, '\x00', r4, r6, 0x2, 0x3, 0x3, 0x2, @void, @value, @void, @value}, 0x50) 0s ago: executing program 5 (id=819): sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000700)={0x0, 0x5}, &(0x7f0000000740)=0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000980), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x18}, 0x2000c084) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x8, 0xc, 0x1, 0x51, @local, @loopback={0x0, 0x460c6}, 0x8000, 0x0, 0x1}}) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. [ 81.612546][ T5820] cgroup: Unknown subsys name 'net' [ 81.730064][ T5820] cgroup: Unknown subsys name 'cpuset' [ 81.739378][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.396199][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.991663][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.000268][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.008037][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.016243][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.023999][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.033140][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.043447][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.053481][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.077628][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.086156][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.099035][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.107097][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.112809][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.123099][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.130536][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.139429][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.147861][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.155788][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.164594][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.165879][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.174096][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.181741][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.186573][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.201790][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.224940][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.785288][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 86.824893][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 87.187128][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 87.204953][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 87.222739][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.230724][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.240825][ T5834] bridge_slave_0: entered allmulticast mode [ 87.249252][ T5834] bridge_slave_0: entered promiscuous mode [ 87.288635][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.298269][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.305463][ T5834] bridge_slave_1: entered allmulticast mode [ 87.312799][ T5834] bridge_slave_1: entered promiscuous mode [ 87.443637][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.453812][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.461207][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.468507][ T5830] bridge_slave_0: entered allmulticast mode [ 87.475871][ T5830] bridge_slave_0: entered promiscuous mode [ 87.483064][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 87.508678][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.518492][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.525822][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.533055][ T5830] bridge_slave_1: entered allmulticast mode [ 87.540545][ T5830] bridge_slave_1: entered promiscuous mode [ 87.671574][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.685100][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.694475][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.701844][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.709203][ T5842] bridge_slave_0: entered allmulticast mode [ 87.717145][ T5842] bridge_slave_0: entered promiscuous mode [ 87.751810][ T5834] team0: Port device team_slave_0 added [ 87.778244][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.785436][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.792816][ T5842] bridge_slave_1: entered allmulticast mode [ 87.801596][ T5842] bridge_slave_1: entered promiscuous mode [ 87.808626][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.816572][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.823882][ T5838] bridge_slave_0: entered allmulticast mode [ 87.832502][ T5838] bridge_slave_0: entered promiscuous mode [ 87.842218][ T5834] team0: Port device team_slave_1 added [ 87.911262][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.918523][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.926861][ T5838] bridge_slave_1: entered allmulticast mode [ 87.934173][ T5838] bridge_slave_1: entered promiscuous mode [ 87.971503][ T5830] team0: Port device team_slave_0 added [ 87.980270][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.993340][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.061793][ T5830] team0: Port device team_slave_1 added [ 88.088293][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.101821][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.112072][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.119339][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.145875][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.157083][ T5836] Bluetooth: hci0: command tx timeout [ 88.162901][ T5836] Bluetooth: hci1: command tx timeout [ 88.169953][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.177540][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.184770][ T5839] bridge_slave_0: entered allmulticast mode [ 88.192114][ T5839] bridge_slave_0: entered promiscuous mode [ 88.226319][ T5841] Bluetooth: hci3: command tx timeout [ 88.227560][ T5836] Bluetooth: hci2: command tx timeout [ 88.267571][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.274568][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.301293][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.312697][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.316712][ T5836] Bluetooth: hci4: command tx timeout [ 88.320626][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.332701][ T5839] bridge_slave_1: entered allmulticast mode [ 88.340377][ T5839] bridge_slave_1: entered promiscuous mode [ 88.377600][ T5842] team0: Port device team_slave_0 added [ 88.384250][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.391632][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.418101][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.434792][ T5838] team0: Port device team_slave_0 added [ 88.463299][ T5842] team0: Port device team_slave_1 added [ 88.483670][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.491029][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.517126][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.538332][ T5838] team0: Port device team_slave_1 added [ 88.565414][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.589872][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.596999][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.623933][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.663423][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.670452][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.696899][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.711334][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.718475][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.744611][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.770728][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.794937][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.802096][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.828172][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.875281][ T5834] hsr_slave_0: entered promiscuous mode [ 88.882711][ T5834] hsr_slave_1: entered promiscuous mode [ 88.911641][ T5839] team0: Port device team_slave_0 added [ 88.920821][ T5839] team0: Port device team_slave_1 added [ 88.946533][ T5830] hsr_slave_0: entered promiscuous mode [ 88.953104][ T5830] hsr_slave_1: entered promiscuous mode [ 88.959577][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.967520][ T5830] Cannot create hsr debugfs directory [ 89.059349][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.066512][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.095768][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.126222][ T5838] hsr_slave_0: entered promiscuous mode [ 89.132733][ T5838] hsr_slave_1: entered promiscuous mode [ 89.139229][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.146992][ T5838] Cannot create hsr debugfs directory [ 89.172368][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.179746][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.205823][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.264155][ T5842] hsr_slave_0: entered promiscuous mode [ 89.270784][ T5842] hsr_slave_1: entered promiscuous mode [ 89.278143][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.286575][ T5842] Cannot create hsr debugfs directory [ 89.380643][ T5839] hsr_slave_0: entered promiscuous mode [ 89.387762][ T5839] hsr_slave_1: entered promiscuous mode [ 89.413421][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.422985][ T5839] Cannot create hsr debugfs directory [ 89.918199][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.937069][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.950326][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.960979][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.038912][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.050644][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.065269][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.080931][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.174217][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.184573][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.202411][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.215129][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.225915][ T5836] Bluetooth: hci1: command tx timeout [ 90.231374][ T5841] Bluetooth: hci0: command tx timeout [ 90.309986][ T5841] Bluetooth: hci2: command tx timeout [ 90.315706][ T5841] Bluetooth: hci3: command tx timeout [ 90.323229][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.336259][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.370206][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.380880][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.389698][ T5836] Bluetooth: hci4: command tx timeout [ 90.445184][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.510464][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.541633][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.550346][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.563604][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.582970][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.612397][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.643435][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.650732][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.673808][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.680967][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.761921][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.786883][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.794030][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.833929][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.841309][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.879161][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.933552][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.982138][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.041933][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.058351][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.065708][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.171169][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.178433][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.201193][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.208450][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.243298][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.250493][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.297330][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.405332][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.429587][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.443903][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.460172][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.467400][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.583110][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.590383][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.840502][ T5838] veth0_vlan: entered promiscuous mode [ 91.892612][ T5838] veth1_vlan: entered promiscuous mode [ 91.923764][ T978] cfg80211: failed to load regulatory.db [ 92.072058][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.097472][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.107996][ T5838] veth0_macvtap: entered promiscuous mode [ 92.137127][ T5838] veth1_macvtap: entered promiscuous mode [ 92.145471][ T5830] veth0_vlan: entered promiscuous mode [ 92.184857][ T5830] veth1_vlan: entered promiscuous mode [ 92.212806][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.228229][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.253889][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.282864][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.292871][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.302781][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.315035][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.324198][ T5836] Bluetooth: hci0: command tx timeout [ 92.324353][ T5836] Bluetooth: hci1: command tx timeout [ 92.366672][ T5834] veth0_vlan: entered promiscuous mode [ 92.374096][ T5842] veth0_vlan: entered promiscuous mode [ 92.386699][ T5841] Bluetooth: hci3: command tx timeout [ 92.392157][ T5841] Bluetooth: hci2: command tx timeout [ 92.416339][ T5842] veth1_vlan: entered promiscuous mode [ 92.436712][ T5830] veth0_macvtap: entered promiscuous mode [ 92.459718][ T5830] veth1_macvtap: entered promiscuous mode [ 92.468219][ T5841] Bluetooth: hci4: command tx timeout [ 92.481970][ T5834] veth1_vlan: entered promiscuous mode [ 92.514610][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.530295][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.541863][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.629729][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.640186][ T5834] veth0_macvtap: entered promiscuous mode [ 92.651391][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.663313][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.674034][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.689891][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.698821][ T5839] veth0_vlan: entered promiscuous mode [ 92.714757][ T5842] veth0_macvtap: entered promiscuous mode [ 92.729042][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.738483][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.747335][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.756634][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.775597][ T5839] veth1_vlan: entered promiscuous mode [ 92.784106][ T5834] veth1_macvtap: entered promiscuous mode [ 92.808758][ T5842] veth1_macvtap: entered promiscuous mode [ 92.861763][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.875705][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.886204][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.897507][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.908859][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.919736][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.929145][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.931119][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.950014][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.965167][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.976127][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.986014][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.996588][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.008293][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.038004][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.049255][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.059697][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.071165][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.082747][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.091686][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.102329][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.113587][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.125089][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.135320][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.145875][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.157338][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.170949][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.183372][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.194243][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.203250][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.254940][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.272319][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.287980][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.296869][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.321064][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.372288][ T5839] veth0_macvtap: entered promiscuous mode [ 93.497446][ T5839] veth1_macvtap: entered promiscuous mode [ 93.497891][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.527755][ T1288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.542558][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.551187][ T1288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.614928][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.627328][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.638562][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.649656][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.659574][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.671095][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.681904][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.692436][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.704950][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.748204][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.750145][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.772218][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.784574][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.795473][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.806512][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.816504][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.827824][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.838045][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.850347][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.864289][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.961695][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.974261][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.989926][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.999886][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.036801][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.052688][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.137023][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.167861][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.387646][ T5841] Bluetooth: hci1: command tx timeout [ 94.393939][ T5841] Bluetooth: hci0: command tx timeout [ 94.466386][ T5841] Bluetooth: hci2: command tx timeout [ 94.471978][ T5836] Bluetooth: hci3: command tx timeout [ 94.496473][ T5928] Bluetooth: MGMT ver 1.23 [ 94.546459][ T5841] Bluetooth: hci4: command tx timeout [ 94.548382][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.606158][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.607968][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.622336][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.719851][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.766200][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.857076][ T5937] IPVS: stopping backup sync thread 5938 ... [ 95.056780][ T5948] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.237685][ T5944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9'. [ 95.322174][ T5944] vlan2: entered promiscuous mode [ 95.356847][ T5944] bond0: entered promiscuous mode [ 95.365140][ T5944] bond_slave_0: entered promiscuous mode [ 95.412191][ T5944] bond_slave_1: entered promiscuous mode [ 95.432589][ T5964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.498456][ T5964] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.624293][ T5970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10'. [ 96.431217][ T6000] Bluetooth: MGMT ver 1.23 [ 96.463495][ T6002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'. [ 96.507953][ T6002] Zero length message leads to an empty skb [ 97.350723][ T6015] syz_tun: entered allmulticast mode [ 97.371189][ T6015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.21'. [ 97.402462][ T6015] dvmrp8: entered allmulticast mode [ 97.412376][ T6014] syz_tun: left allmulticast mode [ 97.418806][ T6014] dvmrp8: left allmulticast mode [ 97.688415][ T6026] netlink: 'syz.4.23': attribute type 1 has an invalid length. [ 97.897548][ T6035] netlink: 'syz.1.26': attribute type 4 has an invalid length. [ 97.926962][ T6035] netlink: 17 bytes leftover after parsing attributes in process `syz.1.26'. [ 97.958108][ T6039] vxcan2: entered promiscuous mode [ 98.378134][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.31'. [ 98.398323][ T6055] netlink: 40 bytes leftover after parsing attributes in process `syz.3.34'. [ 98.544179][ T6063] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 98.902914][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 98.965363][ T6080] netlink: 72 bytes leftover after parsing attributes in process `syz.4.38'. [ 99.551933][ T6116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.46'. [ 100.601975][ T6141] syz.2.53 uses obsolete (PF_INET,SOCK_PACKET) [ 100.977941][ T6152] netlink: 'syz.0.58': attribute type 39 has an invalid length. [ 101.608168][ T6182] openvswitch: netlink: Actions may not be safe on all matching packets [ 102.612993][ T6200] syz.1.72 uses old SIOCAX25GETINFO [ 102.844674][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'. [ 102.909240][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 103.099839][ T6189] 8021q: VLANs not supported on tunl0 [ 103.562501][ T6227] xt_time: unknown flags 0x4 [ 103.620434][ T6231] tipc: Started in network mode [ 103.632813][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 103.635746][ T6231] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 103.708868][ T6231] tipc: Enabled bearer , priority 10 [ 103.835052][ T6240] netlink: 9 bytes leftover after parsing attributes in process `syz.0.82'. [ 103.917217][ T6240] 0·: renamed from hsr0 (while UP) [ 103.950681][ T6240] 0·: entered allmulticast mode [ 103.973195][ T6240] hsr_slave_0: entered allmulticast mode [ 103.985822][ T6240] hsr_slave_1: entered allmulticast mode [ 103.992907][ T6240] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 104.414847][ T6260] nftables ruleset with unbound chain [ 104.447922][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'. [ 104.675310][ T6260] bridge0: port 3(erspan0) entered blocking state [ 104.726206][ T6260] bridge0: port 3(erspan0) entered disabled state [ 104.733015][ T6260] erspan0: entered allmulticast mode [ 104.753538][ T5882] tipc: Node number set to 9480874 [ 104.787220][ T6260] erspan0: entered promiscuous mode [ 104.810686][ T6260] bridge0: port 3(erspan0) entered blocking state [ 104.817474][ T6260] bridge0: port 3(erspan0) entered forwarding state [ 105.013772][ T6279] tipc: Started in network mode [ 105.155964][ T6279] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 105.184904][ T6279] tipc: Enabled bearer , priority 10 [ 105.599086][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 105.625761][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 105.792137][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 105.820238][ T6299] vcan0: entered promiscuous mode [ 105.869317][ T6297] netlink: 'syz.4.97': attribute type 4 has an invalid length. [ 106.254186][ T6316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.102'. [ 106.297299][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 106.307587][ T5882] tipc: Node number set to 9480874 [ 106.449117][ T6322] netlink: 'syz.0.105': attribute type 11 has an invalid length. [ 106.923850][ T6335] netlink: 'syz.2.108': attribute type 5 has an invalid length. [ 107.043468][ T6334] bridge0: port 3(gretap0) entered blocking state [ 107.088822][ T6334] bridge0: port 3(gretap0) entered disabled state [ 107.113272][ T6334] gretap0: entered allmulticast mode [ 107.159438][ T6334] gretap0: entered promiscuous mode [ 107.176419][ T6334] bridge0: port 3(gretap0) entered blocking state [ 107.183197][ T6334] bridge0: port 3(gretap0) entered forwarding state [ 107.309833][ T6353] xfrm1: entered promiscuous mode [ 107.346164][ T6353] xfrm1: entered allmulticast mode [ 107.410383][ T6358] vxcan3: entered promiscuous mode [ 107.565910][ T6359] vxcan5: entered promiscuous mode [ 107.710308][ T6381] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 107.769308][ T6381] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 108.054247][ T6393] __nla_validate_parse: 9 callbacks suppressed [ 108.054268][ T6393] netlink: 9 bytes leftover after parsing attributes in process `syz.3.123'. [ 108.161886][ T6393] gretap0: entered promiscuous mode [ 108.889325][ T6408] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.902493][ T6426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.133'. [ 111.974264][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 112.010705][ T6447] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 112.034971][ T5843] IPVS: starting estimator thread 0... [ 112.155978][ T6453] IPVS: using max 28 ests per chain, 67200 per kthread [ 112.175153][ T6452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.499518][ T6452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.748532][ T6452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.905153][ T6452] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.079398][ T6486] netlink: 17 bytes leftover after parsing attributes in process `syz.1.146'. [ 113.101027][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 113.107784][ T6452] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.213683][ T6452] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.262098][ T6452] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.288780][ T6452] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.512957][ T6498] netlink: 16 bytes leftover after parsing attributes in process `syz.3.151'. [ 113.932769][ T6519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.157'. [ 113.948652][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 114.109287][ T6527] netlink: 60 bytes leftover after parsing attributes in process `syz.0.159'. [ 114.480307][ T6546] netlink: 'syz.0.163': attribute type 2 has an invalid length. [ 114.542840][ T6546] netlink: 165 bytes leftover after parsing attributes in process `syz.0.163'. [ 114.587501][ T6546] netlink: 277 bytes leftover after parsing attributes in process `syz.0.163'. [ 114.860061][ T6566] netlink: 'syz.1.170': attribute type 10 has an invalid length. [ 114.898204][ T6566] netlink: 40 bytes leftover after parsing attributes in process `syz.1.170'. [ 114.922174][ T6566] bridge0: port 4(dummy0) entered blocking state [ 114.939452][ T6566] bridge0: port 4(dummy0) entered disabled state [ 114.969709][ T6566] dummy0: entered allmulticast mode [ 115.044112][ T6566] dummy0: entered promiscuous mode [ 115.090519][ T6566] bridge0: port 4(dummy0) entered blocking state [ 115.090900][ T6569] netlink: 40 bytes leftover after parsing attributes in process `syz.1.170'. [ 115.097754][ T6566] bridge0: port 4(dummy0) entered forwarding state [ 115.518616][ T6590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.601942][ T6587] netlink: 'syz.0.175': attribute type 21 has an invalid length. [ 115.615733][ T6587] netlink: 'syz.0.175': attribute type 5 has an invalid length. [ 115.651955][ T6587] netlink: 'syz.0.175': attribute type 6 has an invalid length. [ 116.367611][ T6617] trusted_key: syz.3.184 sent an empty control message without MSG_MORE. [ 117.887519][ T6694] bridge1: entered promiscuous mode [ 117.892815][ T6694] bridge1: entered allmulticast mode [ 117.952015][ T6701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.993650][ T6694] team0: Port device bridge1 added [ 118.320559][ T6716] __nla_validate_parse: 5 callbacks suppressed [ 118.320578][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 118.345321][ T6701] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 118.380906][ T6701] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 118.767140][ T6727] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 119.123083][ T6739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.212'. [ 119.190346][ T6742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.214'. [ 119.200450][ T6739] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 119.641977][ T6758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.218'. [ 119.674119][ T6758] IPVS: set_ctl: invalid protocol: 98 172.20.20.42:20003 [ 119.806749][ T6766] netlink: 88 bytes leftover after parsing attributes in process `syz.3.220'. [ 119.825434][ T6766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.220'. [ 119.900636][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 120.363115][ T6785] IPVS: Scheduler module ip_vs_sip not found [ 120.705311][ T6812] netlink: 144 bytes leftover after parsing attributes in process `syz.0.227'. [ 120.796097][ T6813] netlink: 144 bytes leftover after parsing attributes in process `syz.0.227'. [ 120.843951][ T6822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.229'. [ 121.723041][ T53] tipc: Subscription rejected, illegal request [ 121.748838][ T6866] netlink: 'syz.2.237': attribute type 29 has an invalid length. [ 121.794394][ T6866] netlink: 'syz.2.237': attribute type 29 has an invalid length. [ 121.851656][ T6827] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 122.234262][ T6888] netlink: 'syz.1.244': attribute type 1 has an invalid length. [ 122.346952][ T6888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.374997][ T6885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.382585][ T6885] bond1: (slave vcan0): The slave device specified does not support setting the MAC address [ 122.396090][ T6885] bond1: (slave vcan0): Error -95 calling set_mac_address [ 123.902850][ T6963] dvmrp8: entered allmulticast mode [ 123.941444][ T6962] dvmrp8: left allmulticast mode [ 124.061236][ T6968] sctp: [Deprecated]: syz.4.266 (pid 6968) Use of int in max_burst socket option. [ 124.061236][ T6968] Use struct sctp_assoc_value instead [ 124.167120][ T6969] Driver unsupported XDP return value 0 on prog (id 187) dev N/A, expect packet loss! [ 124.209096][ T6975] tipc: Started in network mode [ 124.214029][ T6975] tipc: Node identity feffffffffffffff0000000000000001, cluster identity 4711 [ 124.264654][ T6975] tipc: Enabling of bearer rejected, failed to enable media [ 124.390202][ T6986] __nla_validate_parse: 4 callbacks suppressed [ 124.390223][ T6986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.272'. [ 124.446672][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'. [ 125.325690][ T7023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'. [ 125.359430][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'. [ 125.373257][ T7027] netlink: 32 bytes leftover after parsing attributes in process `syz.0.285'. [ 125.656292][ T7042] netlink: 96 bytes leftover after parsing attributes in process `syz.2.290'. [ 125.753405][ T7042] netlink: 84 bytes leftover after parsing attributes in process `syz.2.290'. [ 126.167842][ T7070] netlink: 44 bytes leftover after parsing attributes in process `syz.1.297'. [ 126.305932][ T10] IPVS: starting estimator thread 0... [ 126.337125][ T7070] Cannot find del_set index 1 as target [ 126.426892][ T7077] IPVS: using max 25 ests per chain, 60000 per kthread [ 126.783480][ T7093] netlink: 28 bytes leftover after parsing attributes in process `syz.4.304'. [ 126.800445][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 126.884391][ T7097] netlink: 'syz.0.307': attribute type 10 has an invalid length. [ 127.117011][ T7119] ipvlan2: entered promiscuous mode [ 127.124443][ T7119] bridge0: port 3(ipvlan2) entered blocking state [ 127.131240][ T7119] bridge0: port 3(ipvlan2) entered disabled state [ 127.140380][ T7119] ipvlan2: entered allmulticast mode [ 127.148127][ T7119] bridge0: entered allmulticast mode [ 127.162130][ T7119] ipvlan2: left allmulticast mode [ 127.172602][ T7119] bridge0: left allmulticast mode [ 127.934252][ T7158] netlink: 'syz.2.325': attribute type 3 has an invalid length. [ 128.430355][ T10] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 128.499489][ T10] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 128.599114][ T10] hid-generic 0005:0458:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 128.675793][ T7185] Cannot find add_set index 0 as target [ 128.732883][ T7201] netlink: 'syz.0.334': attribute type 10 has an invalid length. [ 128.765614][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.778066][ T7201] bridge_slave_1: left allmulticast mode [ 128.783771][ T7201] bridge_slave_1: left promiscuous mode [ 128.843578][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.917278][ T7201] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 129.006089][ T7220] netlink: 'syz.1.339': attribute type 3 has an invalid length. [ 129.166221][ T7234] netlink: 'syz.0.342': attribute type 7 has an invalid length. [ 129.276858][ T36] tipc: Subscription rejected, illegal request [ 129.324266][ T7223] syzkaller0: entered promiscuous mode [ 129.339225][ T7223] syzkaller0: entered allmulticast mode [ 129.357268][ T7233] bridge_slave_1: entered allmulticast mode [ 129.547019][ T7248] __nla_validate_parse: 10 callbacks suppressed [ 129.547038][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.346'. [ 131.113406][ T7263] tipc: Started in network mode [ 131.120754][ T7263] tipc: Node identity , cluster identity 4711 [ 131.128934][ T7263] tipc: Failed to set node id, please configure manually [ 131.137587][ T7263] tipc: Enabling of bearer rejected, failed to enable media [ 131.488528][ T7287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.353'. [ 131.524888][ T7288] netlink: 28 bytes leftover after parsing attributes in process `syz.1.353'. [ 131.586326][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 131.597659][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 131.636603][ T7297] netlink: 'syz.3.355': attribute type 4 has an invalid length. [ 131.662103][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 131.919545][ T7319] netlink: 32 bytes leftover after parsing attributes in process `syz.2.363'. [ 132.071951][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 132.132816][ T7325] macvtap1: entered promiscuous mode [ 132.138305][ T7325] vlan0: entered promiscuous mode [ 132.143831][ T7325] macvtap1: entered allmulticast mode [ 132.149441][ T7325] vlan0: entered allmulticast mode [ 132.154666][ T7325] veth0_vlan: entered allmulticast mode [ 132.570759][ T7356] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 132.778810][ T7366] veth1_macvtap: left promiscuous mode [ 132.870488][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.914204][ T7374] netlink: 'syz.0.378': attribute type 30 has an invalid length. [ 132.983370][ T7374] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.992189][ T7374] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.000946][ T7374] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.009905][ T7374] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.060901][ T7374] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.069822][ T7374] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.078504][ T7374] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.086965][ T7374] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 133.240342][ T7383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.381'. [ 133.252187][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 133.262647][ T7384] netdevsim netdevsim4: Direct firmware load for . [ 133.262647][ T7384] failed with error -2 [ 133.273880][ T7384] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 133.273880][ T7384] [ 133.824182][ T5841] Bluetooth: hci4: link tx timeout [ 133.831575][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.833526][ T7408] netlink: 'syz.0.388': attribute type 1 has an invalid length. [ 133.848582][ T5836] Bluetooth: hci4: link tx timeout [ 133.853750][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.890018][ T7424] netlink: 'syz.3.390': attribute type 1 has an invalid length. [ 134.116834][ T7433] netlink: 76 bytes leftover after parsing attributes in process `syz.1.392'. [ 134.118133][ T7426] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 134.139728][ T1288] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 134.157431][ T7431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.264404][ T36] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 134.305125][ T7424] veth3: entered promiscuous mode [ 134.327692][ T7424] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 134.341490][ T7444] lo: entered allmulticast mode [ 134.379398][ T7444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 134.418745][ T7426] bridge_slave_0: left allmulticast mode [ 134.434572][ T7426] bridge_slave_0: left promiscuous mode [ 134.447791][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.462363][ T7426] bridge_slave_1: left allmulticast mode [ 134.469423][ T7426] bridge_slave_1: left promiscuous mode [ 134.475614][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.492387][ T7426] bond0: (slave bond_slave_0): Releasing backup interface [ 134.532399][ T7426] bond0: (slave bond_slave_1): Releasing backup interface [ 134.601259][ T7426] team0: Port device team_slave_0 removed [ 134.633085][ T7426] team0: Port device team_slave_1 removed [ 134.654711][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.662698][ T7426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.671808][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.680787][ T7426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.699902][ T7426] bond1: (slave ip6gretap1): Removing an active aggregator [ 134.708892][ T7426] bond1: (slave ip6gretap1): Releasing backup interface [ 134.730831][ T7426] bond1: (slave ip6gretap1): the permanent HWaddr of slave - f2:a2:12:fa:47:be - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 134.762332][ T7426] bond1: (slave veth3): Releasing backup interface [ 134.825008][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 135.016159][ T7471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.399'. [ 135.339761][ T7499] netlink: 'syz.1.406': attribute type 5 has an invalid length. [ 135.378521][ T7499] netlink: 'syz.1.406': attribute type 1 has an invalid length. [ 135.483639][ T7499] bond2: entered promiscuous mode [ 135.489245][ T7499] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.550032][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.409'. [ 135.881423][ T7533] netlink: 256 bytes leftover after parsing attributes in process `syz.0.415'. [ 135.885446][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 135.910971][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 136.021616][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'. [ 136.236207][ T7557] netlink: 60 bytes leftover after parsing attributes in process `syz.1.423'. [ 136.301932][ T7557] unsupported nlmsg_type 40 [ 136.307683][ T7562] netlink: 'syz.3.424': attribute type 10 has an invalid length. [ 136.336713][ T7562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.424'. [ 136.538110][ T7575] netlink: 'syz.1.426': attribute type 1 has an invalid length. [ 136.582659][ T7562] team0: Port device geneve0 added [ 136.653942][ T7582] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 136.675298][ T7575] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.711234][ T7577] bond3: (slave veth3): Enslaving as an active interface with a down link [ 136.925424][ T7588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.428'. [ 137.008446][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 137.063237][ T7595] ip6tnl1: entered promiscuous mode [ 137.068886][ T7595] ip6tnl1: entered allmulticast mode [ 137.346998][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 137.372235][ T7603] openvswitch: netlink: EtherType 0 is less than min 600 [ 137.787856][ T7629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.010301][ T7600] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 138.069369][ T7637] xt_hashlimit: size too large, truncated to 1048576 [ 138.724548][ T7655] ip6tnl1: entered promiscuous mode [ 138.730903][ T7655] ip6tnl1: entered allmulticast mode [ 138.755310][ T7655] team0: Device ip6tnl1 is of different type [ 139.149063][ T7665] team0 (unregistering): Port device geneve0 removed [ 139.269053][ T5841] Bluetooth: hci3: command 0x0401 tx timeout [ 139.411630][ T7690] netlink: 'syz.3.456': attribute type 3 has an invalid length. [ 139.808378][ T7707] netlink: 'syz.4.461': attribute type 3 has an invalid length. [ 140.004294][ T7711] tipc: Can't bind to reserved service type 1 [ 140.431390][ T7720] wireguard0: entered promiscuous mode [ 140.772778][ T7746] netlink: 'syz.4.469': attribute type 7 has an invalid length. [ 140.878951][ T7746] netlink: 'syz.4.469': attribute type 4 has an invalid length. [ 141.059696][ T7759] __nla_validate_parse: 4 callbacks suppressed [ 141.059717][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 141.163617][ T7759] xt_TCPMSS: Only works on TCP SYN packets [ 141.190288][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 142.026063][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.482'. [ 142.035000][ T7798] nbd: illegal input index -381222912 [ 143.068481][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'. [ 143.113455][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 143.116190][ T7836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.491'. [ 143.133308][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 143.229465][ T7836] netlink: 148 bytes leftover after parsing attributes in process `syz.0.491'. [ 143.243498][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 143.724349][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 143.743892][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 143.774418][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 143.853621][ T7853] netlink: 'syz.2.495': attribute type 4 has an invalid length. [ 144.063414][ T7864] netlink: 'syz.1.498': attribute type 10 has an invalid length. [ 144.071365][ T7864] veth0_vlan: entered allmulticast mode [ 144.079632][ T7864] bridge0: port 5(veth0_vlan) entered blocking state [ 144.087172][ T7864] bridge0: port 5(veth0_vlan) entered disabled state [ 144.097842][ T7864] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 144.190727][ T7877] sctp: [Deprecated]: syz.2.500 (pid 7877) Use of int in maxseg socket option. [ 144.190727][ T7877] Use struct sctp_assoc_value instead [ 144.288638][ T7881] netlink: 'syz.0.504': attribute type 9 has an invalid length. [ 144.962995][ T7914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.971796][ T7914] bridge0: port 2(bond1) entered blocking state [ 144.984331][ T7914] bridge0: port 2(bond1) entered disabled state [ 144.994929][ T7914] bond1: entered allmulticast mode [ 145.005038][ T7914] bond1: entered promiscuous mode [ 145.011077][ T7914] bridge0: port 2(bond1) entered blocking state [ 145.017785][ T7914] bridge0: port 2(bond1) entered forwarding state [ 145.026492][ T7912] netlink: 'syz.1.511': attribute type 3 has an invalid length. [ 145.186321][ T7932] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 145.301693][ T7932] team0: Device veth0_vlan failed to register rx_handler [ 145.370362][ T62] bridge0: port 2(bond1) entered disabled state [ 145.422980][ T7932] syz.0.515 (7932) used greatest stack depth: 20120 bytes left [ 145.507629][ T7943] netlink: 'syz.0.519': attribute type 3 has an invalid length. [ 145.518270][ T7943] netlink: 'syz.0.519': attribute type 1 has an invalid length. [ 145.904368][ T7963] netlink: 'syz.1.526': attribute type 2 has an invalid length. [ 145.917695][ T7961] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig [ 146.219683][ T7955] IPv6: sit2: Disabled Multicast RS [ 146.798515][ T7998] __nla_validate_parse: 11 callbacks suppressed [ 146.798534][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 146.863600][ T8000] netlink: 'syz.2.538': attribute type 11 has an invalid length. [ 146.872152][ T8000] netlink: 52 bytes leftover after parsing attributes in process `syz.2.538'. [ 147.071958][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 147.930081][ T8032] netlink: 'syz.1.546': attribute type 10 has an invalid length. [ 147.938810][ T8032] veth1_vlan: entered allmulticast mode [ 147.952816][ T8032] team0: Device veth1_vlan failed to register rx_handler [ 148.042824][ T8040] netlink: 24 bytes leftover after parsing attributes in process `syz.4.547'. [ 148.059002][ T8040] netlink: 10 bytes leftover after parsing attributes in process `syz.4.547'. [ 148.092341][ T8048] netlink: 'syz.0.544': attribute type 1 has an invalid length. [ 148.135208][ T8048] netlink: 212 bytes leftover after parsing attributes in process `syz.0.544'. [ 148.231466][ T2996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 148.428669][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 148.442778][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.555065][ T8063] bridge_slave_1 (unregistering): left allmulticast mode [ 148.570775][ T8063] bridge_slave_1 (unregistering): left promiscuous mode [ 148.581603][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.648443][ T8069] netlink: 'syz.4.556': attribute type 32 has an invalid length. [ 148.661643][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.556'. [ 148.676023][ T8069] (unnamed net_device) (uninitialized): option coupled_control: invalid value (110) [ 148.864525][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 149.242324][ T8099] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.298538][ T8101] netlink: 'syz.4.563': attribute type 1 has an invalid length. [ 149.312828][ T8101] netlink: 'syz.4.563': attribute type 2 has an invalid length. [ 149.374594][ T8109] x_tables: duplicate underflow at hook 1 [ 149.381097][ T8111] x_tables: duplicate underflow at hook 1 [ 149.574295][ T8103] bridge0: entered promiscuous mode [ 149.585889][ T8103] macvlan2: entered promiscuous mode [ 149.624267][ T8103] bridge0: port 2(macvlan2) entered blocking state [ 149.654492][ T8103] bridge0: port 2(macvlan2) entered disabled state [ 149.672129][ T8103] macvlan2: entered allmulticast mode [ 149.680280][ T8103] bridge0: entered allmulticast mode [ 149.699130][ T8103] macvlan2: left allmulticast mode [ 149.704311][ T8103] bridge0: left allmulticast mode [ 149.726982][ T8103] bridge0: left promiscuous mode [ 149.765810][ T8128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.073891][ T8138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.291482][ T8145] Cannot find add_set index 0 as target [ 150.299336][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.578'. [ 150.484077][ T8151] bridge0: port 3(gretap0) entered disabled state [ 150.490958][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.574539][ T8153] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 150.788976][ T5843] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 151.023692][ T8174] IPVS: length: 89 != 24 [ 151.106279][ T8177] tipc: Enabling not permitted [ 151.112334][ T8177] tipc: Enabling of bearer rejected, failed to enable media [ 151.537505][ T8196] lo: entered allmulticast mode [ 151.588097][ T8196] dvmrp8: entered allmulticast mode [ 151.753853][ T8206] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 151.774049][ T8206] gretap1: entered promiscuous mode [ 151.828498][ T8214] __nla_validate_parse: 7 callbacks suppressed [ 151.828518][ T8214] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.600'. [ 152.331048][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.606'. [ 152.343186][ T8237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.606'. [ 152.353183][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.606'. [ 152.363855][ T8237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.606'. [ 152.373953][ T8237] netlink: 'syz.4.606': attribute type 6 has an invalid length. [ 152.402169][ T8237] geneve2: entered promiscuous mode [ 152.407607][ T8237] geneve2: entered allmulticast mode [ 152.872402][ T8266] netlink: 152 bytes leftover after parsing attributes in process `syz.4.613'. [ 152.892760][ T8266] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 153.066130][ T8278] @ÿ: renamed from bond_slave_0 (while UP) [ 153.424273][ T8312] No such timeout policy "syz1" [ 153.444021][ T8312] bond0: entered promiscuous mode [ 153.451526][ T8312] @ÿ: entered promiscuous mode [ 153.456977][ T8312] bond_slave_1: entered promiscuous mode [ 153.463666][ T8312] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 153.472321][ T8312] bond0: left promiscuous mode [ 153.478306][ T8312] @ÿ: left promiscuous mode [ 153.483207][ T8312] bond_slave_1: left promiscuous mode [ 153.501539][ T8314] netlink: 96 bytes leftover after parsing attributes in process `syz.1.620'. [ 153.573530][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 153.587045][ T8317] netlink: 56 bytes leftover after parsing attributes in process `syz.1.621'. [ 153.668660][ T8319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.622'. [ 153.989075][ T1288] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 154.952812][ T8353] netlink: 'syz.4.631': attribute type 16 has an invalid length. [ 154.965660][ T8353] netlink: 'syz.4.631': attribute type 17 has an invalid length. [ 155.087148][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.094921][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.191482][ T8353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.208218][ T8353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.289428][ T8353] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.300113][ T8353] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.309190][ T8353] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.318264][ T8353] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.453671][ T8365] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 155.474977][ T8365] macvtap1: entered allmulticast mode [ 155.482953][ T8365] veth0_macvtap: entered allmulticast mode [ 155.727499][ T8378] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 155.739453][ T8378] macsec0: entered allmulticast mode [ 155.744790][ T8378] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 155.756160][ T8378] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 155.763101][ T8378] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 156.683167][ T8425] Cannot find add_set index 4 as target [ 156.864657][ T8431] tipc: New replicast peer: 0.0.0.0 [ 156.878111][ T8431] tipc: Enabled bearer , priority 10 [ 156.889953][ T8432] tipc: Enabling of bearer rejected, already enabled [ 156.901892][ T8431] __nla_validate_parse: 10 callbacks suppressed [ 156.901909][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 156.923735][ T8431] tipc: Disabling bearer [ 157.217691][ T8442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.658'. [ 157.226924][ T8442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.658'. [ 157.350747][ T8457] veth0: entered promiscuous mode [ 157.398792][ T8462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.662'. [ 157.409534][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 157.418583][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 157.444577][ T8457] vlan2: entered promiscuous mode [ 157.451188][ T8457] vlan2: entered allmulticast mode [ 157.526100][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 157.640332][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 157.647296][ T8477] netlink: 'syz.1.665': attribute type 30 has an invalid length. [ 157.659013][ T8477] netlink: 'syz.1.665': attribute type 30 has an invalid length. [ 157.668922][ T8477] netlink: 'syz.1.665': attribute type 30 has an invalid length. [ 157.677884][ T8477] netlink: 'syz.1.665': attribute type 30 has an invalid length. [ 157.684373][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 157.686091][ T8477] netlink: 'syz.1.665': attribute type 30 has an invalid length. [ 157.736809][ T8477] netlink: 'syz.1.665': attribute type 30 has an invalid length. [ 157.745336][ T8477] netlink: 'syz.1.665': attribute type 30 has an invalid length. [ 157.753637][ T8477] netlink: 'syz.1.665': attribute type 30 has an invalid length. [ 157.766924][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.667'. [ 157.783601][ T8477] netlink: 'syz.1.665': attribute type 30 has an invalid length. [ 157.792912][ T8477] netlink: 'syz.1.665': attribute type 30 has an invalid length. [ 157.918412][ T8492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.972248][ T5836] block nbd1: Receive control failed (result -104) [ 157.979614][ T5841] block nbd0: Receive control failed (result -104) [ 158.089549][ T8446] veth0: left promiscuous mode [ 158.961244][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.973470][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.982494][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.999268][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.012021][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 159.040219][ T8544] gretap0: entered promiscuous mode [ 159.064869][ T8544] macsec0: entered promiscuous mode [ 159.088755][ T8544] gretap0: left promiscuous mode [ 159.289263][ T8554] pimreg: entered allmulticast mode [ 159.363852][ T8550] IPVS: Scheduler module ip_vs_ not found [ 159.399864][ T8549] pimreg: left allmulticast mode [ 159.480408][ T8560] vlan3: entered allmulticast mode [ 159.585894][ T8562] veth1: entered allmulticast mode [ 159.742971][ T8567] sch_fq: defrate 117 ignored. [ 159.756247][ T1288] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.808229][ T8576] Cannot find add_set index 3 as target [ 160.149867][ T8597] xt_hashlimit: invalid interval [ 160.403450][ T5843] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 160.591784][ T2148] IPVS: starting estimator thread 0... [ 160.685829][ T8617] IPVS: using max 32 ests per chain, 76800 per kthread [ 160.776958][ T8545] chnl_net:caif_netlink_parms(): no params data found [ 161.067032][ T8640] x_tables: duplicate underflow at hook 2 [ 161.096950][ T8545] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.108328][ T5836] Bluetooth: hci5: command tx timeout [ 161.124266][ T8545] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.138052][ T8545] bridge_slave_0: entered allmulticast mode [ 161.148184][ T8545] bridge_slave_0: entered promiscuous mode [ 161.183053][ T8545] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.218412][ T8545] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.233429][ T8545] bridge_slave_1: entered allmulticast mode [ 161.260406][ T8545] bridge_slave_1: entered promiscuous mode [ 161.343999][ T8545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.388815][ T8545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.510429][ T8545] team0: Port device team_slave_0 added [ 161.527767][ T8545] team0: Port device team_slave_1 added [ 161.584023][ T8545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.596099][ T8545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.637591][ T8545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.656380][ T8545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.672829][ T8545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.709090][ T8545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.794498][ T8545] hsr_slave_0: entered promiscuous mode [ 161.801635][ T8545] hsr_slave_1: entered promiscuous mode [ 161.808671][ T8545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.817249][ T8545] Cannot create hsr debugfs directory [ 162.061897][ T8680] __nla_validate_parse: 10 callbacks suppressed [ 162.061916][ T8680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.719'. [ 162.126283][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 162.191262][ T8545] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 162.207703][ T8545] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.228697][ T8545] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.248540][ T8545] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.360583][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 162.491017][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.723'. [ 162.762702][ T8700] syzkaller0: entered promiscuous mode [ 162.771256][ T8700] syzkaller0: entered allmulticast mode [ 162.874571][ T8545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.196472][ T5836] Bluetooth: hci5: command tx timeout [ 163.652165][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 164.503874][ T8710] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 164.525707][ T8721] veth0_to_bond: entered promiscuous mode [ 164.541803][ T8721] veth0_to_bond: left promiscuous mode [ 164.637594][ T8723] bond0: (slave bond_slave_0): Releasing backup interface [ 164.652030][ T8723] bond_slave_0 (unregistering): left promiscuous mode [ 164.735181][ T8545] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.767295][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.774564][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.826312][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.833531][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.115261][ T8744] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 165.123217][ T8758] validate_nla: 1 callbacks suppressed [ 165.123239][ T8758] netlink: 'syz.1.738': attribute type 13 has an invalid length. [ 165.162653][ T8758] netlink: 152 bytes leftover after parsing attributes in process `syz.1.738'. [ 165.272123][ T5836] Bluetooth: hci5: command tx timeout [ 165.309577][ T8758] syz_tun: refused to change device tx_queue_len [ 165.325519][ T8758] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 165.381183][ T8765] dvmrp0: entered allmulticast mode [ 165.425824][ T8765] dvmrp0: left allmulticast mode [ 165.509928][ T8299] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 165.540972][ T8545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.844104][ T8787] geneve2: entered promiscuous mode [ 165.858747][ T8787] geneve2: entered allmulticast mode [ 165.871967][ T8787] sctp: [Deprecated]: syz.0.744 (pid 8787) Use of int in max_burst socket option deprecated. [ 165.871967][ T8787] Use struct sctp_assoc_value instead [ 165.899570][ T8783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.185164][ T8545] veth0_vlan: entered promiscuous mode [ 166.234086][ T8545] veth1_vlan: entered promiscuous mode [ 166.319504][ T8545] veth0_macvtap: entered promiscuous mode [ 166.344183][ T8545] veth1_macvtap: entered promiscuous mode [ 166.394943][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.430121][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.466023][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.482445][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.505718][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.531286][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.559562][ T8545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.595166][ T8814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.753'. [ 166.620735][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.650960][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.675791][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.715437][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.733613][ T8545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.764043][ T8545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.778335][ T8545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.801359][ T8822] netlink: 44 bytes leftover after parsing attributes in process `syz.0.755'. [ 166.841156][ T8545] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.853522][ T8545] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.862676][ T8545] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.873630][ T8545] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.914585][ T8826] netlink: 'syz.4.756': attribute type 10 has an invalid length. [ 166.933124][ T8826] netlink: 40 bytes leftover after parsing attributes in process `syz.4.756'. [ 166.969206][ T8826] batman_adv: batadv0: Adding interface: virt_wifi0 [ 166.987472][ T8826] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.020789][ T8826] batman_adv: batadv0: Interface activated: virt_wifi0 [ 167.159613][ T8830] netlink: 48 bytes leftover after parsing attributes in process `syz.0.758'. [ 167.183835][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.208560][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.349170][ T5836] Bluetooth: hci5: command tx timeout [ 167.363577][ T8301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.371615][ T8301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.440903][ T8891] netlink: 76 bytes leftover after parsing attributes in process `syz.2.779'. [ 169.001970][ T8929] IPVS: set_ctl: invalid protocol: 29 100.1.1.2:20003 [ 169.461664][ T8958] x_tables: duplicate underflow at hook 1 [ 169.661510][ T8964] veth0: entered promiscuous mode [ 169.675080][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 169.713193][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 169.989556][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.122727][ T8989] netlink: 14 bytes leftover after parsing attributes in process `syz.0.805'. [ 170.157715][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 170.188191][ T8989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.805'. [ 170.406707][ T8999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.810'. [ 170.429702][ T8999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.810'. [ 170.500558][ T9003] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 170.539920][ T9003] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 170.641230][ T9005] netlink: 'syz.1.812': attribute type 5 has an invalid length. [ 170.767618][ T9011] xt_HMARK: spi-set and port-set can't be combined [ 170.781151][ T9012] xt_HMARK: spi-set and port-set can't be combined [ 170.867945][ T9017] ------------[ cut here ]------------ [ 170.873635][ T9017] UBSAN: array-index-out-of-bounds in ./include/net/ipv6.h:616:21 [ 170.881692][ T9017] index 16 is out of range for type 'const __u8[16]' (aka 'const unsigned char[16]') [ 170.908452][ T9017] CPU: 1 UID: 0 PID: 9017 Comm: syz.0.816 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 170.908494][ T9017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 170.908511][ T9017] Call Trace: [ 170.908522][ T9017] [ 170.908530][ T9017] dump_stack_lvl+0x189/0x250 [ 170.908579][ T9017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.908607][ T9017] ? __pfx__printk+0x10/0x10 [ 170.908623][ T9017] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 170.908658][ T9017] ubsan_epilogue+0xa/0x40 [ 170.908679][ T9017] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 170.908706][ T9017] ? __asan_memcpy+0x40/0x70 [ 170.908728][ T9017] ipv6_addr_prefix+0x145/0x1d0 [ 170.908760][ T9017] ip6_route_info_create+0x5cc/0xa70 [ 170.908787][ T9017] ip6_route_add+0x29/0x2f0 [ 170.908804][ T9017] ? ipv6_route_ioctl+0x313/0x480 [ 170.908826][ T9017] ipv6_route_ioctl+0x35c/0x480 [ 170.908869][ T9017] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 170.908921][ T9017] inet6_ioctl+0x219/0x280 [ 170.908949][ T9017] ? __pfx_inet6_ioctl+0x10/0x10 [ 170.908985][ T9017] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 170.909063][ T9017] sock_do_ioctl+0xd9/0x300 [ 170.909094][ T9017] ? __pfx_sock_do_ioctl+0x10/0x10 [ 170.909121][ T9017] ? __lock_acquire+0xaac/0xd20 [ 170.909164][ T9017] sock_ioctl+0x576/0x790 [ 170.909199][ T9017] ? __pfx_sock_ioctl+0x10/0x10 [ 170.909229][ T9017] ? __fget_files+0x3a0/0x420 [ 170.909255][ T9017] ? __fget_files+0x2a/0x420 [ 170.909284][ T9017] ? bpf_lsm_file_ioctl+0x9/0x20 [ 170.909310][ T9017] ? __pfx_sock_ioctl+0x10/0x10 [ 170.909335][ T9017] __se_sys_ioctl+0xf9/0x170 [ 170.909359][ T9017] do_syscall_64+0xf6/0x210 [ 170.909387][ T9017] ? clear_bhb_loop+0x45/0xa0 [ 170.909412][ T9017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.909432][ T9017] RIP: 0033:0x7fa5f818e969 [ 170.909456][ T9017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.909472][ T9017] RSP: 002b:00007fa5f9035038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.909497][ T9017] RAX: ffffffffffffffda RBX: 00007fa5f83b6080 RCX: 00007fa5f818e969 [ 170.909512][ T9017] RDX: 0000200000000140 RSI: 000000000000890b RDI: 0000000000000006 [ 170.909524][ T9017] RBP: 00007fa5f8210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 170.909536][ T9017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.909547][ T9017] R13: 0000000000000000 R14: 00007fa5f83b6080 R15: 00007ffe6ebd3f58 [ 170.909578][ T9017] [ 170.909585][ T9017] ---[ end trace ]--- [ 171.165184][ T9017] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 171.172427][ T9017] CPU: 1 UID: 0 PID: 9017 Comm: syz.0.816 Not tainted 6.15.0-rc3-syzkaller-00584-gcc17b4b9c332 #0 PREEMPT(full) [ 171.184348][ T9017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 171.194498][ T9017] Call Trace: [ 171.197809][ T9017] [ 171.200782][ T9017] dump_stack_lvl+0x99/0x250 [ 171.205506][ T9017] ? __asan_memcpy+0x40/0x70 [ 171.210168][ T9017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.215397][ T9017] ? __pfx__printk+0x10/0x10 [ 171.220041][ T9017] panic+0x2db/0x790 [ 171.223958][ T9017] ? __pfx_panic+0x10/0x10 [ 171.228395][ T9017] ? _printk+0xcf/0x120 [ 171.232570][ T9017] ? __pfx__printk+0x10/0x10 [ 171.237254][ T9017] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 171.243170][ T9017] check_panic_on_warn+0x89/0xb0 [ 171.248130][ T9017] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 171.253884][ T9017] ? __asan_memcpy+0x40/0x70 [ 171.258483][ T9017] ipv6_addr_prefix+0x145/0x1d0 [ 171.263361][ T9017] ip6_route_info_create+0x5cc/0xa70 [ 171.268663][ T9017] ip6_route_add+0x29/0x2f0 [ 171.273446][ T9017] ? ipv6_route_ioctl+0x313/0x480 [ 171.278567][ T9017] ipv6_route_ioctl+0x35c/0x480 [ 171.283428][ T9017] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 171.288833][ T9017] inet6_ioctl+0x219/0x280 [ 171.293264][ T9017] ? __pfx_inet6_ioctl+0x10/0x10 [ 171.298243][ T9017] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 171.304267][ T9017] sock_do_ioctl+0xd9/0x300 [ 171.308782][ T9017] ? __pfx_sock_do_ioctl+0x10/0x10 [ 171.313904][ T9017] ? __lock_acquire+0xaac/0xd20 [ 171.318777][ T9017] sock_ioctl+0x576/0x790 [ 171.323117][ T9017] ? __pfx_sock_ioctl+0x10/0x10 [ 171.327980][ T9017] ? __fget_files+0x3a0/0x420 [ 171.332668][ T9017] ? __fget_files+0x2a/0x420 [ 171.337274][ T9017] ? bpf_lsm_file_ioctl+0x9/0x20 [ 171.342232][ T9017] ? __pfx_sock_ioctl+0x10/0x10 [ 171.347203][ T9017] __se_sys_ioctl+0xf9/0x170 [ 171.351807][ T9017] do_syscall_64+0xf6/0x210 [ 171.356333][ T9017] ? clear_bhb_loop+0x45/0xa0 [ 171.361021][ T9017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.366931][ T9017] RIP: 0033:0x7fa5f818e969 [ 171.371441][ T9017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.391144][ T9017] RSP: 002b:00007fa5f9035038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.399571][ T9017] RAX: ffffffffffffffda RBX: 00007fa5f83b6080 RCX: 00007fa5f818e969 [ 171.407563][ T9017] RDX: 0000200000000140 RSI: 000000000000890b RDI: 0000000000000006 [ 171.415541][ T9017] RBP: 00007fa5f8210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 171.423524][ T9017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.431503][ T9017] R13: 0000000000000000 R14: 00007fa5f83b6080 R15: 00007ffe6ebd3f58 [ 171.439509][ T9017] [ 171.442891][ T9017] Kernel Offset: disabled [ 171.447227][ T9017] Rebooting in 86400 seconds..