last executing test programs: 1m48.484702447s ago: executing program 4 (id=91): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) close(r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$key(0xf, 0x3, 0x2) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100), 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x6, '\x00', r2, r3, 0x1, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f00000001c0)=0xfffffffd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000400000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf09000000000000b6090400000000006500060009000000180100002020702500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000010000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m42.892923985s ago: executing program 4 (id=91): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) close(r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$key(0xf, 0x3, 0x2) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100), 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x6, '\x00', r2, r3, 0x1, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f00000001c0)=0xfffffffd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000400000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf09000000000000b6090400000000006500060009000000180100002020702500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000010000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m36.928566524s ago: executing program 4 (id=91): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) close(r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$key(0xf, 0x3, 0x2) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100), 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x6, '\x00', r2, r3, 0x1, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f00000001c0)=0xfffffffd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000400000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf09000000000000b6090400000000006500060009000000180100002020702500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000010000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m30.542796174s ago: executing program 4 (id=91): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) close(r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$key(0xf, 0x3, 0x2) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100), 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x6, '\x00', r2, r3, 0x1, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f00000001c0)=0xfffffffd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000400000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf09000000000000b6090400000000006500060009000000180100002020702500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000010000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m24.781494523s ago: executing program 4 (id=91): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) close(r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$key(0xf, 0x3, 0x2) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100), 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x6, '\x00', r2, r3, 0x1, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f00000001c0)=0xfffffffd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000400000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf09000000000000b6090400000000006500060009000000180100002020702500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000010000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m21.445696559s ago: executing program 0 (id=921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7f185a348a5236b5}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000cc0)={0x0, 'lo\x00', {0x2}, 0x8001}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x54, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0xa9}, {0xc}}]}, 0x54}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000300)={@val={0x0, 0x88fb}, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2000, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x10}}}}}}}, 0x3e) (async) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="4b058a3fa6765cb420ba19b29f029979f7a0b6d149d1b05bda19000eb4a7c00e0004dd928a3f94dcc86fffc4d84bfcf95173c98f6d44056214224ad6a2902ee6efdfa473206599411dce6ea1120aca11862e7979fdff5934d129526da28c88892321f19f5e49d71452768bc7fb716efb78d733cd85f088ff610f39a62e2875cf4705eb22da64bc29c47edf1ff3d1d26c15de2083363d54820c21bd69a27049a30599099b8d83240659df6f1a91a6a3deafb6", 0xb2}, {&(0x7f0000000280)="24ede4abf421fe87b4f83dfc2fbb753016b64e063ee09bee7570ea74c9e2b2cc7b77c9739edc94408519c5ea7e7c8459774617583371e6cbfa9ecb380a126bdd250076b1faa719adea796bb615a4bfe8585a5f7e00012032b47673311c203b5015590d9cca10c7ab946d8235d38c22553e82779d520a81d498d9ebc97c9fb985bc", 0x81}, {&(0x7f0000000180)="bba3bba1ef206e5796ffec4188ed01", 0xf}, {&(0x7f0000000340)="ee2ea02306c79cc10815fbbcbcae80b249219a5515c1dadb132883fc7e5ca649be2f09a3cdb27c3895de7f86751c9c42048cbb9c6dbb919bfc4ffb6325f32a80790130fae892191dd1824b83fac9ec5dc53dd41dc81f6e23643ba317f596bc0b4d127f578e78165f5105c1ce9703ea64a7cfa1f9446a424acb26a9bd245bb4d7ecdf00ad12e1196d14d3eb613cb997e4682641", 0x93}], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m21.149197013s ago: executing program 0 (id=926): unshare(0x42000000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffe4e}}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/39}, {&(0x7f0000000480)=""/182}, {&(0x7f0000000540)=""/75}, {&(0x7f0000000340)=""/28}, {&(0x7f0000000e00)=""/121}, {&(0x7f00000018c0)=""/4096}], 0x0, &(0x7f00000006c0)=""/213}}, {{&(0x7f00000007c0)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/8}, {&(0x7f0000000880)=""/78}], 0x0, &(0x7f0000000a40)=""/186}}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/39}, {&(0x7f0000000b40)=""/158}], 0x0, &(0x7f0000000c40)=""/156}}], 0xf000, 0x10002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x128}, 0x4010) recvmsg$unix(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={r10}, &(0x7f0000000100)=0x8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x7}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) 1m20.692665564s ago: executing program 3 (id=928): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x85, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x3ffffffffffff19, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x28, 0x15, 0xf0b, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, {0x10, 0xf}, {}, {0x10, 0xffe0}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r5, @ANYBLOB="100003800c0001"], 0x30}}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x14, 0x0, &(0x7f0000000180)) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0xb0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x8010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001439) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) ioctl$PPPIOCATTACH(r8, 0x4004743d, &(0x7f0000000240)) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r10, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000b40)=[{{&(0x7f0000000ac0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) epoll_create(0x8000) 1m20.2315786s ago: executing program 3 (id=933): unshare(0x22020600) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x12, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x12}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000082341801d5e3080600010800060408000000aaaaaabbac1414bb0900c2000000ac1414bb9a44b494174a05f28b8efc9050b004ef3530b8d634b1416af77c09b22b2edf90a9c3b134441e10361f3bdefd9a49c313"], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005cf010004002000e78fcd"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@generic={0x88a2}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6", 0xa1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0xffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010300000000fcdbdf2524000000f3ae8ae4b000202f14d549e3cd67251a7dc29c3478439a84b2bb2258dba3f8a5bf08de6b1c4c1d8ac1f7add45d92e1a4301d58c1cf0d13a4323dbdc823d3f5d0c6826676879aad8494983ac0a7823163cc433b926bb6ea8385703c468d87a8de38508bda94c8e4717119a171b94b8d98e5417669585f53d7dcdaf5cffcf25d9e19f60c255956f87dd148496e5562675f1ae2a07b19d6d63863f2e422b0b800883b22e1bc4dd7d38775e03ae54f07abd2b7c99b99daa79aa08ddc2ee1c71c11c7c3561002a988a01188b1290bc7528d93acd6f288ae9630"], 0x14}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x1}, 0xe) 1m20.083918043s ago: executing program 3 (id=935): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffe65, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003"], 0x8c}}, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x20, 0x700, 0x0, 0x5, {{0x1e, 0x4, 0x2, 0x3, 0x78, 0x67, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@cipso={0x86, 0x22, 0x0, [{0x0, 0x9, "a2fe18be18ea3b"}, {0x7, 0xa, "2049f51b29926501"}, {0x6, 0x5, "fc21e2"}, {0x2, 0x4, "d23b"}]}, @end, @lsrr={0x83, 0x13, 0x70, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @private=0xa010100]}, @noop, @ssrr={0x89, 0x2b, 0x91, [@multicast1, @local, @local, @empty, @dev={0xac, 0x14, 0x14, 0x23}, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback]}, @noop]}}}}}) (async, rerun: 32) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) (async) unshare(0x2000400) (async, rerun: 64) r7 = accept4(r6, 0x0, 0x0, 0x0) (rerun: 64) ppoll(&(0x7f0000000280)=[{r7, 0x382}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'gretap0\x00'}]}}]}, 0x44}}, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000b40)={0x104, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0xffffffffffffffa4, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000000000000000f9ec56324400000000440000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r11 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async, rerun: 64) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_udp_encap(r11, 0x11, 0x64, &(0x7f0000000200)=0x2, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) ppoll(&(0x7f0000000180)=[{r10, 0x18}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_BEARER_DISABLE(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20110a0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="f4010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) 1m19.872365705s ago: executing program 3 (id=938): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20208}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8004}, 0x4) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="00000800000002"], 0xfdef) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010029bd7000fedbdf2500aafbab60031469c9995c6106d6b7a4ef9590086cfcbde4bafcc5171866c3df84b4b5c4358258d4b807d789293b769bbf9fdd0afa09a7fa3e70021611", @ANYRES32=r2, @ANYBLOB="0085000002000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m19.774684783s ago: executing program 0 (id=941): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bond0\x00', 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@private, @local, 0x0}, &(0x7f00000000c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x5, 0x80000000, 0x2, 0x8, r1, 0x10000, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0xd, @void, @value, @void, @value}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x7}]}]}, 0x34}}, 0x0) bind$inet6(r0, &(0x7f0000000800)={0xa, 0xe22, 0x0, @mcast2, 0xffffffff}, 0x18) 1m19.619001688s ago: executing program 0 (id=943): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000fc0200ff0000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000006800010000f40100000000000a0000000400000004000b"], 0x1c}}, 0x0) 1m19.496420938s ago: executing program 0 (id=945): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x31, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0x6f}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaf02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93d4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1ba7f32}, 0x18) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, r4, 0x1, 0x0, 0x0, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}}, 0x0) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x38, 0x0, 0x1, 0x0, 0x0, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="780000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004800128009000100766c616e00000000380002800600010000000000280003800c0001e400000000000000000c0001000f000000020000000c00070000000000010000000400048008000500", @ANYRES32=r7], 0x78}, 0x1, 0xba01}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000240)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r9 = socket(0x1000000000000010, 0x80802, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000101000000000080000000000000", @ANYRES32=r11], 0x20}}, 0x0) 1m19.475984803s ago: executing program 3 (id=946): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) unshare(0x40000400) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xc5, 0x80012d58, 0x12d5c}}, 0x44) 1m19.258178596s ago: executing program 3 (id=947): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events.local\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x8, &(0x7f0000003880)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0x6b, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xf00, 0x0}, &(0x7f0000000180)=0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r0, r2, 0x2f, 0x28, 0x4, @void, @void, @void, @value=r3}, 0x20) 1m19.212672255s ago: executing program 0 (id=948): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x1c8, 0x168, 0x10, 0x1c8, 0xb, 0x398, 0x250, 0x250, 0x398, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0x0, 0xffffffff], [0xff], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x160, 0x1c8, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0xc, 'K\r', 0x2}}, @common=@srh1={{0x90}, {0x29, 0x6, 0x6, 0xe, 0x4, @private1, @private2, @remote, [0xff, 0x0, 0xffffff7f], [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0xff000000, 0xff000000, 0xff], 0x871, 0x181}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0x9}}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x3, 0x1]}, 0x8) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x5, 0x6]}, &(0x7f0000000040)=0x8) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00'}) 1m19.129188029s ago: executing program 32 (id=947): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events.local\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x8, &(0x7f0000003880)=ANY=[@ANYRES8=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r0, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0x6b, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000046682d562c31aa909594c57a164463536e83a7f6ac12a8b52f0d70aa97a91fa46cdcefe7534fda04cace652409e818c0b1da96d9c9fa8e9523840100cbac3c07c3db6bc11fa42d9ca632c33ca9a00987000000002cd50db1486b80ee61ff6ddaa4bf0609a8ef7fd07f4c556489cf61cf8e63e826fff67d3299ca9f9b85cdcd75b85bb1775f4ff03b75aa7b6aa1a7e9a2b91d103d541bce370d9e6810dec2fe8300dc5edf3f6aa43810579aedb7e19fbacb5bd5e5337b507559ca6acc6471ecad2746ab01526ace07000000c1ea01c13a2406007d0efb7e91a9dbde2353f035347270d076c93f1b1a810cb2c7d72ee9ce76e6da15600893bc36f6502f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xf00, 0x0}, &(0x7f0000000180)=0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r0, r2, 0x2f, 0x28, 0x4, @void, @void, @void, @value=r3}, 0x20) 1m19.126164125s ago: executing program 33 (id=948): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x1c8, 0x168, 0x10, 0x1c8, 0xb, 0x398, 0x250, 0x250, 0x398, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0x0, 0xffffffff], [0xff], 'veth1_to_batadv\x00', 'veth1_to_hsr\x00', {}, {}, 0x3a}, 0x6000000, 0x160, 0x1c8, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0xc, 'K\r', 0x2}}, @common=@srh1={{0x90}, {0x29, 0x6, 0x6, 0xe, 0x4, @private1, @private2, @remote, [0xff, 0x0, 0xffffff7f], [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0xff000000, 0xff000000, 0xff], 0x871, 0x181}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0x9}}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x3, 0x1]}, 0x8) (async) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x5, 0x6]}, &(0x7f0000000040)=0x8) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00'}) 1m18.613114861s ago: executing program 4 (id=91): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) close(r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$key(0xf, 0x3, 0x2) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100), 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x6, '\x00', r2, r3, 0x1, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f00000001c0)=0xfffffffd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000400000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf09000000000000b6090400000000006500060009000000180100002020702500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000010000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m18.410207549s ago: executing program 34 (id=91): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) close(r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$key(0xf, 0x3, 0x2) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f00000000c0)='T', 0x1}], 0x1, 0x0) splice(r4, 0x0, r5, &(0x7f0000000100), 0x5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x6, '\x00', r2, r3, 0x1, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f00000001c0)=0xfffffffd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000400000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf09000000000000b6090400000000006500060009000000180100002020702500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000010000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 27.481519951s ago: executing program 5 (id=1941): r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}}], 0x1, 0x4004840) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000140001"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="fc1d69a1947c18d3013533abf35aebceac2b63acf1a8d9d77b79253ebc1f940446a6e8f365f27b7b2e7da44a895175c41d", 0x31}], 0x1, 0x0, 0xa0}}], 0x1, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x20, 0x0, 0x2}, {0x0, 0x7ff, 0x0, 0x0, 0x0, 0xf42, 0x200000000000}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d3, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0xb}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001ba"], 0x398}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}}], 0x1, 0x4004840) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000140001"], 0x30}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="fc1d69a1947c18d3013533abf35aebceac2b63acf1a8d9d77b79253ebc1f940446a6e8f365f27b7b2e7da44a895175c41d", 0x31}], 0x1, 0x0, 0xa0}}], 0x1, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) (async) socket$inet6(0xa, 0x3, 0x2f) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x20, 0x0, 0x2}, {0x0, 0x7ff, 0x0, 0x0, 0x0, 0xf42, 0x200000000000}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d3, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}}, 0xe8) (async) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0xb}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001ba"], 0x398}}, 0x0) (async) 27.244537171s ago: executing program 5 (id=1946): r0 = socket(0x40000000002, 0x3, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x2, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@arp={@multicast2, @remote, 0xff, 0x0, 0xb, 0xe, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0xf, 0x5, 0x1, 0x7, 0x4, 0x3, 'veth0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x0, 0x209}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @empty, @loopback, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @empty, 0x4, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfff9, 0xfff7, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$phonet_pipe(0x23, 0x5, 0x2) 22.737801546s ago: executing program 5 (id=1946): r0 = socket(0x40000000002, 0x3, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x2, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@arp={@multicast2, @remote, 0xff, 0x0, 0xb, 0xe, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0xf, 0x5, 0x1, 0x7, 0x4, 0x3, 'veth0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x0, 0x209}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @empty, @loopback, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @empty, 0x4, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfff9, 0xfff7, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$phonet_pipe(0x23, 0x5, 0x2) 16.653865196s ago: executing program 5 (id=1946): r0 = socket(0x40000000002, 0x3, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x2, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@arp={@multicast2, @remote, 0xff, 0x0, 0xb, 0xe, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0xf, 0x5, 0x1, 0x7, 0x4, 0x3, 'veth0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x0, 0x209}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @empty, @loopback, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @empty, 0x4, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfff9, 0xfff7, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$phonet_pipe(0x23, 0x5, 0x2) 10.68472685s ago: executing program 5 (id=1946): r0 = socket(0x40000000002, 0x3, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x2, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@arp={@multicast2, @remote, 0xff, 0x0, 0xb, 0xe, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0xf, 0x5, 0x1, 0x7, 0x4, 0x3, 'veth0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x0, 0x209}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @empty, @loopback, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @empty, 0x4, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfff9, 0xfff7, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$phonet_pipe(0x23, 0x5, 0x2) 5.064709952s ago: executing program 5 (id=1946): r0 = socket(0x40000000002, 0x3, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x2, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@arp={@multicast2, @remote, 0xff, 0x0, 0xb, 0xe, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0xf, 0x5, 0x1, 0x7, 0x4, 0x3, 'veth0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x0, 0x209}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @empty, @loopback, 0x8}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @empty, 0x4, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfff9, 0xfff7, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$phonet_pipe(0x23, 0x5, 0x2) 2.955576278s ago: executing program 7 (id=2293): r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000200)=0x1, 0x4) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x0, 0x0, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1}}}, {{@arp={@local, @broadcast, 0x0, 0xff, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pim6reg1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@dev, @rand_addr, @broadcast}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @broadcast, @multicast2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) recvmmsg$unix(r0, &(0x7f00000001c0), 0x4000000000000bd, 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003fcb0e"], 0x14}}, 0x0) 2.591113346s ago: executing program 7 (id=2295): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020100000000000000000013020000000000"], &(0x7f0000000200)=""/225, 0x26, 0xe1, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5004, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000d00008500000001000000850000002a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f00000004c0), &(0x7f0000000600)=r3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000a8db0000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/10], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newnexthop={0x2c, 0x68, 0x1, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x4}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_GROUP_TYPE={0x6}]}, 0x2c}}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000380)="049ae8bc07c2", 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x34, 0x4, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000051}, 0x48c0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0202000310000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000000000000000b00000000020009002aa5c8cc"], 0x80}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x20}}, 0x44) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'veth1_to_bond\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000008000500000000001400038010000380"], 0x48}}, 0x0) 2.45080973s ago: executing program 7 (id=2297): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000007c0)={@local, @link_local, @val={@void, {0x8100, 0x5, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @loopback}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2.367801337s ago: executing program 7 (id=2300): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = epoll_create1(0x80000) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x121}], 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x1]}, 0x8) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f00000000c0)={0x2800000000, 0x3, 0x1}) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@multicast1, @dev, 0x0}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0xe4, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9e75d84df871847e}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@RTM_NEWMDB={0x78, 0x54, 0x1, 0x70bd29, 0x25dfdbfb, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x4, {@in6_addr=@local, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x1, 0x3, {@in6_addr=@local, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x2, 0x1, {@ip4=@dev={0xac, 0x14, 0x14, 0x1a}, 0x8edd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x81) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x8, &(0x7f0000000680)=0x4, 0x4) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@getqdisc={0x48, 0x26, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x1, 0xfff1}, {0xc, 0xffff}, {0xfff2, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x800) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000880), 0x4) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r10, &(0x7f00000008c0)={0x23, 0x2, 0x30, 0x83}, 0x10) sendmmsg$inet6(r1, &(0x7f0000002380)=[{{&(0x7f0000000900)={0xa, 0x4e20, 0x68c3, @rand_addr=' \x01\x00', 0x67}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000940)="e41c0ca110a72a1761902c3904f3203783683ac551379c22e0ad92ac628c9ad513ee49c96427291433f5a2ec2dfce849d27ae0328bb21b07ae0557d7bc797c39d106c030b355a26eea12d7fcd8f830cfefd20a1727f3f8548283971004db5bd27d16b7d68ec5874c34e19a0ed3b9410abef3c95945f3f2fab8263e2a2c1e00bb7eaf28413164eaaf79429300bc78c4234ee9e184ec898e82ce42216cf1a8f6e2d25b1d5abd632bbbcf0cc731961adc14cc160d82870a95722653cc4a7f12ceab", 0xc0}, {&(0x7f0000000a00)="ee75734ba9952e9b4d942cf4782bce2d9f8e30c86f588297e5f868aed8cb3c7a90e96f6b041e3526412b382dead650879d381bc19ecec2", 0x37}, {&(0x7f0000000a40)="0e9d5665be134c7be69de8d57ea08cd34a8e5c4fd232d62bfc74bea83e37b91c6707509b0533a2be804e83204d0550d6db44986a7f4464787d15e52084988ec2cd549dbd9097c7cf396ccf46e303481b4c0c643cecd94438d81597fb61f2df45524609a799e5e2b993e9ef9cf0321f594409d210a41992a2a63ba71b06e916a8246ad41748e85dbbdecb53214ca22786946484b7c0a68b6a21abed18affb4931bf2b614226b376fbbd2077e71676df2e94323268", 0xb4}], 0x3, &(0x7f0000000b40)=[@dstopts={{0x160, 0x29, 0x37, {0x3b, 0x28, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @ra, @generic={0x18, 0xf2, "cf9806d05d0b76360515078f9f41cf8712b192352445786a01b98a1f5f33e741cee98e13f75f145672c1ceef4b4ccc8f885c7ff96e0ba7f75d4b7081d6ebdd76d2e1932c2e852738da44ec1343e487d72a6eff9afaab4dede0b3278cd06addd02ab300f125a05abd25388081f53614a7f16822d7f14e5c5bd5acde01cc81de1b39174575bd8db47cef44b0a70df181488de9eb63ef7628279bf6d36689c971e15f361a56b5c99d2e9d95acf4191cc0596e7ebaccbb6f9cbef21712906d3c4ef87a730fd6e6795979245ea002cd358a78f059e00c8f96ffefacd441628f1a344d3eda69f412a2fb7f267bbb8a67b0491f7dde"}, @jumbo={0xc2, 0x4, 0xfffffffd}, @calipso={0x7, 0x38, {0x2, 0xc, 0xec, 0xb29, [0x7, 0x2, 0x9, 0x9, 0x0, 0x1]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x87, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x36}}]}}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x3b, 0x1c, '\x00', [@pad1, @generic={0xa, 0xdc, "5d3f2c686315654854dfd5c3b3c2856e70e08c6fb2b577b99fc80a532de4d2d81bd5649ca7576013226bf643d581fe5170ae6ccc869b452983e375bf11bd898abb7c573240f168b5fee25e920c5508c38e3e035cc4b31fb9e5602198b55fe1b75ddab625cfa5841db768d9d517a27e7370f18c849c04bee6fbcfb1dbf4354cb5e4672d2bcde6bf4aac7ca62d5c5dc13fabac67092163bc2831f6a48af7f1cff126886b36b4192ff76d53e4ae932e9f80bfc45d775462b22085c8ea15c434a2c50e58d38d829a0df218f189b526a071974745715ce9c8f79e21a8de98"}]}}}, @dontfrag={{0x14}}, @rthdr={{0x78, 0x29, 0x39, {0x32, 0xc, 0x2, 0x33, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x2b}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}], 0x348}}, {{&(0x7f0000000ec0)={0xa, 0x4e20, 0x9, @remote, 0x3}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000f00)="7540ee271acb0a994842cd40bcfa395b0ef7c523f2ee1db66e09fa0b916735a912d3fbe12c6885cae699f5d6d1238a33ee221f54e00b6f86951308432e4593f6fa59850edc0834933cdbfff56627a12c8d6de0beec1d0d36c9e12bb6b1e90c4707fe05c06a095aa94ca171e7b89ee952af4da88b206dcdb293e8a258af52dd181350494d231d81dd30c34c74d9e11ed1c3e06cec403887d3b74cb4557c952286fd0d1dc9fe6ae22e4aff119a147afbd4d921d8abb13edd88321d95ca12d3624351b891fccefe941e2f793590ef45fc8a57be599b31946e4cf36dfd45ea", 0xdd}], 0x1, &(0x7f0000001040)=[@flowinfo={{0x14, 0x29, 0xb, 0x7ff}}], 0x18}}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000002080)="084ec91696fbb38c8a9c0e74e30db68b4da5a338d6e1a15b7ecb848ad17e09809a9d33bfb1a676815a85b9f0907c5c176402cbe78fd5d90e8f33d717aefc1e37127da64d25864e6fbaf8324d076c22defc1aaba4edb507443165e4298daa8097c9216d44065d6f3d68eb24d7b1912d2a7feb6746e4ee07f4800f4dbc7248", 0x7e}, {&(0x7f0000002100)="f7dd754151874b440dff8c0f077514a8ec983b611c85a9c0bbd7612908d56e6c71eb21d171af137175a2ee6c9b6115ee1a57e6847f40dc64b05425ba70296a6f9d231a4034e0ed91e5563830c6150389106ba230af1db8e796297744e5a6bfe1b0c2e6ffeb07f948aff67126195dd8028321bd2f2719fa49bc86524f99f70b17a4da5f5cfb4042b1f53c784f", 0x8c}], 0x3, &(0x7f0000002200)=[@dstopts={{0x40, 0x29, 0x37, {0x2c, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0xf}, @calipso={0x7, 0x20, {0x3, 0x6, 0x7f, 0xfb, [0x5c0, 0x9, 0x6]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @hopopts_2292={{0x108, 0x29, 0x36, {0x4, 0x1d, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x7, 0xd5, "dd6820140f308e9b4df19c0aaf115becb8eb6118f664b258ea6aec99d52e3c35e2bfce0787891abfd2a1d64e6c6cb371b4bae5c169e4eddd7409fbc606c1a3d2d863b14e847aa14c10238808ea1e0f86fe0f2a0aedaa374cc83cc39051f818a0be966e4e3cb90561d9dd10c451c662cee44013234c8af54c8780e2769c3c4be1361371bb633968cd689be1768057616510eb75e083824974679985ce962ced61f14dff443a5e67139c83d449843331475bedbb479c39cef4b94427852ef61ec66de592b04f7bc1d57f5b729b2c6fc8901ca13bd39f"}, @jumbo={0xc2, 0x4, 0xff}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xff}}], 0x178}}], 0x3, 0x4015) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000024c0)={'dvmrp1\x00', &(0x7f0000002440)=@ethtool_perm_addr={0x20, 0x76, "d9adf38c82ad57b42a333ffa8bb9ea1fab62b5d4c7722e93f8897a95e6bd36f5e2b29398720a90e06df45ae72cc55f1be66b8a54014ea87be4dda044ca20b0d81dd4e78b3a03fa576a80fef3f1da4485904b9f26453ac52acc3a4f023814a88fc1d30f177c5225ab00f93c1cf05150c398cd28214c46"}}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000002500)=@generic={0x0, 0x7fffffffffffffff, 0x7ff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000002540), r3) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002580)='./cgroup/syz1\x00', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f00000025c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000002700)={&(0x7f0000002600)=""/246, 0x208000, 0x1000, 0x0, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002780)={&(0x7f0000002740)='fsi_master_gpio_in\x00', r3, 0x0, 0x4}, 0x18) getsockopt$EBT_SO_GET_ENTRIES(r12, 0x0, 0x81, &(0x7f0000002900)={'nat\x00', 0x0, 0x3, 0xfb, [0x4, 0x8, 0x4, 0xfffffffffffffdb8, 0x3, 0xfffffffffffffffb], 0x2, &(0x7f00000027c0)=[{}, {}], &(0x7f0000002800)=""/251}, &(0x7f0000002980)=0x78) accept4(r13, 0x0, &(0x7f00000029c0), 0x0) 2.104326529s ago: executing program 6 (id=2303): r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x2b, 0xa, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x120, 0x5c, 0x160, 0x120, 0x3e0, 0x2f0, 0x228, 0x25a, 0x2f0, 0x228, 0x4, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev, [], [], 'macvtap0\x00', 'wg1\x00', {0xff}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x120, 0x52020000, {0x0, 0x6802000000000000}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@unspec=@state={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@local, @private2, [], [0xff], 'vcan0\x00', 'dummy0\x00', {}, {}, 0x3b}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x3, 'system_u:object_r:depmod_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xf274}, 0x18) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000580)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3000000}}}]}, 0x28}}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)}, 0x60012002) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000500000000000000000000001000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x10002, 0xcc, 0x22, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x9, @empty, 0x10000}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000180)={r10, 0x6, 0x30, 0x6, 0x6}, &(0x7f0000000240)=0x18) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@can_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 1.508168931s ago: executing program 7 (id=2310): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='nv\x00', 0x3) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = epoll_create1(0x0) r3 = socket(0x1, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x10000001}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061115c000000000006000200000000009500740000000000"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x5c, r8, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9a}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x51}, @NL80211_ATTR_BANDS={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8843) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad6706000002000000070300000ee60000bf250000000000002d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1003f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780055c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a823e28f359608ea326c77a1aa17318f392a0ec6c188916f4149c503027feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d604f45cfe88b30c170000000001000000ef931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f0400000000000000d23b48bb38b31a14ffcddd92c38f6b6d86a0e56d47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f1300007d6072f0cf120ad2ba519afdd43a14000000000000000000000000007ef2f3c58d045f0700000094069acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d000000000000000000007758b1267669ded883b5867c5916a74843b784955108f750c57744c76a09629dd0aaca5cb0f14f49db80a1aa2692c18fbb31cbdb3f2e138e6d5ba3491fc3617b511f24bad26466407e39000000000080d7a1bf4624d31c13a6840f45a7f4e01a50d790132abb36915e35b1ac35bf3921357f635b2427847b8fe1e2123153ecd6d1f76820d4f8fa0b96b50c457ae8d5f2351cdb7bc8170380557bc11cf6ee3395974e37018a2a7473312cb32affb8ff72a253e0d36099e460f13694b9891af526d9608271838e83d17103887f34210dd4c0cf60dec608b4ca5ba2f3037bf381e7b5d5b27820000000000000000000000b719bd34f3244730f708fdd532640edc6b82dd4ad72ecbaccafef806f5447aba2246d56a601bbd8c24ba1e16dda3296ce10de6830"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004044}, 0x844) epoll_pwait(r4, &(0x7f0000000180)=[{}], 0x1, 0x80000000, 0x0, 0x0) getpeername$unix(r10, &(0x7f0000000440)=@abs, &(0x7f0000000200)=0x6e) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a320000000014000780080013400000000008001240000a2000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f00000001c0), 0x0, 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="1a02c4c64e936ae0c1aa48224bd362c3212b4b6c597e9df9b49ed661615e5f16bc6fee31006623dd464650d31bc9465da91dcda5cad5d914f23a997b94b2329a3b61fec64831073d077b08c77c96346e2f323d229a2bf5fa61943a076140411802e88f96ccfb5a1fd1e73d015c98545100b6415a1a", 0x75, 0x8000, 0x0, 0x0) shutdown(r0, 0x2) 1.199394733s ago: executing program 6 (id=2312): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x9e, &(0x7f00000002c0)=""/158, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000000303010100"/20], 0x20}}, 0x4000800) 1.104374936s ago: executing program 6 (id=2315): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000002060108000000000000000000000000140007800800124000000006050015001a0000000500010006000000050005000a00000005000400000000000900020073797a300000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r6, {0xd, 0x9}, {0x6}, {0x0, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}]}}]}, 0x3c}}, 0x4000) 923.993654ms ago: executing program 6 (id=2317): r0 = socket$tipc(0x1e, 0x2, 0x0) close(r0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket(0x1, 0x803, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f00000000c0)=ANY=[@ANYBLOB="f9000000000000000000000000000000cf6fce4927f654c55a35992e815a61f04803469118b1a87be8123a0d5b2e12b2"], 0x10) 923.000621ms ago: executing program 2 (id=2318): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000040)=0x2, 0x4) setsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000000)=0xfffffffe, 0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x44}}, 0x0) 792.986415ms ago: executing program 1 (id=2319): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x3c, r4, 0xc31, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x19}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x801) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0xd, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000000000000100ffff0900010073797a30000000002c000000030a01010000000000000000010040010900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200030000003c0001800c00010062697477697365002c000280080003400000000208000140000000140800024000000012080004800400010008000640000000030900010073797a30"], 0x110}}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', 0x6}, {0x0, 0x5d}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x174, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xc, 0x9}, {0x0, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xd, 0x8, 0x2}, {0x3, 0x6, 0xf}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x7f}, {0x800, 0x1, 0x2, "b1"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6b, 0x8, 0x80}, {0x0, 0x3, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xcc4}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xff}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x88, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x59}, @TCA_ROUTE4_ACT={0x6c, 0x6, [@m_nat={0x34, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x9, 0x6, "3eaed48f50"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x174}, 0x1, 0x0, 0x0, 0x81}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000006c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000240)={r9, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x2, &(0x7f00000005c0)={r9, 0x1, 0x6, @local}, 0x10) r11 = socket(0x1e, 0x4, 0x0) getsockopt$inet6_mreq(r11, 0x29, 0x1c, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x4, 0xb0f9, 0x50, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7, 0x7, 0x5, 0x9}}) 704.304015ms ago: executing program 2 (id=2320): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000800)}, {0x0}], 0x6, &(0x7f0000000580)=[@ip_pktinfo={{0x20, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback}}}], 0x20}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080", @ANYRESOCT=0x0], 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18460000faaadb0289ffff0800000000da87e0e0f8de8dd848562c1af4e024824affdf0a5fc6cf"], &(0x7f0000000140)='GPL\x00', 0x4e48529c, 0xdc, &(0x7f0000000180)=""/220, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x1, 0xff, 0x4}, 0x10, 0x53b2, 0xffffffffffffffff, 0x3, &(0x7f0000000300)=[r4, r4, r4, r4], &(0x7f0000000340)=[{0x3, 0x4}, {0x4, 0x1, 0x6, 0x1}, {0x5, 0x4, 0x0, 0x7}], 0x10, 0x0, @void, @value}, 0x94) r6 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000006c0)={0x28, 0x0, 0x2710, @host}, 0x10, 0x800) accept4$vsock_stream(r6, &(0x7f0000000700)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x1800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000004000000020000000000000c02000000000000000500000d0000000005000000020000000b0000000100000000000000000000000b000000e7ff0080070000000400000000005f"], 0x0, 0x5c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000440)={0x0, @local, @private}, &(0x7f0000000480)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000023adcea000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207baaf8ff005dfbf9000000bda100000000000027010000f8ffffffb702000008000000b70300000000000025000000060c0000be91000000000000b5020000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0xffffffffffffff0c, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x63, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x80001, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000480)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000004c0)={0x1}, 0x8) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x61}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x85}, 0x40000) 575.027653ms ago: executing program 7 (id=2321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000001c000d0000000500070012000000060008000000000005001800010000000600080000000000050017000000000005001a000000000006000a00ffff0000050019"], 0x54}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0xfffe, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f00000014c0)={0x100, 0x41, 0x137, 0x70bd2b, 0x25dfdbff, "", [@nested={0xed, 0x1f, 0x0, 0x1, [@typed={0x4, 0x7}, @nested={0x4, 0x34}, @generic="587f27d207bd05a99f61a6fedc9e77211911deb5073613d0397bbc29112a77c9838bbd4e4923623a83ed8b937e651a8789aebca7ea27315ce949bd1809c3f4891ea9eddc29949c214bc8db30a339f0cba6522cc2d4cb219913deb8ddaee5877462887c3663f63bd2f210480cdd178729413fb1458c05da7e35ace3", @generic="7bf6022f6c135c4f8111339433365e1b64cb3d23c090b737b553336f3f1e", @generic="a99b8e6d2cb2ebfdf93430f8d49d13bdc173ef5a9a3134e7042373aa6fac301da1ef1801f6b4dbce971c28b87eeea64bd262e589bedb69f4bff41064f8f5bb47b6662f6ddd3cdf01"]}]}, 0x100}], 0x2}, 0x5850) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x80000006, 0x0, 0x19, 0x6}]}, 0x10) syz_emit_ethernet(0x1263, &(0x7f00000017c0)=ANY=[], 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) socket(0x1, 0x1, 0x0) close(0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r2, r9}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x192, 0xa080}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x9, 0xd7c, 0x7}}]}]}]}, 0x38}}, 0x0) 573.620554ms ago: executing program 1 (id=2331): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x3c, r4, 0xc31, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x19}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x801) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0xd, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000000000000100ffff0900010073797a30000000002c000000030a01010000000000000000010040010900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200030000003c0001800c00010062697477697365002c000280080003400000000208000140000000140800024000000012080004800400010008000640000000030900010073797a30"], 0x110}}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', 0x6}, {0x0, 0x5d}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x174, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xc, 0x9}, {0x0, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xd, 0x8, 0x2}, {0x3, 0x6, 0xf}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x1, 0x2, 0x7f}, {0x800, 0x1, 0x2, "b1"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6b, 0x8, 0x80}, {0x0, 0x3, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xcc4}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0x0, 0xff, 0xff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xff}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x88, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x59}, @TCA_ROUTE4_ACT={0x6c, 0x6, [@m_nat={0x34, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x9, 0x6, "3eaed48f50"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x174}, 0x1, 0x0, 0x0, 0x81}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendto(r10, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f00000037c0)=[{{&(0x7f00000006c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r9, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000240)={r9, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x2, &(0x7f00000005c0)={r9, 0x1, 0x6, @local}, 0x10) r11 = socket(0x1e, 0x4, 0x0) getsockopt$inet6_mreq(r11, 0x29, 0x1c, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x4, 0xb0f9, 0x50, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7, 0x7, 0x5, 0x9}}) 456.02001ms ago: executing program 2 (id=2322): r0 = socket(0x10, 0x3, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x12, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x400}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2c8196ca}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x44881) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x85}}, 0x0) 448.904013ms ago: executing program 1 (id=2333): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="7f0def7ff2f46fd7354aef093f8b127323f91eb2071a5b8c8e5357a71d320de63b894edd7aee125ba6e19f33c7dc9c5c16ee411bafda8e7fef468a39a4f6543babd7b12b775c8e996eae8ae39872b847b027f07fe2d4dc74c2061fab3907aa705d80c21d49195ced9a2f3dbfb126560c2dbf7b974e989fbaaae067551c40a8d9ef0a0b859cc342c43a3609d95bcf4dae8e02e9181e44419e858102e9fb8bccbacaa98c4f4fabb39130b382f598688100227a7ac16e68", 0xb6}, {&(0x7f0000000380)="fc1d69a1947c18d3013533abf35aebceac2b63acf1a8d9d77b79253ebc1f940446a6e8f365f27b7b2e7da44a895175c41d", 0x31}], 0x2, &(0x7f0000001840)=[{0x10, 0x113, 0x4}, {0x90, 0x0, 0xa, "5624a0484082b8ccc6d655504d185e3e5d0711dd845f56e73adb6e4d72063c6cf20481e00852b6f90a3c8c8ce4c3a8212f1dac56b0ba6da00564dc900a9cf8e445572e65b3f68c54a2d579c39d1a5f0dce1de180996cd1c8e7b480ddcab1ab9f760560f4b4a57f1bf1182533133997b6176933168e8d3bac8ddbc194ffd17f"}], 0xa0}}], 0x1, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_dest={0x10, 0x114, 0xc}], 0x18}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)=""/12, 0xc}], 0x1}, 0x9}], 0x1, 0x40002020, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001ba", @ANYRES16=r1], 0x398}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="7f0def7ff2f46fd7354aef093f8b127323f91eb2071a5b8c8e5357a71d320de63b894edd7aee125ba6e19f33c7dc9c5c16ee411bafda8e7fef468a39a4f6543babd7b12b775c8e996eae8ae39872b847b027f07fe2d4dc74c2061fab3907aa705d80c21d49195ced9a2f3dbfb126560c2dbf7b974e989fbaaae067551c40a8d9ef0a0b859cc342c43a3609d95bcf4dae8e02e9181e44419e858102e9fb8bccbacaa98c4f4fabb39130b382f598688100227a7ac16e68", 0xb6}, {&(0x7f0000000380)="fc1d69a1947c18d3013533abf35aebceac2b63acf1a8d9d77b79253ebc1f940446a6e8f365f27b7b2e7da44a895175c41d", 0x31}], 0x2, &(0x7f0000001840)=[{0x10, 0x113, 0x4}, {0x90, 0x0, 0xa, "5624a0484082b8ccc6d655504d185e3e5d0711dd845f56e73adb6e4d72063c6cf20481e00852b6f90a3c8c8ce4c3a8212f1dac56b0ba6da00564dc900a9cf8e445572e65b3f68c54a2d579c39d1a5f0dce1de180996cd1c8e7b480ddcab1ab9f760560f4b4a57f1bf1182533133997b6176933168e8d3bac8ddbc194ffd17f"}], 0xa0}}], 0x1, 0x10) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_dest={0x10, 0x114, 0xc}], 0x18}, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)=""/12, 0xc}], 0x1}, 0x9}], 0x1, 0x40002020, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001ba", @ANYRES16=r1], 0x398}}, 0x0) (async) 396.866914ms ago: executing program 2 (id=2323): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020100000000000000000013020000000000"], &(0x7f0000000200)=""/225, 0x26, 0xe1, 0x1, 0x0, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5004, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000d00008500000001000000850000002a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f00000004c0), &(0x7f0000000600)=r3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000a8db0000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/10], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newnexthop={0x2c, 0x68, 0x1, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x4}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_GROUP_TYPE={0x6}]}, 0x2c}}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000380)="049ae8bc07c2", 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x34, 0x4, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000051}, 0x48c0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0202000310000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000000000000000b00000000020009002aa5c8cc"], 0x80}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x20, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x20}}, 0x44) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'veth1_to_bond\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000008000500000000001400038010000380"], 0x48}}, 0x0) 296.665644ms ago: executing program 1 (id=2324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x87, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) close(r0) 232.208074ms ago: executing program 1 (id=2325): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32=r0], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x10010, 0xffffffffffffffff, 0x7502b000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000780)="63eced8e46dc0600a3a988425e43", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x4c0040, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) close(0x3) 220.833936ms ago: executing program 6 (id=2326): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000000c0)=0x2c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r4, @ANYRES32=r1, @ANYRESOCT=r3, @ANYRES8=r1], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x24008092) 128.322876ms ago: executing program 6 (id=2327): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xb8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}]}]}, 0xb8}, 0xa}, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xce, &(0x7f0000000200), &(0x7f0000000080)=0x62) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r5, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 103.258098ms ago: executing program 2 (id=2328): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002200)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000200)={{r4, 0xda, 0xffffffffffffffff, 0x6, 0xffffffffffffffab, 0x1, 0x29cd22b5, 0x2, 0x4, 0x0, 0x1, 0x1, 0xfffffffffffffffb, 0x18b, 0x1}}) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r8, 0x107, 0x18, &(0x7f0000000800)={r7, 0x1, 0x6, @local}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001200)={{r5, 0xfffffffffffffffd, 0xffffffffffffffff, 0xf84d, 0x5, 0xffffffff, 0x8, 0x40, 0x4, 0x4, 0x9, 0x1, 0x4, 0x0, 0xa}}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) 372.833µs ago: executing program 1 (id=2329): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pread64(r1, 0x0, 0x0, 0x100000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x3, 0x2, 0x1, 0xd}}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) tee(r5, 0xffffffffffffffff, 0x8000000000081, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3]) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, 0x0, 0x0) mmap(&(0x7f0000403000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x0) socket$kcm(0x29, 0x0, 0x0) 0s ago: executing program 2 (id=2330): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7}], 0x2c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x0, 0x9}, 0xe) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xc2}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) kernel console output (not intermixed with test programs): team_slave_0 removed [ 145.518447][ T9504] team0: Port device team_slave_0 added [ 145.546396][ T5844] Bluetooth: hci1: command tx timeout [ 145.546570][ T55] Bluetooth: hci0: command tx timeout [ 145.588386][ T9504] team0: Port device team_slave_1 added [ 145.624005][ T9504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.631107][ T9504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.657623][ T9504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.672124][ T9504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.680023][ T9504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.708903][ T9504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.784447][ T9520] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.791696][ T9520] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.799204][ T9520] bridge_slave_0: entered allmulticast mode [ 145.805727][ T9520] bridge_slave_0: entered promiscuous mode [ 145.812548][ T9502] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.823496][ T9502] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.835235][ T9504] hsr_slave_0: entered promiscuous mode [ 145.842115][ T9504] hsr_slave_1: entered promiscuous mode [ 145.856462][ T55] Bluetooth: hci3: command tx timeout [ 145.863933][ T9520] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.872249][ T9520] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.879717][ T9520] bridge_slave_1: entered allmulticast mode [ 145.886383][ T9520] bridge_slave_1: entered promiscuous mode [ 145.903057][ T9502] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.918316][ T9520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.929736][ T9520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.939929][ T9502] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.986826][ T9520] team0: Port device team_slave_0 added [ 146.005877][ T9520] team0: Port device team_slave_1 added [ 146.025241][ T9601] netlink: 91 bytes leftover after parsing attributes in process `syz.2.975'. [ 146.061001][ T9520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.069678][ T9520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.107861][ T9520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.127767][ T9520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.134760][ T9520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.161436][ T9520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.244769][ T9520] hsr_slave_0: entered promiscuous mode [ 146.251495][ T9520] hsr_slave_1: entered promiscuous mode [ 146.258981][ T9520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.266893][ T9520] Cannot create hsr debugfs directory [ 146.309070][ T9502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.329305][ T9504] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 146.342117][ T9504] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 146.386912][ T9620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.980'. [ 146.395740][ T9502] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.402944][ T9504] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 146.425346][ T9504] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 146.440296][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.447482][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.468963][ T9621] netlink: 'syz.2.981': attribute type 4 has an invalid length. [ 146.473252][ T9502] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.487221][ T9502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.513974][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.521164][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.631752][ T9520] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 146.644163][ T9520] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 146.658466][ T9520] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 146.679437][ T9520] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 146.705081][ T9504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.740182][ T9504] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.763036][ T9502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.782835][ T6838] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.790039][ T6838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.840535][ T9520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.854797][ T9520] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.883937][ T9520] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.894528][ T9520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.910822][ T6838] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.917986][ T6838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.928550][ T6838] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.935633][ T6838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.944759][ T6838] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.951929][ T6838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.988889][ T9644] netlink: 'syz.1.986': attribute type 10 has an invalid length. [ 147.085876][ T9656] netlink: 2 bytes leftover after parsing attributes in process `syz.1.987'. [ 147.101315][ T9502] veth0_vlan: entered promiscuous mode [ 147.122284][ T9502] veth1_vlan: entered promiscuous mode [ 147.170065][ T9502] veth0_macvtap: entered promiscuous mode [ 147.184845][ T9520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.197518][ T9502] veth1_macvtap: entered promiscuous mode [ 147.235127][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.256415][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.277459][ T9502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.300774][ T9502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.336184][ T9502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.347173][ T9502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.369218][ T9504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.385651][ T9502] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.407667][ T9502] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.426366][ T9502] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.436485][ T9502] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.533087][ T9520] veth0_vlan: entered promiscuous mode [ 147.555341][ T9686] ip6tnl0: Master is either lo or non-ether device [ 147.578527][ T9520] veth1_vlan: entered promiscuous mode [ 147.616735][ T8513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.625550][ T55] Bluetooth: hci1: command tx timeout [ 147.632340][ T8513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.680590][ T8513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.684696][ T9520] veth0_macvtap: entered promiscuous mode [ 147.695918][ T8513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.723657][ T9520] veth1_macvtap: entered promiscuous mode [ 147.753809][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.785815][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.802334][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.803256][ T9693] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 147.819750][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.844784][ T9520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.868483][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.888748][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.909245][ T9520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.928604][ T9520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.938697][ T5844] Bluetooth: hci3: command tx timeout [ 147.949571][ T9520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.972030][ T6838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.991029][ T9520] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.008182][ T6838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.020558][ T9520] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.029829][ T9520] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.041104][ T9520] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.060486][ T9699] netlink: 16 bytes leftover after parsing attributes in process `syz.5.995'. [ 148.124138][ T9504] veth0_vlan: entered promiscuous mode [ 148.182505][ T9504] veth1_vlan: entered promiscuous mode [ 148.217509][ T9504] veth0_macvtap: entered promiscuous mode [ 148.235423][ T9504] veth1_macvtap: entered promiscuous mode [ 148.266412][ T6346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.274616][ T6346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.306876][ T6346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.314803][ T6346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.323647][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.327880][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1001'. [ 148.335912][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.343893][ T9711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.999'. [ 148.354724][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.378703][ T9711] netlink: 256 bytes leftover after parsing attributes in process `syz.1.999'. [ 148.383249][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.416380][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.428386][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.441478][ T9504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.455019][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.469556][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.482096][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.493085][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.503928][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.515026][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.537890][ T9504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.564499][ T9504] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.579213][ T9504] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.588304][ T9504] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.597245][ T9504] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.619154][ T9722] lo speed is unknown, defaulting to 1000 [ 148.697783][ T9731] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1005'. [ 148.717242][ T6346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.726263][ T6346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.778357][ T6346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.788706][ T6346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.894626][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.6.950'. [ 148.948137][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1008'. [ 148.975083][ T9743] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1008'. [ 149.052175][ T9753] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1010'. [ 149.069428][ T9740] lo speed is unknown, defaulting to 1000 [ 149.176075][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1012'. [ 149.704011][ T5844] Bluetooth: hci1: command tx timeout [ 149.731122][ T9792] sock: sock_timestamping_bind_phc: sock not bind to device [ 149.779353][ T9797] netlink: 'syz.7.1023': attribute type 2 has an invalid length. [ 149.792125][ T9797] : entered promiscuous mode [ 149.930060][ T9792] ipvlan2: entered promiscuous mode [ 149.952161][ T9790] lo speed is unknown, defaulting to 1000 [ 149.965588][ T9803] hsr0: entered promiscuous mode [ 150.016315][ T5844] Bluetooth: hci3: command tx timeout [ 150.122134][ T9818] bridge0: entered allmulticast mode [ 150.423932][ T9847] gre0: entered promiscuous mode [ 150.818419][ T9866] xt_nfacct: accounting object `sy' does not exists [ 150.860318][ T9876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.870372][ T9876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.880564][ T9876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.891196][ T9876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.902100][ T9876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.911917][ T9876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.991829][ T9883] bond1 (unregistering): Released all slaves [ 151.060374][ T9886] team0: left allmulticast mode [ 151.065397][ T9886] team_slave_0: left allmulticast mode [ 151.072579][ T9886] team_slave_1: left allmulticast mode [ 151.078374][ T9886] bridge0: port 3(team0) entered disabled state [ 151.089060][ T9886] bridge_slave_0: left allmulticast mode [ 151.094723][ T9886] bridge_slave_0: left promiscuous mode [ 151.100794][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.113338][ T9886] bridge_slave_1: left allmulticast mode [ 151.119613][ T9886] bridge_slave_1: left promiscuous mode [ 151.125292][ T9886] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.135596][ T9886] bond0: (slave bond_slave_0): Releasing backup interface [ 151.150124][ T9886] bond0: (slave bond_slave_1): Releasing backup interface [ 151.164345][ T9886] team_slave_0: left promiscuous mode [ 151.181330][ T9886] team0: Port device team_slave_0 removed [ 151.192092][ T9886] team_slave_1: left promiscuous mode [ 151.209368][ T9886] team0: Port device team_slave_1 removed [ 151.224456][ T9886] bond0: (slave wlan1): Releasing backup interface [ 151.255925][ T9887] team0: Mode changed to "loadbalance" [ 151.582010][ T9932] batadv_slave_1: entered promiscuous mode [ 151.644570][ T9931] batadv_slave_1: left promiscuous mode [ 151.778664][ T5844] Bluetooth: hci1: command tx timeout [ 152.012395][ T9980] batadv_slave_1: entered promiscuous mode [ 152.098946][ T5844] Bluetooth: hci3: command tx timeout [ 152.141793][ T9979] batadv_slave_1: left promiscuous mode [ 152.221647][T10006] IPv6: NLM_F_REPLACE set, but no existing node found! [ 152.364850][T10023] syzkaller1: entered promiscuous mode [ 152.381862][T10023] syzkaller1: entered allmulticast mode [ 152.421237][T10027] hsr0: entered promiscuous mode [ 152.422675][T10031] xt_TCPMSS: Only works on TCP SYN packets [ 152.551996][T10044] batadv_slave_1: entered promiscuous mode [ 152.665881][T10043] batadv_slave_1: left promiscuous mode [ 152.707610][T10056] netlink: 'syz.1.1097': attribute type 1 has an invalid length. [ 152.741920][T10062] netlink: 'syz.6.1099': attribute type 30 has an invalid length. [ 152.971823][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 153.019556][T10080] lo speed is unknown, defaulting to 1000 [ 153.042472][T10085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.088631][T10085] netlink: 'syz.2.1098': attribute type 4 has an invalid length. [ 153.264038][T10091] tipc: Started in network mode [ 153.269294][T10091] tipc: Node identity 62d1edcf72dd, cluster identity 4711 [ 153.276743][T10091] tipc: Enabled bearer , priority 0 [ 153.333467][T10091] tipc: Disabling bearer [ 153.384627][T10101] __nla_validate_parse: 34 callbacks suppressed [ 153.384643][T10101] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1110'. [ 153.561639][T10108] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.658671][T10108] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.701717][T10120] Bluetooth: MGMT ver 1.23 [ 153.720425][T10124] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1119'. [ 153.744389][T10108] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.790855][T10124] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1119'. [ 153.809319][T10108] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.819991][T10127] netlink: 'syz.2.1120': attribute type 1 has an invalid length. [ 153.839320][T10127] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.851683][T10124] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.868756][T10127] bond2: (slave gretap1): making interface the new active one [ 153.877225][T10127] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 153.894434][T10130] veth1: entered promiscuous mode [ 153.901782][T10130] macsec0: entered allmulticast mode [ 153.907576][T10130] veth1: entered allmulticast mode [ 153.913580][T10130] veth1: left allmulticast mode [ 153.918684][T10130] veth1: left promiscuous mode [ 153.932045][T10124] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.951617][T10108] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.962769][T10108] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.975241][T10108] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.988089][T10108] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.011646][T10124] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.062260][T10124] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.122865][T10124] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.142798][T10124] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.155589][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1125'. [ 154.168212][T10124] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.183455][T10124] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.276275][T10160] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 154.421009][T10156] lo speed is unknown, defaulting to 1000 [ 154.508095][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1133'. [ 154.577825][ T55] Bluetooth: hci3: command 0x0405 tx timeout [ 154.590819][T10179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1136'. [ 154.673051][T10184] netlink: 'syz.1.1137': attribute type 1 has an invalid length. [ 154.699353][T10184] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 154.716348][T10184] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 154.731222][T10184] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 154.741317][T10184] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 154.750002][T10184] geneve2: entered promiscuous mode [ 154.794557][T10191] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1141'. [ 154.905550][T10203] netlink: 'syz.1.1144': attribute type 21 has an invalid length. [ 154.914893][T10203] netlink: 'syz.1.1144': attribute type 6 has an invalid length. [ 154.929344][T10203] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1144'. [ 154.964286][T10207] dvmrp0: entered allmulticast mode [ 155.013482][T10204] tipc: Enabling of bearer rejected, failed to enable media [ 155.135528][T10202] dvmrp0: left allmulticast mode [ 155.169540][T10225] netlink: 'syz.1.1148': attribute type 21 has an invalid length. [ 155.178460][T10225] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1148'. [ 155.190531][T10225] sit0: entered promiscuous mode [ 155.198779][T10225] netlink: 'syz.1.1148': attribute type 1 has an invalid length. [ 155.207313][T10225] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1148'. [ 155.474102][T10235] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.782398][T10248] netlink: 'syz.1.1153': attribute type 66 has an invalid length. [ 155.807810][T10250] rdma_op ffff88805dde51f0 conn xmit_rdma 0000000000000000 [ 155.875437][T10255] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 156.078905][T10269] team0 (unregistering): Port device team_slave_0 removed [ 156.117422][T10269] team0 (unregistering): Port device team_slave_1 removed [ 156.337776][ T5844] Bluetooth: hci0: command tx timeout [ 156.344106][T10302] netlink: zone id is out of range [ 156.349845][T10302] netlink: zone id is out of range [ 156.354990][T10302] netlink: zone id is out of range [ 156.361522][T10302] netlink: get zone limit has 8 unknown bytes [ 156.503493][T10311] wg1: entered promiscuous mode [ 156.511248][T10311] vlan3: entered promiscuous mode [ 156.519724][T10311] wg1: left promiscuous mode [ 156.578231][T10314] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 156.585852][T10314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.629396][T10313] lo speed is unknown, defaulting to 1000 [ 156.829563][T10319] pimreg15: entered allmulticast mode [ 156.880696][T10322] pimreg15: left allmulticast mode [ 157.431064][T10356] (unnamed net_device) (uninitialized): option coupled_control: invalid value (20) [ 157.460800][T10359] gtp1: entered promiscuous mode [ 157.465809][T10359] gtp1: entered allmulticast mode [ 157.975217][T10365] validate_nla: 1 callbacks suppressed [ 157.975250][T10365] netlink: 'syz.5.1187': attribute type 12 has an invalid length. [ 158.042453][T10368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.050867][T10368] batadv_slave_0: entered promiscuous mode [ 158.061014][T10368] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 158.089809][T10371] xt_l2tp: invalid flags combination: 4 [ 158.133724][T10370] lo speed is unknown, defaulting to 1000 [ 158.319434][T10377] netlink: 'syz.6.1190': attribute type 1 has an invalid length. [ 158.334554][T10377] veth0_vlan: entered allmulticast mode [ 158.363019][T10379] netlink: 'syz.2.1191': attribute type 9 has an invalid length. [ 158.371651][T10377] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 158.387948][T10377] veth0_vlan: left promiscuous mode [ 158.394856][T10377] veth0_vlan: entered promiscuous mode [ 158.504138][T10387] netlink: 'syz.6.1193': attribute type 2 has an invalid length. [ 158.527713][T10387] __nla_validate_parse: 9 callbacks suppressed [ 158.527733][T10387] netlink: 30 bytes leftover after parsing attributes in process `syz.6.1193'. [ 158.569917][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'. [ 158.590307][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'. [ 158.617644][T10394] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1195'. [ 158.804085][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1202'. [ 158.859857][T10425] netlink: 'syz.2.1203': attribute type 7 has an invalid length. [ 158.867899][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 158.882363][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 158.909562][T10425] netlink: 'syz.2.1203': attribute type 7 has an invalid length. [ 158.918995][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 158.989900][T10444] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1206'. [ 159.046032][T10454] sctp: [Deprecated]: syz.2.1210 (pid 10454) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.046032][T10454] Use struct sctp_sack_info instead [ 159.078310][T10459] macvtap1: entered promiscuous mode [ 159.083658][T10459] macvtap1: entered allmulticast mode [ 159.106677][T10459] vlan0: entered allmulticast mode [ 159.115296][T10459] veth0_vlan: entered allmulticast mode [ 159.122463][T10459] vlan0: entered promiscuous mode [ 159.129054][T10459] team0: Device macvtap1 failed to register rx_handler [ 159.138295][T10459] vlan0: left allmulticast mode [ 159.143771][T10459] veth0_vlan: left allmulticast mode [ 159.150974][T10459] vlan0: left promiscuous mode [ 159.254062][T10470] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1217'. [ 159.452109][T10472] lo speed is unknown, defaulting to 1000 [ 159.672075][T10498] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.139831][T10534] batadv_slave_1: entered promiscuous mode [ 160.195131][T10543] syzkaller1: entered allmulticast mode [ 160.273214][T10551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.283140][T10551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.308466][T10551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.316628][T10551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.350772][T10531] batadv_slave_1: left promiscuous mode [ 160.412887][T10557] netlink: 'syz.5.1240': attribute type 12 has an invalid length. [ 160.709151][T10590] batadv_slave_1: entered promiscuous mode [ 160.741969][T10582] bond1: entered promiscuous mode [ 160.751949][T10582] bond1 (unregistering): Released all slaves [ 160.806488][T10589] batadv_slave_1: left promiscuous mode [ 161.184799][T10637] netlink: 'syz.6.1265': attribute type 4 has an invalid length. [ 161.206025][T10642] netlink: 'syz.6.1265': attribute type 4 has an invalid length. [ 161.296899][T10645] netlink: 'syz.7.1266': attribute type 39 has an invalid length. [ 161.361153][T10651] batadv_slave_1: entered promiscuous mode [ 161.437337][T10658] ipt_rpfilter: unknown options [ 161.475081][T10647] batadv_slave_1: left promiscuous mode [ 161.983222][T10699] batadv_slave_1: entered promiscuous mode [ 161.995061][T10707] veth0_to_bridge: entered promiscuous mode [ 162.002793][T10707] macvtap1: entered promiscuous mode [ 162.008471][T10707] macvtap1: entered allmulticast mode [ 162.013927][T10707] veth0_to_bridge: entered allmulticast mode [ 162.075051][T10698] batadv_slave_1: left promiscuous mode [ 162.141147][T10720] bond0: option xmit_hash_policy: invalid value (71) [ 162.254141][T10738] pim6reg1: entered promiscuous mode [ 162.266270][T10738] pim6reg1: entered allmulticast mode [ 163.172121][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805c6ba400: rx timeout, send abort [ 163.180664][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805c6ba400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 163.258139][T10743] team0 (unregistering): Port device team_slave_0 removed [ 163.274061][T10743] team0 (unregistering): Port device team_slave_1 removed [ 163.443445][ T5882] IPVS: starting estimator thread 0... [ 163.488197][T10762] lo speed is unknown, defaulting to 1000 [ 163.536302][T10766] IPVS: using max 46 ests per chain, 110400 per kthread [ 164.179990][T10823] smc: net device wg0 applied user defined pnetid SYZ0 [ 164.311650][T10837] __nla_validate_parse: 20 callbacks suppressed [ 164.311670][T10837] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1319'. [ 164.330797][T10837] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1319'. [ 164.583916][T10869] validate_nla: 2 callbacks suppressed [ 164.583937][T10869] netlink: 'syz.1.1329': attribute type 8 has an invalid length. [ 164.600183][T10869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.619388][T10869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'. [ 164.813568][T10877] lo speed is unknown, defaulting to 1000 [ 164.991301][T10889] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 165.003984][T10889] batman_adv: batadv0: Adding interface: ip6gretap2 [ 165.010885][T10889] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.037323][T10889] batman_adv: batadv0: Interface activated: ip6gretap2 [ 165.176689][T10897] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1337'. [ 165.210246][T10897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 165.217570][T10897] IPv6: NLM_F_CREATE should be set when creating new route [ 165.224843][T10897] IPv6: NLM_F_CREATE should be set when creating new route [ 165.361603][T10911] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1341'. [ 165.382072][T10909] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1340'. [ 165.478654][T10916] netlink: 'syz.1.1342': attribute type 7 has an invalid length. [ 165.506868][T10924] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1344'. [ 165.631195][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1348'. [ 165.684096][T10936] netlink: 'syz.1.1349': attribute type 1 has an invalid length. [ 165.695122][T10936] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1349'. [ 165.859173][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1353'. [ 165.904659][T10950] sctp: [Deprecated]: syz.6.1350 (pid 10950) Use of int in maxseg socket option. [ 165.904659][T10950] Use struct sctp_assoc_value instead [ 165.922609][T10939] lo speed is unknown, defaulting to 1000 [ 166.082965][T10976] batadv_slave_1: entered promiscuous mode [ 166.160859][T10957] lo speed is unknown, defaulting to 1000 [ 166.254468][T10965] batadv_slave_1: left promiscuous mode [ 166.537620][T11009] batadv_slave_1: entered promiscuous mode [ 166.620251][T11004] batadv_slave_1: left promiscuous mode [ 167.491195][T11034] netlink: 'syz.2.1377': attribute type 1 has an invalid length. [ 167.500678][T11034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.674619][T11049] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 167.729672][T11055] netlink: 'syz.2.1377': attribute type 29 has an invalid length. [ 167.757011][T11060] batadv_slave_1: entered promiscuous mode [ 167.783213][T11034] netlink: 'syz.2.1377': attribute type 29 has an invalid length. [ 167.814677][T11034] netlink: 'syz.2.1377': attribute type 29 has an invalid length. [ 167.882787][T11071] netlink: 'syz.1.1383': attribute type 1 has an invalid length. [ 167.901542][T11058] batadv_slave_1: left promiscuous mode [ 167.912473][T11071] netlink: 'syz.1.1383': attribute type 2 has an invalid length. [ 168.159723][T11095] netem: invalid attributes len -16 [ 168.164978][T11095] netem: change failed [ 168.281967][T11100] lo speed is unknown, defaulting to 1000 [ 168.318703][T11108] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 168.347989][T11108] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 168.453294][T11112] batadv_slave_1: entered promiscuous mode [ 168.460172][T11098] lo speed is unknown, defaulting to 1000 [ 168.491814][T11110] batadv_slave_1: left promiscuous mode [ 168.550168][T11100] netlink: 'syz.6.1395': attribute type 5 has an invalid length. [ 168.782873][T11133] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 168.880232][T11141] x_tables: duplicate underflow at hook 3 [ 169.227427][T11185] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.332191][T11196] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 169.339630][T11196] macvlan2: entered allmulticast mode [ 169.345179][T11196] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 169.354204][T11196] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 169.361260][T11196] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 169.382812][T11185] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.430628][T11185] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.498565][T11185] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.515822][T11206] __nla_validate_parse: 14 callbacks suppressed [ 169.515842][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1426'. [ 169.579470][T11185] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.608698][T11185] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.630766][T11185] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.660360][T11185] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.671604][T11198] lo speed is unknown, defaulting to 1000 [ 170.138451][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1431'. [ 170.151318][T11224] dccp_invalid_packet: P.Data Offset(100) too large [ 170.352671][T11232] validate_nla: 6 callbacks suppressed [ 170.352692][T11232] netlink: 'syz.5.1434': attribute type 29 has an invalid length. [ 170.379433][T11232] netlink: 'syz.5.1434': attribute type 29 has an invalid length. [ 170.491836][T11232] netlink: 'syz.5.1434': attribute type 29 has an invalid length. [ 170.558064][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1437'. [ 170.728769][T11251] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1438'. [ 170.911627][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1442'. [ 171.190220][T11288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1448'. [ 171.286260][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1449'. [ 171.841166][T11325] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1457'. [ 171.851158][T11325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.858421][T11325] IPv6: NLM_F_CREATE should be set when creating new route [ 171.865708][T11325] IPv6: NLM_F_CREATE should be set when creating new route [ 171.956476][T11337] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1463'. [ 171.966596][T11337] netlink: 'syz.6.1463': attribute type 7 has an invalid length. [ 171.994456][T11325] sctp: [Deprecated]: syz.5.1457 (pid 11325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.994456][T11325] Use struct sctp_sack_info instead [ 171.996160][T11337] netlink: 'syz.6.1463': attribute type 8 has an invalid length. [ 172.014774][T11338] netlink: 'syz.2.1462': attribute type 9 has an invalid length. [ 172.024983][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1463'. [ 172.051894][T11338] netlink: 'syz.2.1462': attribute type 6 has an invalid length. [ 172.097231][T11333] lo speed is unknown, defaulting to 1000 [ 172.117211][T11337] netlink: 'syz.6.1463': attribute type 7 has an invalid length. [ 172.125281][T11337] netlink: 'syz.6.1463': attribute type 8 has an invalid length. [ 172.158590][T11343] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 172.158590][T11344] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 172.423185][T11368] delete_channel: no stack [ 172.844785][T11412] netlink: 'syz.5.1482': attribute type 4 has an invalid length. [ 172.907659][T11391] lo speed is unknown, defaulting to 1000 [ 173.302350][T11448] vlan2: entered promiscuous mode [ 173.630195][T11480] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 173.749496][T11483] dvmrp8: entered allmulticast mode [ 174.138443][T11543] nbd: must specify at least one socket [ 174.300057][T11560] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.352784][T11560] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.385830][T11578] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 174.434604][T11560] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.506532][T11560] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.547459][T11590] Bluetooth: MGMT ver 1.23 [ 174.559335][T11592] __nla_validate_parse: 12 callbacks suppressed [ 174.559355][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'. [ 174.578006][T11592] bridge_slave_1: left allmulticast mode [ 174.583692][T11592] bridge_slave_1: left promiscuous mode [ 174.591988][T11592] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.604020][T11592] bridge_slave_0: left allmulticast mode [ 174.610241][T11592] bridge_slave_0: left promiscuous mode [ 174.624570][T11592] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.765249][T11560] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.804787][T11560] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.815958][T11611] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2075 [ 174.819115][T11560] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.841517][T11560] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.877517][T11614] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1537'. [ 174.899416][T11614] vlan1: entered allmulticast mode [ 174.912238][T11614] bond0: entered allmulticast mode [ 174.929313][T11614] bond_slave_0: entered allmulticast mode [ 174.935620][T11614] bond_slave_1: entered allmulticast mode [ 174.948195][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'. [ 174.949728][T11611] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1534'. [ 174.997401][T11627] netlink: 160 bytes leftover after parsing attributes in process `syz.6.1538'. [ 175.098066][T11633] netlink: 'syz.7.1541': attribute type 11 has an invalid length. [ 175.139443][T11631] bond2: (slave geneve2): making interface the new active one [ 175.151137][T11631] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 175.281665][T11644] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1544'. [ 175.573788][T11678] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 175.734637][T11689] validate_nla: 4 callbacks suppressed [ 175.734658][T11689] netlink: 'syz.1.1559': attribute type 21 has an invalid length. [ 175.772374][T11693] x_tables: duplicate underflow at hook 4 [ 175.853861][T11701] x_tables: duplicate underflow at hook 1 [ 175.894245][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1565'. [ 175.921378][T11705] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3 [ 176.015251][T11710] netlink: 'syz.5.1569': attribute type 1 has an invalid length. [ 176.045177][T11716] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 176.051440][T11710] netlink: 'syz.5.1569': attribute type 2 has an invalid length. [ 176.186302][T11732] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1572'. [ 176.355077][T11744] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1577'. [ 176.369748][T11751] gretap1: entered allmulticast mode [ 176.430944][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 176.483151][T11767] macvlan1: entered promiscuous mode [ 176.532149][T11767] ip6gretap0: entered promiscuous mode [ 176.548662][T11767] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 176.569856][T11767] Cannot create hsr debugfs directory [ 176.588379][T11775] netlink: 'syz.2.1584': attribute type 1 has an invalid length. [ 176.589713][T11774] netlink: 'syz.2.1584': attribute type 1 has an invalid length. [ 176.653366][T11774] veth0_vlan: entered allmulticast mode [ 176.684147][T11781] openvswitch: netlink: Flow key attr not present in new flow. [ 176.740165][T11784] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 176.793706][T11787] bridge_slave_0: left allmulticast mode [ 176.824184][T11787] bridge_slave_0: left promiscuous mode [ 176.830651][T11787] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.897497][T11787] bridge_slave_1: left allmulticast mode [ 176.909492][T11787] bridge_slave_1: left promiscuous mode [ 176.915254][T11787] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.980847][T11787] bond0: (slave bond_slave_0): Releasing backup interface [ 177.005836][T11787] bond0: (slave bond_slave_1): Releasing backup interface [ 177.027998][T11787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.038505][T11787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.051639][T11787] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 177.059729][T11787] batman_adv: batadv0: Removing interface: ip6gretap2 [ 177.070284][T11787] bond2: (slave geneve2): Releasing active interface [ 177.236965][T11828] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 177.317033][T11789] lo speed is unknown, defaulting to 1000 [ 177.336332][T11834] netlink: 'syz.6.1603': attribute type 2 has an invalid length. [ 177.509562][T11849] batadv_slave_1: entered promiscuous mode [ 177.622942][T11848] batadv_slave_1: left promiscuous mode [ 177.700938][T11866] ip6gre1: entered allmulticast mode [ 177.784116][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 177.795010][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 177.822513][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 177.838025][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 177.854130][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 177.869772][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 177.885755][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 177.901032][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 177.912910][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 177.995032][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.057184][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.064275][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.117542][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.129285][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.149010][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.155925][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.163071][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.170058][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.202989][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.218012][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.226412][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.241464][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.255001][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.267771][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.280142][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.293751][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.310287][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.319671][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.328230][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.336826][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.343971][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.355718][T11894] netlink: 'syz.1.1620': attribute type 11 has an invalid length. [ 178.367804][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.374847][T11875] bond0: option xmit_hash_policy: invalid value (71) [ 178.413793][T11896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.546490][T11898] batadv_slave_1: entered promiscuous mode [ 178.586817][T11908] syzkaller0: entered promiscuous mode [ 178.595781][T11908] syzkaller0: entered allmulticast mode [ 178.596616][T11911] netlink: 'syz.5.1625': attribute type 10 has an invalid length. [ 178.638885][T11897] batadv_slave_1: left promiscuous mode [ 178.657883][T11911] netlink: 'syz.5.1625': attribute type 10 has an invalid length. [ 178.875404][T11933] bridge0: entered allmulticast mode [ 178.889672][T11937] pim6reg1: entered allmulticast mode [ 179.103284][T11954] ip6tnl1: entered promiscuous mode [ 179.194488][T11958] lo speed is unknown, defaulting to 1000 [ 179.214149][T11969] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 179.349191][T11980] batadv_slave_1: entered promiscuous mode [ 179.397519][T11977] bridge1: port 1(veth3) entered blocking state [ 179.403954][T11977] bridge1: port 1(veth3) entered disabled state [ 179.410668][T11977] veth3: entered allmulticast mode [ 179.418624][T11977] veth3: entered promiscuous mode [ 179.433302][T11977] bridge1: port 2(veth5) entered blocking state [ 179.440760][T11977] bridge1: port 2(veth5) entered disabled state [ 179.448093][T11977] veth5: entered allmulticast mode [ 179.454456][T11977] veth5: entered promiscuous mode [ 179.461520][T11978] batadv_slave_1: left promiscuous mode [ 179.552037][T12000] netlink: 'syz.2.1652': attribute type 10 has an invalid length. [ 179.579258][T12002] __nla_validate_parse: 16 callbacks suppressed [ 179.579277][T12002] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1653'. [ 179.597188][T12002] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1653'. [ 179.606416][T12002] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1653'. [ 179.692071][T12015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.756764][T12022] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 179.780275][T12022] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 179.803292][T12024] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1660'. [ 179.848611][T12026] batadv_slave_1: entered promiscuous mode [ 179.914505][T12033] x_tables: duplicate underflow at hook 3 [ 179.931649][T12025] batadv_slave_1: left promiscuous mode [ 180.140921][T12044] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 180.320669][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1673'. [ 180.387526][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1673'. [ 180.399217][T12062] lo speed is unknown, defaulting to 1000 [ 180.404525][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1672'. [ 180.457813][T12066] batadv_slave_1: entered promiscuous mode [ 180.510689][T12065] batadv_slave_1: left promiscuous mode [ 180.638204][T12077] sctp: [Deprecated]: syz.1.1676 (pid 12077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.638204][T12077] Use struct sctp_sack_info instead [ 181.031690][T12082] netlink: 'syz.7.1677': attribute type 1 has an invalid length. [ 181.062080][T12082] bond1: entered promiscuous mode [ 181.068477][T12082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.077212][T12081] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1677'. [ 181.283335][T12088] netlink: 'syz.2.1678': attribute type 4 has an invalid length. [ 181.312509][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1681'. [ 181.328086][T12085] netlink: 'syz.2.1678': attribute type 4 has an invalid length. [ 181.463041][T12098] batadv_slave_1: entered promiscuous mode [ 181.471406][T12100] netlink: 'syz.2.1683': attribute type 10 has an invalid length. [ 181.541208][T12103] xt_TCPMSS: Only works on TCP SYN packets [ 181.617610][T12111] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1689'. [ 181.644829][T12097] batadv_slave_1: left promiscuous mode [ 181.786052][T12119] hsr0: entered promiscuous mode [ 182.006919][T12109] lo speed is unknown, defaulting to 1000 [ 182.264202][T12147] netlink: 'syz.7.1699': attribute type 1 has an invalid length. [ 182.418911][T12160] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.426269][T12160] IPv6: NLM_F_CREATE should be set when creating new route [ 182.433518][T12160] IPv6: NLM_F_CREATE should be set when creating new route [ 182.670189][T12172] netlink: 'syz.7.1708': attribute type 7 has an invalid length. [ 182.704680][T12175] netlink: 'syz.2.1707': attribute type 4 has an invalid length. [ 182.778909][T12180] netlink: 'syz.1.1710': attribute type 39 has an invalid length. [ 182.784730][T12182] ip6t_srh: unknown srh invflags 4000 [ 182.910262][T12193] xt_connbytes: Forcing CT accounting to be enabled [ 182.924245][T12193] --map-set only usable from mangle table [ 183.133733][T12206] lo speed is unknown, defaulting to 1000 [ 183.215893][T12215] ipvlan2: entered promiscuous mode [ 183.547228][T12246] netlink: 'syz.1.1729': attribute type 15 has an invalid length. [ 183.721757][T12264] netlink: 'syz.2.1734': attribute type 1 has an invalid length. [ 183.748090][T12256] lo speed is unknown, defaulting to 1000 [ 183.967798][T12281] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 184.525715][T12321] openvswitch: netlink: IP tunnel dst address not specified [ 184.532779][T12319] syzkaller0: entered promiscuous mode [ 184.545851][T12319] syzkaller0: entered allmulticast mode [ 184.590363][T12319] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 184.612255][T12330] __nla_validate_parse: 11 callbacks suppressed [ 184.612276][T12330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1751'. [ 184.755177][T12325] lo speed is unknown, defaulting to 1000 [ 184.871648][T12346] bridge_slave_0: default FDB implementation only supports local addresses [ 184.901110][T12351] xt_hashlimit: size too large, truncated to 1048576 [ 185.004480][T12364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1759'. [ 185.052209][T12364] gre0: left promiscuous mode [ 185.090751][T12364] team0: left promiscuous mode [ 185.100652][T12364] 0ªX¹¦À: left allmulticast mode [ 185.105717][T12364] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 185.130104][T12366] pim6reg: entered allmulticast mode [ 185.146547][ T8] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 185.215848][T12372] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.226536][T12372] bond4: entered promiscuous mode [ 185.232355][T12372] team0: Port device bond4 added [ 185.266800][ T8] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 185.775294][T12383] lo speed is unknown, defaulting to 1000 [ 185.937114][ T8513] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 185.980662][T12394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1768'. [ 186.124589][T12394] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.439463][T12416] macsec2: entered promiscuous mode [ 186.444972][T12416] bond0: entered promiscuous mode [ 186.452815][T12416] bond_slave_0: entered promiscuous mode [ 186.458176][T12419] validate_nla: 1 callbacks suppressed [ 186.458195][T12419] netlink: 'syz.2.1774': attribute type 1 has an invalid length. [ 186.458708][T12416] bond_slave_1: entered promiscuous mode [ 186.477874][T12416] macsec2: entered allmulticast mode [ 186.483182][T12416] bond0: entered allmulticast mode [ 186.488780][T12416] bond_slave_0: entered allmulticast mode [ 186.494692][T12416] bond_slave_1: entered allmulticast mode [ 186.503165][T12416] bond0: left allmulticast mode [ 186.510523][T12416] bond_slave_0: left allmulticast mode [ 186.516464][T12416] bond_slave_1: left allmulticast mode [ 186.522054][T12416] bond0: left promiscuous mode [ 186.528311][T12416] bond_slave_0: left promiscuous mode [ 186.533932][T12416] bond_slave_1: left promiscuous mode [ 186.542475][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1773'. [ 186.683010][T12431] dccp_invalid_packet: P.Data Offset(0) too small [ 186.695986][T12422] lo speed is unknown, defaulting to 1000 [ 186.711272][T12434] team0: No ports can be present during mode change [ 186.722069][T12434] netlink: 'syz.1.1781': attribute type 1 has an invalid length. [ 186.736559][T12434] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.1781'. [ 186.777455][T12436] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.841617][T12436] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.913757][T12436] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.950640][T12427] lo speed is unknown, defaulting to 1000 [ 186.978630][ T8513] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 186.989865][ T8513] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 187.006690][T12436] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.103923][T12436] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.132932][T12436] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.152861][T12436] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.174189][T12436] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.302963][T12454] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1788'. [ 187.322010][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1789'. [ 187.353870][T12457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1789'. [ 187.514053][T12473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1796'. [ 187.678134][T12484] netlink: 'syz.1.1800': attribute type 4 has an invalid length. [ 187.710551][T12485] syz.6.1799 (12485) used greatest stack depth: 17616 bytes left [ 187.830409][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1807'. [ 187.879392][T12508] x_tables: duplicate underflow at hook 1 [ 187.914212][T12504] netlink: 'syz.7.1807': attribute type 10 has an invalid length. [ 187.926441][T12504] ipvlan1: entered promiscuous mode [ 187.936005][T12504] ipvlan1: entered allmulticast mode [ 187.952968][T12504] veth0_vlan: entered allmulticast mode [ 187.977044][T12504] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 188.016662][ T8] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 188.297858][T12499] lo speed is unknown, defaulting to 1000 [ 188.587307][T12496] lo speed is unknown, defaulting to 1000 [ 188.697470][T12518] lo speed is unknown, defaulting to 1000 [ 188.845262][T12547] netlink: 'syz.5.1814': attribute type 3 has an invalid length. [ 188.868287][T12547] netlink: 'syz.5.1814': attribute type 3 has an invalid length. [ 188.878185][T12546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.926797][T12557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.682750][T12599] __nla_validate_parse: 12 callbacks suppressed [ 189.682770][T12599] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1831'. [ 190.018627][T12603] lo speed is unknown, defaulting to 1000 [ 190.091094][T12632] netlink: 'syz.6.1840': attribute type 10 has an invalid length. [ 190.113526][T12632] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 190.195873][T12638] xt_CT: No such helper "snmp" [ 190.335258][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1847'. [ 190.403285][T12649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1845'. [ 190.558779][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1850'. [ 190.694167][T12665] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1849'. [ 190.705239][T12665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1849'. [ 190.724907][T12663] lo speed is unknown, defaulting to 1000 [ 190.823568][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1852'. [ 190.952039][T12687] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1855'. [ 190.963849][T12687] netlink: 'syz.1.1855': attribute type 64 has an invalid length. [ 190.976280][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 191.233293][T12694] netlink: 'syz.1.1858': attribute type 12 has an invalid length. [ 191.290488][T12699] FAULT_INJECTION: forcing a failure. [ 191.290488][T12699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.304638][T12699] CPU: 1 UID: 0 PID: 12699 Comm: syz.6.1860 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 191.315442][T12699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 191.325528][T12699] Call Trace: [ 191.328824][T12699] [ 191.331774][T12699] dump_stack_lvl+0x241/0x360 [ 191.336483][T12699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.341705][T12699] ? __pfx__printk+0x10/0x10 [ 191.346322][T12699] ? snprintf+0xda/0x120 [ 191.350591][T12699] should_fail_ex+0x3b0/0x4e0 [ 191.355288][T12699] _copy_to_user+0x31/0xb0 [ 191.359730][T12699] simple_read_from_buffer+0xca/0x150 [ 191.365101][T12699] proc_fail_nth_read+0x1e9/0x250 [ 191.370123][T12699] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.375662][T12699] ? bpf_lsm_file_permission+0x9/0x10 [ 191.381034][T12699] ? security_file_permission+0x74/0x280 [ 191.386665][T12699] ? rw_verify_area+0x55e/0x6f0 [ 191.391507][T12699] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.397046][T12699] vfs_read+0x1fc/0xb70 [ 191.401214][T12699] ? __pfx___mutex_lock+0x10/0x10 [ 191.406234][T12699] ? __pfx_vfs_read+0x10/0x10 [ 191.410903][T12699] ? __fget_files+0x2a/0x410 [ 191.415486][T12699] ? __fget_files+0x395/0x410 [ 191.420163][T12699] ? __fget_files+0x2a/0x410 [ 191.424753][T12699] ksys_read+0x18f/0x2b0 [ 191.428997][T12699] ? __pfx_ksys_read+0x10/0x10 [ 191.433751][T12699] ? trace_sys_enter+0x74/0x120 [ 191.438699][T12699] ? rcu_is_watching+0x15/0xb0 [ 191.443485][T12699] ? trace_sys_enter+0x25/0x120 [ 191.448347][T12699] do_syscall_64+0xf3/0x230 [ 191.452850][T12699] ? clear_bhb_loop+0x35/0x90 [ 191.457523][T12699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.463409][T12699] RIP: 0033:0x7fc09b98473c [ 191.467851][T12699] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 191.487453][T12699] RSP: 002b:00007fc09c7f8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.495869][T12699] RAX: ffffffffffffffda RBX: 00007fc09bb75fa0 RCX: 00007fc09b98473c [ 191.503834][T12699] RDX: 000000000000000f RSI: 00007fc09c7f80a0 RDI: 0000000000000006 [ 191.511799][T12699] RBP: 00007fc09c7f8090 R08: 0000000000000000 R09: 0000000000000000 [ 191.519762][T12699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.527728][T12699] R13: 0000000000000000 R14: 00007fc09bb75fa0 R15: 00007ffcb6290848 [ 191.535700][T12699] [ 191.555031][T12692] lo speed is unknown, defaulting to 1000 [ 191.657947][T12703] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1861'. [ 191.810504][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1863'. [ 191.822691][T12692] netlink: 'syz.5.1857': attribute type 41 has an invalid length. [ 191.908955][T12738] netlink: 'syz.7.1870': attribute type 1 has an invalid length. [ 192.129467][T12756] batadv_slave_1: entered promiscuous mode [ 192.250358][T12755] batadv_slave_1: left promiscuous mode [ 192.258928][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 192.312038][T12776] netlink: 'syz.2.1882': attribute type 10 has an invalid length. [ 192.348171][T12776] team0: Device ipvlan1 failed to register rx_handler [ 192.442192][T12791] dvmrp8: entered allmulticast mode [ 192.607117][T12812] netlink: 'syz.5.1892': attribute type 2 has an invalid length. [ 192.655723][T12814] netlink: 'syz.1.1893': attribute type 4 has an invalid length. [ 192.661480][T12818] netlink: 'syz.5.1895': attribute type 1 has an invalid length. [ 192.681668][T12818] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.696045][T12818] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.708026][T12818] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 192.720332][T12818] bond5: (slave vcan1): Error -95 calling set_mac_address [ 192.754525][T12822] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 192.764208][T12822] bond5: (slave batadv1): making interface the new active one [ 192.772617][T12822] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 192.928649][T12834] tipc: Invalid UDP bearer configuration [ 192.928684][T12834] tipc: Enabling of bearer rejected, failed to enable media [ 193.033503][T12859] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 193.071433][T12863] xt_bpf: check failed: parse error [ 193.111915][T12865] batadv0: entered promiscuous mode [ 193.118198][T12865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.347139][T12903] set match dimension is over the limit! [ 193.451135][T12912] ip6gre0: entered promiscuous mode [ 193.457700][T12912] ip6gre0: entered allmulticast mode [ 193.538510][T12924] netlink: 'syz.7.1928': attribute type 1 has an invalid length. [ 193.702116][T12936] lo speed is unknown, defaulting to 1000 [ 193.864423][T12949] pim6reg1: entered promiscuous mode [ 193.876261][T12949] pim6reg1: entered allmulticast mode [ 193.885822][T12948] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 193.896425][T12948] macvlan2: entered allmulticast mode [ 193.901853][T12948] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 193.913237][T12948] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 193.920233][T12948] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 194.033082][T12949] batman_adv: batadv0: Adding interface: gretap2 [ 194.039683][T12949] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.068522][T12949] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 194.232328][T12967] netlink: 'syz.5.1937': attribute type 10 has an invalid length. [ 194.273683][T12967] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 194.390816][ T9502] bond0: (slave syz_tun): Releasing backup interface [ 194.581080][T12982] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.838293][T13005] __nla_validate_parse: 27 callbacks suppressed [ 194.838316][T13005] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1951'. [ 194.875683][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1951'. [ 194.885081][T13011] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 194.928727][T13005] netlink: 'syz.2.1951': attribute type 1 has an invalid length. [ 194.992080][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.001341][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.008897][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.016703][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.024145][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 195.031510][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.103071][T13034] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 195.118319][T13027] x_tables: duplicate underflow at hook 1 [ 195.309666][T13014] lo speed is unknown, defaulting to 1000 [ 195.428418][T13060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1968'. [ 195.441124][T13060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1968'. [ 195.462533][T13055] batadv_slave_1: entered promiscuous mode [ 195.545068][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1969'. [ 195.554657][T13052] batadv_slave_1: left promiscuous mode [ 195.596722][T13014] chnl_net:caif_netlink_parms(): no params data found [ 195.676826][T13080] xt_CT: No such helper "syz0" [ 195.750775][T13014] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.758572][T13014] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.765817][T13014] bridge_slave_0: entered allmulticast mode [ 195.792911][T13014] bridge_slave_0: entered promiscuous mode [ 195.840571][T13014] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.841001][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1982'. [ 195.860701][T13014] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.869143][T13014] bridge_slave_1: entered allmulticast mode [ 195.875877][T13014] bridge_slave_1: entered promiscuous mode [ 195.875904][T13109] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1981'. [ 195.891624][T13109] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1981'. [ 195.914149][T13014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.925677][T13014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.937537][T13109] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1981'. [ 195.946797][T13109] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1981'. [ 195.956663][T13111] netlink: 'syz.2.1982': attribute type 5 has an invalid length. [ 195.976058][T13014] team0: Port device team_slave_0 added [ 195.983117][T13014] team0: Port device team_slave_1 added [ 196.003385][T13014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.010483][T13014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.036973][T13014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.049486][T13014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.056570][T13014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.082654][T13014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.118405][T13014] hsr_slave_0: entered promiscuous mode [ 196.124785][T13014] hsr_slave_1: entered promiscuous mode [ 196.131345][T13014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.139350][T13014] Cannot create hsr debugfs directory [ 196.217209][T13014] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.261235][T13014] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.309829][T13014] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.322466][T13120] lo speed is unknown, defaulting to 1000 [ 196.362110][T13014] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.448904][T13014] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 196.468199][T13014] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 196.491224][T13014] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 196.500141][T13014] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 196.559198][T13014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.580827][T13014] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.594383][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.601545][ T8530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.614891][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.622034][ T8524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.754935][T13014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.834005][T13128] wlan1: mtu less than device minimum [ 196.840353][T13128] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 196.855492][T13136] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 196.875805][T13136] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 196.888578][T13136] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 196.897252][T13136] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 196.910612][T13136] xt_l2tp: v2 sid > 0xffff: 262144 [ 197.012778][T13014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.056293][ T55] Bluetooth: hci0: command tx timeout [ 197.389690][T13184] 8021q: adding VLAN 0 to HW filter on device bond2 [ 197.423787][T13014] veth0_vlan: entered promiscuous mode [ 197.440849][T13014] veth1_vlan: entered promiscuous mode [ 197.460896][T13014] veth0_macvtap: entered promiscuous mode [ 197.477960][T13014] veth1_macvtap: entered promiscuous mode [ 197.516808][T13014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.527648][T13014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.538122][T13014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.548919][T13014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.561836][T13014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.571110][T13014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.581645][T13014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.591552][T13014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.602052][T13014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.612900][T13014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.624291][T13176] lo speed is unknown, defaulting to 1000 [ 197.631907][T13014] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.641297][T13014] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.650184][T13014] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.663586][T13014] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.752405][ T8513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.763842][ T8513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.809044][ T8524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.823676][ T8524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.841126][T13193] lo speed is unknown, defaulting to 1000 [ 198.145360][T13194] lo speed is unknown, defaulting to 1000 [ 198.381763][T13212] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 198.567853][T13215] batadv_slave_1: entered promiscuous mode [ 198.579957][T13232] batadv_slave_1: entered promiscuous mode [ 198.612623][T13236] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.642090][T13233] batadv_slave_1: left promiscuous mode [ 198.651977][T13214] batadv_slave_1: left promiscuous mode [ 198.759062][T13236] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.864494][T13236] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.932773][T13257] IPVS: set_ctl: invalid protocol: 43 172.30.0.8:20001 [ 198.961858][T13236] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.034738][T13236] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.077868][T13236] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.114892][T13236] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.151700][T13236] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.190915][ T6348] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.335677][T13279] batadv_slave_1: entered promiscuous mode [ 199.402483][T13278] batadv_slave_1: left promiscuous mode [ 199.409801][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.417500][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.424853][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.433609][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.441885][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 199.452593][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.561577][T13281] lo speed is unknown, defaulting to 1000 [ 199.760890][T13281] chnl_net:caif_netlink_parms(): no params data found [ 199.824338][T13281] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.832729][T13281] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.840376][T13281] bridge_slave_0: entered allmulticast mode [ 199.847693][T13281] bridge_slave_0: entered promiscuous mode [ 199.874019][T13281] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.882366][T13281] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.890047][T13281] bridge_slave_1: entered allmulticast mode [ 199.896978][T13281] bridge_slave_1: entered promiscuous mode [ 199.930096][T13281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.943079][T13281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.971750][T13281] team0: Port device team_slave_0 added [ 199.980122][T13281] team0: Port device team_slave_1 added [ 200.008726][T13281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.015817][T13281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.044238][T13281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.057294][T13281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.064399][T13281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.089717][T13326] __nla_validate_parse: 43 callbacks suppressed [ 200.089738][T13326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2041'. [ 200.092042][T13281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.130297][T13326] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.172014][T13281] hsr_slave_0: entered promiscuous mode [ 200.181265][T13281] hsr_slave_1: entered promiscuous mode [ 200.188064][T13281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.196016][T13281] Cannot create hsr debugfs directory [ 200.363608][T13348] validate_nla: 1 callbacks suppressed [ 200.363631][T13348] netlink: 'syz.2.2049': attribute type 1 has an invalid length. [ 200.380627][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 200.386901][T13354] tc_dump_action: action bad kind [ 200.394796][T13354] tc_dump_action: action bad kind [ 200.400194][T13354] tc_dump_action: action bad kind [ 200.415485][ T6348] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.441464][T13354] tc_dump_action: action bad kind [ 200.447200][T13354] tc_dump_action: action bad kind [ 200.452383][T13354] tc_dump_action: action bad kind [ 200.457959][T13354] tc_dump_action: action bad kind [ 200.463137][T13354] tc_dump_action: action bad kind [ 200.470408][T13354] tc_dump_action: action bad kind [ 200.475609][T13354] tc_dump_action: action bad kind [ 200.480896][T13354] tc_dump_action: action bad kind [ 200.486062][T13354] tc_dump_action: action bad kind [ 200.492181][T13354] tc_dump_action: action bad kind [ 200.497633][T13354] tc_dump_action: action bad kind [ 200.503040][T13354] tc_dump_action: action bad kind [ 200.508398][T13354] tc_dump_action: action bad kind [ 200.513570][T13354] tc_dump_action: action bad kind [ 200.518910][T13354] tc_dump_action: action bad kind [ 200.524071][T13354] tc_dump_action: action bad kind [ 200.529378][T13354] tc_dump_action: action bad kind [ 200.535421][T13354] tc_dump_action: action bad kind [ 200.542940][T13354] tc_dump_action: action bad kind [ 200.548336][T13354] tc_dump_action: action bad kind [ 200.553507][T13354] tc_dump_action: action bad kind [ 200.561158][T13354] tc_dump_action: action bad kind [ 200.566554][T13354] tc_dump_action: action bad kind [ 200.571733][T13354] tc_dump_action: action bad kind [ 200.577418][T13354] tc_dump_action: action bad kind [ 200.582589][T13354] tc_dump_action: action bad kind [ 200.588372][T13354] tc_dump_action: action bad kind [ 200.593558][T13354] tc_dump_action: action bad kind [ 200.598972][T13354] tc_dump_action: action bad kind [ 200.604159][T13354] tc_dump_action: action bad kind [ 200.725523][ T6348] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.745870][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2053'. [ 200.755222][T13373] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2054'. [ 200.781115][T13367] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.791250][ T6348] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.823023][T13376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2055'. [ 200.861830][T13384] xt_l2tp: invalid flags combination: 4 [ 200.878732][ T6348] bridge_slave_1: left allmulticast mode [ 200.885605][ T6348] bridge_slave_1: left promiscuous mode [ 200.891920][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.910142][ T6348] bridge_slave_0: left allmulticast mode [ 200.915894][ T6348] bridge_slave_0: left promiscuous mode [ 200.922961][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.950023][T13380] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.951014][T13380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2056'. [ 201.052712][ T6348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.064521][ T6348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.075217][ T6348] bond0 (unregistering): Released all slaves [ 201.121440][T13398] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2061'. [ 201.130971][T13398] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2061'. [ 201.261872][T13409] Bluetooth: MGMT ver 1.23 [ 201.373534][ T6348] hsr_slave_0: left promiscuous mode [ 201.396047][ T6348] hsr_slave_1: left promiscuous mode [ 201.403916][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.411554][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.419443][ T6348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.427114][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.436734][ T6348] veth1_macvtap: left promiscuous mode [ 201.442365][ T6348] veth0_macvtap: left promiscuous mode [ 201.448141][ T6348] veth1_vlan: left promiscuous mode [ 201.453565][ T6348] veth0_vlan: left promiscuous mode [ 201.512748][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2066'. [ 201.536291][ T5844] Bluetooth: hci0: command tx timeout [ 201.559468][ T6348] team0 (unregistering): Port device team_slave_1 removed [ 201.574311][ T6348] team0 (unregistering): Port device team_slave_0 removed [ 201.640583][T13415] 8021q: adding VLAN 0 to HW filter on device bond4 [ 201.673111][T13420] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2067'. [ 201.837639][T13432] syzkaller0: entered promiscuous mode [ 201.843221][T13432] syzkaller0: entered allmulticast mode [ 201.925058][T13281] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 201.945983][T13281] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 201.961280][T13281] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 201.973840][T13281] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 202.023156][T13440] bond7: entered promiscuous mode [ 202.083331][T13281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.113514][T13281] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.150522][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.157695][ T6348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.168566][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.175706][ T6348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.362249][T13281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.499469][T13497] netlink: 'syz.1.2087': attribute type 21 has an invalid length. [ 202.573911][T13281] veth0_vlan: entered promiscuous mode [ 202.579725][T13511] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 202.583949][T13281] veth1_vlan: entered promiscuous mode [ 202.594712][T13511] netlink: 'syz.1.2090': attribute type 21 has an invalid length. [ 202.651850][T13281] veth0_macvtap: entered promiscuous mode [ 202.662789][T13281] veth1_macvtap: entered promiscuous mode [ 202.677091][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.684210][T13521] sctp: [Deprecated]: syz.1.2090 (pid 13521) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.684210][T13521] Use struct sctp_sack_info instead [ 202.690156][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.716004][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.734899][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.746037][T13281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.761228][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.772860][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.784002][T13281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.794917][T13281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.809245][T13281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.829755][T13281] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.838850][T13281] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.849268][T13281] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.858420][T13281] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.859425][T13535] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 202.922351][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.942019][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.963221][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.971317][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.296263][ T55] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 203.453869][T13560] can: request_module (can-proto-0) failed. [ 203.543800][T13570] netlink: 'syz.2.2102': attribute type 6 has an invalid length. [ 203.552052][T13570] netlink: 'syz.2.2102': attribute type 5 has an invalid length. [ 203.616701][ T5844] Bluetooth: hci0: command 0x041b tx timeout [ 203.815100][T13598] netlink: 'syz.2.2112': attribute type 58 has an invalid length. [ 203.905350][T13596] lo speed is unknown, defaulting to 1000 [ 204.180111][T13601] lo speed is unknown, defaulting to 1000 [ 204.209799][T13612] xt_TCPMSS: Only works on TCP SYN packets [ 204.344786][T13631] netlink: 'syz.6.2120': attribute type 16 has an invalid length. [ 204.353820][T13631] netlink: 'syz.6.2120': attribute type 17 has an invalid length. [ 204.354394][T13630] batadv_slave_1: entered promiscuous mode [ 204.375225][T13631] netlink: 'syz.6.2120': attribute type 16 has an invalid length. [ 204.514603][T13629] batadv_slave_1: left promiscuous mode [ 204.600573][T13640] xt_connbytes: Forcing CT accounting to be enabled [ 204.607499][T13640] xt_bpf: check failed: parse error [ 204.885777][T13655] ipvlan3: entered promiscuous mode [ 204.900515][T13655] ipvlan3: entered allmulticast mode [ 204.926292][T13655] vlan0: entered allmulticast mode [ 204.946909][T13653] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 204.955327][T13653] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 204.975478][T13653] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 204.984497][T13653] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.007365][T13655] batadv_slave_1: entered promiscuous mode [ 205.027485][T13654] batadv_slave_1: left promiscuous mode [ 205.198384][ T6346] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.400091][T13685] validate_nla: 127 callbacks suppressed [ 205.400112][T13685] netlink: 'syz.1.2139': attribute type 3 has an invalid length. [ 205.427885][T13685] __nla_validate_parse: 79 callbacks suppressed [ 205.427913][T13685] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2139'. [ 205.520540][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.529823][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.542965][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.551513][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.559164][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 205.570032][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2142'. [ 205.579181][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.587108][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2142'. [ 205.596760][T13699] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2142'. [ 205.690897][T13692] lo speed is unknown, defaulting to 1000 [ 205.875759][T13692] chnl_net:caif_netlink_parms(): no params data found [ 205.964615][T13692] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.976057][T13692] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.984565][T13692] bridge_slave_0: entered allmulticast mode [ 205.994576][T13692] bridge_slave_0: entered promiscuous mode [ 206.011540][T13692] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.019464][T13692] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.027031][T13692] bridge_slave_1: entered allmulticast mode [ 206.034270][T13692] bridge_slave_1: entered promiscuous mode [ 206.073255][ T6346] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.090037][T13692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.101678][T13692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.125945][ T6346] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.138794][T13692] team0: Port device team_slave_0 added [ 206.146535][T13692] team0: Port device team_slave_1 added [ 206.184770][T13692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.192142][T13692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.234376][T13692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.247640][T13692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.254666][T13692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.282156][T13692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.291475][T13744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2155'. [ 206.308584][ T6346] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.320861][T13752] netlink: 'syz.7.2157': attribute type 1 has an invalid length. [ 206.323377][T13749] gtp0: entered promiscuous mode [ 206.333800][T13749] gtp0: entered allmulticast mode [ 206.349898][T13744] 8021q: adding VLAN 0 to HW filter on device bond8 [ 206.379478][T13749] netlink: 'syz.7.2157': attribute type 21 has an invalid length. [ 206.387775][T13749] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2157'. [ 206.414419][T13755] netlink: 'syz.2.2158': attribute type 10 has an invalid length. [ 206.422851][T13755] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2158'. [ 206.432729][T13755] openvswitch: netlink: Flow key attr not present in new flow. [ 206.445910][T13692] hsr_slave_0: entered promiscuous mode [ 206.454907][T13692] hsr_slave_1: entered promiscuous mode [ 206.462446][T13692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.470940][T13692] Cannot create hsr debugfs directory [ 206.526230][T13755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2158'. [ 206.545790][ T6346] bridge_slave_1: left allmulticast mode [ 206.551975][ T6346] bridge_slave_1: left promiscuous mode [ 206.559667][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.568964][ T6346] bridge_slave_0: left allmulticast mode [ 206.575094][ T6346] bridge_slave_0: left promiscuous mode [ 206.581131][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.631813][T13770] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.711408][ T6346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.722392][ T6346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.732832][ T6346] bond0 (unregistering): Released all slaves [ 206.846636][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2165'. [ 206.860263][T13785] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2167'. [ 206.882281][T13786] : renamed from bond0 (while UP) [ 206.931384][T13792] netlink: 'syz.6.2168': attribute type 10 has an invalid length. [ 207.068688][T13792] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.162437][T13792] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.270192][ T6346] hsr_slave_0: left promiscuous mode [ 207.277989][ T6346] hsr_slave_1: left promiscuous mode [ 207.284569][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.296035][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.310622][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.320367][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.334609][ T6346] veth1_macvtap: left promiscuous mode [ 207.340877][ T6346] veth0_macvtap: left promiscuous mode [ 207.353356][ T6346] veth1_vlan: left promiscuous mode [ 207.358947][ T6346] veth0_vlan: left promiscuous mode [ 207.617080][ T5844] Bluetooth: hci0: command tx timeout [ 207.658696][ T6346] team0 (unregistering): Port device team_slave_1 removed [ 207.669542][T13830] xt_bpf: check failed: parse error [ 207.684254][ T6346] team0 (unregistering): Port device team_slave_0 removed [ 207.779232][T13792] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.802888][T13835] netlink: 'syz.7.2175': attribute type 7 has an invalid length. [ 207.811011][T13835] netlink: 'syz.7.2175': attribute type 8 has an invalid length. [ 207.873118][T13792] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.912054][T13692] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 207.924335][T13692] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 207.944770][T13692] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 207.961558][T13692] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 207.981066][T13792] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.023961][T13792] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.037415][T13792] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.088952][T13792] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.181494][T13862] lo speed is unknown, defaulting to 1000 [ 208.254361][T13692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.278642][T13692] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.291066][T13851] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.298490][T13851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.312524][T13851] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.319704][T13851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.537811][T13890] batadv_slave_1: entered promiscuous mode [ 208.550848][T13888] batadv_slave_1: left promiscuous mode [ 208.584386][T13692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.643427][T13903] netlink: 'syz.7.2191': attribute type 1 has an invalid length. [ 208.887776][T13692] veth0_vlan: entered promiscuous mode [ 208.919671][T13914] netlink: 'syz.7.2193': attribute type 9 has an invalid length. [ 208.930188][T13692] veth1_vlan: entered promiscuous mode [ 208.935751][T13914] netlink: 'syz.7.2193': attribute type 6 has an invalid length. [ 209.005451][T13692] veth0_macvtap: entered promiscuous mode [ 209.062349][T13692] veth1_macvtap: entered promiscuous mode [ 209.084776][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.095531][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.105525][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.116061][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.127180][T13692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.162548][T13911] lo speed is unknown, defaulting to 1000 [ 209.163133][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.189211][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.210458][T13692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.232584][T13692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.244978][T13692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.296622][T13927] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 209.400046][T13692] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.416324][T13692] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.431205][T13692] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.440691][T13692] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.452553][T13935] tipc: Enabling of bearer rejected, failed to enable media [ 209.556160][T13927] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.599233][T13927] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 209.630962][T13927] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 209.643100][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.652241][T13934] lo speed is unknown, defaulting to 1000 [ 209.673651][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.697116][ T5844] Bluetooth: hci0: command tx timeout [ 209.718623][T13927] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.729178][T13927] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 209.741369][T13927] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 209.791869][T13927] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.802336][T13927] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 209.812600][T13927] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 209.839310][ T6848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.849786][ T6848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.867980][T13948] batadv_slave_1: entered promiscuous mode [ 209.894653][T13947] batadv_slave_1: left promiscuous mode [ 209.905897][T13927] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.957058][T13927] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 209.967935][T13927] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 210.094349][T13927] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.112976][T13927] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 210.123133][T13927] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 210.175360][T13927] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.188748][T13927] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 210.197196][T13927] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 210.217978][T13927] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.226508][T13927] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 210.234949][T13927] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 210.261059][T13927] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 210.272837][T13927] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 210.284503][T13927] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 210.293743][T13977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.401067][T13983] tipc: Enabling not permitted [ 210.406854][T13983] tipc: Enabling of bearer rejected, failed to enable media [ 210.444556][T13986] __nla_validate_parse: 15 callbacks suppressed [ 210.444569][T13986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2213'. [ 210.510977][T13986] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2213'. [ 210.530397][T13986] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 210.541156][T13986] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 210.554532][T13986] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 210.639381][T13986] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 210.649638][T13986] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 210.664663][T13986] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 210.744003][T13986] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 210.756356][T13986] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 210.768833][T13986] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 210.819234][T13986] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 210.829681][T13986] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 210.840240][T13986] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 211.150257][ T6346] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.810064][T14020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2219'. [ 211.886415][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.900320][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2220'. [ 211.904015][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.918274][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.925921][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.933349][T14027] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2220'. [ 211.948702][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.956344][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.074515][T14020] lo speed is unknown, defaulting to 1000 [ 212.192671][ T6346] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.238668][T14025] lo speed is unknown, defaulting to 1000 [ 212.248332][ T6346] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.307170][T14041] netlink: 'syz.6.2224': attribute type 11 has an invalid length. [ 212.380377][ T6346] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.435268][T14035] lo speed is unknown, defaulting to 1000 [ 212.563632][ T6346] bridge_slave_1: left allmulticast mode [ 212.581936][ T6346] bridge_slave_1: left promiscuous mode [ 212.592052][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.609625][T14057] xt_TPROXY: Can be used only with -p tcp or -p udp [ 212.617820][ T6346] bridge_slave_0: left allmulticast mode [ 212.629657][ T6346] bridge_slave_0: left promiscuous mode [ 212.635505][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.730087][ T6346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.745455][ T6346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.755762][ T6346] bond0 (unregistering): Released all slaves [ 212.828574][T14062] pim6reg: entered allmulticast mode [ 212.835403][T14063] pim6reg: left allmulticast mode [ 212.992049][T14025] chnl_net:caif_netlink_parms(): no params data found [ 213.014146][T14039] lo speed is unknown, defaulting to 1000 [ 213.115967][T14025] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.132474][T14025] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.143223][T14025] bridge_slave_0: entered allmulticast mode [ 213.150579][T14025] bridge_slave_0: entered promiscuous mode [ 213.169881][T14025] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.180649][T14025] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.188379][T14025] bridge_slave_1: entered allmulticast mode [ 213.205098][T14025] bridge_slave_1: entered promiscuous mode [ 213.264263][T14025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.276776][ T6346] hsr_slave_0: left promiscuous mode [ 213.282666][ T6346] hsr_slave_1: left promiscuous mode [ 213.288692][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.298817][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.307172][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.314681][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.325105][ T6346] veth1_macvtap: left promiscuous mode [ 213.330940][ T6346] veth0_macvtap: left promiscuous mode [ 213.340183][ T6346] veth1_vlan: left promiscuous mode [ 213.345589][ T6346] veth0_vlan: left promiscuous mode [ 213.374191][T14081] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2234'. [ 213.446681][ T6346] team0 (unregistering): Port device team_slave_1 removed [ 213.458970][ T6346] team0 (unregistering): Port device team_slave_0 removed [ 213.505366][T14025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.558836][T14025] team0: Port device team_slave_0 added [ 213.569797][T14025] team0: Port device team_slave_1 added [ 213.613978][T14088] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2235'. [ 213.633603][T14025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.655591][T14025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.683928][T14025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.697460][T14025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.712077][T14025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.743727][T14025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.749332][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2235'. [ 213.795693][T14025] hsr_slave_0: entered promiscuous mode [ 213.802150][T14025] hsr_slave_1: entered promiscuous mode [ 213.809174][T14025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.817456][T14025] Cannot create hsr debugfs directory [ 213.926452][T14090] tun0: tun_chr_ioctl cmd 1074025677 [ 213.934177][T14090] tun0: linktype set to 823 [ 214.016228][ T5844] Bluetooth: hci0: command tx timeout [ 214.130071][T14025] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 214.140969][T14025] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 214.150695][T14025] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 214.160205][T14025] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 214.272541][T14025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.287606][T14025] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.314223][T14025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.324671][T14025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.343421][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.350575][ T6848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.359946][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.367099][ T6848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.393550][T13986] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 214.402121][T13986] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 214.410514][T13986] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 214.474783][T13986] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 214.492540][T13986] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 214.503057][T13986] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 214.517310][T13986] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 214.525814][T13986] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 214.534418][T13986] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 214.555778][T14112] vlan4: entered promiscuous mode [ 214.568785][T13986] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 214.580116][T13986] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 214.589312][T13986] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 214.663390][T14025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.698850][T14127] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2245'. [ 214.760120][T14133] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2246'. [ 214.822564][T14140] --map-set only usable from mangle table [ 214.831480][T14025] veth0_vlan: entered promiscuous mode [ 214.841719][T14025] veth1_vlan: entered promiscuous mode [ 214.890154][T14025] veth0_macvtap: entered promiscuous mode [ 214.903817][T14025] veth1_macvtap: entered promiscuous mode [ 214.920332][T14025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.931481][T14025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.941846][T14025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.952440][T14025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.963570][T14025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.973907][T14025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.985019][T14025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.995231][T14025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.006507][T14025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.017703][T14025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.037053][T14025] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.045878][T14025] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.057695][T14025] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.066863][T14025] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.109295][T13851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.117593][T13851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.149319][ T6346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.158841][ T6346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.611943][T14163] __nla_validate_parse: 3 callbacks suppressed [ 215.611964][T14163] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2255'. [ 215.631075][T14163] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 215.638746][T14163] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 215.776917][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 215.852333][T14180] hsr0: left promiscuous mode [ 215.865447][T14182] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 2, id = 0 [ 216.275758][T14201] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 216.308694][T14201] bridge0: port 3(ip6gretap0) entered blocking state [ 216.315615][T14201] bridge0: port 3(ip6gretap0) entered disabled state [ 216.322775][T14201] ip6gretap0: entered allmulticast mode [ 216.332031][T14201] ip6gretap0: entered promiscuous mode [ 216.340353][T14201] bridge0: port 3(ip6gretap0) entered blocking state [ 216.347174][T14201] bridge0: port 3(ip6gretap0) entered forwarding state [ 216.654392][T14211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.715880][T14217] validate_nla: 2 callbacks suppressed [ 216.715899][T14217] netlink: 'syz.7.2269': attribute type 30 has an invalid length. [ 216.788598][T13852] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.589704][T14238] batadv_slave_1: entered promiscuous mode [ 217.599083][T14237] batadv_slave_1: left promiscuous mode [ 217.662341][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.669712][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.682408][T14245] gretap0: entered promiscuous mode [ 217.685395][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.697209][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.697952][T14245] macsec1: entered allmulticast mode [ 217.704598][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.717543][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.724662][T14245] gretap0: entered allmulticast mode [ 217.878450][T14241] lo speed is unknown, defaulting to 1000 [ 217.898419][T14265] netlink: 134788 bytes leftover after parsing attributes in process `syz.7.2283'. [ 217.917120][T14265] IPVS: length: 24 != 4194479992 [ 218.043653][T14241] chnl_net:caif_netlink_parms(): no params data found [ 218.103174][T14274] tipc: Enabling not permitted [ 218.109754][T14274] tipc: Enabling of bearer rejected, failed to enable media [ 218.158993][T14241] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.174296][T14241] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.190146][T14241] bridge_slave_0: entered allmulticast mode [ 218.200587][T14241] bridge_slave_0: entered promiscuous mode [ 218.213793][T14241] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.227931][T14241] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.235376][T14241] bridge_slave_1: entered allmulticast mode [ 218.244841][T14241] bridge_slave_1: entered promiscuous mode [ 218.264813][T14276] lo speed is unknown, defaulting to 1000 [ 218.284600][T14241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.305095][T14241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.375626][T14241] team0: Port device team_slave_0 added [ 218.384833][T14281] netlink: 'syz.1.2286': attribute type 1 has an invalid length. [ 218.398299][T14241] team0: Port device team_slave_1 added [ 218.466736][T14241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.488176][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.550892][T14241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.571490][T13852] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.588316][T14241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.595445][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.621972][T14241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.646051][T13852] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.704569][T13852] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.723156][T14241] hsr_slave_0: entered promiscuous mode [ 218.730522][T14241] hsr_slave_1: entered promiscuous mode [ 218.739347][T14241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.749438][T14241] Cannot create hsr debugfs directory [ 218.865651][T13852] bridge_slave_1: left allmulticast mode [ 218.877066][T13852] bridge_slave_1: left promiscuous mode [ 218.882825][T13852] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.895262][T13852] bridge_slave_0: left allmulticast mode [ 218.901780][T13852] bridge_slave_0: left promiscuous mode [ 218.907440][T14302] netlink: 'syz.6.2290': attribute type 10 has an invalid length. [ 218.915436][T13852] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.030716][T13852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.041425][T13852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.051709][T13852] bond0 (unregistering): Released all slaves [ 219.063293][T14302] bridge0: port 3(ip6gretap0) entered disabled state [ 219.070176][T14302] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.077447][T14302] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.090053][T14302] bridge0: port 3(ip6gretap0) entered blocking state [ 219.096907][T14302] bridge0: port 3(ip6gretap0) entered forwarding state [ 219.103941][T14302] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.111102][T14302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.118517][T14302] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.125651][T14302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.134564][T14302] bridge0: entered promiscuous mode [ 219.141882][T14302] : (slave bridge0): Enslaving as an active interface with an up link [ 219.250250][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2295'. [ 219.415934][T14324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2298'. [ 219.501038][T14332] netlink: 'syz.2.2301': attribute type 10 has an invalid length. [ 219.519910][T14298] lo speed is unknown, defaulting to 1000 [ 219.609996][T14340] veth6: entered allmulticast mode [ 219.689570][T14346] syz.6.2303[14346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.689819][T14346] syz.6.2303[14346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.703337][T14303] lo speed is unknown, defaulting to 1000 [ 219.722429][T14346] syz.6.2303[14346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.779078][ T55] Bluetooth: hci0: command tx timeout [ 220.058406][T13852] hsr_slave_0: left promiscuous mode [ 220.064418][T13852] hsr_slave_1: left promiscuous mode [ 220.070530][T13852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.078047][T13852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.085755][T13852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.093559][T13852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.103772][T13852] veth1_macvtap: left promiscuous mode [ 220.109844][T13852] veth0_macvtap: left promiscuous mode [ 220.115595][T13852] veth1_vlan: left promiscuous mode [ 220.123169][T13852] veth0_vlan: left promiscuous mode [ 220.206854][T13852] team0 (unregistering): Port device team_slave_1 removed [ 220.221083][T13852] team0 (unregistering): Port device team_slave_0 removed [ 220.294211][T14367] (unnamed net_device) (uninitialized): option use_carrier: invalid value (14) [ 220.316218][T14241] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.325242][T14241] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.335841][T14368] netlink: 'syz.2.2309': attribute type 4 has an invalid length. [ 220.350054][T14241] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.362842][T14241] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.550931][T14241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.569100][T14241] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.586015][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.593265][ T6848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.625463][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.632686][ T6848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.674870][T14379] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2312'. [ 220.711500][T14241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.722312][T14241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.725707][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2315'. [ 220.767378][T14381] netlink: 'syz.2.2314': attribute type 10 has an invalid length. [ 220.775339][T14381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2314'. [ 220.785905][T14383] netlink: 'syz.6.2315': attribute type 2 has an invalid length. [ 220.951122][T14241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.994129][T14398] netlink: 'syz.6.2317': attribute type 12 has an invalid length. [ 221.330667][T14241] veth0_vlan: entered promiscuous mode [ 221.345125][T14241] veth1_vlan: entered promiscuous mode [ 221.382875][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2333'. [ 221.388936][T14241] veth0_macvtap: entered promiscuous mode [ 221.400999][T14241] veth1_macvtap: entered promiscuous mode [ 221.428023][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.439258][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.449770][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.460724][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.481923][T14241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.499576][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.511702][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.520031][T14430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2324'. [ 221.521975][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.543097][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.555745][T14241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.570676][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2323'. [ 221.585381][T14241] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.594691][T14241] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.604039][T14241] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.619376][T14241] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.628736][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'. [ 221.640620][T14434] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2325'. [ 221.715236][ T6346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.731846][ T6346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.754520][ T8524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.768256][ T8524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.815875][T14443] ================================================================== [ 221.823989][T14443] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x17e/0x5e0 [ 221.832172][T14443] Read of size 8 at addr ffff88807e124bf0 by task syz.1.2329/14443 [ 221.840056][T14443] [ 221.842374][T14443] CPU: 0 UID: 0 PID: 14443 Comm: syz.1.2329 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 221.853122][T14443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 221.863172][T14443] Call Trace: [ 221.866453][T14443] [ 221.869394][T14443] dump_stack_lvl+0x241/0x360 [ 221.874078][T14443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.879280][T14443] ? __pfx__printk+0x10/0x10 [ 221.883867][T14443] ? _printk+0xd5/0x120 [ 221.888017][T14443] ? __virt_addr_valid+0x183/0x530 [ 221.893123][T14443] ? __virt_addr_valid+0x183/0x530 [ 221.898227][T14443] print_report+0x169/0x550 [ 221.902725][T14443] ? __virt_addr_valid+0x183/0x530 [ 221.907838][T14443] ? __virt_addr_valid+0x183/0x530 [ 221.912957][T14443] ? __virt_addr_valid+0x45f/0x530 [ 221.918092][T14443] ? __phys_addr+0xba/0x170 [ 221.922624][T14443] ? cfusbl_device_notify+0x17e/0x5e0 [ 221.928018][T14443] kasan_report+0x143/0x180 [ 221.932526][T14443] ? cfusbl_device_notify+0x17e/0x5e0 [ 221.937913][T14443] cfusbl_device_notify+0x17e/0x5e0 [ 221.943139][T14443] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 221.948859][T14443] ? __pfx_vlan_device_event+0x10/0x10 [ 221.954321][T14443] ? __pfx_caif_device_notify+0x10/0x10 [ 221.959898][T14443] ? smc_pnet_netdev_event+0x38f/0x690 [ 221.965360][T14443] notifier_call_chain+0x1a5/0x3f0 [ 221.970498][T14443] register_netdevice+0x1368/0x1b00 [ 221.975700][T14443] ? __pfx_register_netdevice+0x10/0x10 [ 221.981248][T14443] ? dev_addr_mod+0xbd/0x330 [ 221.985830][T14443] ? __asan_memset+0x23/0x50 [ 221.990415][T14443] register_netdev+0x3b/0x50 [ 221.995014][T14443] bnep_add_connection+0x823/0xd80 [ 222.000151][T14443] ? __pfx_bnep_add_connection+0x10/0x10 [ 222.005788][T14443] ? __fget_files+0x395/0x410 [ 222.010468][T14443] do_bnep_sock_ioctl+0x4f8/0x8d0 [ 222.015495][T14443] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 222.021044][T14443] ? tomoyo_path_number_perm+0x679/0x860 [ 222.026682][T14443] ? tomoyo_path_number_perm+0x679/0x860 [ 222.032337][T14443] ? tomoyo_path_number_perm+0x206/0x860 [ 222.037991][T14443] sock_do_ioctl+0x158/0x460 [ 222.042597][T14443] ? __pfx_sock_do_ioctl+0x10/0x10 [ 222.047714][T14443] sock_ioctl+0x626/0x8e0 [ 222.052042][T14443] ? __pfx_sock_ioctl+0x10/0x10 [ 222.056890][T14443] ? __fget_files+0x2a/0x410 [ 222.061488][T14443] ? __fget_files+0x2a/0x410 [ 222.066100][T14443] ? __pfx_sock_ioctl+0x10/0x10 [ 222.070974][T14443] __se_sys_ioctl+0xf5/0x170 [ 222.075565][T14443] do_syscall_64+0xf3/0x230 [ 222.080066][T14443] ? clear_bhb_loop+0x35/0x90 [ 222.084742][T14443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.090633][T14443] RIP: 0033:0x7ff794785d29 [ 222.095042][T14443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.114642][T14443] RSP: 002b:00007ff795614038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.123058][T14443] RAX: ffffffffffffffda RBX: 00007ff794975fa0 RCX: 00007ff794785d29 [ 222.131088][T14443] RDX: 00000000200000c0 RSI: 00000000400442c8 RDI: 0000000000000007 [ 222.139084][T14443] RBP: 00007ff794801aa8 R08: 0000000000000000 R09: 0000000000000000 [ 222.147096][T14443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.155067][T14443] R13: 0000000000000000 R14: 00007ff794975fa0 R15: 00007ffc162a1928 [ 222.163046][T14443] [ 222.166058][T14443] [ 222.168374][T14443] Allocated by task 55: [ 222.172514][T14443] kasan_save_track+0x3f/0x80 [ 222.177184][T14443] __kasan_kmalloc+0x98/0xb0 [ 222.181768][T14443] __kmalloc_cache_noprof+0x243/0x390 [ 222.187132][T14443] __hci_conn_add+0x2f9/0x1890 [ 222.191890][T14443] hci_conn_request_evt+0x5e8/0xdb0 [ 222.197078][T14443] hci_event_packet+0xac2/0x1540 [ 222.202013][T14443] hci_rx_work+0x3f3/0xdb0 [ 222.206419][T14443] process_scheduled_works+0xa66/0x1840 [ 222.211956][T14443] worker_thread+0x870/0xd30 [ 222.216542][T14443] kthread+0x2f0/0x390 [ 222.220620][T14443] ret_from_fork+0x4b/0x80 [ 222.225032][T14443] ret_from_fork_asm+0x1a/0x30 [ 222.229796][T14443] [ 222.232121][T14443] Freed by task 14443: [ 222.236173][T14443] kasan_save_track+0x3f/0x80 [ 222.240848][T14443] kasan_save_free_info+0x40/0x50 [ 222.245887][T14443] __kasan_slab_free+0x59/0x70 [ 222.250641][T14443] kfree+0x196/0x430 [ 222.254527][T14443] device_release+0x99/0x1c0 [ 222.259114][T14443] kobject_put+0x22f/0x480 [ 222.263522][T14443] device_add+0x34e/0xbf0 [ 222.267839][T14443] netdev_register_kobject+0x157/0x2e0 [ 222.273329][T14443] register_netdevice+0x12c5/0x1b00 [ 222.278609][T14443] register_netdev+0x3b/0x50 [ 222.283237][T14443] bnep_add_connection+0x823/0xd80 [ 222.288344][T14443] do_bnep_sock_ioctl+0x4f8/0x8d0 [ 222.293365][T14443] sock_do_ioctl+0x158/0x460 [ 222.297946][T14443] sock_ioctl+0x626/0x8e0 [ 222.302264][T14443] __se_sys_ioctl+0xf5/0x170 [ 222.306844][T14443] do_syscall_64+0xf3/0x230 [ 222.311338][T14443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.317225][T14443] [ 222.319536][T14443] Last potentially related work creation: [ 222.325241][T14443] kasan_save_stack+0x3f/0x60 [ 222.329907][T14443] __kasan_record_aux_stack+0xac/0xc0 [ 222.335271][T14443] insert_work+0x3e/0x330 [ 222.339593][T14443] __queue_work+0xc8b/0xf50 [ 222.344087][T14443] queue_delayed_work_on+0x1ca/0x390 [ 222.349373][T14443] l2cap_chan_del+0x291/0x5d0 [ 222.354037][T14443] l2cap_conn_del+0x38a/0x690 [ 222.358709][T14443] hci_conn_hash_flush+0x1be/0x350 [ 222.363810][T14443] hci_dev_close_sync+0xa42/0x11c0 [ 222.368929][T14443] hci_unregister_dev+0x20b/0x510 [ 222.374004][T14443] vhci_release+0x80/0xd0 [ 222.378356][T14443] __fput+0x23c/0xa50 [ 222.382343][T14443] task_work_run+0x24f/0x310 [ 222.386951][T14443] do_exit+0xa2f/0x28e0 [ 222.391105][T14443] do_group_exit+0x207/0x2c0 [ 222.395688][T14443] __x64_sys_exit_group+0x3f/0x40 [ 222.400713][T14443] x64_sys_call+0x26a8/0x26b0 [ 222.405406][T14443] do_syscall_64+0xf3/0x230 [ 222.409905][T14443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.415795][T14443] [ 222.418114][T14443] The buggy address belongs to the object at ffff88807e124000 [ 222.418114][T14443] which belongs to the cache kmalloc-8k of size 8192 [ 222.432161][T14443] The buggy address is located 3056 bytes inside of [ 222.432161][T14443] freed 8192-byte region [ffff88807e124000, ffff88807e126000) [ 222.446135][T14443] [ 222.448454][T14443] The buggy address belongs to the physical page: [ 222.454866][T14443] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e120 [ 222.463617][T14443] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 222.472120][T14443] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 222.480018][T14443] page_type: f5(slab) [ 222.483994][T14443] raw: 00fff00000000040 ffff88801ac42280 ffffea000161e200 dead000000000003 [ 222.492569][T14443] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 222.501157][T14443] head: 00fff00000000040 ffff88801ac42280 ffffea000161e200 dead000000000003 [ 222.509817][T14443] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 222.518483][T14443] head: 00fff00000000003 ffffea0001f84801 ffffffffffffffff 0000000000000000 [ 222.527149][T14443] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 222.535805][T14443] page dumped because: kasan: bad access detected [ 222.542230][T14443] page_owner tracks the page as allocated [ 222.547952][T14443] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7919, tgid 7919 (syz-executor), ts 114699664774, free_ts 113409926699 [ 222.567409][T14443] post_alloc_hook+0x1f3/0x230 [ 222.572175][T14443] get_page_from_freelist+0x365c/0x37a0 [ 222.577719][T14443] __alloc_pages_noprof+0x292/0x710 [ 222.582911][T14443] alloc_pages_mpol_noprof+0x3e8/0x680 [ 222.588368][T14443] alloc_slab_page+0x6a/0x110 [ 222.593040][T14443] allocate_slab+0x5a/0x2b0 [ 222.597555][T14443] ___slab_alloc+0xc27/0x14a0 [ 222.602237][T14443] __slab_alloc+0x58/0xa0 [ 222.606561][T14443] __kmalloc_noprof+0x2e6/0x4c0 [ 222.611403][T14443] batadv_hash_new+0xb6/0x2a0 [ 222.616072][T14443] batadv_nc_mesh_init+0xff/0x3b0 [ 222.621108][T14443] batadv_mesh_init+0x438/0x730 [ 222.625951][T14443] batadv_softif_init_late+0xa30/0xef0 [ 222.631405][T14443] register_netdevice+0x6d7/0x1b00 [ 222.636515][T14443] rtnl_newlink_create+0x2ee/0xa40 [ 222.641631][T14443] rtnl_newlink+0x1c7e/0x2210 [ 222.646301][T14443] page last free pid 7628 tgid 7628 stack trace: [ 222.652624][T14443] free_unref_page+0xd3f/0x1010 [ 222.657509][T14443] vfree+0x186/0x2e0 [ 222.661432][T14443] kcov_close+0x28/0x50 [ 222.665608][T14443] __fput+0x23c/0xa50 [ 222.669616][T14443] task_work_run+0x24f/0x310 [ 222.674237][T14443] do_exit+0xa2f/0x28e0 [ 222.678412][T14443] do_group_exit+0x207/0x2c0 [ 222.683001][T14443] __x64_sys_exit_group+0x3f/0x40 [ 222.688027][T14443] x64_sys_call+0x26a8/0x26b0 [ 222.692693][T14443] do_syscall_64+0xf3/0x230 [ 222.697226][T14443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.703127][T14443] [ 222.705439][T14443] Memory state around the buggy address: [ 222.711056][T14443] ffff88807e124a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.719104][T14443] ffff88807e124b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.727153][T14443] >ffff88807e124b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.735198][T14443] ^ [ 222.742902][T14443] ffff88807e124c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.750954][T14443] ffff88807e124c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.759024][T14443] ================================================================== [ 222.776509][T14443] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 222.783751][T14443] CPU: 0 UID: 0 PID: 14443 Comm: syz.1.2329 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 222.794540][T14443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 222.804621][T14443] Call Trace: [ 222.807920][T14443] [ 222.810871][T14443] dump_stack_lvl+0x241/0x360 [ 222.815573][T14443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.820775][T14443] ? __pfx__printk+0x10/0x10 [ 222.825540][T14443] ? rcu_is_watching+0x15/0xb0 [ 222.830444][T14443] ? preempt_schedule+0xe1/0xf0 [ 222.835428][T14443] ? vscnprintf+0x5d/0x90 [ 222.839763][T14443] panic+0x349/0x880 [ 222.843659][T14443] ? check_panic_on_warn+0x21/0xb0 [ 222.848771][T14443] ? __pfx_panic+0x10/0x10 [ 222.853198][T14443] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 222.859186][T14443] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 222.865514][T14443] ? print_report+0x502/0x550 [ 222.870188][T14443] check_panic_on_warn+0x86/0xb0 [ 222.875120][T14443] ? cfusbl_device_notify+0x17e/0x5e0 [ 222.880494][T14443] end_report+0x77/0x160 [ 222.884759][T14443] kasan_report+0x154/0x180 [ 222.889292][T14443] ? cfusbl_device_notify+0x17e/0x5e0 [ 222.894682][T14443] cfusbl_device_notify+0x17e/0x5e0 [ 222.899890][T14443] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 222.905618][T14443] ? __pfx_vlan_device_event+0x10/0x10 [ 222.911104][T14443] ? __pfx_caif_device_notify+0x10/0x10 [ 222.916668][T14443] ? smc_pnet_netdev_event+0x38f/0x690 [ 222.922144][T14443] notifier_call_chain+0x1a5/0x3f0 [ 222.927248][T14443] register_netdevice+0x1368/0x1b00 [ 222.932447][T14443] ? __pfx_register_netdevice+0x10/0x10 [ 222.937992][T14443] ? dev_addr_mod+0xbd/0x330 [ 222.942572][T14443] ? __asan_memset+0x23/0x50 [ 222.947158][T14443] register_netdev+0x3b/0x50 [ 222.951741][T14443] bnep_add_connection+0x823/0xd80 [ 222.956856][T14443] ? __pfx_bnep_add_connection+0x10/0x10 [ 222.962491][T14443] ? __fget_files+0x395/0x410 [ 222.967168][T14443] do_bnep_sock_ioctl+0x4f8/0x8d0 [ 222.972203][T14443] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 222.977752][T14443] ? tomoyo_path_number_perm+0x679/0x860 [ 222.983405][T14443] ? tomoyo_path_number_perm+0x679/0x860 [ 222.989040][T14443] ? tomoyo_path_number_perm+0x206/0x860 [ 222.994672][T14443] sock_do_ioctl+0x158/0x460 [ 222.999263][T14443] ? __pfx_sock_do_ioctl+0x10/0x10 [ 223.004376][T14443] sock_ioctl+0x626/0x8e0 [ 223.008700][T14443] ? __pfx_sock_ioctl+0x10/0x10 [ 223.013547][T14443] ? __fget_files+0x2a/0x410 [ 223.018133][T14443] ? __fget_files+0x2a/0x410 [ 223.022739][T14443] ? __pfx_sock_ioctl+0x10/0x10 [ 223.027600][T14443] __se_sys_ioctl+0xf5/0x170 [ 223.032196][T14443] do_syscall_64+0xf3/0x230 [ 223.036703][T14443] ? clear_bhb_loop+0x35/0x90 [ 223.041383][T14443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.047270][T14443] RIP: 0033:0x7ff794785d29 [ 223.051677][T14443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.071305][T14443] RSP: 002b:00007ff795614038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.079737][T14443] RAX: ffffffffffffffda RBX: 00007ff794975fa0 RCX: 00007ff794785d29 [ 223.087719][T14443] RDX: 00000000200000c0 RSI: 00000000400442c8 RDI: 0000000000000007 [ 223.095710][T14443] RBP: 00007ff794801aa8 R08: 0000000000000000 R09: 0000000000000000 [ 223.103673][T14443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.111638][T14443] R13: 0000000000000000 R14: 00007ff794975fa0 R15: 00007ffc162a1928 [ 223.119609][T14443] [ 223.122870][T14443] Kernel Offset: disabled [ 223.127189][T14443] Rebooting in 86400 seconds..