last executing test programs: 1m21.610550566s ago: executing program 2 (id=194): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8001}, 0xc) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20008801, &(0x7f0000000100)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000f10a0000000000000000000003000000000500000003000000050000000900000003000006040000000e000000070000000a000000070000000b000000060000000200000000000009020000000030615f00305f2e0000"], &(0x7f0000000440)=""/175, 0x6a, 0xaf, 0x0, 0xffffff88, 0x10000, @value}, 0x28) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="f3ff00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x18, 0x0, 0x511, 0x0, 0x5, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5", 0x2e}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl(r8, 0x8b29, &(0x7f0000000040)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000200), &(0x7f00000003c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) (async) bind$phonet(r2, &(0x7f0000000500)={0x23, 0x81, 0x7, 0x81}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 1m7.578581841s ago: executing program 2 (id=194): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8001}, 0xc) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20008801, &(0x7f0000000100)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000f10a0000000000000000000003000000000500000003000000050000000900000003000006040000000e000000070000000a000000070000000b000000060000000200000000000009020000000030615f00305f2e0000"], &(0x7f0000000440)=""/175, 0x6a, 0xaf, 0x0, 0xffffff88, 0x10000, @value}, 0x28) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="f3ff00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x18, 0x0, 0x511, 0x0, 0x5, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5", 0x2e}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl(r8, 0x8b29, &(0x7f0000000040)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000200), &(0x7f00000003c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) (async) bind$phonet(r2, &(0x7f0000000500)={0x23, 0x81, 0x7, 0x81}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 50.720352896s ago: executing program 2 (id=194): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8001}, 0xc) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20008801, &(0x7f0000000100)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000f10a0000000000000000000003000000000500000003000000050000000900000003000006040000000e000000070000000a000000070000000b000000060000000200000000000009020000000030615f00305f2e0000"], &(0x7f0000000440)=""/175, 0x6a, 0xaf, 0x0, 0xffffff88, 0x10000, @value}, 0x28) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="f3ff00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x18, 0x0, 0x511, 0x0, 0x5, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5", 0x2e}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl(r8, 0x8b29, &(0x7f0000000040)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000200), &(0x7f00000003c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) (async) bind$phonet(r2, &(0x7f0000000500)={0x23, 0x81, 0x7, 0x81}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 38.596676512s ago: executing program 2 (id=194): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8001}, 0xc) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20008801, &(0x7f0000000100)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000f10a0000000000000000000003000000000500000003000000050000000900000003000006040000000e000000070000000a000000070000000b000000060000000200000000000009020000000030615f00305f2e0000"], &(0x7f0000000440)=""/175, 0x6a, 0xaf, 0x0, 0xffffff88, 0x10000, @value}, 0x28) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="f3ff00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x18, 0x0, 0x511, 0x0, 0x5, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5", 0x2e}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl(r8, 0x8b29, &(0x7f0000000040)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000200), &(0x7f00000003c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) (async) bind$phonet(r2, &(0x7f0000000500)={0x23, 0x81, 0x7, 0x81}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 25.536136719s ago: executing program 2 (id=194): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8001}, 0xc) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20008801, &(0x7f0000000100)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000f10a0000000000000000000003000000000500000003000000050000000900000003000006040000000e000000070000000a000000070000000b000000060000000200000000000009020000000030615f00305f2e0000"], &(0x7f0000000440)=""/175, 0x6a, 0xaf, 0x0, 0xffffff88, 0x10000, @value}, 0x28) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="f3ff00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x18, 0x0, 0x511, 0x0, 0x5, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5", 0x2e}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl(r8, 0x8b29, &(0x7f0000000040)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000200), &(0x7f00000003c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) (async) bind$phonet(r2, &(0x7f0000000500)={0x23, 0x81, 0x7, 0x81}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 12.642835307s ago: executing program 2 (id=194): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8001}, 0xc) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20008801, &(0x7f0000000100)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000048000000480000f10a0000000000000000000003000000000500000003000000050000000900000003000006040000000e000000070000000a000000070000000b000000060000000200000000000009020000000030615f00305f2e0000"], &(0x7f0000000440)=""/175, 0x6a, 0xaf, 0x0, 0xffffff88, 0x10000, @value}, 0x28) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="f3ff00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000700)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x18, 0x0, 0x511, 0x0, 0x5, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb5", 0x2e}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl(r8, 0x8b29, &(0x7f0000000040)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000200), &(0x7f00000003c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000080), &(0x7f00000000c0)=r5}, 0x20) (async) bind$phonet(r2, &(0x7f0000000500)={0x23, 0x81, 0x7, 0x81}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 3.808819696s ago: executing program 0 (id=1157): r0 = socket$inet(0x2, 0x80001, 0x84) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0xd0, 0x11, 0x148, 0xd0, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x5, 0x3, 0x4, 0x7]}, {0x0, [0x1]}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@unspec=@cpu={{0x28}, {0x8397, 0x84}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev, 0x0, 0x0, [0xb, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b], 0x0, 0x0, 0x7f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) 3.63642313s ago: executing program 0 (id=1159): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000100005040000005f596da40000880900", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280060011004e23000004001200080015"], 0x48}}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @dev={0xfe, 0x80, '\x00', 0x1a}}], 0x1c) sendto$inet6(r4, &(0x7f0000000100)="b8", 0x1, 0x2400c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x2}, 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r7]) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x0) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f00000001c0)='\x00', 0x1}], 0x2}, 0xb00) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000030500002b360000000000cf0000", @ANYRES32=0x0, @ANYBLOB="0300000000000000200012800e00010069703665727370616e0000000c0002800600030009000000"], 0x40}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 2.46595658s ago: executing program 1 (id=1169): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008001) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x8}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x1, 0x3, 0x9a, 'netbios-ns\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 2.290903616s ago: executing program 0 (id=1170): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r3 = accept4$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14, 0x0) getpeername$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000280)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r9}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000700)={r9}, &(0x7f0000000740)=0x8) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000400000000000000000000000000000000000b9c5e772ac689e2293961b5c3af9a0aedecfc8ce4fc4c85b938dc0b8eb1024de74ffb3d6c5b31c19e41a7ea20626b279025cf057cc42709671f437ee6fafef626828fc97a2613a1df6d652f5efaa6464a39182f3aa10f6b53ca67bf7f2a3dad4ac470333078d6b5fa4add9b2eec676559bcf787cbbb64698a4a87d73718b0de5bbe92f400e683583acb3372235231efaf962fbbe6975d7fc8642f9fb96fc231b6f041cad7f791dc0b6aa0adad8548a77ac326df3e8a76acb3197111d682d6f6a25f34b5f942baa66", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000200050021000200000008000a00", @ANYRES32=r10, @ANYBLOB], 0x30}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r12, r11, 0x4, r11}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000800000004000000094000000a000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r14, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r14, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendto$inet(r13, &(0x7f0000000440)="10bbf45e217496caf80ae5cfed74713ce7ff6f7a0901290e3ca80812d020c16cbeb377c15fcebfd020dbf3a56d99e25ade1c877dcbdeba4bf22f6db0385085117980fce5404419411a0011ed7704be4615d46c9cd8122bd96c74a8b4439f730dd11a8828213b4e54f41f6802aec8169968f22ccd7b4fa0fd1fc4", 0x7a, 0x20000000, &(0x7f0000000300)={0x2, 0x4e1e, @private=0xa010100}, 0x10) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.240311524s ago: executing program 1 (id=1171): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) socket(0x2a, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r1], 0x40c}}, 0x0) 2.001822019s ago: executing program 1 (id=1173): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xffff, 0x2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={r1, 0x8, 0x4, 0x7, 0x8, 0xa, 0xfff9, 0xf48, {r2, @in6={{0xa, 0x4e21, 0x401, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1ff}}, 0x0, 0xecb, 0x2, 0x8, 0x9}}, &(0x7f00000001c0)=0xb0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELOBJ={0x15c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_USERDATA={0xab, 0x8, "6d60be4679783f7089d739b4d410be63f45e5534997fda728898a8beae3cf79c859ae2fcaaaef1faaa79f23525775a5d0ce2d462735077b68beae8b534fd062e200df2184b21d45a06ef67ac5649fea970ccece0f564c6b9412dd7093c760d88530f2b94584a83914e05c1e83a58f00435bc150a1bf6b118a7ca543c6e76cdd374ee54f06109c12410d8181fec176be11b004ac7fba2dbedeed95a32591136c9df41027782e811"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x7f, 0x8, "3f23b05fed1f487d6a0d8ab60bf35fb71cf566fbfae237fe0379e1e5f39520d1d2abc90ebd40595cf3bcbf68471682be457bd1fe69c7f42a7aeec0ebb05c06c45d55cd14bd30c40b1d8cfe486aa9d85115cd1af2d9b947126d4e0eca1031601d53b5b953447cc7c22ebbf6080d3752110b0e45f1cbd81fb0fdc5f3"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_DELRULE={0x138, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xe2, 0x7, 0x1, 0x0, "3f1ba2c8a5f0c29ea1f8ef0ee15b280aeb7de07ed04603e1485ea3c94b132429d7f394d552dd73a7d0e35b2a67b5d84f0f25c74bdc7c922a3c72b6de096c875d7bd8cc97fa317c19a1516694d677d5fd43f047639355d42c1966aa05d44a0a545dc8d362603906dcaa6ce7fb3f5c3587d87165c6df080fbc3874f39e08c1fd0c84ca303b8a4af4ec7098c4844e9d02798a230cb34bc183f1eb841a0e00e138fa1ec9876fba34844c38b7d1650d612f892efcada32ed6bbc87ed49add9ab3d64175f0e65684c11ec7fff49345dad41ef6dd2e019de8e2c9b8a97bf4d7a437"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x390, 0xe, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x338, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x324, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x178, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x5, 0x1, "95"}, @NFTA_DATA_VALUE={0xb3, 0x1, "ba795bbc183a1b83ca47bc1238e1cb6e5691a4c40cd498b13bbfed6ab416bb4a3c30b24a00f64f5b00a876b1ec17152472915945e1ca59ffbb6bb754ee8913f17ae354318b3024ba3a84cfb1a5138ec3c708f21f0ee11febb71758f4bd6c13c8ba3561e54c4366fe4a4b5b472489f2bc887ad7ba158f8ce462bc18cdad885f6890a46295799b7b1c5536ada08456346078a313c64ef37ffa87a70c45313e8072537261fe4a97e4f989bc839bfdbe20"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x10, 0x1, "ca2ddb12e764fb31195b66ee"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x103, 0x1, "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"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}]}]}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10a}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x71c}}, 0x8004) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000a00)=0x5) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)='blkio.bfq.idle_time\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000002380)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002340)={&(0x7f0000000b00)={0x1894, r5, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x19}}}}, [@NL80211_ATTR_CSA_IES={0x1864, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x7ff, 0xd31, 0x3, 0x6, 0x6, 0x1, 0x3]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x7, 0x5]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x709, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0xc, 0x380, 0xfffc, 0xfffe]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x2]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0xc0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xb6, 0x2, "f3aef53ddde404fa31ee40ec603280f223dbb74dcbb2f2f0d448a78cda4f70fb25dffc5d6fa2d06bd097950dcd5d6502b80ae5f287c05fe65dc4e0da1cf6c1e43a9064a885adc726c36f08b01efc7586dea327cdcd57c9cbe9fcd65cceea93b66ca3a2ca5eb96e04fe0f7b16a2b7fb7c27c542772f743bb436d752e0014db081e5a6e1e0a7da01d6be1f032877e79d328bf9aca7f6c63c8d14155d9313d22dbdb36f8896a7b075a106f0d962f8b06036d9c3"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0xcd, 0xf, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @channel_switch={0x25, 0x3, {0x1, 0x24, 0x15}}, @fast_bss_trans={0x37, 0x8d, {0x7, 0x3, "cdb66f11f6490a89db84435302b2d05f", "c14a416a927f10c00e14464199cd6c78bbb7fd1e5b03df581f9d336f1d59e5ca", "823585509c0420acc03d4ece814bca12b797f0ba4ba35dfb2242e47f3817e448", [{0x4, 0x14, "ae95bc04652609fbd1a0107aea7d9e25389098ed"}, {0x2, 0x17, "83c75ebff219393965c33b217e2b371aa8d9dbacdd2457"}, {0x1, 0xa, "3ca66989f4b93c754462"}]}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x1, 0x2, 0x9, 0x4}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0xec, @broadcast, 0x0, @value=@device_b, 0x3, 0xa146, @broadcast, 0x2340}}]}, @NL80211_ATTR_BEACON_HEAD={0x418, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_a, @device_a, @random="720f3f58bf3a", {0x3, 0x5}}, 0x3dc, @default, 0x2c04, @void, @val={0x1, 0x2, [{0x30}, {0xb}]}, @val={0x3, 0x1, 0x99}, @val={0x4, 0x6, {0x1, 0x0, 0x2, 0xaac4}}, @void, @val={0x5, 0xba, {0x9, 0xdb, 0x0, "a9db362f0bb9133804780ddb94b6c317dedb0a670c5122753d5cfe8aa31a5861c2220c89234ae667f9fadd47d17a1f538213d5aaf7a59604a460c7ceb3b6acdf789c575e1b1a058a01c37c26e296e2c8cc7d95f5bd025a3027d9dc4b3d989dd2d4ccf7a82cb5c8df8566855953824bf10cb279cda5129632aac04ab9ed2cce291ba7ef056f44325c6bc98de86994ef8a8a1df303c6636a4a838eb1966f072b950ce935bd66ae6579d09c0950a1f64bd20b7b8a1500eddb"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x80, 0x8}}, @val={0x2d, 0x1a, {0x1000, 0x3, 0x1, 0x0, {0x3ff, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x8, 0x8, 0x4}}, @void, @void, @val={0x76, 0x6, {0x5, 0x3, 0x15, 0xe3e}}, [{0xdd, 0x91, "670a0ab14ab86434ab4f876cbf87c1cdf0e5453cd779dd46521f32da9f290307eefd734d2d22375823c06dcd436640f6d51217362bd286e391c54747595c51d93608fdebbf228d4de80d66c2075dc40247b11275c4fb8ee3a33ede14845e88ba30f8e4caa41f0b1689f7764de6a35161331d8bdf57cc821dbbe461f76392f0ec0d370f4c0b864f9e85c9d687d6d175e894"}, {0xdd, 0xf8, "8094e7f5c1d7d1331db7e38cb247dc8d77d1dbf4652caf9a7d523cffd16001893fc9b65372c19572d4d84065e222bc8750de1edd5dc0e93e06d290aacb30352a9b6bf778999851443a70139254be516996265996e07dac61940a554c1700a6f7a12ee6e985751017a7ba0aaa5a0108b3d04a9d0b309feee229682b204e20a8b3d256e3c5fe8c577b304225b04499c17b6be333f07f569740b634e0c71eccd87db43a735ace601d6b57e6819958973523bf4e1c6d4b8ac0258f2ad7712cb81cd396b7c724518c6e2e90bb1370e1c04e6ad4df16946da4025b3a67f56a82fd7579c061226647b0d15399243cef3308e9838783824afd414be6"}, {0xdd, 0x10, "3cdd19e98919b198e6d02f8a2041c3fe"}, {0xdd, 0xa0, "3d2bf4f0d81a522da15e1b874bd2173d65cf913d35463fe8ba6030ec5a6794dd4a3746a6781bcc425d9fc276cf8b37ed9e469c50cbfa97e85dfe6e5cf32e6c564776ba97b9b51c1a2637f15500fb20e4a78008e6bae32ab5af9b3e0069a60e48803526386be132570e62eaf11b6453afe73138f414915c4bd4f1ab996aaeea695f96f9f682bbe705bc2ef03f91d557523457fd3e4de827fa3f8f86aaaddfefa7"}, {0xdd, 0x7f, "97861c8489792f187747a057df635301e982e13e3023e03c67943f7c366a678cfbec7273d9f92db55188035626fc26e3b12568b3a07fa1843e6fe367f64aa29bf7ba4526b47e14b9d91b11014a3e15550e6613104588a543a38f4b44db04a9aba7fe81f336f1927d05c645f52426012683d47c58314126bda3417ccafc0709"}, {0xdd, 0x37, "bf3db536a104824e8d8520bca104c9c433002e3ac131b362dcc3473aaaccebef50c36d7034cfe44488c4a845c80aa28c7a8dee4d44eed5"}]}}, @NL80211_ATTR_PROBE_RESP={0x807, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0xc8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xbe, 0x2, "a58900636362b16c919ff8439654ebcccdc7543697e02d5dfdbdcfb8a04fc23bc39f3f3b343e9eacab4f2b1a34d01cebb22112280a2555fc1c56430859dbb3b134cadee88d16eba14d23b2e1f7bd7a30a19b098279a03c5e5a49f7daf42f11e1ea09b5eb42a5232176e747c64fc5746186dc4dfc9c64e52f9bd5c560543683d5afe6a8a0f77490bcc1a744e622a5de00666d539f7d3f900f68964e9b61017c2197d0236f68d00af006b640499385a9caa9078f2400f4303d72fd"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xc, 0x80, [@gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_IE_PROBE_RESP={0xfc, 0x7f, [@tim={0x5, 0x9f, {0x3, 0x67, 0x88, "b73c91bb0f81d704e5f1ac4b438d7f2a47f698d24a296a5ab60f853b84cfb5d06faad1df97ee0fc8e40154eab781902ae769db651cb5e46f26ce429212c333d2fe59387551cec5b5f24e3e487ca51dc43b42d3a4a351056895cc632e59d7712352abb825658b1e8f28e077bec6cb874734443be546eb9d3eb3183f3e8cf590e15dc3c99e63d0c2bfa38b610616970e7fc50149232e4a496dd44cdab1"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @ssid={0x0, 0x6, @default_ibss_ssid}, @supported_rates={0x1, 0x7, [{0x24}, {0xc, 0x1}, {0x36, 0x1}, {0x16}, {0xdf201e5536b19458, 0x1}, {0x2}, {0x4}]}, @rann={0x7e, 0x15, {{0x1, 0x42}, 0x9, 0x3, @device_a, 0x4, 0x374, 0x21}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x38, 0x6, @device_a, 0x8, @value, 0x6, 0x0, @broadcast, 0x1}}]}], @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x2e0, 0xf, [@tim={0x5, 0x29, {0x80, 0x70, 0x5, "d6fde7f6c7f2e5d57bef455f3e4aec636cb6f3a0670505d7ab357bbf4c83152080c3c8926389"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x8b, 0x40, @device_a, 0x4, @value, 0xfffff873, 0x1, @broadcast, 0x6}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @gcr_ga={0xbd, 0x6}, @perr={0x84, 0xae, {0x1, 0xa, [{{0x0, 0x1}, @device_b, 0xd, @value=@device_b, 0x2b}, {{}, @device_b, 0x5, @void, 0x5}, {{0x0, 0x1}, @device_a, 0x5, @value, 0x3d}, {{0x0, 0x1}, @device_b, 0x400, @value=@device_b, 0x1a}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x39}, {{0x0, 0x1}, @device_a, 0xd6, @value, 0x28}, {{0x0, 0x1}, @device_b, 0x6, @value=@broadcast, 0x42}, {{}, @broadcast, 0xca3, @void, 0x34}, {{0x0, 0x1}, @device_a, 0x3d, @value=@broadcast, 0x14}, {{}, @broadcast, 0x7fff000, @void, 0x11}]}}, @tim={0x5, 0xdc, {0xa9, 0x76, 0x9, "76ed70d690490417323e2b2714ef863f958e0050f6c2cc3d824f541654d406f28fc3f9a8c06d12f8cac6958bca472f135633d16460c028cba66316078ef01650e954b214e6edef58d33524e28c0e95ba03bf606893c281c23f5542211fa9e8251b3e173c276b703d354c7968544570fbb5d376ed2f68c22946be0fe7050d6d53f8f056efd8a89db2337002cd28925b2784f091be789be9acd445227c8e43c8d3ae30b440b0f9ec50418a7b19546e302b947d7b4151d2c4178907489c8b8b7fcd6ac42bd56746c1210cdd009e7e9e27fda95c070db3d8ef54a9"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0xe7, {0x6, 0xd, [{{0x0, 0x1}, @device_b, 0x51, @value, 0x2b}, {{}, @device_a, 0x5, @void, 0x38}, {{0x0, 0x1}, @device_b, 0x80, @value=@device_b, 0x35}, {{0x0, 0x1}, @device_a, 0x9, @value, 0x37}, {{}, @device_a, 0x7, @void, 0x37}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x15}, {{0x0, 0x1}, @broadcast, 0x80, @value=@broadcast, 0x3f}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x9}, {{}, @broadcast, 0x80, @void, 0x1f}, {{0x0, 0x1}, @device_b, 0xa, @value=@broadcast, 0x3b}, {{0x0, 0x1}, @device_b, 0x3, @value=@device_b, 0x1c}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x22}, {{0x0, 0x1}, @device_b, 0x1000, @value, 0x32}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x14c, 0x80, [@measure_req={0x26, 0x4f, {0xb3, 0x4, 0x6, "cdfef71d8e684dbad4c0f04031c558bed3cdb8602168a49f073c25fb8847e9db3f3e5c736262dcd6f274038177019a73478593c957106fd7203695d1819157f618f6c4606e6402cc24e20a4d"}}, @random={0x9, 0x62, "481b04d433d3cf782efa05d199459bf001fdea96e51bb3009db219d057b386d6e065bfe29084b7e0b3b53210744ba3f2bfaa90175645904084930fc9e7138aa846f1aecf063dca954e87cf52292311e98b46b9f44a106c91199a1d6f028f114e8df1"}, @measure_req={0x26, 0x3b, {0x0, 0x9, 0x4b, "4f0ce9e23f3a68928da9c272654ae3a06ef661b46f3d5ce6081559cb51eabf8dc832b7931019530331170d7428a15ff327e52634f602f803"}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mic={0x8c, 0x18, {0xe09, "164a6b598533", @long="33a1733a68b791436e9813d269a9aa02"}}, @prep={0x83, 0x1f, {{}, 0xfe, 0x4, @device_a, 0x9, @void, 0x2, 0xf, @broadcast, 0x10000}}, @peer_mgmt={0x75, 0x16, {0x0, 0xffff, @val, @void, @val="0d2597d7dec7aea8bbca38404b2e6200"}}]}, @NL80211_ATTR_BEACON_TAIL={0x20, 0xf, [@ht={0x2d, 0x1a, {0x80, 0x2, 0x1, 0x0, {0x5e, 0x9, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x2, 0x92}}]}, @NL80211_ATTR_BEACON_HEAD={0x3a8, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {0x0, 0x1}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x5, @default, 0x9109, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x2, [{0x1b}, {0x9}]}, @void, @val={0x4, 0x6, {0x8, 0xc, 0x1, 0x2}}, @void, @val={0x5, 0xed, {0x25, 0x4c, 0x1, "55c6fb3e0d75e1147141c1a95de871002cc2e710c3f23c6bf5adad157fd377b7069a2b3bda83b733f7eb4d93958229194edf6122f0415e02975c9e3a2023b626329f08c9242dfc597b8b18417e137eb9835df8dabef94f10523fa5abdcb7a35c0b071ff04a9b6718deae5b792cfcd51c2c2df56d3f0e8e3e794c834cfaa4cec4b7ec4f3f8767881d3c1ab88fa5a7d56442e0346e1bd2b9ea72cbb3fe79fab2357e3ab929ae2e4be6ba400b8d19653499f5d7025cc54f21ee3713bdc330bd57818f16e741ad19b055b00a049934f2b489c415e3281b78dc8e24d2d6b44109d85417d5a0a1578ee02611be"}}, @val={0x25, 0x3, {0x1, 0x3, 0x2}}, @void, @void, @val={0x2d, 0x1a, {0x300, 0x3, 0x4, 0x0, {0x45, 0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x1, 0x46a, 0x9}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x3, 0x74, 0x10, 0x6}}, [{0xdd, 0x4b, "19c8b83cfd9836f69e6ba2644b0a2ff08a9b50699fc3d3b4e3dad6b137784fda6ddb4c706e5055dd7689f886778075af33b074ea031147d6fccd8e50b4fedcdd8a497497d25dd7be509deb"}, {0xdd, 0x3f, "0bfc579e88ecaf34f3af7691bf5d642de808b2a17ddddb15c08f9dbe290327d895207d285965de58b001ad6a49a1585da4b6935346939ce1398b3eef5aaadc"}, {0xdd, 0x29, "79aa8df5266d604cfbbd2154e366e7c95bc87b662aa7af30c30a8b84a9d21d0657f271cb79f0375ce1"}, {0xdd, 0x26, "f82a3a111843523fdda7d79940a0237b3bc771aa25ab41a4f22b4e6660cedd792444b4d9bf87"}, {0xdd, 0x30, "a8faf3a2f5165a25fc29148eb8f97acd8879400f1c61eef4953083178f137029343f3c3e2fe611109a35c342c7de3810"}, {0xdd, 0xee, "90c9a77de8033e27dbd82ee5ebc8dd229344fcc7f3967ae6360c156d932476887d7e521cb474d9f03b4cf1f3fe82caca34f4a84d4a040e2f1d30f5514f76b9e3c5708d35aa5df0e9abb317b4e885501fdd6cffff6cf26c615536ee7882aad9787cedfeb06bb0f5d13a36b8ff0cb3bdf2e1e1d86573124817824751bf8d4e17b8c6f81809d9273b771b8537a75b5b065524fd19e6a305541fdc198bab2482283e46aa4c389d5a28ce115b8ca5bd2e79fb71c4b917a1d4b95ee3eef89448b6fcef6ee1427a091bed8369c60aa62901421fc5f5a1a4b6cbb15854e0f1cbf6f7ec940919aaecf358ed868ab6894acf53"}, {0xdd, 0x43, "4de0c0779823a234bb8ac8e45d119aee339fe13c4e0a422c2adcab49285ba157fd5e8b026e42bbe86fc3ba7abff61666126890a9179053897b0a7c587e6d97ab5dfe06"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xa9, 0x7f, [@fast_bss_trans={0x37, 0x65, {0x4, 0x1, "81120617179928f7d66cf2ea856c574f", "40d94d7a84fc1db778bb3a34fab31d3677bbcdda3ca2a65cc9d8875001747376", "2882af20bb105489b9bf6f328d6350efd360f7df241d640d6855b1070de0e424", [{0x1, 0x11, "148b0e07c05af766c0e511c6fd70ae7310"}]}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xee, 0x3, @device_b, 0x7, @value=@device_b, 0x1, 0xffff, @broadcast, 0x6}}, @mesh_chsw={0x76, 0x6, {0x5, 0xdb, 0x12, 0x1}}, @chsw_timing={0x68, 0x4, {0x2, 0xff}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x2, 0x39, 0x49}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0xa000]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x1894}, 0x1, 0x0, 0x0, 0x20044081}, 0x8080) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000002580)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002540)={&(0x7f0000002400)={0x128, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x100, 0x7, 0x1, 0x0, "1e6cab64347c8bb9f7963062f7f814f8d118b853b111d92d4e820e9be2348097b94e09bbb2b66860e57a59b5d595cdc52bc61b72c994cdc38bbe0b7c1ec236a514fa0b386fe168cf70aa8e0706cc8158a5c4dc19fb7f82e82b1e3be998166d5cc8766b43e0e18723285e442b7ef1ce68b8eed70c62cc5ac9ed35b32ceb0229d42d3bedc03fc06ed4942c9a77e4704833b3072e973bacbc288bb84a52cc64e5d014a761699b061d5a833e5c2906e40b9c5298ea5f02277151fb842e8864fc6a7b22a7741f803ccc842a1390bd0574280673f0f590ba3b03b2496b9e54b75d4c7a679796c7579675e17897677ecb1e123c51af62e2de095ede6f298cd6"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x24000881) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002600), r4) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000002880)={&(0x7f00000025c0), 0xc, &(0x7f0000002840)={&(0x7f0000002640)={0x1cc, r7, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4781, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1931}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe22}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffff3089}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xfffffff8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf58}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff0000}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2c}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4040040}, 0x20028000) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000002e00)={&(0x7f00000028c0), 0xc, &(0x7f0000002dc0)={&(0x7f0000002900)={0x4bc, 0x0, 0x5, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [{{0x254, 0x1, {{0x0, 0x3}, 0x1, 0x8, 0xffff, 0x1, 0x1, 'syz0\x00', "859fb1508cc740c12ef40c6c3565dd7a2c02130e731c818613384f20984d21ba", "05cf034c0a748c9ee680b02eb5ced877b1d75997f907cdc11ebd942dede5f127", [{0x100, 0x100, {0x0, 0x7}}, {0x8, 0x1, {0x2, 0xb}}, {0xe415, 0x400, {0x1, 0x6}}, {0x9, 0xaf33, {0x0, 0x6}}, {0x6, 0xd, {0x2, 0x7}}, {0x73e2, 0x5, {0x0, 0x4}}, {0x0, 0x5, {0x0, 0x2}}, {0x60, 0x3, {0x2, 0x40}}, {0x2f, 0x9, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x9}}, {0xfff, 0x4, {0x2, 0x9}}, {0x3, 0xf, {0x1, 0x1}}, {0x7, 0x3, {0x0, 0xfff}}, {0xfff, 0x4, {0x3, 0x1}}, {0xa, 0x4, {0x2, 0x4}}, {0x9, 0x8000, {0x3, 0x2702}}, {0x9, 0x1, {0x3, 0x2}}, {0x1000, 0x8, {0x2, 0x7}}, {0xba2c, 0xb80, {0x3, 0x3}}, {0x8, 0x2, {0x1, 0x9}}, {0xe9, 0x8000, {0x3, 0x9}}, {0x7, 0x7ff, {0x1, 0x202a1b1d}}, {0x6, 0xa31, {0x3, 0x9}}, {0x9, 0x0, {0x1, 0xecc5}}, {0xff, 0x2, {0x1, 0x7817}}, {0x7, 0x6, {0x3, 0x7}}, {0x100, 0x2, {0x1, 0x7fffffff}}, {0x1, 0xf, {0x2, 0x9}}, {0x89, 0xb4}, {0x9e6, 0x0, {0x2, 0xfff}}, {0x5, 0xe03d, {0x3, 0x3}}, {0x4e27, 0x1c, {0x1, 0x5}}, {0xbc, 0xdf, {0x3, 0x3}}, {0x3, 0x547e, {0x1, 0x5}}, {0x1, 0x5, {0x0, 0x8}}, {0x7, 0x5, {0x2, 0xfffffffd}}, {0x200, 0x9, {0x1, 0x9}}, {0x7, 0x8, {0x4b2639220e2f4fe4, 0x6}}, {0xbc2, 0x7ff, {0x1, 0x6}}, {0xd, 0x66, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0xc9}, 0xe, 0x3, 0x4, 0x9, 0x21, 'syz1\x00', "4b7a64382ad3260461bbb3983ec1ff6b99a2cb3d562090299836c9c8bcc88754", "0a1f4a0b1d0add1bd9cc242462054164f729d9908a614762e0f1e89bbdfa1b55", [{0x3b, 0x9, {0x2, 0x23b}}, {0x200, 0x7, {0x0, 0x3}}, {0x3, 0x3ff, {0x0, 0xb74}}, {0x7fff, 0x15, {0x3, 0x5}}, {0x6, 0x95ea, {0x2, 0x10}}, {0x800, 0xc4, {0x3, 0x3}}, {0x4, 0x2, {0x2, 0x4d}}, {0xfbff, 0x7, {0x1, 0x8001}}, {0x81, 0x3, {0x2, 0x3}}, {0x4, 0x6, {0x2, 0x9}}, {0x400, 0x3, {0x1, 0x36c}}, {0x1000, 0x2, {0x0, 0x48}}, {0x0, 0x1, {0x2, 0x29a090c8}}, {0x3, 0xff89, {0x0, 0x3}}, {0x8, 0x83, {0x2, 0x8a8}}, {0x1000, 0xe3, {0x1, 0x8}}, {0x9, 0xa, {0x2, 0x4}}, {0xf8b9, 0x3, {0x3, 0x2}}, {0x2, 0x7, {0x2, 0xd}}, {0x40, 0xc, {0x1, 0x659}}, {0x7, 0x2, {0x2, 0x1}}, {0x9, 0xc, {0x3, 0x28000}}, {0xdb, 0x9, {0x3, 0x345c}}, {0x8000, 0x3, {0x2, 0x8001}}, {0x7, 0x8, {0x3, 0xfff}}, {0x4, 0xd7bb, {0x0, 0x1}}, {0x8, 0x8000, {0x2, 0x5}}, {0x512c, 0x608}, {0x9, 0x1000, {0x0, 0xffff}}, {0x0, 0x0, {0x3, 0xed}}, {0x29, 0x1ff, {0x0, 0xf9}}, {0xaabc, 0x6, {0x1, 0x10}}, {0x3ff, 0x6, {0x3, 0x8}}, {0xbd9, 0x8b, {0x1, 0xffffffff}}, {0x8, 0x9, {0x2, 0x7}}, {0xf, 0x4e, {0x3, 0x3}}, {0x0, 0x1, {0x1, 0x8}}, {0x9, 0x7, {0x0, 0x6}}, {0xad1b, 0xfffd, {0x0, 0xd61}}, {0x4, 0x2, {0x1, 0x1e51}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x44}, 0x4000) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x40, 0xa, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040854}, 0x20004012) r8 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) pwritev(r8, &(0x7f0000003180)=[{&(0x7f0000002f40)="dfb462c4625b56d83ca4ba910e0818eb3310a3ee05a9eb2b71b7789d9d853fb6cf391ebf662e7a3939fa82c7cb088fd79670cccd67e1b02389287a982561e2fae773a8b8c2fac121d669fedb22532b5f42db8d08bc3e47d19890495b16136a58a6a432c26ddc10a5739f1b2c4fa5f95794da0b1cf819589c67000cf060f3c4a42921e64860f633cd0396f1", 0x8b}, {&(0x7f0000003000)="dd738a8983d0685f9574b47cce6776359f569277b94355c9a44b0105e9610b23c33891f12f64ca90ddc65f920360606819b8206e6d166bc7a66c033867d87e1a6b7e19c459a173c6eb91baaf690a1d9d8816daa17a8b27935405e25606d179bf348d2d21b0595ebf07ab875386dc2e16915942362d710246ee58812989a6484a77f5d5a0bad7e9c6c54cae46af4eef61654bdebec2176ebb5097d637", 0x9c}, {&(0x7f00000030c0)="6b2e9ce2ab484f3660444f3d0d2193d0602e3a2628254eb4b63f7df0bab7fa92846e06c08df713ca793bd424efffab6ca5dac662958b32a56fc75ea3454fb5674490e6e7aacf17ff7812ba743328e47da2b246d8ab99f3b9d3acd118e51104af8ca82d7f2c18eca9961d4fbd547695f6f563e6ddda57d5f7237a8c6a886434b3bf0a91c98660ba6d6a624bb015c90cf3ad0454e9c0a02db67ffac723591af4ba604fc5da01729fad49a3b1ed23", 0xad}], 0x3, 0x3, 0x5) clock_gettime(0x0, &(0x7f00000059c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005800)=[{{&(0x7f00000031c0), 0x6e, &(0x7f0000003340)=[{&(0x7f0000003240)=""/217, 0xd9}], 0x1, &(0x7f0000003380)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000003400)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f0000003480)=""/125, 0x7d}], 0x1, &(0x7f0000003540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000003600)=@abs, 0x6e, &(0x7f0000004800)=[{&(0x7f0000003680)=""/78, 0x4e}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/95, 0x5f}, {&(0x7f0000004780)=""/111, 0x6f}], 0x4, &(0x7f0000004840)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000004880)=""/127, 0x7f}, {&(0x7f0000004900)=""/20, 0x14}, {&(0x7f0000004940)=""/63, 0x3f}, {&(0x7f0000004980)=""/79, 0x4f}], 0x4, &(0x7f0000004a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}, {{&(0x7f0000004b80)=@abs, 0x6e, &(0x7f0000004ec0)=[{&(0x7f0000004c00)=""/230, 0xe6}, {&(0x7f0000004d00)=""/23, 0x17}, {&(0x7f0000004d40)=""/32, 0x20}, {&(0x7f0000004d80)=""/215, 0xd7}, {&(0x7f0000004e80)}], 0x5, &(0x7f0000004f40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000005040)=@abs, 0x6e, &(0x7f0000005380)=[{&(0x7f00000050c0)=""/121, 0x79}, {&(0x7f0000005140)=""/14, 0xe}, {&(0x7f0000005180)=""/144, 0x90}, {&(0x7f0000005240)=""/6, 0x6}, {&(0x7f0000005280)=""/220, 0xdc}], 0x5, &(0x7f0000005400)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000005480)=@abs, 0x6e, &(0x7f0000005740)=[{&(0x7f0000005500)=""/69, 0x45}, {&(0x7f0000005580)=""/76, 0x4c}, {&(0x7f0000005600)=""/251, 0xfb}, {&(0x7f0000005700)=""/13, 0xd}], 0x4, &(0x7f0000005780)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}], 0x7, 0x40, &(0x7f0000005a00)={r9, r10+60000000}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000005a40)={r2, @in={{0x2, 0x4e24, @broadcast}}}, 0x84) sendmsg$NFQNL_MSG_VERDICT(r16, &(0x7f0000005cc0)={&(0x7f0000005b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005c80)={&(0x7f0000005b40)={0x104, 0x1, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFQA_PAYLOAD={0x8b, 0xa, "80d9457e162dfbd50ac6f7d46f38b74f026997e02f357004e12e5d0c80ba9db1e3c516e1e0797de78831b2f65ae8f3df582a617791bff5400a474e50dd3ac9eee49e70497d77fa63c2a3e91b4cb1fce319da8ddb7351aeeaabff68d5429b07ab5588542ddfcb6e046d2ac6f3e71fb1ade30ef127d312c3aa633e880fa3d56032e5ee75fa3c1f34"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x80}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_PAYLOAD={0xe, 0xa, "13b0c0bc6534dd45c8e8"}]}, 0x104}, 0x1, 0x0, 0x0, 0x4040004}, 0x20008040) ioctl$SIOCNRDECOBS(r13, 0x89e2) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005d40), r14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000005e00)={'ip6_vti0\x00', &(0x7f0000005d80)={'syztnl2\x00', 0x0, 0x4, 0xf8, 0x90, 0x8, 0x2, @rand_addr=' \x01\x00', @mcast1, 0x7800, 0x40, 0x10, 0xfffff78f}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r15, 0x8933, &(0x7f0000005e40)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r11, &(0x7f0000005f80)={&(0x7f0000005d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000005f40)={&(0x7f0000005e80)={0xa4, r17, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000080}, 0x4004080) socket$netlink(0x10, 0x3, 0x5) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000005fc0)={r3, 0x200}, 0x8) 1.740081137s ago: executing program 1 (id=1174): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800ca10100400000000600000089e6784300040000000000000c00010006000000090000000600050088a8000008000a00", @ANYRES32=r3, @ANYBLOB="08000500", @ANYRES32=r3], 0x8c}, 0x1, 0xba01}, 0x0) 1.738648183s ago: executing program 0 (id=1176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x2f000000, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r1, r2}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x25dfdbfc, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000000}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x50000000}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0xea}, {}, {0x0, 0x0, 0x0, 0x2, 0x1}, {0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x2}, {0x3}, {}, {}, {}, {}, {0x3, 0x2, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x99}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xa3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x0, 0xfffffffd}, {}, {0x0, 0x100}, {}, {0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x71) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.654336605s ago: executing program 4 (id=1177): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x7fefb, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r1, 0x0, &(0x7f0000000200)=""/76, 0x2000000}, 0x20) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x198, 0x2d, 0x1, 0x0, 0xfffffffc, "", [@nested={0x186, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="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"]}]}, 0x198}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010101, @in6=@remote, 0xffff}, {@in6=@mcast1, 0x0, 0x6c}, @in6=@local, {0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x0, 0x2}, {0x0, 0x3, 0xfffffffc}, 0x0, 0x4000, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x4, {{'ecb(arc4)\x00'}}}]}, 0x180}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0x4a4, 0xe, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x478, 0x3, 0x0, 0x1, [{0x474, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x1a, 0x6, 0x1, 0x0, "10726cfc3395669a09e3ca75d93fbe2207d0140c89ef"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x79, 0x6, 0x1, 0x0, "d8bc69be3ccf8cfda27f6a3ece7ed0a5561e9254c1cbfc29bf679315205733b28c926c786a1143e6fce862d9b9ae979d2162de0b932a43cfd27d54e116e7f6c5f48404bd3e386746c656a73b629f9a00159e10ce845c2db964c400730211f357071093019c73f13fc4233af8c02a2089369aa3dc58"}, @NFTA_SET_ELEM_KEY={0x374, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xda, 0x1, "3e169dd6c94873e5bd30727db47452e64c7060f3c402b421a19a99f211b8e6685727625c4b4d9fbeafd8d11c65cf1fe081290ec9a5b953db46c1f26639d75f96a0c49b597e8324cae6f4cfdf48813d7925b421151ea12e4e363e007af297a860e585fbf00098efcf5893300ef496e2e738b6bd0a4a9722ec551c2c6f1b9e20a84d2ab7ce013c1923437ed8493674e12565910ede13458dad32c93bdb3c1eda6a475d6822d83ed98900ec7e40cc1b81beea72873567687f18ba9160d9774c646c30cf777a80b3988c88859a4310a5125a0df5bb79801e"}, @NFTA_DATA_VALUE={0xcf, 0x1, "721449298ed3f501d05883d4322ec4f77a15a41b96dceeebfef1c3cb052c1de1e0fba2f12bb4ff99019bb262d15317089cde18503c396a0e75716d035634e8c3e6c027758288df65dc3ce193053c45f6249ab2ed55a5cad28860e10f8d4722374667f0327850f8296ee8b25593935b8d9627dcfedfc8d4bbe4bb1f0a6bf49fab29bcc04bfeb95f67b14b79b639715b0a6d0209145c181a628a0a7bba4532d3ef30fb67f7f3c2a5acf1678de20f6f1a9d3015514fde85391871c789bc0694373709a94d9e8e24cede6b11e7"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x66, 0x1, "a1bd508616e16a9c823ad699975ecb34f3e1c7e4b11001881265722ae8395d57522e8abd48d4a630d6ead21db5ae987862dc3eb5e605fdec480269323d95080d8ebf87e22f7f2e125a80f66ca1ac845e167712a8c320d617e5847eebf581a9b906dd"}, @NFTA_DATA_VALUE={0xdd, 0x1, "1052014bb2decf042bceeae1517884901abb8fd3a738cd6ed979d4fb8ca8f351072d38fd1a157c9f9d0358a0dc3bdd72531f7ca30cbc5eac236a666d1a51d3646dc2546b613cbf7566af2ac82b92164f38be50dce820018b4b654443d4a402d553758fabf1147adfb79b969170b1d67380b947227252b03aec7f995f1d4b18eb89515442597ef88b1fcb0ed156d44e23016c5665e0cae86e27309b3aba84a80366ad92bcbbf1010a64ddd774c994b9b3d3f71cfbff286ca947386f75167b4bddc53140dd7146a17f2f900714bd3452e6fcf16b91082736cde0"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x734, 0xb, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe5657526783d0f57}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPR={0x6e0, 0x11, 0x0, 0x1, @bitwise={{0xc}, @val={0x6d0, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x1cc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3d, 0x1, "537f8b140e705bf61023a0581446f126949bc3895f4bfa735796c988087541c0060791fec691395672b54e95a0af825438182bfa331899d668"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "9e46347bffe29b412a1a7c2b67947a5eccf0bd7c44ba8a23f74a1559207b8d87120689a7a539da0d65"}, @NFTA_DATA_VALUE={0x36, 0x1, "d341285a7b987fbc6b05cf462e2fc4d304c3754978022e1f9f6eae40dec86df5d5519badf9992aae46cb5ae0a619838b6f72"}, @NFTA_DATA_VALUE={0xe5, 0x1, "d720c9d9141ba8f7832d8b302643abcb7a072f9840d278bae46ade68d9489c160768c626f8565bb5fbf21a7de452e735beb2960227b7347bcd280825d7ff3c73cf4ea1a0d7091aeac231a61b8a532720900a3260e8a7e2b2da02cf0a247456bb22a7f1a4ce2fa542cab907bda3786ca4075985391b1397dcdbd7a4a119e0864f7fd9d48252a512a16cf414e5adf7bca65ee8ff0940f2725b2dd8e0fca5d9bb6f5b2ebbfaa4d292224bfef2bcc427f0f61520e1b512bdd84551d14ca9059fb70d3b5de4c9aeb93dc7a5729c57deeaffb7d29984a1ac02e41d80f74394b1e07849a5"}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFTA_BITWISE_MASK={0x5c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x56, 0x1, "9202ae882592caf598531bf013934f1b30fed74d38d647da96fc8357505ae129d9dd4a692a7c9bb74cd30147e7faf49842f121bccf73cfafaba82389f6097e0cc110cf6e15191035cc7e9dbd91cbd4a2261f"}]}, @NFTA_BITWISE_XOR={0x148, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x44, 0x1, "6800391bb93a39bdbd5fb213e8c23ba521bed0ff4a3c26fef4accdf0ce9f45a1d68580bc4b65056cb3cba8b711ddd6e07c80b5a46159f582e82a5bac1e73c4a5"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x14, 0x1, "bc2cbaf8771d448d3feb617172ba9595"}]}, @NFTA_BITWISE_XOR={0x254, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x83, 0x1, "d6698de33a3ee937db9bdd510770830f49cde050cf6d7d2c24e8e08692f402e3509c7a2bf71eb88073b42a980ee679f7ba0364840067089095143b74886aa9e83fbc93d69bc2d4a0bec183ae79216eede85a4f36f0a15cd04646a5baf11a236f95497434de8f5081fd12db7effcc12b5e5202bf239bbccf21ec21b494a408e"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xbc, 0x1, "e27d341df1f5ea5ee22764eeb11e87fde5044b8eff025d8bec53155605e3ca8bbd8bbda6e5a8770e3517f6863dd46fa8d4635c9175f7a618d8e6645c7a309b9a78fcd8aee00411c32e1c7e3d8a678d3754c20c6afe2e0386693771fe0246840b9586322a6a50428ee3352501d7e320aa64aea53afd94db30436dfcde75645bc5f03868b5d7dab4e0fbfc1b3d823a5d189c3a98391b4d71f82f7771b1911244f45d9471c4d3811ec7a4e8dc3fd7f43ea00a68da319bd84115"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xb9, 0x1, "ed95e5179d3a0c9aefa26f76bfa81e53cbc48ece3127eba98a83daa14d34672d1be9528ef455bd506429d46b8407d96507ca3fb7fccc67e2b9aa083d4162083f9df9f75f72a2a5b09815bcefd7146b4685bc429252ab101036e21076cc23c5b2cee6951a1f149ff5839cea8fa71eb4f6cb3b6bc1650890b7bc35333ee883501ea430ab8d278f46031bccbb222255f81b782a52aec76faa9c0da8f3f6f4e2d0928ac49d28b714b59f7eea57879b0aacd5e207430e6a"}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_MASK={0x4c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x33, 0x1, "064a39c1f8b605e76b7d0c1fc366ba0f15ca3f2de4e4ff0fc653368185c56ef855ea3d49d7ebde3641e8e381b254e0"}]}, @NFTA_BITWISE_MASK={0x9c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x3d, 0x1, "f9eec919604493bd18b011b00dfa08d03327f268a0351ea7211282b78f80176aeb5b437ac1f1e4cd2bc72dd947a1136564b6abef3018b4984d"}, @NFTA_DATA_VALUE={0xe, 0x1, "41a0453786a5cba4d4e6"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2a}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4c}, 0x1, 0x0, 0x0, 0x44054}, 0x44001) 1.629209572s ago: executing program 3 (id=1178): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x10, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x8}}}}]}, 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.456080281s ago: executing program 4 (id=1179): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x1c8, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@rand_addr=0x64010100}, {@in6=@loopback, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x8d, 0x14, {{'rmd160\x00'}, 0x208, 0x0, "e863654b40a7ad42118bc1dd69d07e3b05cf0dbc9a9aac6130f0d060cb0c958c133115ff9cbb79de1007f5583249a62fe4273013ec2c2cca44c3a2d388d9483ca3"}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r3], 0x28}, 0x1, 0x0, 0x0, 0x10040000}, 0x0) (async, rerun: 64) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0xb, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xd}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c014}, 0x8000) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0) 1.453388918s ago: executing program 3 (id=1180): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.344842363s ago: executing program 3 (id=1181): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x840000000002, 0x3, 0xfe) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x60000000}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 760.4006ms ago: executing program 1 (id=1182): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000040)=0x6cd, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r2, 0x1000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 756.289939ms ago: executing program 4 (id=1183): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) unshare(0x22020400) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffff70, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) (async) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="2e2e014010ff"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_emit_ethernet(0xda, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x1, 0xa, "2189ea43a2149b84"}, {0x0, 0x2}, {0x0, 0x12, "c944a6b21f22109ee302a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r2, 0x1, 0x70bd26, 0x25df9bff, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x64044084}, 0x0) 635.876225ms ago: executing program 3 (id=1184): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000003b80)={0x10000001}) write(r1, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd2f, 0x25dfdc00, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) 609.152499ms ago: executing program 3 (id=1185): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000700)="b7080723") (async) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)="50031664938fbb1f8c458a4d6dfa2a9301a507ea8c65e1271131f84c9f9b6c3d6597d3f92d1ed740d99e3b5eefdc589a40dc23ab0ea186afaa9765ad5064a4968d11f3558f083bc62fa286536b38fc7d3066fc1cb122e91021b8927ea7eec32e3e26c020131a6ab52a085732aa049187eacda742f7") 604.64304ms ago: executing program 4 (id=1186): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220180018000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000005000006bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) (async) socket$phonet_pipe(0x23, 0x5, 0x2) 439.923902ms ago: executing program 3 (id=1187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x80, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x4008804}, 0x4801) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x20000880) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r5) pwritev(r5, 0x0, 0x0, 0x4000000, 0x80) sendfile(r5, r5, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61124c00000000006113300000000000bf3000000000000025000c0007ffffffbd0201000000000095002000000000006916320000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$cgroup_type(r5, &(0x7f0000000040), 0x9) socket(0x22, 0x3, 0x1) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000003000000000000000000000002000100000000fffffffbfc00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000001000000040000000000000015"], 0x48) syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x6, "a874e400"}, @generic={0x1, 0x2}]}}}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c805}, 0x0) 430.844666ms ago: executing program 4 (id=1188): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1010000}}}}}, 0x0) 371.226799ms ago: executing program 1 (id=1189): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) unshare(0x62040200) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800007964120000000000000020008510000006000000180000", @ANYRES32, @ANYBLOB="00000000000000066608000000001000180000000010000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000070085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0x1, 0x0, 0x0}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4048000) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth1_to_hsr\x00', &(0x7f0000000580)=@ethtool_per_queue_op={0x4b, 0x1, [0x3, 0x5, 0x8, 0x6, 0x4, 0x7, 0x7f, 0x7, 0x3, 0x800, 0x7, 0x2, 0x80000001, 0x9, 0x3, 0x3ff, 0x8, 0x4fe, 0xd0f, 0x0, 0x5, 0xbc14, 0x80000000, 0xffffa0ff, 0xfffffff7, 0x2, 0x7, 0x8, 0x8, 0xfffffff7, 0x100, 0x456cf931, 0x4, 0x4, 0x9, 0x6, 0x5, 0x8001, 0x10, 0x6, 0x1, 0x6, 0x7, 0xd, 0x80000000, 0x400, 0x2, 0x1, 0x9d, 0x7, 0x2, 0x9ae, 0x0, 0x5, 0x3, 0xee4, 0x5, 0x0, 0x1285, 0xa, 0xf, 0x8, 0xb, 0xf, 0xffff2d9d, 0x1, 0x3ff, 0x8, 0x5, 0x0, 0x5, 0x8, 0x9, 0xe, 0x6, 0x7f, 0x8, 0x3, 0x2, 0x3, 0x4, 0x7f, 0x3, 0x1, 0x1000, 0x4, 0x8, 0x7, 0x9, 0xb5a, 0x7f, 0x2, 0xffff, 0x5, 0xa, 0x2, 0x5, 0x1, 0xffffff7f, 0x6, 0x8, 0x1, 0xffffffff, 0x9, 0xc, 0x8, 0x18e, 0x1, 0x1, 0x9, 0x5, 0x96, 0x3, 0x7, 0x5, 0x3, 0x21cfb5f9, 0x5, 0x6, 0xbb3, 0x6, 0x101, 0x9, 0x6, 0xcd68, 0x9, 0x81, 0x41]}}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000840)=ANY=[@ANYBLOB="ff010000000000006a1e0000000000000800000000000000", @ANYRES32=r2, @ANYBLOB="000000000700000000000900002d5500000000000000000001000000688da120af5467042c9d929f6f43e856d1c964a912048160c7888d1540226e7f20af20ab0c087c79622e183528dbe7551e46d6c541379559", @ANYRES32, @ANYBLOB="00000000151000"/28, @ANYRES32=r4, @ANYBLOB="00000000f759ffffffffffff00"/28, @ANYRES32=r9, @ANYBLOB="000000000600"/28, @ANYRES32=r3, @ANYBLOB="000000008d0700"/28, @ANYRES32=r10, @ANYBLOB='\x00'/28, @ANYRES32=r5, @ANYBLOB="000000000500"/28, @ANYRES32=r8, @ANYBLOB="000000000300"/28]) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@loopback}}, {{@in=@private}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) listen(r1, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) 292.236423ms ago: executing program 0 (id=1190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xdfb}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x24000840) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, r6, 0x531, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@getchain={0x24, 0x66, 0xfff1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xf}, {0x0, 0xfff1}, {0xffea, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x800) 205.49597ms ago: executing program 4 (id=1191): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f0000006200)=[{{&(0x7f00000004c0)=@l2, 0x0, &(0x7f0000000380)=[{&(0x7f0000000540)=""/104}, {&(0x7f0000000680)=""/163}], 0x0, &(0x7f0000000800)=""/177}, 0x4}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c80)=""/4096}, {&(0x7f00000040c0)=""/4096}, {&(0x7f0000002c80)=""/4096}], 0x0, &(0x7f00000005c0)=""/30}, 0x3}, {{&(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x0, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/155}], 0x0, &(0x7f00000009c0)=""/87}, 0x400}, {{&(0x7f0000000a40)=@caif=@util, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000ac0)=""/183}, {&(0x7f0000000b80)=""/176}, {&(0x7f0000003c80)=""/9}, {&(0x7f0000003cc0)=""/199}, {&(0x7f0000003dc0)=""/3}]}, 0x7f}, {{&(0x7f0000003e80)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x0, &(0x7f0000004000)=[{&(0x7f0000003f00)=""/23}, {&(0x7f0000003f40)=""/142}], 0x0, &(0x7f0000004040)=""/113}}, {{0x0, 0x0, &(0x7f00000050c0), 0x0, &(0x7f0000005100)=""/43}, 0x9}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000005140)=""/93}], 0x0, &(0x7f0000005200)=""/4096}, 0x2}], 0x4000044, 0x10022, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0x60, &(0x7f00000005c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), 0x0, 0x0, 0xc8, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1192): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000010c0)={0x14, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001400), r0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000001580), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001640)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="1303000000000000000001000000"], 0x14}}, 0x0) kernel console output (not intermixed with test programs): 39][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.470424][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.490371][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.504571][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.575893][ T13] veth1_macvtap: left promiscuous mode [ 139.581717][ T13] veth0_macvtap: left promiscuous mode [ 139.621117][ T13] veth1_vlan: left promiscuous mode [ 139.644714][ T13] veth0_vlan: left promiscuous mode [ 139.798120][ T7305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.829527][ T7307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.334'. [ 140.026212][ T5839] Bluetooth: hci3: command tx timeout [ 140.231612][ T13] team0 (unregistering): Port device team_slave_1 removed [ 140.273276][ T13] team0 (unregistering): Port device team_slave_0 removed [ 140.808654][ T7202] chnl_net:caif_netlink_parms(): no params data found [ 140.921473][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 140.971993][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 141.106165][ T7318] netlink: 'syz.0.338': attribute type 2 has an invalid length. [ 141.123925][ T7318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.338'. [ 141.197119][ T7202] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.206602][ T7202] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.214410][ T7202] bridge_slave_0: entered allmulticast mode [ 141.226292][ T7202] bridge_slave_0: entered promiscuous mode [ 141.263397][ T7202] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.270935][ T7202] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.311599][ T7202] bridge_slave_1: entered allmulticast mode [ 141.338825][ T7202] bridge_slave_1: entered promiscuous mode [ 141.521232][ T7202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.564999][ T7202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.599693][ T7329] bond0: entered allmulticast mode [ 141.993236][ T7202] team0: Port device team_slave_0 added [ 142.046764][ T7202] team0: Port device team_slave_1 added [ 142.109276][ T5839] Bluetooth: hci3: command tx timeout [ 142.253007][ T7202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.279788][ T7202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.348086][ T7202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.434665][ T7202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.441859][ T7202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.490447][ T7367] FAULT_INJECTION: forcing a failure. [ 142.490447][ T7367] name failslab, interval 1, probability 0, space 0, times 1 [ 142.513918][ T7202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.529774][ T7367] CPU: 0 UID: 0 PID: 7367 Comm: syz.1.349 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 142.529818][ T7367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 142.529835][ T7367] Call Trace: [ 142.529847][ T7367] [ 142.529856][ T7367] dump_stack_lvl+0x189/0x250 [ 142.529905][ T7367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.529935][ T7367] ? __pfx__printk+0x10/0x10 [ 142.529961][ T7367] ? __pfx___might_resched+0x10/0x10 [ 142.529984][ T7367] should_fail_ex+0x414/0x560 [ 142.530021][ T7367] should_failslab+0xa8/0x100 [ 142.530046][ T7367] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 142.530069][ T7367] ? __alloc_skb+0x112/0x2d0 [ 142.530095][ T7367] __alloc_skb+0x112/0x2d0 [ 142.530122][ T7367] netlink_sendmsg+0x5c6/0xb30 [ 142.530155][ T7367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.530178][ T7367] ? aa_sock_msg_perm+0x94/0x160 [ 142.530199][ T7367] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.530218][ T7367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.530240][ T7367] __sock_sendmsg+0x219/0x270 [ 142.530273][ T7367] ____sys_sendmsg+0x505/0x830 [ 142.530304][ T7367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.530338][ T7367] ? import_iovec+0x74/0xa0 [ 142.530368][ T7367] ___sys_sendmsg+0x21f/0x2a0 [ 142.530396][ T7367] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.530484][ T7367] ? __fget_files+0x2a/0x420 [ 142.530510][ T7367] ? __fget_files+0x3a0/0x420 [ 142.530547][ T7367] __x64_sys_sendmsg+0x19b/0x260 [ 142.530576][ T7367] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.530621][ T7367] ? do_syscall_64+0xba/0x210 [ 142.530656][ T7367] do_syscall_64+0xf6/0x210 [ 142.530686][ T7367] ? clear_bhb_loop+0x45/0xa0 [ 142.530711][ T7367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.530730][ T7367] RIP: 0033:0x7f7db898e969 [ 142.530757][ T7367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.530773][ T7367] RSP: 002b:00007f7db97e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.530802][ T7367] RAX: ffffffffffffffda RBX: 00007f7db8bb5fa0 RCX: 00007f7db898e969 [ 142.530824][ T7367] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 142.530836][ T7367] RBP: 00007f7db97e6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.530847][ T7367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.530858][ T7367] R13: 0000000000000000 R14: 00007f7db8bb5fa0 R15: 00007fff75f82738 [ 142.530890][ T7367] [ 142.956399][ T7371] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 143.057795][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'. [ 143.275395][ T7202] hsr_slave_0: entered promiscuous mode [ 143.291851][ T7202] hsr_slave_1: entered promiscuous mode [ 143.314292][ T7202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.343249][ T7202] Cannot create hsr debugfs directory [ 143.909936][ T7383] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 144.056916][ T7427] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 144.194943][ T5839] Bluetooth: hci3: command tx timeout [ 144.415348][ T7438] bridge0: port 4(syz_tun) entered blocking state [ 144.421936][ T7438] bridge0: port 4(syz_tun) entered disabled state [ 144.458385][ T7438] syz_tun: entered allmulticast mode [ 144.487616][ T7438] syz_tun: entered promiscuous mode [ 144.763474][ T7449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.823541][ T7452] netlink: 'syz.4.364': attribute type 1 has an invalid length. [ 144.838158][ T7453] netlink: 348 bytes leftover after parsing attributes in process `syz.1.363'. [ 144.910914][ T7452] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.988761][ T7456] bond1: (slave veth0_to_bond): Releasing active interface [ 145.049365][ T7456] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 145.153205][ T7452] vlan2: entered allmulticast mode [ 145.158578][ T7452] veth1: entered allmulticast mode [ 145.169427][ T7452] bond2: (slave vlan2): Opening slave failed [ 145.363524][ T7471] sctp: [Deprecated]: syz.1.367 (pid 7471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.363524][ T7471] Use struct sctp_sack_info instead [ 145.440474][ T7471] netlink: 'syz.1.367': attribute type 1 has an invalid length. [ 145.494594][ T7202] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 145.543334][ T7202] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 145.597507][ T7477] bridge_slave_0: left allmulticast mode [ 145.619078][ T7477] bridge_slave_0: left promiscuous mode [ 145.628572][ T7477] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.659475][ T7477] bridge_slave_1: left allmulticast mode [ 145.679783][ T7477] bridge_slave_1: left promiscuous mode [ 145.688512][ T7477] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.719563][ T7477] bond0: (slave bond_slave_0): Releasing backup interface [ 145.735980][ T7490] netlink: 'syz.3.370': attribute type 10 has an invalid length. [ 145.744955][ T7487] netlink: 'syz.3.370': attribute type 10 has an invalid length. [ 145.763076][ T7477] bond0: (slave bond_slave_1): Releasing backup interface [ 145.791945][ T7477] team0: Port device team_slave_0 removed [ 145.806992][ T7477] team0: Port device team_slave_1 removed [ 145.813502][ T7477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.824724][ T7477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.874319][ T7477] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 145.884409][ T7477] batman_adv: batadv0: Removing interface: virt_wifi0 [ 145.902356][ T7477] batman_adv: batadv0: Removing interface: macvlan2 [ 145.935972][ T7202] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 146.007351][ T7487] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 146.031973][ T7202] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 146.223354][ T7512] netlink: 52 bytes leftover after parsing attributes in process `syz.3.374'. [ 146.229796][ T7510] netlink: 52 bytes leftover after parsing attributes in process `syz.3.374'. [ 146.265931][ T7509] netlink: 'syz.4.375': attribute type 11 has an invalid length. [ 146.283891][ T7509] netlink: 224 bytes leftover after parsing attributes in process `syz.4.375'. [ 147.261291][ T7554] lo speed is unknown, defaulting to 1000 [ 147.399280][ T7554] lo speed is unknown, defaulting to 1000 [ 147.411267][ T7202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.471515][ T7554] lo speed is unknown, defaulting to 1000 [ 147.520816][ T7202] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.541891][ T7554] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 147.593639][ T7554] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 147.758994][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.766219][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.806661][ T7554] lo speed is unknown, defaulting to 1000 [ 147.853633][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.860903][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.914660][ T7554] lo speed is unknown, defaulting to 1000 [ 147.942361][ T7576] IPv6: sit1: Disabled Multicast RS [ 147.976131][ T7576] sit1: entered allmulticast mode [ 148.063180][ T7554] lo speed is unknown, defaulting to 1000 [ 148.139102][ T7583] netlink: 'syz.1.388': attribute type 10 has an invalid length. [ 148.144343][ T7587] macvlan3: entered promiscuous mode [ 148.152252][ T7587] bridge0: entered promiscuous mode [ 148.162361][ T7583] netlink: 40 bytes leftover after parsing attributes in process `syz.1.388'. [ 148.170799][ T7587] bridge0: port 1(macvlan3) entered blocking state [ 148.198870][ T7587] bridge0: port 1(macvlan3) entered disabled state [ 148.210370][ T7587] macvlan3: entered allmulticast mode [ 148.219063][ T7587] bridge0: entered allmulticast mode [ 148.248993][ T7587] macvlan3: left allmulticast mode [ 148.262776][ T7587] bridge0: left allmulticast mode [ 148.300953][ T7587] bridge0: left promiscuous mode [ 148.426725][ T7554] lo speed is unknown, defaulting to 1000 [ 148.456125][ T7554] lo speed is unknown, defaulting to 1000 [ 148.462567][ T7583] batadv0: entered promiscuous mode [ 148.472399][ T7583] batadv0: entered allmulticast mode [ 148.515923][ T7583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.540535][ T7583] bridge0: port 1(batadv0) entered blocking state [ 148.552194][ T7583] bridge0: port 1(batadv0) entered disabled state [ 148.589242][ T7596] syzkaller1: entered promiscuous mode [ 148.609475][ T7596] syzkaller1: entered allmulticast mode [ 148.644500][ T7554] lo speed is unknown, defaulting to 1000 [ 148.672524][ T7554] lo speed is unknown, defaulting to 1000 [ 148.686703][ T2982] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 148.696361][ T2982] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 148.910331][ T7617] xt_hashlimit: max too large, truncated to 1048576 [ 148.930384][ T7617] xt_hashlimit: overflow, try lower: 241/0 [ 148.941861][ T7617] netlink: 'syz.4.394': attribute type 9 has an invalid length. [ 149.060154][ T7617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.169522][ T7626] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20003 [ 149.435722][ T7636] lo speed is unknown, defaulting to 1000 [ 149.500934][ T7202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.617762][ T7648] netlink: 'syz.4.400': attribute type 1 has an invalid length. [ 149.629563][ T7648] netlink: 144 bytes leftover after parsing attributes in process `syz.4.400'. [ 149.666336][ T7648] netlink: 'syz.4.400': attribute type 1 has an invalid length. [ 149.689288][ T7648] netlink: 64 bytes leftover after parsing attributes in process `syz.4.400'. [ 149.716509][ T7642] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 150.020005][ T7665] syz_tun: left allmulticast mode [ 150.067113][ T7665] syz_tun: left promiscuous mode [ 150.097463][ T7665] bridge0: port 4(syz_tun) entered disabled state [ 150.430814][ T7665] gretap0: left allmulticast mode [ 150.514851][ T7665] gretap0: left promiscuous mode [ 150.555115][ T7665] bridge0: port 3(gretap0) entered disabled state [ 150.745536][ T7665] bridge_slave_1: left allmulticast mode [ 150.782012][ T7665] bridge_slave_1: left promiscuous mode [ 150.802244][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.832318][ T7665] bridge_slave_0: left promiscuous mode [ 150.846704][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.929574][ T7659] pim6reg1: entered promiscuous mode [ 150.935340][ T7659] pim6reg1: entered allmulticast mode [ 151.085788][ T7202] veth0_vlan: entered promiscuous mode [ 151.121086][ T7202] veth1_vlan: entered promiscuous mode [ 151.249120][ T7697] xt_hashlimit: max too large, truncated to 1048576 [ 151.264028][ T7697] xt_hashlimit: overflow, try lower: 241/0 [ 151.292184][ T7697] netlink: 'syz.3.407': attribute type 9 has an invalid length. [ 151.474522][ T7697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.555324][ T7711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.611409][ T7202] veth0_macvtap: entered promiscuous mode [ 151.652756][ T7202] veth1_macvtap: entered promiscuous mode [ 151.743509][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.792765][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.833165][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.864813][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.889392][ T7202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.914345][ T7734] netlink: 32 bytes leftover after parsing attributes in process `syz.1.414'. [ 151.946196][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.972861][ T7726] xt_CT: No such helper "snmp" [ 151.974580][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.990270][ T7202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.001754][ T7202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.012559][ T7726] netlink: 28 bytes leftover after parsing attributes in process `syz.1.414'. [ 152.015155][ T7202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.117861][ T7730] lo speed is unknown, defaulting to 1000 [ 152.126858][ T7202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.161066][ T7202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.183052][ T7202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.204104][ T7202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.379887][ T7750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.418'. [ 152.410966][ T7749] veth0_to_hsr: mtu less than device minimum [ 152.419531][ T7750] netlink: 16 bytes leftover after parsing attributes in process `syz.4.418'. [ 152.621985][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.641851][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.788251][ T7767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 152.823417][ T7767] nbd: must specify a size in bytes for the device [ 152.859420][ T7767] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 152.967251][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.986033][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.252247][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.426'. [ 153.291618][ T7795] xt_connbytes: Forcing CT accounting to be enabled [ 153.301196][ T7795] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 153.337740][ T7796] netlink: 'syz.4.428': attribute type 1 has an invalid length. [ 153.699529][ T7817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.432'. [ 153.746980][ T7817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.432'. [ 153.757340][ T2960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.911034][ T2960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.092446][ T2960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.256135][ T2960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.343283][ T7840] openvswitch: netlink: Duplicate or invalid key (type 0). [ 154.362840][ T7840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.666389][ T2960] bridge_slave_1: left allmulticast mode [ 154.680798][ T2960] bridge_slave_1: left promiscuous mode [ 154.690902][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.718549][ T2960] bridge_slave_0: left allmulticast mode [ 154.728097][ T2960] bridge_slave_0: left promiscuous mode [ 154.742456][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.910954][ T5140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.930272][ T5140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.945502][ T5140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.959259][ T5140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.967783][ T5140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.050305][ T7852] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 155.216422][ T7857] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 155.275672][ T7860] netlink: 'syz.0.438': attribute type 1 has an invalid length. [ 155.378356][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.393423][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.406236][ T2960] bond0 (unregistering): Released all slaves [ 155.532698][ T7851] lo speed is unknown, defaulting to 1000 [ 155.551931][ T7864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.440'. [ 155.602351][ T7859] lo speed is unknown, defaulting to 1000 [ 155.667373][ T7848] lo speed is unknown, defaulting to 1000 [ 156.088666][ T2960] hsr_slave_0: left promiscuous mode [ 156.097059][ T2960] hsr_slave_1: left promiscuous mode [ 156.110422][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.124587][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.139749][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.150749][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.205341][ T2960] veth1_macvtap: left promiscuous mode [ 156.221703][ T2960] veth0_macvtap: left promiscuous mode [ 156.231770][ T2960] veth1_vlan: left promiscuous mode [ 156.241728][ T2960] veth0_vlan: left promiscuous mode [ 156.280173][ T7891] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 156.299309][ T7891] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 156.309486][ T7891] netlink: 'syz.4.444': attribute type 2 has an invalid length. [ 156.321575][ T7891] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 156.576130][ T7898] netlink: 'syz.4.446': attribute type 21 has an invalid length. [ 156.590914][ T7899] netlink: 'syz.4.446': attribute type 21 has an invalid length. [ 156.885279][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 156.928832][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 157.067858][ T5839] Bluetooth: hci3: command tx timeout [ 157.342521][ T7876] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 157.856273][ T7848] chnl_net:caif_netlink_parms(): no params data found [ 158.400744][ T7848] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.441842][ T7920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.449'. [ 158.454081][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.468261][ T7848] bridge_slave_0: entered allmulticast mode [ 158.495042][ T7848] bridge_slave_0: entered promiscuous mode [ 158.527582][ T7848] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.550709][ T7848] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.572006][ T7848] bridge_slave_1: entered allmulticast mode [ 158.598970][ T7848] bridge_slave_1: entered promiscuous mode [ 158.679725][ T7931] FAULT_INJECTION: forcing a failure. [ 158.679725][ T7931] name failslab, interval 1, probability 0, space 0, times 0 [ 158.694428][ T7931] CPU: 0 UID: 0 PID: 7931 Comm: syz.3.452 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 158.694464][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 158.694477][ T7931] Call Trace: [ 158.694485][ T7931] [ 158.694493][ T7931] dump_stack_lvl+0x189/0x250 [ 158.694533][ T7931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.694562][ T7931] ? __pfx__printk+0x10/0x10 [ 158.694578][ T7931] ? __lock_acquire+0xaac/0xd20 [ 158.694623][ T7931] should_fail_ex+0x414/0x560 [ 158.694661][ T7931] should_failslab+0xa8/0x100 [ 158.694689][ T7931] kmem_cache_alloc_noprof+0x73/0x3c0 [ 158.694714][ T7931] ? skb_clone+0x212/0x3a0 [ 158.694746][ T7931] skb_clone+0x212/0x3a0 [ 158.694777][ T7931] __netlink_deliver_tap+0x404/0x850 [ 158.694815][ T7931] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.694839][ T7931] netlink_deliver_tap+0x19c/0x1b0 [ 158.694862][ T7931] netlink_sendskb+0x68/0x140 [ 158.694884][ T7931] nfnetlink_rcv+0x22a0/0x2530 [ 158.694949][ T7931] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 158.694974][ T7931] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 158.695016][ T7931] ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40 [ 158.695080][ T7931] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 158.695102][ T7931] ? skb_clone+0x246/0x3a0 [ 158.695146][ T7931] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.695177][ T7931] netlink_unicast+0x758/0x8d0 [ 158.695208][ T7931] netlink_sendmsg+0x805/0xb30 [ 158.695242][ T7931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.695267][ T7931] ? aa_sock_msg_perm+0x94/0x160 [ 158.695291][ T7931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.695313][ T7931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.695333][ T7931] __sock_sendmsg+0x219/0x270 [ 158.695366][ T7931] ____sys_sendmsg+0x505/0x830 [ 158.695397][ T7931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.695433][ T7931] ? import_iovec+0x74/0xa0 [ 158.695470][ T7931] ___sys_sendmsg+0x21f/0x2a0 [ 158.695499][ T7931] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.695567][ T7931] ? __fget_files+0x2a/0x420 [ 158.695591][ T7931] ? __fget_files+0x3a0/0x420 [ 158.695629][ T7931] __x64_sys_sendmsg+0x19b/0x260 [ 158.695658][ T7931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.695704][ T7931] ? do_syscall_64+0xba/0x210 [ 158.695738][ T7931] do_syscall_64+0xf6/0x210 [ 158.695768][ T7931] ? clear_bhb_loop+0x45/0xa0 [ 158.695793][ T7931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.695811][ T7931] RIP: 0033:0x7f743878e969 [ 158.695829][ T7931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.695845][ T7931] RSP: 002b:00007f743961c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.695865][ T7931] RAX: ffffffffffffffda RBX: 00007f74389b5fa0 RCX: 00007f743878e969 [ 158.695879][ T7931] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 158.695891][ T7931] RBP: 00007f743961c090 R08: 0000000000000000 R09: 0000000000000000 [ 158.695903][ T7931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.695914][ T7931] R13: 0000000000000000 R14: 00007f74389b5fa0 R15: 00007ffdfaa0fa38 [ 158.695946][ T7931] [ 159.059019][ T7848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.114712][ T7937] xt_hashlimit: max too large, truncated to 1048576 [ 159.133133][ T7937] xt_hashlimit: overflow, try lower: 241/0 [ 159.142365][ T7848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.143330][ T7937] netlink: 'syz.3.454': attribute type 9 has an invalid length. [ 159.168106][ T5839] Bluetooth: hci3: command tx timeout [ 159.280499][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 159.327767][ T7937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.365391][ T7848] team0: Port device team_slave_0 added [ 159.380320][ T7947] netlink: 180 bytes leftover after parsing attributes in process `syz.1.456'. [ 159.399434][ T7949] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 159.440099][ T7942] netlink: 'syz.0.455': attribute type 10 has an invalid length. [ 159.447263][ T7848] team0: Port device team_slave_1 added [ 159.491248][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'. [ 159.526315][ T7942] bond0: left allmulticast mode [ 159.547975][ T7942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.558817][ T7942] team0: Device bond0 failed to register rx_handler [ 159.753476][ T7966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.462'. [ 159.931929][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'. [ 159.978640][ T7949] team0 (unregistering): left promiscuous mode [ 160.000433][ T7977] Driver unsupported XDP return value 0 on prog (id 269) dev N/A, expect packet loss! [ 160.137568][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.154241][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.219195][ T7848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.245302][ T7848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.254589][ T7848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.282440][ T7848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.479154][ T7848] hsr_slave_0: entered promiscuous mode [ 160.492460][ T7848] hsr_slave_1: entered promiscuous mode [ 160.501388][ T7848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.518496][ T7848] Cannot create hsr debugfs directory [ 160.589729][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 160.723593][ T7985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 161.224247][ T5839] Bluetooth: hci3: command tx timeout [ 161.966329][ T8021] lo speed is unknown, defaulting to 1000 [ 162.321588][ T7848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 162.407741][ T7848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 162.448735][ T7848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 162.484918][ T7848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 162.709574][ T8043] lo speed is unknown, defaulting to 1000 [ 163.306438][ T5839] Bluetooth: hci3: command tx timeout [ 163.618608][ T7848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.632637][ T8064] netlink: 'syz.3.485': attribute type 8 has an invalid length. [ 163.675477][ T8067] netlink: 830 bytes leftover after parsing attributes in process `syz.1.486'. [ 163.778932][ T7848] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.822448][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.829702][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.924566][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.931768][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.958945][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'. [ 164.341310][ T8070] netlink: 'syz.4.487': attribute type 1 has an invalid length. [ 164.344209][ T8088] xt_hashlimit: max too large, truncated to 1048576 [ 164.350767][ T8070] netlink: 'syz.4.487': attribute type 2 has an invalid length. [ 164.382214][ T8088] xt_hashlimit: overflow, try lower: 241/0 [ 164.389453][ T8090] netlink: 'syz.3.493': attribute type 9 has an invalid length. [ 164.432847][ T8081] lo speed is unknown, defaulting to 1000 [ 164.687220][ T8096] lo speed is unknown, defaulting to 1000 [ 165.271075][ T7848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.421715][ T7848] veth0_vlan: entered promiscuous mode [ 165.496807][ T7848] veth1_vlan: entered promiscuous mode [ 165.628130][ T7848] veth0_macvtap: entered promiscuous mode [ 165.903504][ T7848] veth1_macvtap: entered promiscuous mode [ 166.056797][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.106426][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.139652][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.162777][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.202303][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.238304][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.251544][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.262179][ T7848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.297603][ T7848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.320812][ T7848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.439473][ T7848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.484071][ T7848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.492853][ T7848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.505154][ T5839] Bluetooth: hci3: command tx timeout [ 166.537552][ T7848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.549089][ T8124] lo speed is unknown, defaulting to 1000 [ 166.998136][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.018225][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.161321][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.215534][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.102018][ T2991] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.248292][ T2991] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.336265][ T2991] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.425088][ T2991] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.677685][ T2991] bridge_slave_1: left allmulticast mode [ 168.683410][ T2991] bridge_slave_1: left promiscuous mode [ 168.708449][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.786195][ T2991] bridge_slave_0: left allmulticast mode [ 168.819430][ T2991] bridge_slave_0: left promiscuous mode [ 168.844131][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.575128][ T5140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.586751][ T5140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.610869][ T5140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.636477][ T5140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.645190][ T5140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.848289][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.509'. [ 170.024060][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.513'. [ 170.092804][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.139738][ T2991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.152247][ T2991] bond0 (unregistering): Released all slaves [ 170.323014][ T8170] lo speed is unknown, defaulting to 1000 [ 170.435673][ T8169] lo speed is unknown, defaulting to 1000 [ 170.475548][ T8182] lo speed is unknown, defaulting to 1000 [ 170.602104][ T8208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.518'. [ 170.749240][ T8214] netlink: 71 bytes leftover after parsing attributes in process `syz.3.521'. [ 170.779614][ T2991] hsr_slave_0: left promiscuous mode [ 170.789871][ T2991] hsr_slave_1: left promiscuous mode [ 170.799884][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.811469][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.822166][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.832241][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.859947][ T2991] veth1_macvtap: left promiscuous mode [ 170.867853][ T2991] veth0_macvtap: left promiscuous mode [ 170.874562][ T2991] veth1_vlan: left promiscuous mode [ 170.880128][ T2991] veth0_vlan: left promiscuous mode [ 170.910787][ T8219] netlink: 256 bytes leftover after parsing attributes in process `syz.3.523'. [ 170.930918][ T8220] netlink: 256 bytes leftover after parsing attributes in process `syz.3.523'. [ 171.168182][ T8225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.525'. [ 171.432377][ T2991] team0 (unregistering): Port device team_slave_1 removed [ 171.477492][ T2991] team0 (unregistering): Port device team_slave_0 removed [ 171.705891][ T5140] Bluetooth: hci3: command tx timeout [ 171.987648][ T8225] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 172.207282][ T8244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.528'. [ 172.232002][ T8234] geneve0: entered allmulticast mode [ 172.364886][ T8247] netlink: 68 bytes leftover after parsing attributes in process `syz.0.528'. [ 172.382420][ T8182] chnl_net:caif_netlink_parms(): no params data found [ 172.399351][ T8247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.528'. [ 173.031827][ T8182] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.049379][ T8182] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.064039][ T8182] bridge_slave_0: entered allmulticast mode [ 173.082483][ T8182] bridge_slave_0: entered promiscuous mode [ 173.108303][ T8182] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.124005][ T8182] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.150529][ T8182] bridge_slave_1: entered allmulticast mode [ 173.185786][ T8182] bridge_slave_1: entered promiscuous mode [ 173.311990][ T8182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.357551][ T8182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.536511][ T8182] team0: Port device team_slave_0 added [ 173.581800][ T8182] team0: Port device team_slave_1 added [ 173.716219][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.740704][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.784031][ T5140] Bluetooth: hci3: command tx timeout [ 173.812017][ T8182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.848693][ T8182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.864845][ T8182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.891892][ T8182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.026756][ T8296] lo speed is unknown, defaulting to 1000 [ 174.121940][ T8307] tipc: Can't bind to reserved service type 0 [ 174.256378][ T8311] ipvlan1: entered promiscuous mode [ 174.273481][ T8311] ipvlan1: entered allmulticast mode [ 174.287305][ T8311] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 174.312138][ T8182] hsr_slave_0: entered promiscuous mode [ 174.338715][ T8182] hsr_slave_1: entered promiscuous mode [ 174.358022][ T8182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.382752][ T8182] Cannot create hsr debugfs directory [ 174.431683][ T8320] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 174.947862][ T8340] __nla_validate_parse: 5 callbacks suppressed [ 174.947880][ T8340] netlink: 64 bytes leftover after parsing attributes in process `syz.1.553'. [ 175.010371][ T8341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.555'. [ 175.014609][ T8340] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.032159][ T8340] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.041504][ T8340] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.050965][ T8340] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.360293][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 175.464536][ T8355] netlink: 'syz.3.559': attribute type 1 has an invalid length. [ 175.488826][ T8355] netlink: 244 bytes leftover after parsing attributes in process `syz.3.559'. [ 175.602221][ T8364] dummy0: entered promiscuous mode [ 175.643486][ T8364] batadv_slave_0: entered promiscuous mode [ 175.680762][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 175.738076][ T8364] dummy0 (unregistering): left promiscuous mode [ 175.785952][ T8182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.830860][ T8361] batadv_slave_0: left promiscuous mode [ 175.841378][ T8182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.865723][ T5140] Bluetooth: hci3: command tx timeout [ 175.875992][ T8182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.908662][ T8182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 176.055085][ T8373] netlink: 'syz.4.566': attribute type 4 has an invalid length. [ 176.088023][ T8373] netlink: 'syz.4.566': attribute type 4 has an invalid length. [ 176.101182][ T8239] lo speed is unknown, defaulting to 1000 [ 176.109389][ T8239] syz2: Port: 1 Link ACTIVE [ 176.222464][ T8375] macvlan3: entered allmulticast mode [ 176.228395][ T8375] bond0: entered allmulticast mode [ 176.252184][ T8375] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 176.272524][ T8375] bridge0: port 2(macvlan3) entered blocking state [ 176.284062][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 176.293129][ T8375] bridge0: port 2(macvlan3) entered disabled state [ 176.312790][ T8375] macvlan3: entered promiscuous mode [ 176.334243][ T8375] bond0: entered promiscuous mode [ 176.552144][ T8393] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 176.606747][ T8182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.651594][ T8182] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.710712][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.718045][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.786803][ T8402] netlink: 44 bytes leftover after parsing attributes in process `syz.0.576'. [ 176.838159][ T8402] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 176.852493][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.859822][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.986443][ T8405] vlan0: entered promiscuous mode [ 177.004612][ T8399] netlink: 1876 bytes leftover after parsing attributes in process `syz.1.575'. [ 177.162606][ T8182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.530201][ T8182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.667475][ T8436] netlink: 'syz.1.584': attribute type 58 has an invalid length. [ 177.682279][ T8433] netlink: 'syz.0.582': attribute type 7 has an invalid length. [ 177.691724][ T8433] netlink: 'syz.0.582': attribute type 8 has an invalid length. [ 177.731806][ T8434] veth0_vlan: mtu less than device minimum [ 177.851673][ T8182] veth0_vlan: entered promiscuous mode [ 177.907693][ T8182] veth1_vlan: entered promiscuous mode [ 177.911219][ T8448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.585'. [ 177.929996][ T8448] netlink: 52 bytes leftover after parsing attributes in process `syz.1.585'. [ 177.946364][ T5140] Bluetooth: hci3: command tx timeout [ 178.052078][ T8182] veth0_macvtap: entered promiscuous mode [ 178.075644][ T8182] veth1_macvtap: entered promiscuous mode [ 178.138762][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.160172][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.179094][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.196823][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.213597][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.249114][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.274163][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.286120][ T8182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.308895][ T8182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.349664][ T8182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.372214][ T8462] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 178.398377][ T8466] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 178.422842][ T8182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.471915][ T8182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.481015][ T8182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.490409][ T8182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.805438][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.832010][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.863543][ T8469] xt_CT: No such helper "snmp" [ 178.992483][ T8482] lo speed is unknown, defaulting to 1000 [ 179.054632][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.066519][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.177523][ T8488] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.252604][ T8488] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.356047][ T8488] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.461478][ T8488] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.552152][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.739512][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.790342][ T8488] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.828380][ T8488] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.850125][ T8488] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.877080][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.916849][ T8488] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.962594][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.154481][ T13] bridge_slave_1: left allmulticast mode [ 180.163687][ T13] bridge_slave_1: left promiscuous mode [ 180.173169][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.183409][ T13] bridge_slave_0: left allmulticast mode [ 180.190107][ T13] bridge_slave_0: left promiscuous mode [ 180.197648][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.536539][ T8496] block nbd4: NBD_DISCONNECT [ 181.039685][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.050698][ T8515] __nla_validate_parse: 6 callbacks suppressed [ 181.050715][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'. [ 181.051717][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.076961][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.094997][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.102994][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.105840][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 181.126460][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.142173][ T13] bond0 (unregistering): Released all slaves [ 181.421053][ T8522] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 181.689784][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.611'. [ 181.761407][ T8513] lo speed is unknown, defaulting to 1000 [ 181.776906][ T8536] xt_recent: Unsupported userspace flags (00000048) [ 182.201344][ T13] hsr_slave_0: left promiscuous mode [ 182.224758][ T13] hsr_slave_1: left promiscuous mode [ 182.230936][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.274496][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.314302][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.321796][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.452416][ T13] veth1_macvtap: left promiscuous mode [ 182.468491][ T13] veth0_macvtap: left promiscuous mode [ 182.494878][ T13] veth1_vlan: left promiscuous mode [ 182.504888][ T13] veth0_vlan: left promiscuous mode [ 182.665314][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 182.784058][ T8574] netlink: 68 bytes leftover after parsing attributes in process `syz.3.623'. [ 182.813372][ T8575] netlink: 68 bytes leftover after parsing attributes in process `syz.3.623'. [ 182.859062][ T8578] netlink: 232 bytes leftover after parsing attributes in process `syz.0.624'. [ 183.146829][ T5140] Bluetooth: hci3: command tx timeout [ 183.296745][ T8588] netlink: zone id is out of range [ 183.303248][ T8588] netlink: zone id is out of range [ 183.322150][ T8588] netlink: zone id is out of range [ 183.327626][ T8588] netlink: zone id is out of range [ 183.332776][ T8588] netlink: zone id is out of range [ 183.339206][ T8588] netlink: zone id is out of range [ 183.344513][ T8588] netlink: zone id is out of range [ 183.350677][ T8588] netlink: zone id is out of range [ 183.368620][ T8588] netlink: zone id is out of range [ 183.375340][ T8588] netlink: zone id is out of range [ 183.442588][ T13] team0 (unregistering): Port device team_slave_1 removed [ 183.536590][ T13] team0 (unregistering): Port device team_slave_0 removed [ 184.056652][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'. [ 184.470150][ T8513] chnl_net:caif_netlink_parms(): no params data found [ 184.796026][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 184.927847][ T8513] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.964067][ T8513] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.971385][ T8513] bridge_slave_0: entered allmulticast mode [ 185.022963][ T8513] bridge_slave_0: entered promiscuous mode [ 185.192683][ T8513] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.209964][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.219505][ T8656] netlink: 'syz.3.644': attribute type 1 has an invalid length. [ 185.222084][ T8513] bridge_slave_1: entered allmulticast mode [ 185.233942][ T5140] Bluetooth: hci3: command tx timeout [ 185.250824][ T8513] bridge_slave_1: entered promiscuous mode [ 185.463139][ T8513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.549931][ T8513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.664876][ T8513] team0: Port device team_slave_0 added [ 185.703296][ T8670] netlink: 136 bytes leftover after parsing attributes in process `syz.3.650'. [ 185.761579][ T8513] team0: Port device team_slave_1 added [ 185.854154][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.881035][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.933637][ T8513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.965509][ T8513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.972654][ T8513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.001702][ T8513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.023515][ T8670] lo speed is unknown, defaulting to 1000 [ 186.098583][ T8513] hsr_slave_0: entered promiscuous mode [ 186.106527][ T8513] hsr_slave_1: entered promiscuous mode [ 186.112926][ T8513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.120822][ T8513] Cannot create hsr debugfs directory [ 187.141909][ T8706] lo speed is unknown, defaulting to 1000 [ 187.161469][ T8513] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 187.244958][ T8513] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 187.315061][ T5140] Bluetooth: hci3: command tx timeout [ 187.380711][ T8513] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 187.433752][ T8726] xt_hashlimit: max too large, truncated to 1048576 [ 187.440517][ T8726] xt_hashlimit: overflow, try lower: 241/0 [ 187.455724][ T8513] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 187.636157][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.668'. [ 187.652649][ T8730] Unsupported ieee802154 address type: 0 [ 187.675405][ T8730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 187.695431][ T8733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.666'. [ 189.099718][ T5140] block nbd4: Receive control failed (result -32) [ 189.383963][ T5140] Bluetooth: hci3: command tx timeout [ 190.088267][ T8513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.140443][ T8756] lo speed is unknown, defaulting to 1000 [ 190.201192][ T8513] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.257458][ T8763] xt_hashlimit: max too large, truncated to 1048576 [ 190.269699][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.274142][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 190.276938][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.292724][ T8763] xt_hashlimit: overflow, try lower: 241/0 [ 190.301031][ T8763] net_ratelimit: 9 callbacks suppressed [ 190.301048][ T8763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.327710][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.334975][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.501042][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'. [ 190.559898][ T8769] geneve1: entered promiscuous mode [ 190.570138][ T8769] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 190.966296][ T8782] netlink: 'syz.1.681': attribute type 1 has an invalid length. [ 191.100841][ T8513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.121538][ T8787] bond2: entered promiscuous mode [ 191.160175][ T8787] bond2: entered allmulticast mode [ 191.194369][ T8787] 8021q: adding VLAN 0 to HW filter on device bond2 [ 191.298963][ T8792] ip6gretap1: entered promiscuous mode [ 191.344323][ T53] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 191.364504][ T8792] ip6gretap1: entered allmulticast mode [ 191.372128][ T8792] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 191.443996][ T8790] tap0: tun_chr_ioctl cmd 1074025677 [ 191.449547][ T8790] tap0: linktype set to 0 [ 191.458282][ T8806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.684'. [ 191.475322][ T1104] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 191.653341][ T8804] bond0 (unregistering): left promiscuous mode [ 191.709611][ T8804] bond0 (unregistering): Released all slaves [ 191.812176][ T8513] veth0_vlan: entered promiscuous mode [ 191.912679][ T8513] veth1_vlan: entered promiscuous mode [ 191.969339][ T8811] netlink: 104 bytes leftover after parsing attributes in process `syz.4.687'. [ 191.983091][ T8809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.686'. [ 192.002209][ T8810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.686'. [ 192.014432][ T8513] veth0_macvtap: entered promiscuous mode [ 192.029977][ T8513] veth1_macvtap: entered promiscuous mode [ 192.107943][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.154074][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.173680][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.185688][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.202107][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.227328][ T8821] syzkaller1: entered allmulticast mode [ 192.228207][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'. [ 192.247665][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.266127][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.279908][ T8513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.290988][ T8513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.316237][ T8513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.360520][ T8832] unsupported nla_type 52263 [ 192.406019][ T8513] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.421215][ T8513] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.441291][ T8513] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.453063][ T8513] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.569302][ T8834] bond2: (slave veth0_to_bond): Releasing active interface [ 192.598402][ T8834] bond0: (slave ..@ÿ): Releasing backup interface [ 192.616874][ T8834] bond0: (slave bond_slave_1): Releasing backup interface [ 192.637734][ T8834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.650401][ T8834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.661798][ T8834] batman_adv: batadv0: Removing interface: ip6gretap1 [ 192.832075][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.850343][ T8845] __nla_validate_parse: 2 callbacks suppressed [ 192.850362][ T8845] netlink: 168 bytes leftover after parsing attributes in process `syz.3.695'. [ 192.850453][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.942273][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.952141][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.970055][ T8854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.697'. [ 193.113191][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 193.373151][ T8868] ip6t_REJECT: ECHOREPLY is not supported [ 193.521971][ T8877] No such timeout policy "syz0" [ 193.573114][ T1104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.192604][ T8879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.238764][ T8879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.270750][ T8879] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 194.302007][ T8879] bond0 (unregistering): Released all slaves [ 194.347815][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.446467][ T1104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.767048][ T1104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.810147][ T8893] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 194.836609][ T8892] netlink: 136 bytes leftover after parsing attributes in process `syz.4.708'. [ 194.862671][ T8892] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 195.130681][ T1104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.202255][ T8889] lo speed is unknown, defaulting to 1000 [ 195.419882][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 195.430825][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 195.441415][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 195.453385][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 195.461678][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 195.701178][ T8902] lo speed is unknown, defaulting to 1000 [ 195.790024][ T8911] lo: entered allmulticast mode [ 195.796864][ T1104] bridge_slave_1: left allmulticast mode [ 195.824053][ T1104] bridge_slave_1: left promiscuous mode [ 195.829902][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.867508][ T1104] bridge_slave_0: left allmulticast mode [ 195.893858][ T1104] bridge_slave_0: left promiscuous mode [ 195.899706][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.116967][ T8927] netlink: 'syz.3.714': attribute type 4 has an invalid length. [ 196.524346][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.538453][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.549507][ T1104] bond0 (unregistering): Released all slaves [ 196.582739][ T8911] lo: left allmulticast mode [ 196.805287][ T8932] netlink: 68 bytes leftover after parsing attributes in process `syz.4.715'. [ 196.955922][ T8938] block nbd0: server does not support multiple connections per device. [ 196.977632][ T8938] block nbd0: shutting down sockets [ 197.180817][ T1104] hsr_slave_0: left promiscuous mode [ 197.203723][ T1104] hsr_slave_1: left promiscuous mode [ 197.211348][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.229693][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.272084][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.292536][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.314167][ T8954] xt_l2tp: v2 sid > 0xffff: 262144 [ 197.353440][ T1104] veth1_macvtap: left promiscuous mode [ 197.369986][ T1104] veth0_macvtap: left promiscuous mode [ 197.386732][ T1104] veth1_vlan: left promiscuous mode [ 197.401521][ T1104] veth0_vlan: left promiscuous mode [ 197.545244][ T5140] Bluetooth: hci3: command tx timeout [ 198.263942][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 198.337496][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 198.876220][ T8951] hsr0: left promiscuous mode [ 198.881322][ T8951] ipvlan2: entered promiscuous mode [ 198.893899][ T8951] ipvlan2: entered allmulticast mode [ 198.914422][ T8951] hsr0: entered allmulticast mode [ 198.919514][ T8951] hsr_slave_0: entered allmulticast mode [ 198.941111][ T8951] hsr_slave_1: entered allmulticast mode [ 199.166474][ T8976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 199.233461][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.728'. [ 199.301646][ T8902] chnl_net:caif_netlink_parms(): no params data found [ 199.390403][ T8980] netlink: 312 bytes leftover after parsing attributes in process `syz.4.728'. [ 199.599538][ T8992] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 199.627735][ T5140] Bluetooth: hci3: command tx timeout [ 200.362028][ T9001] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.390635][ T9001] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.399794][ T9001] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.412878][ T9001] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.573111][ T9016] erspan0: left promiscuous mode [ 200.677458][ T8902] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.704786][ T8902] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.732967][ T8902] bridge_slave_0: entered allmulticast mode [ 200.760899][ T8902] bridge_slave_0: entered promiscuous mode [ 200.803441][ T9025] netlink: 42 bytes leftover after parsing attributes in process `syz.3.740'. [ 200.822596][ T8902] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.844654][ T8902] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.851986][ T8902] bridge_slave_1: entered allmulticast mode [ 200.885080][ T9030] xt_bpf: check failed: parse error [ 200.897158][ T8902] bridge_slave_1: entered promiscuous mode [ 201.308650][ T8902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.322267][ T8902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.522136][ T8902] team0: Port device team_slave_0 added [ 201.589239][ T8902] team0: Port device team_slave_1 added [ 201.704236][ T5140] Bluetooth: hci3: command tx timeout [ 201.910826][ T8902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.918717][ T8902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.971072][ T8902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.060806][ T8902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.077246][ T8902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.111574][ T8902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.440642][ T8902] hsr_slave_0: entered promiscuous mode [ 202.470278][ T8902] hsr_slave_1: entered promiscuous mode [ 202.483428][ T8902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.513586][ T8902] Cannot create hsr debugfs directory [ 202.972142][ T8240] IPVS: starting estimator thread 0... [ 203.048283][ T9083] lo speed is unknown, defaulting to 1000 [ 203.085130][ T9087] IPVS: using max 27 ests per chain, 64800 per kthread [ 203.132234][ T9086] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 203.140455][ T9086] netlink: 'syz.1.759': attribute type 2 has an invalid length. [ 203.166975][ T9092] lo speed is unknown, defaulting to 1000 [ 203.218531][ T5140] block nbd0: Receive control failed (result -104) [ 203.346529][ T9103] netlink: 48 bytes leftover after parsing attributes in process `syz.0.763'. [ 203.591994][ T9109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.762'. [ 203.794822][ T5140] Bluetooth: hci3: command tx timeout [ 204.016071][ T9116] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input12 [ 204.230238][ T8902] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.385078][ T8902] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 204.635658][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'. [ 206.166370][ T8902] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.195778][ T8902] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.520217][ T9142] team0: Port device gtp0 added [ 206.540519][ T9146] netlink: 'syz.0.771': attribute type 11 has an invalid length. [ 206.566415][ T9152] netlink: 'syz.1.770': attribute type 4 has an invalid length. [ 206.688997][ T9156] IPv6: sit1: Disabled Multicast RS [ 206.932260][ T8902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.017944][ T8902] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.040631][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.047906][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.113036][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.120437][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.153304][ T9169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.339627][ T9174] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 207.400671][ T9176] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 207.498246][ T9181] netlink: 16 bytes leftover after parsing attributes in process `syz.1.780'. [ 207.696109][ T9188] netlink: 'syz.3.783': attribute type 8 has an invalid length. [ 207.722747][ T9188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.724570][ T9189] netlink: 'syz.1.780': attribute type 303 has an invalid length. [ 207.769955][ T8902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.811424][ T9184] lo speed is unknown, defaulting to 1000 [ 207.915443][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'. [ 207.968355][ T8902] veth0_vlan: entered promiscuous mode [ 208.112677][ T8902] veth1_vlan: entered promiscuous mode [ 208.216228][ T8902] veth0_macvtap: entered promiscuous mode [ 208.242065][ T9199] lo speed is unknown, defaulting to 1000 [ 208.289770][ T8902] veth1_macvtap: entered promiscuous mode [ 208.473036][ T8902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.490990][ T8902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.503198][ T8902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.524151][ T8902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.557481][ T8902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.585543][ T8902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.613457][ T8902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.629770][ T8902] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.653130][ T8902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.686089][ T8902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.732960][ T8902] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.765464][ T8902] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.784531][ T8902] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.793317][ T8902] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.904164][ T9211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.088316][ T9214] sctp: [Deprecated]: syz.3.791 (pid 9214) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.088316][ T9214] Use struct sctp_sack_info instead [ 209.300548][ T9224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.791'. [ 209.407793][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'. [ 209.423417][ T9228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.795'. [ 209.563020][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.584309][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.662631][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.697520][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.808190][ T9233] lo speed is unknown, defaulting to 1000 [ 209.855907][ T9235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.798'. [ 210.005751][ T9243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.796'. [ 210.289973][ T9251] netlink: 'syz.1.800': attribute type 8 has an invalid length. [ 210.487180][ T9247] netlink: 36 bytes leftover after parsing attributes in process `syz.1.800'. [ 211.048928][ T2991] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.219789][ T2991] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.436594][ T2991] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.786545][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 211.794093][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 211.816416][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.803'. [ 211.839705][ T9269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.968664][ T2991] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.356473][ T9284] lo speed is unknown, defaulting to 1000 [ 212.650684][ T2991] bridge_slave_1: left allmulticast mode [ 212.657371][ T5140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.665344][ T2991] bridge_slave_1: left promiscuous mode [ 212.672963][ T5140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.686863][ T5140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.695858][ T5140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.705530][ T2991] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.705597][ T5140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.777485][ T2991] bridge_slave_0: left allmulticast mode [ 212.805713][ T2991] bridge_slave_0: left promiscuous mode [ 212.811752][ T2991] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.404247][ T2991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.417384][ T2991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.429159][ T2991] bond0 (unregistering): Released all slaves [ 213.672556][ T9298] lo speed is unknown, defaulting to 1000 [ 214.111844][ T9331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.131145][ T2991] hsr_slave_0: left promiscuous mode [ 214.174415][ T2991] hsr_slave_1: left promiscuous mode [ 214.180753][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.189142][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.200670][ T2991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.208937][ T2991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.247211][ T2991] veth1_macvtap: left promiscuous mode [ 214.252962][ T2991] veth0_macvtap: left promiscuous mode [ 214.259456][ T2991] veth1_vlan: left promiscuous mode [ 214.266675][ T2991] veth0_vlan: left promiscuous mode [ 214.302451][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.817'. [ 214.846174][ T55] Bluetooth: hci3: command tx timeout [ 215.002246][ T2991] team0 (unregistering): Port device team_slave_1 removed [ 215.053682][ T2991] team0 (unregistering): Port device team_slave_0 removed [ 215.853203][ T9349] bridge0: entered promiscuous mode [ 215.859462][ T9350] netlink: 'syz.1.821': attribute type 22 has an invalid length. [ 215.877086][ T9349] bridge0: port 3(macvlan3) entered blocking state [ 215.898230][ T9349] bridge0: port 3(macvlan3) entered disabled state [ 215.936613][ T9349] macvlan3: entered allmulticast mode [ 215.946420][ T9349] bridge0: entered allmulticast mode [ 215.979779][ T9349] macvlan3: left allmulticast mode [ 215.985888][ T9349] bridge0: left allmulticast mode [ 215.995643][ T9349] bridge0: left promiscuous mode [ 216.027891][ T9357] netlink: 428 bytes leftover after parsing attributes in process `syz.0.824'. [ 216.122522][ T9357] netlink: 104 bytes leftover after parsing attributes in process `syz.0.824'. [ 216.227773][ T9298] chnl_net:caif_netlink_parms(): no params data found [ 216.294219][ T9361] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 216.326057][ T9361] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 216.489121][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 216.499346][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 216.531739][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 216.546015][ T9376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.563931][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 216.573236][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 216.615656][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 216.631229][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 216.647231][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'. [ 216.669323][ T9361] lo speed is unknown, defaulting to 1000 [ 216.677761][ T9298] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.706062][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.713500][ T9298] bridge_slave_0: entered allmulticast mode [ 216.747528][ T9298] bridge_slave_0: entered promiscuous mode [ 216.785587][ T9298] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.793176][ T9298] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.831787][ T9298] bridge_slave_1: entered allmulticast mode [ 216.842865][ T9298] bridge_slave_1: entered promiscuous mode [ 216.852449][ T9386] netlink: 'syz.1.832': attribute type 1 has an invalid length. [ 216.878725][ T9387] netlink: 'syz.1.832': attribute type 1 has an invalid length. [ 216.904131][ T5140] Bluetooth: hci3: command tx timeout [ 216.991762][ T9386] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 216.993519][ T9387] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 217.008156][ T9298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.113257][ T9298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.210041][ T9298] team0: Port device team_slave_0 added [ 217.229224][ T9298] team0: Port device team_slave_1 added [ 217.330283][ T9401] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 217.439124][ T9403] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 217.470094][ T9298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.478394][ T9298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.493841][ T9403] openvswitch: netlink: Duplicate key (type 0). [ 217.510023][ T9298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.545471][ T9298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.552884][ T9298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.580491][ T9298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.756638][ T9298] hsr_slave_0: entered promiscuous mode [ 217.763462][ T9298] hsr_slave_1: entered promiscuous mode [ 217.795424][ T9298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.804935][ T9298] Cannot create hsr debugfs directory [ 217.828052][ T9418] netlink: 'syz.4.838': attribute type 1 has an invalid length. [ 218.098594][ T9425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.267367][ T9427] sch_fq: defrate 117 ignored. [ 218.852260][ T9298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.888839][ T9298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.920643][ T9298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.946235][ T9298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.987085][ T5140] Bluetooth: hci3: command 0x040f tx timeout [ 219.282988][ T9298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.342787][ T9298] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.448075][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.455371][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.490947][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.498238][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.505951][ T9465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.746048][ T9472] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.963092][ T9474] IPVS: Scheduler module ip_vs_sip not found [ 220.413629][ T9298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.930850][ T9512] netlink: 'syz.1.867': attribute type 10 has an invalid length. [ 220.967149][ T9514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.974808][ T9298] veth0_vlan: entered promiscuous mode [ 221.027356][ T9298] veth1_vlan: entered promiscuous mode [ 221.071738][ T5140] Bluetooth: hci3: command 0x040f tx timeout [ 221.135360][ T9298] veth0_macvtap: entered promiscuous mode [ 221.161426][ T9298] veth1_macvtap: entered promiscuous mode [ 221.206291][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.233224][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.263851][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.291896][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.318102][ T9298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.372012][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.408028][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.420700][ T9298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.432343][ T9298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.445962][ T9298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.511187][ T9298] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.521336][ T9298] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.532351][ T9298] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.541601][ T9298] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.766016][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.801733][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.807659][ T9541] sctp: [Deprecated]: syz.3.875 (pid 9541) Use of int in max_burst socket option deprecated. [ 221.807659][ T9541] Use struct sctp_assoc_value instead [ 221.874816][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.881296][ T9541] netlink: 'syz.3.875': attribute type 21 has an invalid length. [ 221.917260][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.921354][ T9543] sctp: [Deprecated]: syz.1.874 (pid 9543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.921354][ T9543] Use struct sctp_sack_info instead [ 222.187324][ T9551] lo speed is unknown, defaulting to 1000 [ 222.263399][ T9553] __nla_validate_parse: 54 callbacks suppressed [ 222.263421][ T9553] netlink: 36 bytes leftover after parsing attributes in process `syz.3.879'. [ 222.324573][ T9553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.879'. [ 222.333514][ T9553] netlink: 36 bytes leftover after parsing attributes in process `syz.3.879'. [ 222.380740][ T9553] netlink: 36 bytes leftover after parsing attributes in process `syz.3.879'. [ 222.456449][ T9558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.478050][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.654160][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.770090][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.839986][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.013449][ T36] bridge_slave_1: left allmulticast mode [ 223.021362][ T36] bridge_slave_1: left promiscuous mode [ 223.028345][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.039779][ T36] bridge_slave_0: left allmulticast mode [ 223.045913][ T36] bridge_slave_0: left promiscuous mode [ 223.052345][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.391992][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.405972][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.416578][ T36] bond0 (unregistering): Released all slaves [ 223.850885][ T9571] sctp: [Deprecated]: syz.1.882 (pid 9571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.850885][ T9571] Use struct sctp_sack_info instead [ 223.895724][ T9572] netlink: 'syz.3.883': attribute type 1 has an invalid length. [ 223.904785][ T9572] netlink: 224 bytes leftover after parsing attributes in process `syz.3.883'. [ 223.920647][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.883'. [ 223.982978][ T36] hsr_slave_0: left promiscuous mode [ 224.010441][ T36] hsr_slave_1: left promiscuous mode [ 224.019743][ T9575] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 224.029473][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.045804][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.073541][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.097193][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.218386][ T36] veth1_macvtap: left promiscuous mode [ 224.238302][ T36] veth0_macvtap: left promiscuous mode [ 224.256809][ T36] veth1_vlan: left promiscuous mode [ 224.274238][ T36] veth0_vlan: left promiscuous mode [ 224.476566][ T9590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.888'. [ 224.486269][ T9590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.888'. [ 224.502919][ T5140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.521520][ T5140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.537635][ T5140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.556111][ T5140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.565836][ T5140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.001944][ T36] team0 (unregistering): Port device team_slave_1 removed [ 225.048078][ T36] team0 (unregistering): Port device team_slave_0 removed [ 225.551115][ T9590] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.564485][ T9590] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.573417][ T9590] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.582959][ T9590] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.592445][ T9590] geneve2: entered allmulticast mode [ 225.607178][ T9596] syzkaller1: entered promiscuous mode [ 225.612841][ T9596] syzkaller1: entered allmulticast mode [ 225.721043][ T9589] lo speed is unknown, defaulting to 1000 [ 225.881295][ T9603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.891'. [ 225.966864][ T9603] bond0: entered promiscuous mode [ 225.972430][ T9603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.016811][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 226.286101][ T9603] bond0 (unregistering): Released all slaves [ 226.664639][ T5140] Bluetooth: hci3: command tx timeout [ 227.142925][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.189998][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.382637][ T9589] chnl_net:caif_netlink_parms(): no params data found [ 227.860138][ T9711] batadv_slave_1: entered promiscuous mode [ 227.874916][ T9589] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.882103][ T9589] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.922558][ T9589] bridge_slave_0: entered allmulticast mode [ 227.947158][ T9589] bridge_slave_0: entered promiscuous mode [ 227.983380][ T9704] batadv_slave_1: left promiscuous mode [ 227.995061][ T9589] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.007565][ T9589] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.019449][ T9589] bridge_slave_1: entered allmulticast mode [ 228.030674][ T9589] bridge_slave_1: entered promiscuous mode [ 228.128122][ T9729] __nla_validate_parse: 2 callbacks suppressed [ 228.128140][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.916'. [ 228.133729][ T9589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.170067][ T9728] IPv6: sit2: Disabled Multicast RS [ 228.187084][ T9728] sit2: entered allmulticast mode [ 228.223098][ T9589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.392852][ T9737] team0: Device bond3 is of different type [ 228.403134][ T9737] bond3 (unregistering): Released all slaves [ 228.438643][ T9589] team0: Port device team_slave_0 added [ 228.479822][ T9589] team0: Port device team_slave_1 added [ 228.581366][ T9589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.589436][ T9589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.617086][ T9589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.645375][ T9589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.666510][ T9589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.724757][ T9589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.745091][ T5140] Bluetooth: hci3: command tx timeout [ 229.042962][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'. [ 229.061691][ T9589] hsr_slave_0: entered promiscuous mode [ 229.074842][ T9589] hsr_slave_1: entered promiscuous mode [ 229.081353][ T9589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.090690][ T9589] Cannot create hsr debugfs directory [ 229.175796][ T9768] bridge0: port 1(batadv0) entered disabled state [ 229.332200][ T9764] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.344886][ T9764] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 229.394131][ T9777] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 229.417402][ T9777] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 229.529140][ T9764] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.575839][ T9764] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 229.718728][ T9764] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.731517][ T9764] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 229.871399][ T9764] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.882759][ T9764] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 230.183335][ T9764] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 230.207095][ T9764] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 230.242677][ T9764] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 230.271051][ T9764] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 230.336807][ T9764] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 230.346418][ T9764] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 230.416871][ T9804] netlink: 'syz.0.941': attribute type 1 has an invalid length. [ 230.466681][ T9804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.485781][ T9764] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 230.496010][ T9764] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 230.570991][ T9804] ip6erspan0: entered promiscuous mode [ 230.612528][ T9804] bond0: (slave ip6erspan0): making interface the new active one [ 230.649665][ T9804] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 230.710580][ T9802] lo speed is unknown, defaulting to 1000 [ 230.824139][ T55] Bluetooth: hci3: command tx timeout [ 230.930390][ T9822] ip6gretap0: entered promiscuous mode [ 231.016530][ T9589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 231.090466][ T9589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 231.144349][ T9589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 231.195223][ T9589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 231.349250][ T9826] lo speed is unknown, defaulting to 1000 [ 231.495360][ T9833] lo speed is unknown, defaulting to 1000 [ 231.761739][ T9847] netlink: 'syz.0.952': attribute type 16 has an invalid length. [ 231.770339][ T9847] netlink: 'syz.0.952': attribute type 3 has an invalid length. [ 231.779930][ T9847] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.952'. [ 231.943597][ T9850] "syz.0.953" (9850) uses obsolete ecb(arc4) skcipher [ 231.961966][ T9589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.988206][ T9850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.953'. [ 232.070542][ T9853] lo speed is unknown, defaulting to 1000 [ 232.142542][ T9589] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.190670][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.197925][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.328628][ T9685] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.335884][ T9685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.419366][ T9589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.627293][ T9873] sctp: [Deprecated]: syz.0.959 (pid 9873) Use of int in max_burst socket option. [ 232.627293][ T9873] Use struct sctp_assoc_value instead [ 232.656612][ T9862] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.702544][ T9874] sctp: [Deprecated]: syz.0.959 (pid 9874) Use of int in max_burst socket option. [ 232.702544][ T9874] Use struct sctp_assoc_value instead [ 232.782750][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.960'. [ 232.863523][ T9879] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.872708][ T9879] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.881768][ T9879] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.891009][ T9879] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.907022][ T55] Bluetooth: hci3: command 0x0419 tx timeout [ 232.941530][ T9879] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.952781][ T9879] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.962753][ T9879] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.972431][ T9879] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.140685][ T9589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.199820][ T9892] lo speed is unknown, defaulting to 1000 [ 233.345473][ T9901] bridge0: port 3(erspan0) entered blocking state [ 233.356537][ T9901] bridge0: port 3(erspan0) entered disabled state [ 233.367411][ T9901] erspan0: entered allmulticast mode [ 233.376101][ T9901] erspan0: entered promiscuous mode [ 233.390147][ T9901] bridge0: port 3(erspan0) entered blocking state [ 233.396904][ T9901] bridge0: port 3(erspan0) entered forwarding state [ 233.407515][ T9908] erspan0: left allmulticast mode [ 233.413024][ T9908] erspan0: left promiscuous mode [ 233.431269][ T9908] bridge0: port 3(erspan0) entered disabled state [ 233.744286][ T9589] veth0_vlan: entered promiscuous mode [ 233.753382][ T9919] netlink: 596 bytes leftover after parsing attributes in process `syz.4.970'. [ 233.774073][ T9589] veth1_vlan: entered promiscuous mode [ 233.793040][ T9919] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 233.816037][ T9919] netlink: 44 bytes leftover after parsing attributes in process `syz.4.970'. [ 233.851676][ T9589] veth0_macvtap: entered promiscuous mode [ 233.869335][ T9589] veth1_macvtap: entered promiscuous mode [ 233.891732][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.909419][ T9918] netlink: 'syz.0.971': attribute type 15 has an invalid length. [ 233.922678][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.942299][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.954198][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.967937][ T9589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.020043][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.046526][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.066523][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.086424][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.111500][ T9589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.224165][ T9589] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.233226][ T9589] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.265310][ T9589] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.283890][ T9589] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.339122][ T9926] lo speed is unknown, defaulting to 1000 [ 234.443222][ T9941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.551231][ T9945] netlink: 'syz.1.979': attribute type 1 has an invalid length. [ 234.621057][ T9945] bond3: entered promiscuous mode [ 234.629921][ T9945] 8021q: adding VLAN 0 to HW filter on device bond3 [ 234.834460][ T9678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.842492][ T9678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.901378][ T9953] netlink: 88 bytes leftover after parsing attributes in process `syz.1.981'. [ 234.944584][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.962818][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.984857][ T55] Bluetooth: hci3: command 0x0419 tx timeout [ 235.295692][ T9972] netlink: 'syz.0.987': attribute type 2 has an invalid length. [ 235.612641][ T9989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.686750][ T9688] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.815282][ T9688] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.059747][ T9688] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.331298][ T9688] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.472921][ T9688] bridge_slave_1: left allmulticast mode [ 236.478913][ T9688] bridge_slave_1: left promiscuous mode [ 236.485195][ T9688] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.495790][ T9688] bridge_slave_0: left allmulticast mode [ 236.501476][ T9688] bridge_slave_0: left promiscuous mode [ 236.510299][ T9688] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.905659][ T9688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.969137][ T9688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.012270][ T9688] bond0 (unregistering): Released all slaves [ 237.065655][T10014] netlink: 256 bytes leftover after parsing attributes in process `syz.3.997'. [ 237.123252][T10014] netlink: 80 bytes leftover after parsing attributes in process `syz.3.997'. [ 237.156543][T10012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.997'. [ 237.171594][T10012] netlink: 'syz.3.997': attribute type 1 has an invalid length. [ 237.187741][T10012] netlink: 'syz.3.997': attribute type 2 has an invalid length. [ 237.224417][T10012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.997'. [ 237.445676][T10021] lo speed is unknown, defaulting to 1000 [ 237.478846][T10032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.497668][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1002'. [ 237.621688][ T5140] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.645782][ T5140] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.660553][ T5140] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.670912][ T5140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.682351][ T5140] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 238.040316][ T9688] hsr_slave_0: left promiscuous mode [ 238.066799][ T9688] hsr_slave_1: left promiscuous mode [ 238.095348][ T9688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.129779][ T9688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.157089][ T9688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.188014][ T9688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.261792][ T9688] veth1_macvtap: left promiscuous mode [ 238.274889][ T9688] veth0_macvtap: left promiscuous mode [ 238.286596][ T9688] veth1_vlan: left promiscuous mode [ 238.287346][T10055] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1009'. [ 238.296474][ T9688] veth0_vlan: left promiscuous mode [ 238.811065][T10066] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1011'. [ 239.047102][ T9688] team0 (unregistering): Port device team_slave_1 removed [ 239.091256][ T9688] team0 (unregistering): Port device team_slave_0 removed [ 239.562861][T10065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.596647][T10065] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.655274][T10065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.711217][T10034] lo speed is unknown, defaulting to 1000 [ 239.720489][T10075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.790127][ T5140] Bluetooth: hci3: command tx timeout [ 240.067254][T10086] ..@ÿ: renamed from bond_slave_0 [ 240.295932][T10034] chnl_net:caif_netlink_parms(): no params data found [ 240.422704][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1022'. [ 240.470772][T10111] pim6reg: entered allmulticast mode [ 240.480839][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1022'. [ 240.501467][T10102] pim6reg: left allmulticast mode [ 240.695309][T10034] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.702603][T10034] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.706129][T10125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.721268][T10034] bridge_slave_0: entered allmulticast mode [ 240.736611][T10034] bridge_slave_0: entered promiscuous mode [ 240.756016][T10034] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.765808][T10034] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.773412][T10034] bridge_slave_1: entered allmulticast mode [ 240.796555][T10034] bridge_slave_1: entered promiscuous mode [ 240.845835][T10130] syzkaller1: entered promiscuous mode [ 240.876571][T10130] syzkaller1: entered allmulticast mode [ 240.891730][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'. [ 240.927334][T10126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1026'. [ 241.116098][T10034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.155556][T10034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.260870][T10034] team0: Port device team_slave_0 added [ 241.291656][T10034] team0: Port device team_slave_1 added [ 241.443036][T10149] tc_dump_action: action bad kind [ 241.455426][T10034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.462432][T10034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.564513][T10034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.578149][T10034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.594501][T10034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.698946][T10034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.873930][ T5140] Bluetooth: hci3: command tx timeout [ 242.191247][T10157] lo speed is unknown, defaulting to 1000 [ 242.296842][T10034] hsr_slave_0: entered promiscuous mode [ 242.306106][T10034] hsr_slave_1: entered promiscuous mode [ 242.312531][T10034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.321451][T10034] Cannot create hsr debugfs directory [ 242.381808][T10167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.554494][T10172] netlink: 'syz.0.1041': attribute type 1 has an invalid length. [ 242.572969][T10172] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1041'. [ 242.800092][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 242.826896][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 242.855779][T10178] netlink: 'syz.3.1043': attribute type 18 has an invalid length. [ 243.181316][T10180] lo speed is unknown, defaulting to 1000 [ 243.274325][T10193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1047'. [ 243.712456][T10207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.767190][T10034] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 243.794447][T10034] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 243.846859][T10034] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 243.900072][T10034] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 243.951755][ T5140] Bluetooth: hci3: command tx timeout [ 244.082014][T10034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.168926][T10034] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.216880][ T9685] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.224144][ T9685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.249053][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.256281][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.557528][T10228] lo speed is unknown, defaulting to 1000 [ 245.060023][T10034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.079194][T10247] lo speed is unknown, defaulting to 1000 [ 245.258913][T10254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.462605][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1064'. [ 245.505527][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1064'. [ 245.564110][T10034] veth0_vlan: entered promiscuous mode [ 245.577629][T10263] netlink: 'syz.3.1065': attribute type 10 has an invalid length. [ 245.586728][T10263] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1065'. [ 245.602068][T10263] team0: entered promiscuous mode [ 245.609783][T10263] team_slave_0: entered promiscuous mode [ 245.617026][T10263] team_slave_1: entered promiscuous mode [ 245.622982][T10263] geneve0: entered promiscuous mode [ 245.646264][T10263] bond2: entered promiscuous mode [ 245.663185][T10263] bridge0: port 3(team0) entered blocking state [ 245.692209][T10263] bridge0: port 3(team0) entered disabled state [ 245.705479][T10263] team0: entered allmulticast mode [ 245.715375][T10263] team_slave_0: entered allmulticast mode [ 245.731435][T10263] team_slave_1: entered allmulticast mode [ 245.741549][T10263] bond2: entered allmulticast mode [ 245.766552][T10263] bridge0: port 3(team0) entered blocking state [ 245.773064][T10263] bridge0: port 3(team0) entered forwarding state [ 245.796742][T10034] veth1_vlan: entered promiscuous mode [ 245.942965][T10034] veth0_macvtap: entered promiscuous mode [ 245.965250][T10034] veth1_macvtap: entered promiscuous mode [ 245.968759][ T8235] hid-generic 0005:0B57:0401.0003: collection stack underflow [ 246.013047][ T8235] hid-generic 0005:0B57:0401.0003: item 0 0 0 12 parsing failed [ 246.025011][ T55] Bluetooth: hci3: command tx timeout [ 246.032298][ T8235] hid-generic 0005:0B57:0401.0003: probe with driver hid-generic failed with error -22 [ 246.121453][T10034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.151964][T10034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.174518][T10034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.204738][T10034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.215683][T10279] netlink: 'syz.1.1069': attribute type 13 has an invalid length. [ 246.228506][T10034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.248159][T10034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.259850][T10034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.272290][T10034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.321908][T10034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.369354][T10034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.440712][T10279] gretap0: refused to change device tx_queue_len [ 246.448859][T10279] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 246.499985][T10287] batadv2: entered promiscuous mode [ 246.523273][T10287] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 246.550767][T10273] lo speed is unknown, defaulting to 1000 [ 246.576731][T10034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.594421][T10034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.603491][T10034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.626640][T10034] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.650500][T10277] lo speed is unknown, defaulting to 1000 [ 246.739482][T10298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1075'. [ 246.749411][T10297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.750476][T10298] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1075'. [ 247.031877][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1077'. [ 247.047612][T10304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1076'. [ 247.076692][T10308] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 247.106291][ T9685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.129051][ T9685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.362384][ T9681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.382522][ T9681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.617969][T10329] pim6reg: entered allmulticast mode [ 247.638290][T10329] pim6reg: left allmulticast mode [ 247.753482][T10336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.844250][T10340] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1088'. [ 247.887010][T10340] xt_TCPMSS: Only works on TCP SYN packets [ 247.951788][T10347] macsec0: entered promiscuous mode [ 247.979094][T10347] macsec0: entered allmulticast mode [ 248.062615][T10354] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1093'. [ 248.086628][T10354] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1093'. [ 248.112494][ T55] Bluetooth: hci3: command 0x0405 tx timeout [ 248.461033][T10371] netlink: 'syz.0.1096': attribute type 11 has an invalid length. [ 248.486086][ T9689] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.775665][ T9689] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.892056][ T9689] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.952607][ T9689] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.103161][ T9689] bridge_slave_1: left allmulticast mode [ 249.111455][ T9689] bridge_slave_1: left promiscuous mode [ 249.118000][ T9689] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.128689][ T9689] bridge_slave_0: left allmulticast mode [ 249.135070][ T9689] bridge_slave_0: left promiscuous mode [ 249.140970][ T9689] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.506848][ T9689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.519184][ T9689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.529473][ T9689] bond0 (unregistering): Released all slaves [ 249.812079][ T9689] hsr_slave_0: left promiscuous mode [ 249.818390][ T9689] hsr_slave_1: left promiscuous mode [ 249.824611][ T9689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.832062][ T9689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.842970][ T9689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.877842][ T9689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.946561][ T9689] veth1_macvtap: left promiscuous mode [ 249.961473][ T9689] veth0_macvtap: left promiscuous mode [ 249.971269][ T9689] veth1_vlan: left promiscuous mode [ 249.988883][ T9689] veth0_vlan: left promiscuous mode [ 250.426970][ T5140] Bluetooth: hci4: command 0x0405 tx timeout [ 250.451145][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.462214][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.471090][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.480179][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.491395][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.556373][T10406] __nla_validate_parse: 4 callbacks suppressed [ 250.556391][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1104'. [ 250.590226][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1104'. [ 250.622036][T10406] netlink: 'syz.4.1104': attribute type 12 has an invalid length. [ 250.730538][T10409] netlink: 'syz.4.1104': attribute type 11 has an invalid length. [ 250.749144][T10409] netlink: 149476 bytes leftover after parsing attributes in process `syz.4.1104'. [ 251.079212][ T9689] team0 (unregistering): Port device team_slave_1 removed [ 251.121433][T10397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.175729][ T9689] team0 (unregistering): Port device team_slave_0 removed [ 251.966472][T10412] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 252.064999][T10401] lo speed is unknown, defaulting to 1000 [ 252.276439][T10419] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1108'. [ 252.311577][T10419] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1108'. [ 252.584268][ T55] Bluetooth: hci3: command tx timeout [ 252.608369][T10429] dvmrp0: entered allmulticast mode [ 252.646705][T10401] chnl_net:caif_netlink_parms(): no params data found [ 252.660976][T10429] dvmrp0: left allmulticast mode [ 253.001662][T10440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1114'. [ 253.050798][T10401] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.067899][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.094295][T10401] bridge_slave_0: entered allmulticast mode [ 253.111178][T10401] bridge_slave_0: entered promiscuous mode [ 253.402374][T10401] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.420116][T10464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1113'. [ 253.438203][T10401] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.462210][T10401] bridge_slave_1: entered allmulticast mode [ 253.480469][T10401] bridge_slave_1: entered promiscuous mode [ 253.609507][T10401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.657724][T10401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.728348][T10472] syzkaller1: entered promiscuous mode [ 253.735071][T10472] syzkaller1: entered allmulticast mode [ 253.816428][T10401] team0: Port device team_slave_0 added [ 253.836523][T10401] team0: Port device team_slave_1 added [ 254.051380][T10401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.063573][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1126'. [ 254.079872][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.087307][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 254.127720][T10401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.182511][T10401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.218017][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.354526][T10401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.664538][ T55] Bluetooth: hci3: command tx timeout [ 254.672905][T10494] syzkaller1: entered promiscuous mode [ 254.701404][T10509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1127'. [ 254.711172][T10494] syzkaller1: entered allmulticast mode [ 254.987923][T10401] hsr_slave_0: entered promiscuous mode [ 255.013669][T10401] hsr_slave_1: entered promiscuous mode [ 255.031247][T10401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.043059][T10401] Cannot create hsr debugfs directory [ 255.371062][T10548] sctp: [Deprecated]: syz.0.1138 (pid 10548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.371062][T10548] Use struct sctp_sack_info instead [ 255.397900][T10549] sctp: [Deprecated]: syz.0.1138 (pid 10549) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.397900][T10549] Use struct sctp_sack_info instead [ 255.740993][T10569] sctp: [Deprecated]: syz.0.1142 (pid 10569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.740993][T10569] Use struct sctp_sack_info instead [ 255.926820][T10569] sctp: [Deprecated]: syz.0.1142 (pid 10569) Use of int in max_burst socket option deprecated. [ 255.926820][T10569] Use struct sctp_assoc_value instead [ 256.160485][T10573] ip6erspan0: left promiscuous mode [ 256.190871][T10573] batadv2: left promiscuous mode [ 256.356642][T10586] lo speed is unknown, defaulting to 1000 [ 256.490067][T10600] __nla_validate_parse: 2 callbacks suppressed [ 256.490089][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 256.744657][ T55] Bluetooth: hci3: command tx timeout [ 256.782080][T10401] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 256.834003][T10401] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 256.846233][T10401] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 256.868048][T10401] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 257.148517][T10616] netlink: 'syz.4.1155': attribute type 5 has an invalid length. [ 257.178674][T10401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.402436][T10626] netlink: 'syz.1.1158': attribute type 10 has an invalid length. [ 257.423159][T10626] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1158'. [ 257.455991][T10401] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.487253][ T9678] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.494511][ T9678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.568301][ T9678] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.575592][ T9678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.612438][T10629] lo speed is unknown, defaulting to 1000 [ 257.800950][T10636] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1161'. [ 258.254305][T10401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.382916][T10401] veth0_vlan: entered promiscuous mode [ 258.424731][T10401] veth1_vlan: entered promiscuous mode [ 258.642942][T10670] x_tables: duplicate underflow at hook 3 [ 258.646697][T10401] veth0_macvtap: entered promiscuous mode [ 258.689652][T10401] veth1_macvtap: entered promiscuous mode [ 258.730303][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.766211][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.789511][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.792249][T10673] sctp: [Deprecated]: syz.0.1170 (pid 10673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.792249][T10673] Use struct sctp_sack_info instead [ 258.812816][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.824840][ T55] Bluetooth: hci3: command tx timeout [ 258.842739][T10401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.892438][T10675] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1171'. [ 258.914585][T10675] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 258.949217][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.989747][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.021461][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.042226][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.061992][T10401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.127396][T10401] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.140837][T10658] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 259.148686][T10401] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.174889][T10401] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.201163][T10401] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.437121][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1174'. [ 259.472067][T10696] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1174'. [ 259.518584][T10696] vlan0: entered allmulticast mode [ 259.530183][T10696] hsr0: entered allmulticast mode [ 259.538209][T10696] hsr_slave_0: entered allmulticast mode [ 259.551279][T10696] hsr_slave_1: entered allmulticast mode [ 260.515924][T10728] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1182'. [ 260.551508][T10721] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1182'. [ 260.716227][ T9686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.740740][ T9686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.881032][ T9686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.896260][ T9686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.941590][T10744] lo speed is unknown, defaulting to 1000 [ 261.120312][T10580] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 261.132291][T10580] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 261.140728][T10580] CPU: 1 UID: 0 PID: 10580 Comm: kbnepd bnep0 Not tainted 6.15.0-rc4-syzkaller-00746-g836b313a14a3 #0 PREEMPT(full) [ 261.152984][T10580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 261.163072][T10580] RIP: 0010:klist_del+0x49/0x110 [ 261.168036][T10580] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 a9 80 d4 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 8b 80 d4 f6 4d 8b 7e 58 4c 89 f7 e8 bf 41 [ 261.187663][T10580] RSP: 0018:ffffc900033e77a8 EFLAGS: 00010202 [ 261.193742][T10580] RAX: 000000000000000b RBX: ffff8880114c9060 RCX: ffff888064100000 [ 261.201758][T10580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 261.209737][T10580] RBP: ffffc900033e78d0 R08: ffff888011d233c3 R09: 1ffff110023a4678 [ 261.217717][T10580] R10: dffffc0000000000 R11: ffffed10023a4679 R12: dffffc0000000000 [ 261.225697][T10580] R13: 1ffff1100229920c R14: 0000000000000000 R15: ffff8880507e0768 [ 261.233677][T10580] FS: 0000000000000000(0000) GS:ffff8881261c1000(0000) knlGS:0000000000000000 [ 261.242620][T10580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.249218][T10580] CR2: 00007f106712d440 CR3: 00000000615f8000 CR4: 00000000003526f0 [ 261.257208][T10580] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 261.265194][T10580] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 261.273171][T10580] Call Trace: [ 261.276468][T10580] [ 261.279412][T10580] device_del+0x280/0x8e0 [ 261.283760][T10580] ? _raw_spin_unlock_irq+0x2e/0x50 [ 261.288992][T10580] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 261.295087][T10580] ? __pfx_device_del+0x10/0x10 [ 261.299955][T10580] ? netdev_unregister_kobject+0x344/0x450 [ 261.305784][T10580] unregister_netdevice_many_notify+0x1d44/0x2320 [ 261.312229][T10580] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 261.319009][T10580] ? rcu_is_watching+0x15/0xb0 [ 261.323793][T10580] ? __mutex_lock+0xa6d/0xe80 [ 261.328498][T10580] ? __mutex_lock+0x51b/0xe80 [ 261.333198][T10580] unregister_netdevice_queue+0x33c/0x380 [ 261.338938][T10580] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 261.345214][T10580] ? rtnl_net_dev_lock+0x36/0x2f0 [ 261.350250][T10580] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 261.355379][T10580] unregister_netdev+0x1f/0x60 [ 261.360272][T10580] bnep_session+0x294d/0x2b40 [ 261.364971][T10580] ? trace_sched_exit_tp+0x38/0x120 [ 261.370186][T10580] ? __schedule+0x1700/0x4cd0 [ 261.374883][T10580] ? __lock_acquire+0xaac/0xd20 [ 261.379757][T10580] ? __pfx_bnep_session+0x10/0x10 [ 261.384792][T10580] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 261.390696][T10580] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 261.397040][T10580] ? __pfx_woken_wake_function+0x10/0x10 [ 261.402687][T10580] ? __kthread_parkme+0x7b/0x200 [ 261.407636][T10580] ? __kthread_parkme+0x1a1/0x200 [ 261.412763][T10580] kthread+0x70e/0x8a0 [ 261.416847][T10580] ? __pfx_bnep_session+0x10/0x10 [ 261.421887][T10580] ? __pfx_kthread+0x10/0x10 [ 261.426487][T10580] ? __pfx_kthread+0x10/0x10 [ 261.431082][T10580] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.436291][T10580] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.441504][T10580] ? __pfx_kthread+0x10/0x10 [ 261.446100][T10580] ret_from_fork+0x4b/0x80 [ 261.450525][T10580] ? __pfx_kthread+0x10/0x10 [ 261.455128][T10580] ret_from_fork_asm+0x1a/0x30 [ 261.459910][T10580] [ 261.462940][T10580] Modules linked in: [ 261.468358][T10580] ---[ end trace 0000000000000000 ]--- [ 261.475221][T10580] RIP: 0010:klist_del+0x49/0x110 [ 261.480222][T10580] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 a9 80 d4 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 8b 80 d4 f6 4d 8b 7e 58 4c 89 f7 e8 bf 41 [ 261.501573][T10580] RSP: 0018:ffffc900033e77a8 EFLAGS: 00010202 [ 261.508323][T10580] RAX: 000000000000000b RBX: ffff8880114c9060 RCX: ffff888064100000 [ 261.520566][T10580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 261.529314][T10580] RBP: ffffc900033e78d0 R08: ffff888011d233c3 R09: 1ffff110023a4678 [ 261.537959][T10580] R10: dffffc0000000000 R11: ffffed10023a4679 R12: dffffc0000000000 [ 261.546693][T10580] R13: 1ffff1100229920c R14: 0000000000000000 R15: ffff8880507e0768 [ 261.555825][T10580] FS: 0000000000000000(0000) GS:ffff8881261c1000(0000) knlGS:0000000000000000 [ 261.565545][T10580] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.572187][T10580] CR2: 0000564db1231bb8 CR3: 000000005c228000 CR4: 00000000003526f0 [ 261.580928][T10580] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 261.589724][T10580] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 261.598078][T10580] Kernel panic - not syncing: Fatal exception [ 261.604475][T10580] Kernel Offset: disabled [ 261.608813][T10580] Rebooting in 86400 seconds..