last executing test programs: 59.083829224s ago: executing program 4 (id=1052): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x2) socket$inet(0xa, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f00000003c0)=0x1d4, 0x4) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd607a9d0700102100fc000000000000000000000000000000fe8000000000000000000000000000aa000000000401907810dba20d00060000586eb60ebfe5773abef57b989793adc8c740b2122c5573d4e80771a1ef365227d15f024be5b5031f4982de0a3fc9b4c7bb44a4c7601287235ed119c44f3a64252e76a4261626c33f6cd8720427eb68cf347b8ccb5e57bd8363c9fb10"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48095}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x2123}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x10008000}, 0x4004000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000640)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000640)=ANY=[@ANYRES32=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, [], [0x0, 0x0, 0xffffffff], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r10 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) 51.749392399s ago: executing program 4 (id=1052): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x2) socket$inet(0xa, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f00000003c0)=0x1d4, 0x4) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd607a9d0700102100fc000000000000000000000000000000fe8000000000000000000000000000aa000000000401907810dba20d00060000586eb60ebfe5773abef57b989793adc8c740b2122c5573d4e80771a1ef365227d15f024be5b5031f4982de0a3fc9b4c7bb44a4c7601287235ed119c44f3a64252e76a4261626c33f6cd8720427eb68cf347b8ccb5e57bd8363c9fb10"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48095}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x2123}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x10008000}, 0x4004000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000640)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000640)=ANY=[@ANYRES32=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, [], [0x0, 0x0, 0xffffffff], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r10 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) 41.709518597s ago: executing program 4 (id=1052): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x2) socket$inet(0xa, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f00000003c0)=0x1d4, 0x4) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd607a9d0700102100fc000000000000000000000000000000fe8000000000000000000000000000aa000000000401907810dba20d00060000586eb60ebfe5773abef57b989793adc8c740b2122c5573d4e80771a1ef365227d15f024be5b5031f4982de0a3fc9b4c7bb44a4c7601287235ed119c44f3a64252e76a4261626c33f6cd8720427eb68cf347b8ccb5e57bd8363c9fb10"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48095}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x2123}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x10008000}, 0x4004000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000640)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000640)=ANY=[@ANYRES32=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, [], [0x0, 0x0, 0xffffffff], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r10 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) 40.994072335s ago: executing program 3 (id=1224): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x2, 0x0, @mcast1}, 0x18) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000380)={0x18, 0x2, {0x1, @remote}}, 0x1e) bind$pptp(r4, &(0x7f0000003c40)={0x18, 0x2, {0x3, @loopback}}, 0x1e) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x89}], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r6}, &(0x7f0000000140)=0x8) 40.885588535s ago: executing program 3 (id=1225): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r1, 0x313, 0x4}, 0x14}}, 0xc804) socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r2, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}, 0x1, 0x0, 0x0, 0x24000480}, 0x840) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x178, 0xa, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x6030000, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21, 0x0, 0x40}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="4cb58aaf5db9", 0x1, 0xc, [0x1d, 0x3f, 0x1, 0x38, 0x3, 0x29, 0x12, 0x33, 0x39, 0x8, 0xa, 0x27, 0x26, 0x20, 0x17, 0x8], 0x0, 0x1, 0x59}}}, {{@ip={@multicast2, @broadcast, 0xffffffff, 0xffffff00, 'wlan0\x00', 'ip_vti0\x00', {}, {}, 0xff, 0x1, 0x11}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x8, &(0x7f0000000040), &(0x7f00000023c0)=0x5a9295544b4f400d) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x2, {{}, {@void, @void}}}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') 40.529914304s ago: executing program 3 (id=1227): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r2, 0x10, 0x70bd29, 0x7, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x7d}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xff}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x74}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa9, 0xac, "54ac5656ae46d70b79b4a41c0bb5df0407a6a93083583751532f1b27c4d682c119a5f0568699017c1e999bf85fc201d86e39488581a3fc2642b0c500aa32897ad76cb16fceceff5aed1adba429c3aed85c67ee106337bde39d9103ffa353dbcbeaecbbbd1d924985db087711f96f63f3427c3187120d8ec2d032830aa841641d8a0e2733fe99c5076071ab2f3b94706d98247c5eda4c26edf7ca4303e0b4003c2c1467a244"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0xec}, 0x1, 0x0, 0x0, 0x4042004}, 0x40011) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f00000002c0)={0x8, 'nicvf0\x00', {'virt_wifi0\x00'}, 0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r2, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000500)=0x2, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000580)={'sit0\x00', r6, 0x7800, 0x20, 0x8, 0x4, {{0x11, 0x4, 0x0, 0x9, 0x44, 0x68, 0x0, 0xe, 0x4, 0x0, @local, @local, {[@end, @end, @timestamp={0x44, 0x10, 0xb4, 0x0, 0xe, [0x7, 0x7, 0x2]}, @ssrr={0x89, 0x17, 0x3a, [@local, @multicast1, @private=0xa010100, @multicast1, @private=0xa010102]}, @ra={0x94, 0x4}, @end]}}}}}) r9 = getpid() sendmsg$nl_route(r7, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@bridge_getlink={0x4c, 0x12, 0x10, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r8, 0x0, 0x40}, [@IFLA_NET_NS_PID={0x8, 0x13, r9}, @IFLA_MAP={0x24, 0xe, {0xffff, 0xfffffffffffffffb, 0x8000000000000000, 0x1, 0x7, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c4}, 0x5) listen(r4, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8, '\x00', r6, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r10 = accept4$packet(r5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14, 0x0) recvfrom(r10, &(0x7f0000000840)=""/151, 0x97, 0x0, &(0x7f0000000900)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) r11 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f00000009c0)={[{0x2d, 'net_cls'}]}, 0x9) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r12, &(0x7f0000000a00)={0xa, 0x4e21, 0x40, @mcast1, 0xdd}, 0x1c) getsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'erspan0\x00', r8, 0x8, 0x8000, 0xe, 0x3, {{0x11, 0x4, 0x3, 0x1, 0x44, 0x65, 0x0, 0x8, 0x29, 0x0, @multicast1, @private=0xa010101, {[@rr={0x7, 0xf, 0xf3, [@broadcast, @remote, @remote]}, @lsrr={0x83, 0x3, 0x61}, @ssrr={0x89, 0x1b, 0xe4, [@empty, @loopback, @empty, @remote, @rand_addr=0x64010102, @broadcast]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) writev(r3, &(0x7f0000001d40)=[{&(0x7f0000000b80)="b494b8b9d426f2c403d685ae82529794124145fa9a08318847cef0de99b41bf8191f73e3fb73fa3828b73e9fd6417f7b8270a5a7c7c7318ac93bf19cc4d382ec469e578b82d4d433ff83652f5aeddd3787548209b8124b72bffe44e0e2d9aec9", 0x60}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)="8539c7675125a3c8e8e21a2954b069407e068d797411a4aa3dd165fc46436eaecd2270b0fa130acb670f5e8b79129803cbf9", 0x32}, {&(0x7f0000001c80)="e440d87fb78af4a242cd889e7034ead4669a7e2a0300abe6f3d22f0c82d8ffa65a45053c207d068eb917ee7d02fb1572328f7f625e6b6676d9850e0e2a428c5549f9e30e0c93664baf9e897b08db9ca6c484e89817a351187d97c1bb0b8d05b6e8fe082a81e9e842fe427e1ad8c5cbbed89125596f9cec3ab8ff805c2101d65648861618987af1a7d31f5151e4068826f4", 0x91}], 0x5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000001e00)=0x8, 0x12) 31.513050759s ago: executing program 4 (id=1052): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x2) socket$inet(0xa, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f00000003c0)=0x1d4, 0x4) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd607a9d0700102100fc000000000000000000000000000000fe8000000000000000000000000000aa000000000401907810dba20d00060000586eb60ebfe5773abef57b989793adc8c740b2122c5573d4e80771a1ef365227d15f024be5b5031f4982de0a3fc9b4c7bb44a4c7601287235ed119c44f3a64252e76a4261626c33f6cd8720427eb68cf347b8ccb5e57bd8363c9fb10"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48095}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x2123}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x10008000}, 0x4004000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000640)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000640)=ANY=[@ANYRES32=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, [], [0x0, 0x0, 0xffffffff], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r10 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) 30.941210171s ago: executing program 3 (id=1227): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r2, 0x10, 0x70bd29, 0x7, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x7d}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xff}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x74}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa9, 0xac, "54ac5656ae46d70b79b4a41c0bb5df0407a6a93083583751532f1b27c4d682c119a5f0568699017c1e999bf85fc201d86e39488581a3fc2642b0c500aa32897ad76cb16fceceff5aed1adba429c3aed85c67ee106337bde39d9103ffa353dbcbeaecbbbd1d924985db087711f96f63f3427c3187120d8ec2d032830aa841641d8a0e2733fe99c5076071ab2f3b94706d98247c5eda4c26edf7ca4303e0b4003c2c1467a244"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0xec}, 0x1, 0x0, 0x0, 0x4042004}, 0x40011) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f00000002c0)={0x8, 'nicvf0\x00', {'virt_wifi0\x00'}, 0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r2, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000500)=0x2, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000580)={'sit0\x00', r6, 0x7800, 0x20, 0x8, 0x4, {{0x11, 0x4, 0x0, 0x9, 0x44, 0x68, 0x0, 0xe, 0x4, 0x0, @local, @local, {[@end, @end, @timestamp={0x44, 0x10, 0xb4, 0x0, 0xe, [0x7, 0x7, 0x2]}, @ssrr={0x89, 0x17, 0x3a, [@local, @multicast1, @private=0xa010100, @multicast1, @private=0xa010102]}, @ra={0x94, 0x4}, @end]}}}}}) r9 = getpid() sendmsg$nl_route(r7, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@bridge_getlink={0x4c, 0x12, 0x10, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r8, 0x0, 0x40}, [@IFLA_NET_NS_PID={0x8, 0x13, r9}, @IFLA_MAP={0x24, 0xe, {0xffff, 0xfffffffffffffffb, 0x8000000000000000, 0x1, 0x7, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c4}, 0x5) listen(r4, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8, '\x00', r6, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r10 = accept4$packet(r5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14, 0x0) recvfrom(r10, &(0x7f0000000840)=""/151, 0x97, 0x0, &(0x7f0000000900)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) r11 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f00000009c0)={[{0x2d, 'net_cls'}]}, 0x9) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r12, &(0x7f0000000a00)={0xa, 0x4e21, 0x40, @mcast1, 0xdd}, 0x1c) getsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'erspan0\x00', r8, 0x8, 0x8000, 0xe, 0x3, {{0x11, 0x4, 0x3, 0x1, 0x44, 0x65, 0x0, 0x8, 0x29, 0x0, @multicast1, @private=0xa010101, {[@rr={0x7, 0xf, 0xf3, [@broadcast, @remote, @remote]}, @lsrr={0x83, 0x3, 0x61}, @ssrr={0x89, 0x1b, 0xe4, [@empty, @loopback, @empty, @remote, @rand_addr=0x64010102, @broadcast]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) writev(r3, &(0x7f0000001d40)=[{&(0x7f0000000b80)="b494b8b9d426f2c403d685ae82529794124145fa9a08318847cef0de99b41bf8191f73e3fb73fa3828b73e9fd6417f7b8270a5a7c7c7318ac93bf19cc4d382ec469e578b82d4d433ff83652f5aeddd3787548209b8124b72bffe44e0e2d9aec9", 0x60}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)="8539c7675125a3c8e8e21a2954b069407e068d797411a4aa3dd165fc46436eaecd2270b0fa130acb670f5e8b79129803cbf9", 0x32}, {&(0x7f0000001c80)="e440d87fb78af4a242cd889e7034ead4669a7e2a0300abe6f3d22f0c82d8ffa65a45053c207d068eb917ee7d02fb1572328f7f625e6b6676d9850e0e2a428c5549f9e30e0c93664baf9e897b08db9ca6c484e89817a351187d97c1bb0b8d05b6e8fe082a81e9e842fe427e1ad8c5cbbed89125596f9cec3ab8ff805c2101d65648861618987af1a7d31f5151e4068826f4", 0x91}], 0x5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000001e00)=0x8, 0x12) 16.337497496s ago: executing program 3 (id=1227): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r2, 0x10, 0x70bd29, 0x7, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x7d}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xff}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x74}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa9, 0xac, "54ac5656ae46d70b79b4a41c0bb5df0407a6a93083583751532f1b27c4d682c119a5f0568699017c1e999bf85fc201d86e39488581a3fc2642b0c500aa32897ad76cb16fceceff5aed1adba429c3aed85c67ee106337bde39d9103ffa353dbcbeaecbbbd1d924985db087711f96f63f3427c3187120d8ec2d032830aa841641d8a0e2733fe99c5076071ab2f3b94706d98247c5eda4c26edf7ca4303e0b4003c2c1467a244"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0xec}, 0x1, 0x0, 0x0, 0x4042004}, 0x40011) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f00000002c0)={0x8, 'nicvf0\x00', {'virt_wifi0\x00'}, 0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r2, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000500)=0x2, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000580)={'sit0\x00', r6, 0x7800, 0x20, 0x8, 0x4, {{0x11, 0x4, 0x0, 0x9, 0x44, 0x68, 0x0, 0xe, 0x4, 0x0, @local, @local, {[@end, @end, @timestamp={0x44, 0x10, 0xb4, 0x0, 0xe, [0x7, 0x7, 0x2]}, @ssrr={0x89, 0x17, 0x3a, [@local, @multicast1, @private=0xa010100, @multicast1, @private=0xa010102]}, @ra={0x94, 0x4}, @end]}}}}}) r9 = getpid() sendmsg$nl_route(r7, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@bridge_getlink={0x4c, 0x12, 0x10, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r8, 0x0, 0x40}, [@IFLA_NET_NS_PID={0x8, 0x13, r9}, @IFLA_MAP={0x24, 0xe, {0xffff, 0xfffffffffffffffb, 0x8000000000000000, 0x1, 0x7, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c4}, 0x5) listen(r4, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8, '\x00', r6, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r10 = accept4$packet(r5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14, 0x0) recvfrom(r10, &(0x7f0000000840)=""/151, 0x97, 0x0, &(0x7f0000000900)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) r11 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f00000009c0)={[{0x2d, 'net_cls'}]}, 0x9) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r12, &(0x7f0000000a00)={0xa, 0x4e21, 0x40, @mcast1, 0xdd}, 0x1c) getsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'erspan0\x00', r8, 0x8, 0x8000, 0xe, 0x3, {{0x11, 0x4, 0x3, 0x1, 0x44, 0x65, 0x0, 0x8, 0x29, 0x0, @multicast1, @private=0xa010101, {[@rr={0x7, 0xf, 0xf3, [@broadcast, @remote, @remote]}, @lsrr={0x83, 0x3, 0x61}, @ssrr={0x89, 0x1b, 0xe4, [@empty, @loopback, @empty, @remote, @rand_addr=0x64010102, @broadcast]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) writev(r3, &(0x7f0000001d40)=[{&(0x7f0000000b80)="b494b8b9d426f2c403d685ae82529794124145fa9a08318847cef0de99b41bf8191f73e3fb73fa3828b73e9fd6417f7b8270a5a7c7c7318ac93bf19cc4d382ec469e578b82d4d433ff83652f5aeddd3787548209b8124b72bffe44e0e2d9aec9", 0x60}, {&(0x7f0000000c00)="1068e3bd8b369d742c8aca0f0401db939994a9476d79cc8d84351833084642de0ab2e7f394eb68f8e07300872708a6279f5130b0e3d528c672faf97642cbbeffc5522338de9ae2a268cda601b535a75ca660dc541ce8d9c0b4c734c91f3255c3411180adf32226cf5b9f11a83d6df9caf27bedfe5dbb725e90ddc4bc708f7d205f80d18c02294eb52222e9c37267312c4a1db7b1a4b5106f120c55588d29050ccdf4ab83876ceaf386bf3d4df14529a44461a832a2fb9ab7f829bc537e3545bbb53fb7780b4c275f6cbdf3f83d561bece1cf075e2f1f03282455da611256cf9e7ffb12f1481c5157369ee3561989638e69ccf98cbd79e8b218da4652d45d47c789e4c12605310f29f52ee83cbfd0e4f0af6cb1d1f8be85c14d6643e8b34941d2210b065462dae83d877cfcd2dc90bf18ddbd9a421344db873080dc8aa950bbedcbcb4f4008fcc26a4671d212e77ec5a9b1dcb72b375f80cf2b3425181a08a39f271016293aa195bc1c9911cac2123d8182511351ab6feb43fd5521d7de541d06c0d34209012ab11c2b9de9310b28abb6e276d0a87c0b5e18241d7c040567cbefcc9307ecf7bb2ea08faacc45b6690c8caf22119a21e3b6bc2be25de902e28b5e350429e775f1ac5ae95185dd89faee3d789ba15583b20c99d784d23ab31747a77db841d03e3764bfbeb1b9c287bc967a8f49476c0af3a955eef5e4430bad411c628fbebe8f94ff97356b71da6515a342629216496dd321eec3aa4ae056de44c8ec2367eafab0fd25978fe6bf6a24eee899e83c901e9ecb84025affe9187ae84b9ab291ce4197a90ae11e5d1311fed2c5a6dd17c1ff0640a34c20209b3a9ee9d512959a4262d4d3ac5af6432a1af69c3d33d05884a2072e19f135cd1a1105f147346a44a73d1468cbb6fddc49e0847bbc57f08425de29f0231724142cfcca28700805aeaf425faec6e6cb1f313aacc37150a8e824d5d07be367c474eb780c2d4d9e2fcf05bc47b2125b3d8a9b56fcac7ed9220286a2e8503c38ae0df56c061b4ebd4a27a37ed1672fbbc04844a1e44392c5356ae5864fa676cb130947ec8dc9646e3bcccfd9f5e730152c42d5883451857e0bc261b92a4bf8c0f1bfef10aad058821a0a219594328eabb6a2873671ca2598f3829609fdd8227b72f1f8153ac26ee4abd984ad6ff60223e5b118727b085117943e4e482949c2e52771327159c55ca967041cf30f3036d2345ddf6c1e8e9841c4669201e89621139ddef7735bc8bd483a25ba5e8a44b696ee07a9aad01dcf05cfac58eb189b984c928786999b724788a6318d21a1943795e937fbaac173d94dc031e50ec32ed9fa0be33a3ade4beb8267d123c56a8d987d788f37feb58eaf9fb1817b74a78bb0677c1568f074026d511b2b04b054047bda21df191e18bdfdc48ef3a4afdcea8b4c37c54dac6cd41026cc2261a0b4ef36219759c0b0f91a798680d5edb28fb11312731545b81492878aa7f337526684354945cf48eaffe749f4236f8ed4a22e0a127ef0559f7d1848ded9c4c0cd6ebc97d3343578b5acb452b72b18e47856c5e4f70829bcc6b3986be0d652cee247c17e2d5602d647149c28eebfb071f014fdf3e01c14b3beb1e77abca9ae6043fe0d2eb1f95d491b624462a685ca44582a0f471095d71f23921bb881969deeef95237db7a9a599846c611825a06830936244e058b68571999397866ee70393bae27089cf3e35fe30d61b7fbbdaeb742af4837ecd4a93a03ceffdc21ae459be90dc7341ad43c5f5ed6c305a5dd641092ea1781ba0ee4edbe34688c502723d36045da3d0566c6800f970dd24b90ef0f8321c9856fb9583d2ccdd46b8a85685913565a10d509c0e6c4165926ca98c2e9520a2a3bde3573b3c4e054da5941cc7ee603cd1e9ca5bc3913ae210de7d49bf4a0f74e488abdc7c21067e11238d83faf1da5f87db1139deb1f018381676a2370cf82e408170ec461381186d1e42f9e1460623a2a9a982a44b2588d7806e3e40b85d1b2188a0a2f27283ded0280e800a77b44f2c322dc1ad4a9b2be4324cc0e5e518385708a528dc16f24ac80a7f29bc5b40c3981714b695f290282cd94ad57a047c50048326ae35a95af99364b9e1954aff6faa196cd4f33d715abe0291c73c45d62c75bfd335ca5f9160b3b8008f6363aac2d90d05d8eaf89d5720d68633584cf933369edc3aa6a3de455b608b8b31b662bfb416cf8acd82875b8de56a2ad1fa39c01508896605ffe044d2e487d591dfe9251e7edfc2715a540b02123387c076cb4bc81e2190a86ffe0ef336aaa0aa60ffffaa0620049c2d1a20f797a36271ac808b72994e267f96c6839fc2be69da8a727d648ac73f34301268626142b288b5e8342db5279ad843c93ed0b55933ff0d261ab2f4bdd61ba71f38308854266482ce7934233b567d74fd3396c4099f8ec82dd9b7845fa7fe232a8e73b7ca309bad6f3db77934296954a378a3e882f936bd038a7fb57c83f7500c9f5b3ae98325ee740eb6bbaf44f417d08c1340992fb52bdafaa92d6978ce4ecbf278d85868bff7c5efa232c38a4a848c34de8fbd89c7122f69bc06dc1139d679fac4173a77ff5babe63e8260622b0a71851ea7cac3e861d7ac02c34c4f5cf36b109e30bbc9debf816240be6d2d9e55a1dcd1058470bdc4d36e1b1f8a8a90a2e0dc33ac449a98dd7d9855a69ba4d6690b61d9a0ee29f4a6122298c3365d92c0fc59ef494fecfffb2c163a47e1037c8336600ef77d0aa1e8f2ba1ef811ea2c1226d91c4efe197d0f820ba35ed13af72126305bbe0b4e173ee15555455d19086e8c36490d6740ab86f76d5a2871a5ba7f3c97adb5b1ac76a1d012e660fcd8748fdc7af81127c2b194d924121f576ef67a2eddc769baf3fbd93da141e37c5c8e8f43b4bf5f007f14cd6431034e55458fc19994fdf80115c3ffbb5e06b6e8597ddaacb90e2865378d446333ece3b412bb94cf0d5e7ef8d0c1fecb5500ab5754a09c643087b06e0608bf8d4d6bd5f817afed531ec99fbf1e2c89815b6f469757263bacc2b25739dcbdb7f80a0cf859302d6ee73c3cbf377651fb9d31ae243069265ec4994743cac0232e67272b222a3c5c7305ce3d771ee1cce9204b941909525dd08f3972417f3e806c33bad93f88b95a2a21190fc7efa97a7c0e2d11c3636d6712411dc8ff207cfb97ca54eea36bddb0cef22cf9087642ca1e045bf82268a6d6cde89ff9ef6839625fd6fdc80dfbd41b3dcead2f524426d0d8ae8c18d0f5731515b25f651c901f75c95371c57c3afad18bc2da79c8ff8e4842a61cb662f65469ba500c4bc8289dc3333d72d83ae052ad20534fa291219bf591cee2e86967ab62c7332b4748021dbe350d8110afef4b6c7028787021df2432e3b9377ad44ec7657ae0ccf622077f16f279238d33d1e1dbb3708a5170e101efec20b411e90a9307a669ab53773636d2fce2dcb40f865c7398e3e3401106b322fbda69ea77728630c784a4fff840fda04d4b600a0147a8a7ffad603ef7b23d0354db4fd964c9185b3a0654c554618887f71563d3ad673ad773741bbeb62815230dba63182500fe9dac28e27549f5763df7343ea2d925e42a0d2ef69676f90a21541af4f6d9f827e74116eafc2e6cc23553e352eae90aed943c450e1d706ba75e571ea8b6229642695dc20ce7e109ab153fb001452708b1d4a652fdc2fc749f3e934623d3d41354e28a9a4c61c953d32fceb5e10240d75d2691a4fb95013bfdf7fcd64e658d0c7ddbaf25e8d771a0f4f19614bd86d01ade88ff0eddc4f838cb7ed15080da758c4ebc876c7fb3b6a86e4552200d97c5fbc527d7b3c72a4b47f7359d51e3870b6426f8d7c86b93af170f72af48463fe38e217384e64e43be176d8621a8baa7a1586de354c160b878d46ff4fb5fe7473294f78743764213fdcab2842529c38804168d989c0cbb5e88764c448b35e58642625d72a37b6559932ac15f5d42c858ac2c83b4b946a03815b47a76550ef3347e935251095a26b1ecd7e63f4380f5154d577200d6590d0d3eed673f28ac0d4b22ff46115b89bb145e23d4c9199aa823adcedf7fbd454bec2b35d6fe15910f31cea92e92b037ca9ea6ef24abdd5aceb1f8b4ed73d9f009172520b1c64a6d9bcb9f87dd099e899eb1d700e83697b3ca1f7c248398d80b5aa5ed95fbffbc4329bbbbc8396e0fd70e10d5529d0013340976fe715e8d5a02fb0f2c69062d421f62927657d0972150398c72d449f32ce7c21b8eaaf49c5450dd704a3d2d5fff4535ee7882342154df13d09979c35c15af70d151c69c9ef0efc9ba49339cae6601ddd30f6089267c7f4dcc653c98481ff5205df8c89225f6477a5e9a90ca0eaabe4dca9f54d48262198597ea52b7cf51a5e757fe97ef8c585d207a13745fdd54a753a27d872fe674f117c436541174f98cc4334c219df3393dff040ad461cbfe583d824892f8ecadb4dcc1e635572a190987e929f6916fa89b34f80a6825778f3044b8bce54829b8e70e7a82cc7e09e5f224be61e2f03bcbaa717fba821528e799f8f2282ef929ead5ce561a8cd48f45df17fdce0faac4085b38d864a8816bb5f4364a4d5b97ef325597fc4b296002039084f09ff43280bc0a27ab2d66c5e007e96d93356c32f4aa3215d5a916bcffb08020ab7ac63fbc8ed393ca7808be157c224636cc17ed7351b819150141693a004988e937365961eee812fde375ae4890653403eb1a3c160b448a38750817ecb66565ee220d382943c2d2fd6c5a47b22e39ed1aecf51e32039b711d44c6f88406183058b80b20cbf22f50a03a83989caade120795aa94416e9f97922fcb33bf0ec7b0eaafcb47b1324eecf27661acad380c3d067c7b479acace4d20d0f1a769f7844692102fe61f83c6f54d67e90ba7b5f33e47bea8f44cc587bfcfa38f4b2fc38fbca6c007adb66e35c2f98cf08be9205511e5a6fca15afcd3fadec888545fc584a62efe3bcf71e03c6cbd1dfcf0ab709f5c24787dfed0095abbffab159d5d94d209eab7b8040aff05d7026ba4157843d93bdc74b4344e939de4681c1508d249859845a72aa547764dc7457f076eab5963dcff4007cd7ab1287485d12d68da2f5381c2ade0b69067e8b5d576a3681732ec53dd71562e8d0956926b762fb75c629f0b3ee088930f21cd55bb51e1755e85e3eb3fb842319c4b3ffbb5dcd3cbb792ca3b0bcf28cf8a88e9fd3222f9d9de7d5b91503f834ea9cbb7e6d7452d30fe521f633b9d6b08a0f8ea49609530cefb104b26c3193f155b119b8a2ba1795e05347a268b695c9c2e89c48cc9a3055a4a8700110538b9f35b6a4bf7a92fe41aa4f3a83e3adb386c4af630cc0546ed00e38f0a3d631446648858efb6ef899c05d59e945ebd0768b8c97b7ada7681c13d84f68cc43119b0e2efe0ce5bf28e3f335b585ad709eb1e783daacb7548119d80bec780cfe6a13f1ad79d0e4a126ee009723cde537cf473878984d9d3a2ec960e70c49de6b72fe0d461c27cbe5eeb33a319975398cea4b012bd619c200b743444337ea9d5d756cdfce5c73ae256fcba1c76a80ecd227511a320845e3ddf2a8b1b5b1dc6cd27250c3edbcf1322733a3ae69043e34ab45e77ad916b9db452328ce05f373f3a5031bc9d0b3b69088e278db4d41441a4dfcf390b088b613bc5ae391508e34681bc36fd9d0acd2156bb94d7c4691138ebc0d17f6a26a9573d6d0adb9153b130aebab623d2371943519cf6ee57f867d59c4d92fa66e84e4d3c1ed89544bbc8dddc1d66fcb57e513b4a7e05", 0x1000}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)="8539c7675125a3c8e8e21a2954b069407e068d797411a4aa3dd165fc46436eaecd2270b0fa130acb670f5e8b79129803cbf9", 0x32}, {&(0x7f0000001c80)="e440d87fb78af4a242cd889e7034ead4669a7e2a0300abe6f3d22f0c82d8ffa65a45053c207d068eb917ee7d02fb1572328f7f625e6b6676d9850e0e2a428c5549f9e30e0c93664baf9e897b08db9ca6c484e89817a351187d97c1bb0b8d05b6e8fe082a81e9e842fe427e1ad8c5cbbed89125596f9cec3ab8ff805c2101d65648861618987af1a7d31f5151e4068826f4", 0x91}], 0x5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000001e00)=0x8, 0x12) 16.264851332s ago: executing program 4 (id=1052): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x2) socket$inet(0xa, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f00000003c0)=0x1d4, 0x4) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd607a9d0700102100fc000000000000000000000000000000fe8000000000000000000000000000aa000000000401907810dba20d00060000586eb60ebfe5773abef57b989793adc8c740b2122c5573d4e80771a1ef365227d15f024be5b5031f4982de0a3fc9b4c7bb44a4c7601287235ed119c44f3a64252e76a4261626c33f6cd8720427eb68cf347b8ccb5e57bd8363c9fb10"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48095}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x2123}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x10008000}, 0x4004000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000640)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000640)=ANY=[@ANYRES32=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, [], [0x0, 0x0, 0xffffffff], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r10 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) 4.756685533s ago: executing program 3 (id=1227): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r2, 0x10, 0x70bd29, 0x7, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x7d}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xff}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x74}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xa9, 0xac, "54ac5656ae46d70b79b4a41c0bb5df0407a6a93083583751532f1b27c4d682c119a5f0568699017c1e999bf85fc201d86e39488581a3fc2642b0c500aa32897ad76cb16fceceff5aed1adba429c3aed85c67ee106337bde39d9103ffa353dbcbeaecbbbd1d924985db087711f96f63f3427c3187120d8ec2d032830aa841641d8a0e2733fe99c5076071ab2f3b94706d98247c5eda4c26edf7ca4303e0b4003c2c1467a244"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0xec}, 0x1, 0x0, 0x0, 0x4042004}, 0x40011) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f00000002c0)={0x8, 'nicvf0\x00', {'virt_wifi0\x00'}, 0x6}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r2, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000801}, 0x4000) bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x4) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000500)=0x2, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000580)={'sit0\x00', r6, 0x7800, 0x20, 0x8, 0x4, {{0x11, 0x4, 0x0, 0x9, 0x44, 0x68, 0x0, 0xe, 0x4, 0x0, @local, @local, {[@end, @end, @timestamp={0x44, 0x10, 0xb4, 0x0, 0xe, [0x7, 0x7, 0x2]}, @ssrr={0x89, 0x17, 0x3a, [@local, @multicast1, @private=0xa010100, @multicast1, @private=0xa010102]}, @ra={0x94, 0x4}, @end]}}}}}) r9 = getpid() sendmsg$nl_route(r7, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@bridge_getlink={0x4c, 0x12, 0x10, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r8, 0x0, 0x40}, [@IFLA_NET_NS_PID={0x8, 0x13, r9}, @IFLA_MAP={0x24, 0xe, {0xffff, 0xfffffffffffffffb, 0x8000000000000000, 0x1, 0x7, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80c4}, 0x5) listen(r4, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8, '\x00', r6, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r10 = accept4$packet(r5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000800)=0x14, 0x0) recvfrom(r10, &(0x7f0000000840)=""/151, 0x97, 0x0, &(0x7f0000000900)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80) r11 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f00000009c0)={[{0x2d, 'net_cls'}]}, 0x9) r12 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r12, &(0x7f0000000a00)={0xa, 0x4e21, 0x40, @mcast1, 0xdd}, 0x1c) getsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'syztnl0\x00', &(0x7f0000000ac0)={'erspan0\x00', r8, 0x8, 0x8000, 0xe, 0x3, {{0x11, 0x4, 0x3, 0x1, 0x44, 0x65, 0x0, 0x8, 0x29, 0x0, @multicast1, @private=0xa010101, {[@rr={0x7, 0xf, 0xf3, [@broadcast, @remote, @remote]}, @lsrr={0x83, 0x3, 0x61}, @ssrr={0x89, 0x1b, 0xe4, [@empty, @loopback, @empty, @remote, @rand_addr=0x64010102, @broadcast]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) writev(r3, &(0x7f0000001d40)=[{&(0x7f0000000b80)="b494b8b9d426f2c403d685ae82529794124145fa9a08318847cef0de99b41bf8191f73e3fb73fa3828b73e9fd6417f7b8270a5a7c7c7318ac93bf19cc4d382ec469e578b82d4d433ff83652f5aeddd3787548209b8124b72bffe44e0e2d9aec9", 0x60}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)="8539c7675125a3c8e8e21a2954b069407e068d797411a4aa3dd165fc46436eaecd2270b0fa130acb670f5e8b79129803cbf9", 0x32}, {&(0x7f0000001c80)="e440d87fb78af4a242cd889e7034ead4669a7e2a0300abe6f3d22f0c82d8ffa65a45053c207d068eb917ee7d02fb1572328f7f625e6b6676d9850e0e2a428c5549f9e30e0c93664baf9e897b08db9ca6c484e89817a351187d97c1bb0b8d05b6e8fe082a81e9e842fe427e1ad8c5cbbed89125596f9cec3ab8ff805c2101d65648861618987af1a7d31f5151e4068826f4", 0x91}], 0x5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000001e00)=0x8, 0x12) 3.005008861s ago: executing program 0 (id=1480): unshare(0x22020400) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="1400000010000000000000000000000000000a38000000060a010e0000000000000000020000000900020073797a32000000000900010073797a30000000000c0006400000000000000002140000001100010000000000000000000500000a"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0xb2e08b12a4a6d89) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="30f1415a56000000d500000000000000950000001745ce30"], &(0x7f0000000000)='GPL\x00', 0x5, 0xd0, &(0x7f0000000200)=""/208, 0x0, 0x44, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r10) 2.861011232s ago: executing program 4 (id=1052): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x2) socket$inet(0xa, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f00000003c0)=0x1d4, 0x4) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd607a9d0700102100fc000000000000000000000000000000fe8000000000000000000000000000aa000000000401907810dba20d00060000586eb60ebfe5773abef57b989793adc8c740b2122c5573d4e80771a1ef365227d15f024be5b5031f4982de0a3fc9b4c7bb44a4c7601287235ed119c44f3a64252e76a4261626c33f6cd8720427eb68cf347b8ccb5e57bd8363c9fb10"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48095}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x2123}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x10008000}, 0x4004000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000640)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000640)=ANY=[@ANYRES32=r3], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, [], [0x0, 0x0, 0xffffffff], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r10 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) 1.963003707s ago: executing program 0 (id=1483): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000b7cffbc44500000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022100000000000014000300766c616e3000000000000000", @ANYRES32=0x0, @ANYBLOB="1c0016801800018014000a000500bcbb"], 0x58}}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000df6aab00000000320c5a6c9582f769209187d95112"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write(r2, &(0x7f0000000000)="0a000000010001", 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200070220f2e47300b3c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce5b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5cb42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r11, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r10, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r10, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="05000000b300000000000000000000000000403b30fb1923a112e6750f4c6133bb21742b1daaef8b7f704427898ce474518019eda61b9c2769ca059b559a8e7f162ef4e272cb2da406cd7475b0d63a93cae18a238eabaa373703d7115ca9fdba3fe93380b9c10118dcd106a711f2ca30af131f66db02a125578ebec7a3e12eaaa5fccc7838e779cef017efb65a2a0bc5c4b799ae338710950a8f5ffe5ad408a626901b2a30df8f95954eda5347a5699332cbe0387be6c9cc9c6a", @ANYRES32=r9, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) 1.220233297s ago: executing program 1 (id=1487): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x2000141a) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}, 0x1, 0xffffff7f00000000}, 0x0) 1.172739762s ago: executing program 0 (id=1488): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="020100020e000000000000000000000005000600000000000a00000000000000fc020000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000ffffffffffff000000000000000002001300a9"], 0x70}, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x2c, r4, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan1\x00'}) 1.169184621s ago: executing program 2 (id=1489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c80)={0x12b4, 0x0, 0x5, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [{{0x254, 0x1, {{0x2, 0x2}, 0x4, 0xbf, 0x1, 0x800, 0x1e, 'syz0\x00', "7ec8197cdb38a4ec7264369b5459fdd6b6b6ca624ea33fdbb716ab5f2201d339", "dc23897cd48ac372b02576be2095d78fa054fa40440cfd0c825e9f15ebad6551", [{0x9, 0x0, {0x0, 0x6}}, {0x2, 0x2, {0x3, 0x9}}, {0x9, 0x9, {0x0, 0xfa0}}, {0x26dc, 0x8, {0x1, 0x91}}, {0xfff7, 0x3ff, {0x2, 0x8000}}, {0x62c, 0x1ff, {0x2, 0x4}}, {0x9, 0x1, {0x3, 0x4}}, {0x7, 0x9de7, {0x0, 0x603c}}, {0x2, 0x6, {0x2, 0x40}}, {0xb, 0x8, {0x0, 0xe33}}, {0x99d, 0x2, {0x3, 0x81}}, {0x400, 0x5, {0x1, 0x10000}}, {0x3, 0x334c, {0x1, 0x5}}, {0x8, 0xf7e, {0x1, 0xa4}}, {0x7, 0x1ff, {0x0, 0x4}}, {0xff, 0xa, {0x3, 0x3fd3}}, {0x2, 0x3ff}, {0x401, 0x2, {0x3, 0x80000001}}, {0xac77, 0x8, {0x3, 0xe98f}}, {0x9, 0x1000, {0x2, 0x1}}, {0xd, 0xa87, {0x1, 0x2}}, {0x9, 0x2, {0x2, 0x1}}, {0xd6, 0x5, {0x3, 0x2}}, {0x3, 0x3, {0x3, 0x9}}, {0xfffc, 0x7, {0x1, 0x3}}, {0x9, 0x3, {0x0, 0x3}}, {0x8, 0x401, {0x2, 0x6}}, {0x8, 0xffff, {0x3, 0xffffffff}}, {0x7, 0x95f, {0x0, 0x4}}, {0x1, 0xfffc, {0x3, 0x1}}, {0xfff, 0x7ff, {0x1, 0x3}}, {0x5, 0x4, {0x3, 0x8}}, {0x2a1c, 0x3ff, {0x1, 0x9a4a}}, {0xb48, 0xf001, {0x3, 0x6}}, {0x6, 0x5, {0x1, 0x8001}}, {0x8, 0x4}, {0x6, 0xa34, {0x0, 0x2}}, {0x2, 0x45, {0x2, 0x2f0}}, {0x7, 0x6, {0x3, 0xff}}, {0xfff7, 0x4, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x4d}, 0xfd, 0x1, 0x5, 0x10, 0x21, 'syz1\x00', "e3921b7114e8e5e5293ca42926a2d4e5227ba52d0f20adebe676bddf109d9698", "c55e09cec0bdde5eede06fe16672954581944018610cf6f9f53fd6ee57318b25", [{0x7, 0x8, {0x1, 0x6}}, {0xb535, 0x6, {0x0, 0x2}}, {0x3, 0x1, {0x1, 0x3}}, {0x3b, 0x3, {0x3, 0x9}}, {0xd, 0x5f4e, {0x3, 0x3}}, {0x0, 0x2, {0x1, 0x8}}, {0x7, 0x8, {0x3, 0xfff}}, {0x8e30, 0x2, {0x0, 0x6a4b}}, {0xdb6, 0x9, {0x1, 0x200}}, {0x5, 0x101, {0x5, 0x101}}, {0x5, 0x3, {0x2, 0x6}}, {0x6, 0x2, {0x3, 0x1000}}, {0x40, 0x7, {0x0, 0x7fff}}, {0x3, 0x8, {0x2, 0xe1}}, {0x0, 0x2, {0x7, 0x140}}, {0xf, 0xb, {0x2, 0x4}}, {0x78, 0x9, {0x2, 0x200}}, {0x7, 0x2, {0x2, 0x100}}, {0x7f, 0x2, {0x0, 0xfffffff9}}, {0x895, 0x8, {0x2, 0x990}}, {0x6, 0xfffd, {0x1}}, {0x2, 0x3, {0x3, 0xe}}, {0x8, 0xffff, {0x2, 0x7}}, {0x6, 0x9, {0x3, 0x9}}, {0xfc00, 0x99, {0x2, 0x6}}, {0xd6, 0x8000, {0x0, 0xd5a5}}, {0x5, 0x5, {0x2, 0x3}}, {0xaa20, 0xff, {0x3, 0x8}}, {0x7, 0x800, {0x0, 0xff}}, {0x1, 0xc2, {0x3, 0x7ff}}, {0x3, 0x3, {0x2, 0x5}}, {0x6, 0x49, {0x3, 0x6}}, {0xd0a, 0xe8b8}, {0x2, 0xe7f, {0x0, 0x3}}, {0x6, 0x24a1, {0x2, 0x200}}, {0x0, 0xf, {0x2, 0x6}}, {0x1, 0x8, {0x0, 0x7}}, {0x5, 0x6, {0x2, 0x469}}, {0x5, 0x5, {0x3, 0x7}}, {0x3, 0x3, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0xb5, 0x7, 0x270b, 0x0, 0x1d, 'syz0\x00', "ec87c014bb6609e4c0cbcac51dc7fd80134cc69753055046191c47d12921bf8d", "e11be1e96f13339ccdb260e182bddd6be22644091412a1f6f05ad489a5f0f706", [{0x0, 0x1, {0x2}}, {0xb, 0x800, {0x1, 0x9}}, {0x5, 0x1, {0x2, 0x5}}, {0xf, 0x8, {0x3, 0x1}}, {0x80, 0x1feb, {0x0, 0x4f61f2fc}}, {0x36, 0x6, {0x0, 0xc4d1}}, {0xea, 0x5, {0x1, 0x9}}, {0x1000, 0x1, {0x1, 0xf}}, {0x6, 0x8, {0x1, 0x5505}}, {0x3, 0x7, {0x0, 0x81}}, {0x0, 0x1, {0x2, 0x2}}, {0x7, 0xfff1, {0x3, 0x8}}, {0x6, 0xa, {0x2, 0xfffff632}}, {0x7, 0x3, {0x3, 0xfb}}, {0x4, 0x6, {0x3, 0x7}}, {0x5, 0x9, {0x3, 0x817b}}, {0x174b, 0x5, {0x1, 0x3}}, {0x5, 0x0, {0x3, 0x9}}, {0xfffe, 0x3, {0x2, 0x9}}, {0x3, 0x5, {0x3, 0x5}}, {0xff, 0x5, {0x0, 0x6}}, {0x3, 0x1, {0x2, 0x800}}, {0x8, 0x7ff, {0x3, 0x9}}, {0x1, 0x5, {0x0, 0x1ff}}, {0x6ec, 0x9, {0x0, 0x101}}, {0x555b, 0x1, {0x3}}, {0x1, 0x9, {0x3, 0x400}}, {0x0, 0x4, {0x3, 0x2}}, {0x800, 0x1000, {0x1, 0x3}}, {0x93, 0xb, {0x3, 0x2}}, {0xc56, 0x1, {0x3, 0x4}}, {0x5, 0xbb7, {0x1, 0x9}}, {0x0, 0x4, {0x0, 0x3}}, {0x3, 0xc083, {0x1, 0x9}}, {0x1aee, 0x7, {0x2, 0x1}}, {0x0, 0x2b3c, {0x3, 0xc0a0}}, {0x6, 0xfdf5, {0x3, 0x4}}, {0x200, 0x5d, {0x3, 0x7}}, {0x6, 0x9, {0x1, 0x9}}, {0xffff, 0x3, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x7, 0x2, 0x0, 0xb0da, 0x24, 'syz1\x00', "d8da4adc8de0e20726e3f511bf5ad2c25a40e6a0f8769815ed1174be85a45093", "2c99ff20ce02e0af6b3b29918bff6c54ff7dd1d07187a158e7292a3354382157", [{0x401, 0x7, {0x3, 0x7d}}, {0x9, 0x8, {0x2, 0x6}}, {0x1, 0x1, {0x2, 0x3}}, {0x8, 0x989a, {0x0, 0x9}}, {0x3, 0x1000, {0x1}}, {0x9, 0x2, {0x0, 0x7}}, {0x8, 0x3, {0x3, 0x849d}}, {0x7, 0x6, {0x0, 0x4}}, {0x4, 0x4, {0x0, 0x8}}, {0x8, 0x3, {0x2, 0x8}}, {0x7, 0x6, {0x1, 0x4}}, {0xd, 0x7, {0x2, 0x7}}, {0x4, 0x101, {0x1}}, {0x9, 0x81, {0x2, 0xfffffffc}}, {0x5, 0x27ed, {0x0, 0x5}}, {0x8, 0x77c, {0x3, 0x7}}, {0x200, 0x3, {0x2, 0x8}}, {0x436b, 0x5, {0x0, 0x19de3695}}, {0x7fff, 0x7fff, {0x3, 0x8001}}, {0x5, 0x6, {0x1, 0xf8}}, {0xfffe, 0x10, {0x2, 0xc694}}, {0xde4, 0x898, {0x3, 0x5354}}, {0x81, 0xa00d, {0x1, 0x2}}, {0x8, 0x8, {0x0, 0x401}}, {0x2, 0x6, {0x0, 0x1}}, {0xa, 0x100, {0x2}}, {0x2, 0x8, {0x1, 0x1000}}, {0x1ff, 0x3, {0x1, 0xd9e}}, {0x3769, 0x1, {0x0, 0x18000000}}, {0x5, 0x89, {0x1, 0x80000000}}, {0xeaa2, 0x10, {0x3, 0x51e}}, {0x40, 0x9}, {0xff81, 0x12, {0x1, 0x1}}, {0x6, 0x6, {0x2, 0x400}}, {0x6, 0x4, {0x1, 0x8}}, {0x400, 0x1ff, {0x7fb749e08293502a, 0xc}}, {0xc, 0x8, {0x3, 0xc}}, {0xe99, 0x3, {0x0, 0x8}}, {0x2, 0x4, {0x3, 0x8}}, {0x6, 0x4, {0x2, 0xfffffffe}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x5, 0x5, 0x9, 0x3ff, 0x7, 'syz0\x00', "539d967f1240cbaf7b6702c74cd2ef95bfb35594df3de77e8a96267eee8b8478", "3fbad4c882daff1dab0da0dd0d33c717f2e593bcc96b2aa7414bc695144d6211", [{0x6, 0x9, {0x3, 0x7ff}}, {0x2, 0x8, {0x3, 0x80}}, {0x9, 0x1, {0x3, 0x2}}, {0x2, 0x7, {0x2, 0x2}}, {0xfffc, 0x3ff, {0x1, 0x40}}, {0x800, 0x101, {0x0, 0x3}}, {0x9, 0x6, {0x2, 0x8}}, {0x0, 0xf1c9, {0x0, 0xfffffffa}}, {0x4, 0xfc05, {0x0, 0xa6d7}}, {0x4, 0x4, {0x1, 0xab5}}, {0x4, 0xb, {0x3, 0xb}}, {0x8000, 0x1, {0x3, 0x1000}}, {0xff, 0x0, {0x0, 0x9}}, {0x9efb, 0x10, {0x1}}, {0x6, 0xfffa, {0x1, 0xa8d9}}, {0xcd15, 0x100, {0x1, 0x4}}, {0x5e10, 0xb819, {0x3, 0x6}}, {0x5, 0x8001, {0x1, 0x8}}, {0x1, 0x4, {0x2, 0xffffffff}}, {0x800, 0x11, {0x3}}, {0x2, 0x0, {0x1, 0x3}}, {0x6, 0x4, {0x1, 0x1}}, {0x3, 0x9, {0x1, 0x4}}, {0x9, 0xd, {0x1, 0x9}}, {0x2000, 0x6, {0x3, 0x400}}, {0x0, 0x3, {0x0, 0x6}}, {0x8, 0x1, {0x2, 0x80000000}}, {0x3, 0x8, {0x2, 0x6}}, {0x4, 0x5, {0x3, 0x5bd}}, {0x1, 0x81, {0x2, 0x4}}, {0x5, 0x7ff, {0x0, 0x1ff}}, {0xffff, 0x7, {0x0, 0x8}}, {0x4, 0x632, {0x2, 0x8}}, {0x0, 0x21, {0x1, 0x2}}, {0x1, 0x5, {0x0, 0x9}}, {0x8, 0x401, {0x3, 0x2}}, {0x7ff, 0x3, {0x3, 0x6}}, {0xff01, 0x2757, {0x2, 0xc}}, {0x6192, 0x6, {0x1, 0x100}}, {0x9, 0x8, {0x0, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0x17a6}, 0x0, 0x4, 0x2, 0x3, 0x1b, 'syz0\x00', "de4bfc03624eaa8f35b994dd9f754af14f4a7cc898ec1f60a021afc48dff1945", "2e1f2949289547c02c2f6c9ab7d9385ed0940ef8960ca5ea09d0dd250f9dc804", [{0x8, 0x8, {0x1, 0xfac}}, {0x3, 0xffff, {0x1, 0x4}}, {0x98f6, 0x3, {0x2}}, {0xef, 0x3ff, {0x0, 0x4}}, {0x1, 0x7, {0x3}}, {0x2, 0x0, {0x2, 0xffffff80}}, {0x3, 0xf9, {0x2, 0x1}}, {0x2, 0x1, {0x3, 0x23a9}}, {0xfc01, 0x7, {0x0, 0x8}}, {0x3, 0x200, {0x2, 0x400}}, {0x3, 0x9, {0x3, 0x843c}}, {0x8, 0x5, {0x3, 0x7fffffff}}, {0x2, 0x6, {0x1, 0x2}}, {0x3, 0x1, {0x3, 0xffff}}, {0x72d, 0x6, {0x1, 0x1000}}, {0x5f6, 0x7, {0x3, 0xa}}, {0x4, 0x81, {0x1, 0xf8}}, {0x9, 0x4, {0x0, 0xf}}, {0x8, 0x9, {0x1}}, {0x8000, 0x7fff, {0x3, 0xbdf4}}, {0x1, 0x4, {0x1, 0x32a}}, {0xc890, 0x3, {0x57abe2c9e8478226, 0x8}}, {0x5, 0x8, {0x2, 0x80000000}}, {0x7, 0x1, {0x1, 0x5}}, {0x9, 0xa, {0x0, 0x7ff}}, {0x3, 0x3ff, {0x0, 0xbb8}}, {0xffff, 0xfff4, {0x2, 0xfc9}}, {0xfffa, 0x5, {0x1, 0x4}}, {0xff, 0x3, {0x0, 0x3a}}, {0x2, 0x7ff, {0x0, 0xffff}}, {0x9, 0xc9, {0x1, 0x80000000}}, {0x1000, 0x0, {0x1, 0x3}}, {0x7f, 0x9, {0x2, 0xfffffffe}}, {0x2, 0x5, {0x0, 0xfffffffa}}, {0x5, 0x6, {0x2}}, {0x6, 0x9, {0x2, 0x2}}, {0x4, 0x5, {0x2, 0x80000001}}, {0x65c, 0x9, {0x1, 0x5}}, {0x0, 0x0, {0x6, 0x39}}, {0x80, 0x3ff, {0x2, 0x800}}]}}}, {{0x254, 0x1, {{0x0, 0x8000}, 0x2, 0x0, 0x7972, 0x1ff, 0x1, 'syz1\x00', "6c777656509c3b55259ede109fa7301a1b6620c479f4e3934f9b08ea678de1fc", "734366e2d03d4548d2f2caec07eefba7f2f2f20b562d874a89b774c103145e72", [{0xfbff, 0x5, {0x2, 0x94}}, {0x9, 0xb706, {0x3, 0x1}}, {0x6, 0x1, {0x1, 0x2}}, {0x8001, 0x8, {0x0, 0x1}}, {0x9, 0x40, {0x3, 0x3}}, {0x5, 0x422e, {0x2, 0x4}}, {0x1, 0x1, {0x1}}, {0x0, 0x9, {0x3, 0xe}}, {0xfff9, 0x40, {0x1, 0x4}}, {0x6, 0x0, {0x1, 0xa}}, {0xfffe, 0xa, {0x2, 0x4}}, {0x4, 0x9, {0x3, 0x5}}, {0x6, 0x6, {0x0, 0x7}}, {0x7, 0x1, {0x2, 0x3}}, {0x0, 0x9, {0x3, 0x34}}, {0x4800, 0x1, {0x3, 0x41ec}}, {0x9, 0x40, {0x0, 0x400}}, {0x0, 0x8, {0x0, 0xfffffff7}}, {0x3, 0x9, {0x2, 0x1}}, {0x1ff, 0x9, {0x3, 0x3}}, {0xc, 0x7, {0x3, 0xa0000000}}, {0xfffa, 0x3e, {0x3, 0x100}}, {0xb, 0x3, {0xe1ebff88e0029bce, 0xa521}}, {0x5, 0x5, {0x1, 0xffffffb8}}, {0x0, 0x4, {0x2, 0x7}}, {0x8, 0x4, {0x1, 0x9}}, {0xb5, 0x101, {0x3, 0x2}}, {0xf, 0xa000, {0x2, 0x5}}, {0x7, 0x0, {0x1, 0x4}}, {0x6, 0xa, {0x2, 0xfa9}}, {0xfeff, 0x0, {0x1, 0x5}}, {0xc, 0x8, {0x1, 0xf}}, {0x5, 0x8, {0x1, 0x2}}, {0x5, 0x9f, {0x1, 0x5}}, {0x3, 0xe726, {0x3, 0x7}}, {0xfffc, 0x0, {0x2, 0x6}}, {0x8000, 0x6, {0x1, 0xe3}}, {0xff, 0x0, {0x2, 0x9}}, {0x3ff, 0x7, {0x2, 0x7}}, {0x2, 0x8, {0x2, 0x200}}]}}}, {{0x254, 0x1, {{0x1, 0x8001}, 0x80, 0xe, 0x7, 0x9, 0x1f, 'syz1\x00', "61bdec89ee9b52720cc83989e8ca7b2e90adb18ce5c56bc28bed2ed5019b419a", "e05487927624a8818f91b1565eb79c2652009a4344e9f6fd91d2b9d3b3b6dc7e", [{0x7fff, 0x5, {0x1, 0x40}}, {0x4, 0x4, {0x3, 0x9}}, {0x7, 0x9, {0x0, 0x6}}, {0x0, 0x8, {0x1, 0x7346}}, {0x7, 0x81, {0x3, 0x7fff}}, {0x7, 0xa18, {0x3, 0x82b}}, {0x3, 0x7ff, {0x0, 0x8}}, {0x9, 0x3, {0x0, 0x9}}, {0xfffa, 0x7f, {0x1, 0xfffffff8}}, {0x101, 0x7ff, {0x2, 0x3}}, {0xc, 0x4, {0x3, 0x2}}, {0x5b68, 0x8, {0x2, 0x8}}, {0x4, 0x7, {0x1, 0x5e}}, {0xc, 0x81}, {0xd, 0x2, {0x2, 0x6}}, {0xe, 0x100, {0x1, 0x54487f98}}, {0x2774, 0x2, {0x3, 0x1ff}}, {0xec, 0x7, {0xdb59f4d1ace8db78, 0x4}}, {0xae91, 0x5, {0x2, 0x4}}, {0x10, 0x1, {0x0, 0x7}}, {0x2, 0x7fff, {0x3, 0xfff}}, {0x6, 0x8000, {0x3, 0xc6fb}}, {0x999, 0x0, {0x2, 0x6}}, {0x3, 0x9, {0x1, 0x7f}}, {0x5, 0x100, {0x2, 0x4}}, {0xd, 0x0, {0x0, 0x502}}, {0x1ff, 0x3ff}, {0xa3ea, 0xb, {0x3, 0xffffffff}}, {0x0, 0x8, {0x0, 0xfb6}}, {0xff7f, 0xa, {0x2, 0x3}}, {0x5, 0x7, {0x3, 0x5}}, {0x688, 0x1000, {0x2, 0x6}}, {0x401, 0x2, {0x1, 0x2}}, {0x4800, 0x8, {0x2, 0xd}}, {0x0, 0x7, {0x2, 0x10}}, {0x3, 0x2, {0x2, 0x8}}, {0x7, 0xaa4f, {0x3, 0xa74}}, {0x3, 0x6, {0x1, 0x8}}, {0x6, 0xfff, {0x3, 0x4}}, {0x3944, 0x5, {0x0, 0x4}}]}}}]}, 0x12b4}}, 0x24008001) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6420c0c0}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfd8f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) 950.120332ms ago: executing program 2 (id=1490): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 949.713849ms ago: executing program 0 (id=1491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x40, r1}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff78, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) 945.819424ms ago: executing program 2 (id=1492): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7fff, 0x6, 0x5, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x9, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x4, 0x88, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x20, 0xfffff801}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000400)=""/151, 0x97, 0x0, &(0x7f00000004c0)=""/23, 0x17}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0x17, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x1, 0x1, 0xb, 0xfffffffffffffffc, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2fb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0xe2d, 0xd6, &(0x7f0000000180)=""/214, 0x40f00, 0x9, '\x00', r1, @lirc_mode2=0x10, r2, 0x8, &(0x7f0000000380)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xc, 0x1ff, 0xeb}, 0x10, r3, r4, 0x9, &(0x7f0000000700)=[r5, r6], &(0x7f0000000740)=[{0x1, 0x1, 0x7, 0xc}, {0x1, 0x4, 0x3, 0x6}, {0x3, 0x4, 0x0, 0x7}, {0x1, 0x5, 0x10, 0x1}, {0x5, 0x1, 0x8, 0x3}, {0x0, 0x2, 0x0, 0x5}, {0x0, 0x4, 0x1, 0x4}, {0x1, 0x3, 0x5, 0x7}, {0x5, 0x4, 0x6, 0x6}], 0x10, 0x81, @void, @value}, 0x94) pselect6(0x40, &(0x7f00000008c0)={0x9, 0x6, 0x7, 0xd, 0x1, 0x3ff, 0xe, 0x1}, &(0x7f0000000900)={0x8000000000000001, 0x400, 0x0, 0x2000000000000000, 0x860, 0x8, 0x9, 0x2}, &(0x7f0000000940)={0x6, 0x5, 0x3, 0x9dba, 0x6, 0x7, 0x54229609, 0x8000000000000000}, &(0x7f0000000980)={0x77359400}, &(0x7f0000000a00)={&(0x7f00000009c0)={[0x6]}, 0x8}) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a80)=@security={'security\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x208, 0x208, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000a40), {[{{@ipv6={@rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], 'bridge0\x00', 'vxcan1\x00', {}, {}, 0x84, 0x7, 0x6, 0x4}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'macsec0\x00', {0x3}}}}, {{@ipv6={@mcast2, @loopback, [0xffffffff, 0x100000100, 0xff, 0xdd468e24e06afc9e], [], 'veth0_vlan\x00', 'ip6gre0\x00', {}, {0xff}, 0x32, 0x8b, 0x2, 0x5e}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, "e989"}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'sit0\x00', {0x7}}}}, {{@ipv6={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff000000], [0xff000000, 0xff, 0xffffffff, 0xffffffff], 'rose0\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x89, 0x4, 0x5}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20, 0x49, 0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x79, 0x40, "6fbc501d62cd4b4887aa7765a1ec8377fffc3005af5bbd788f330ca9e3f9"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x80ad01, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000f40)={'veth1_to_bridge\x00', @multicast}) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000f80)={0x0, @in6={{0xa, 0x4e24, 0xf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, 0x5000, 0x10}, &(0x7f0000001040)=0x90) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000001080)={r10, 0xd3, 0x3, [0x6, 0x5, 0x0]}, 0xe) pipe(&(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r11, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)=@bridge_dellink={0xd0, 0x11, 0x100, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x20040, 0x408}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5, 0x3, 0x9}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}]}}}, @IFLA_VF_PORTS={0x74, 0x18, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "57538b7cd2dafce0d89ba2d53e8cbee3"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_PROFILE={0x8, 0x2, '$-\\\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0xad9}, @IFLA_PORT_PROFILE={0x11, 0x2, '/dev/net/tun\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "bf352dea44ced553f9662a4f7aa9a557"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}]}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r12, &(0x7f00000017c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001340)={0x418, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x1, 0x31}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1bc, 0x3, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xf6, 0x2, "148d90b49459bb5741a71754e85c02e7394b692fec817f9b4bc716a32ac5d4d5abf6c6dfff2cef3cbd9ef15e9fe20b3580771bb11d2ab61e7cf4b3138d0d35a176a777e4c9b226a993de0e894df708a3f253df3e66b66ec8258901625d631f81c0dc1c106288994d4b0ce769f09d01d2e1891a8eb07be3e4f264c5b053f1da9f47a6d3ac899a8eb38c3a1f561f76750df74d95fe2162a836977fc762d51867d8599f93b2fa65553053d45b9348bd988c2bbab6e917128e74df747f2534102b730950d70987d978916bbfdcd4c0022946a9b5b65c4763f944fa84449d8a5344b9eec2ce698f31a7dc0573a5bc409e5bb99fd9"}}, {0xbc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xb8, 0x2, "3b92efecefd02af4c9f8c8d7c244668a9bdd4a27e5bddbd29e907853ad4b7b80ef336917a9d1c9100e2fa7fff216f20a3512bfb0f527fb7865808c4946a7cbbac867cd1b93a75b278237b4871887d876992eb2d67aaa80c56bfe346f56c0eb9665dcd973db7def33b7d9098cac55e46dd3c5608a0dfed1b96fd1a1ec40e72c56448faa9e4af785aa016abe3149a255ee8fcb9150306951ae574a4263f37afa979ef958e70db8ce4d2f1fb0e6723f39e286980202"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3ff}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4399}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x3}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1ec, 0x3, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xf9, 0x1, "5d627c93ef31f625f92b964abae710b6951a64980f5b9cb8607094cb771dd758476f0ac60f2c2e3726a12d1624021dc7351d4894b71b14cac20706abf938185e01c5402487d83988d4a299813478ba6e74c512363626c010743df1deda5ff1499daca5eb073a3559c5b98bb1fdd7407fc1dfc0ac26e71f203958a5d7736b88979999353503c5b1b89bc1ddaadfd88bf5269be01ec21236c72c21dcae3e56687b9c0033c7d7e035770970ebf7d28883e49502fbd960970cb4e68d780bfb409b40e9b783c288c33f5515b27100dcc1631bfb310695c063e2ac81305b4da8ec76e67a63de67fd9ae9f52cf5a1c01598a1c2271b3f4454"}}, {0xe8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xe3, 0x2, "08ef3cfddcd8722165fe0051d75e40327c56b2f6eea74ea51a0d38889f76bf3a0c44c6c18d6de9e6652492d802ff8b53f2985a71b5b47bc589759b20e6279b689fa81b7ad636568684a4fb6ae30b1e9ef559fd5d7edffea72b33958a42ce21e8b44d5d60b5e3612befb9d94c00354464facf94c59162c6dad9c6d11866d62c7ec673e9d988917637f54ec7384bbcca7da19a56498f5d307c2a3245e507857699a0f3c3422e887ae9956d7cb33a6487b4f0962e727bdd489c4c33ab79c7ace269ed60bd09dd79c9934fe6bd7239cdf0691460a173c48294423210f702f3592d"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}}]}]}, 0x418}, 0x1, 0x0, 0x0, 0x2040804}, 0x40000c0) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000001800)=0x5, 0x4) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000001880)={'pimreg0\x00', &(0x7f0000001840)=@ethtool_ts_info}) socketpair(0xa, 0x4, 0x6, &(0x7f00000018c0)={0xffffffffffffffff}) ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f0000001940)={0x8, &(0x7f0000001900)=[{0x0, 0x1, 0x7, 0x80000001}, {0x7, 0x4, 0xc, 0x8}, {0x0, 0x4, 0x1, 0x40}, {0x40, 0x3, 0x13}, {0x5, 0x78, 0x6, 0x4}, {0x2, 0xff, 0x0, 0x4a5}, {0x4, 0x8, 0x4, 0x2}, {0x5, 0x6, 0xf4, 0x1}]}) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r15, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x14, r16, 0x2, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008080) sendmsg$NFT_MSG_GETRULE(r11, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x28, 0x7, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24044041) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000001bc0)={'bond_slave_1\x00', @broadcast}) sendmsg$IPCTNL_MSG_CT_NEW(r14, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x6c, 0x0, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xc}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x800, 0x8]}]}, 0x6c}}, 0x20040800) 893.341216ms ago: executing program 1 (id=1493): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="b40800000000e40073114100000000008510000002000000b7000000000000009500c200000000009500001200000000da2377e27b6447feeea301d037b820c95ee6f391b81e2818dacd55b1d71ed5e3d52211381c5acb21d35385e7faf0b47c5b070e8877aaee17c68a43caec79279df72b5a494f9a"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000580)="aac6354efc0a7f516e24a40452449924", 0x10) getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f00000009c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r3}, 0x20) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) 745.799246ms ago: executing program 0 (id=1494): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@cgroup, r0, 0x7, 0x0, 0xffffffffffffffff, @void, @value}, 0x14) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x800) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, 0x0, 0x0, 0x0) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cpuset.memory_spread_page\x00', 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc000900b80006990300000015000500fe80000000000a000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r7 = socket$inet(0x2, 0xa, 0x800) ppoll(&(0x7f0000000380)=[{r0, 0x9000}, {r1, 0x1}, {r2, 0x400}, {r3, 0x2448}, {r4, 0x4021}, {r5, 0x40}, {0xffffffffffffffff, 0x4001}, {r6, 0x4420}, {r7, 0x84aa}], 0x9, &(0x7f0000000400)={0x0, 0x989680}, &(0x7f0000000440)={[0x4]}, 0x8) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffec3, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x10270000}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3}]}}]}, 0x48}}, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0x5, &(0x7f0000000080)=0xfad0, 0x4) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000180)=0x3, 0x4) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00bcef2993c47760a300001000030500000100", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r13, @ANYBLOB], 0x3c}}, 0x0) 710.507606ms ago: executing program 1 (id=1495): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x65}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x65}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$ax25(0x3, 0x2, 0x8) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x20) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000001240)=""/53}, 0x20) 625.543097ms ago: executing program 2 (id=1496): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6(0xa, 0x3, 0x3c) unshare(0x22020400) writev(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x1}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0) r6 = accept(r5, &(0x7f00000001c0)=@alg, &(0x7f0000000000)=0x80) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x9c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1d2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4020000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='writeback_bdi_register\x00', r7, 0x0, 0x400000000}, 0x18) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 495.92357ms ago: executing program 0 (id=1497): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="e10000000300000000000000ff03000059350000ffffffff12941000ffffffff"], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x27d00, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001cc"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r1, &(0x7f0000000040), 0x2) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xd66}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x4000000, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x800452d3, &(0x7f0000000100)) accept4(r10, 0x0, 0x0, 0x40800) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', r6, 0x8, 0x700, 0x4, 0x2, {{0x7, 0x4, 0x1, 0xd, 0x1c, 0x64, 0x0, 0xa, 0x4, 0x0, @multicast2, @loopback, {[@rr={0x7, 0x7, 0x77, [@private=0xa010102]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x5}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) 493.45794ms ago: executing program 1 (id=1498): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001e000100000000000000000007"], 0x28}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r5, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0xf000}, 0x0) (async) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) openat$cgroup_ro(r6, &(0x7f0000001300)='memory.swap.events\x00', 0x26e1, 0x0) 320.504933ms ago: executing program 2 (id=1499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r1}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), 0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c2000000aaaa000000029091010000a6b769016b13487c780000000000ea0b02000000000000004061e043e38d3785a27a4b0d4adceec2e52c6029c0b24e92b188d8d29c22d6da0ca94febdccf39e30c819b32a89fb1131cccc5ce41b9ec3dbad6adb6fbb8bd73165e71cd9b62eee952ea2cc0f9d059ede8483e81050e00000033dd6f2aa65fe68ed8dbf86fdc44110fcd10df240f2b74bef10d89fb1dbe26feed68a8109dab482a4631c8db9aa305da144411035bd5ba55966e93b1fc5d40e597a6a57e6b697517f89d3a50aba4f7c13d997647614cd2f4a8f2bc6b775964ce03a351c3df81b9b2741c555953afed57232dcc6d017c3fa0e89995543df8d0b81dcb383e270535b0752cd7a902b868b8df9e5138af96b267da"], 0x0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000013c0)={0x24, r3, 0xf21, 0x70bd25, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}]}, 0x24}}, 0x0) 189.121339ms ago: executing program 1 (id=1500): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r3, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000440)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r5, 0x0) listen(r6, 0x0) unshare(0x20000400) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f0000000280)={@any, 0x4, 0x40, 0x3, 0x3, 0x5, "e92d0d12f83a2bf5362c32d0eb7b1ba964bb421759077cbb3b0e5b451edbdf5550f7858a41369e5b327a7ef49ad89493261d73a1b7de14c4a6c2efe010af1af3ecddbea177e367cef7ec42b0d79c922ca73477df5247e4a93ebc1745f2eac3d6d59931aaebf91c79eb72dd557cff8fad0799383691b6ea594de3bf16e81543d0"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="130f000000000000f6ff06"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) 185.705647ms ago: executing program 2 (id=1501): r0 = socket(0x2, 0x80805, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000780)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0], 0x60}, 0x1, 0x0, 0x0, 0x24000041}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a00000007002100626200002c00228014000080080003007f000000080004000d0000000400008004000080040000800400008004008080"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYRES16], 0x57) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r6 = socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448de, &(0x7f00000000c0)={0x0, 0x0, "a4cd91"}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="05000000010000", 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r9 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f00000001c0)={0x10}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) close(r6) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 0s ago: executing program 1 (id=1502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001041f0f080003000000080008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}}, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9b5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90501b0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc5867dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eafeffffffffffffff000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99a40b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23eb8c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee36cdad078fc88d17cbde37a2270f90a60afe8548d4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd10459e2f2e267f82bafd5b4c7b481ea5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)="662ee99888e6ee93e1da33210674de164e8ed5e903dba92178b46429d61180816b15a63c50cd36effcc797c3a06593e5ed63f41f697d3e8d6f9498e41e9c6972d5381fc28a662bc51c2084f6added216cb02a5028733245bc0514b6b6b20e2da7fe9a6bd7895151d3b14eda4c01aca9f0c9d8cb531973abf3a2fe5159a2b20fee84524cd2076a59ebd5730822d7ed3a787b7cf258d5b38", 0x97}, {&(0x7f0000000440)="3c9df64e591b0de57322e1b26df7fe56e6d59f15ca1fa52d86339f4ee18c0709798d35bb44c590a40a", 0x29}], 0x2, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4004040) recvmmsg(r8, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/194, 0xc2}], 0x1}}], 0x1, 0x43, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000001700)=""/4096, 0x1000}, &(0x7f0000000240)=0x40) bind$tipc(r4, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x3, {{0x42, 0x10000001}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x1, 0x2}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x43, 0x2}}}, 0x10) bind$tipc(r4, 0x0, 0x0) r10 = socket(0x22, 0xe, 0x8000) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@gettfilter={0x24, 0x2e, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000040), &(0x7f00000000c0)=0x14) kernel console output (not intermixed with test programs): ridge_slave_0) entered disabled state [ 102.057205][ T7093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.064346][ T7096] netlink: 'syz.1.316': attribute type 6 has an invalid length. [ 102.114208][ T7094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.218116][ T7101] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 102.664527][ T7115] netlink: 'syz.0.324': attribute type 21 has an invalid length. [ 102.932769][ T7135] bond1: entered promiscuous mode [ 102.946099][ T7135] bond1: entered allmulticast mode [ 102.966153][ T7135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.215551][ T7160] Bluetooth: MGMT ver 1.23 [ 103.329570][ T7163] lo speed is unknown, defaulting to 1000 [ 107.494190][ T7182] __nla_validate_parse: 8 callbacks suppressed [ 107.494209][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 107.495103][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 107.533089][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 107.583231][ T7177] bond0: (slave bond_slave_0): Releasing backup interface [ 107.642627][ T7185] netlink: 132 bytes leftover after parsing attributes in process `syz.0.345'. [ 107.684755][ T7191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.347'. [ 107.837544][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.349'. [ 107.862724][ T7197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.870517][ T7197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.911677][ T7197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.919960][ T7197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.121728][ T7220] syzkaller1: entered allmulticast mode [ 108.176609][ T7221] netlink: 60 bytes leftover after parsing attributes in process `syz.1.355'. [ 108.310179][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 108.522162][ T7232] bridge1: entered allmulticast mode [ 108.682582][ T7236] netlink: 20 bytes leftover after parsing attributes in process `syz.0.360'. [ 108.907945][ T7250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.362'. [ 109.062408][ T7261] xt_TPROXY: Can be used only with -p tcp or -p udp [ 109.256993][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.371'. [ 109.554993][ T7296] netlink: 'syz.1.380': attribute type 29 has an invalid length. [ 109.558666][ T7299] xt_TCPMSS: Only works on TCP SYN packets [ 109.590872][ T7296] netlink: 'syz.1.380': attribute type 29 has an invalid length. [ 109.630810][ T7296] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 109.677589][ T7296] x_tables: duplicate underflow at hook 2 [ 110.080297][ T7340] netlink: 'syz.1.391': attribute type 39 has an invalid length. [ 111.948377][ T7361] ip6gretap0: entered promiscuous mode [ 111.961773][ T7361] batadv_slave_0: entered promiscuous mode [ 112.307177][ T7388] nlmon0: entered promiscuous mode [ 112.312714][ T7388] vlan1: entered promiscuous mode [ 112.330856][ T7388] nlmon0: left promiscuous mode [ 112.520353][ T7393] tap0: tun_chr_ioctl cmd 2148553947 [ 112.531284][ T7393] tap0: tun_chr_ioctl cmd 4294967290 [ 112.537814][ T7408] __nla_validate_parse: 11 callbacks suppressed [ 112.537841][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.409'. [ 112.595030][ T7408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.409'. [ 112.609897][ T7408] netlink: 'syz.4.409': attribute type 10 has an invalid length. [ 112.721924][ T7413] netlink: 36 bytes leftover after parsing attributes in process `syz.4.412'. [ 112.798101][ T7413] ip6t_rpfilter: unknown options [ 113.144155][ T7439] netlink: 'syz.3.420': attribute type 2 has an invalid length. [ 113.152943][ T7439] netlink: 36 bytes leftover after parsing attributes in process `syz.3.420'. [ 113.265086][ T7446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.423'. [ 113.510667][ T7461] netlink: 32 bytes leftover after parsing attributes in process `syz.0.428'. [ 113.541093][ T7461] netlink: 76 bytes leftover after parsing attributes in process `syz.0.428'. [ 113.998763][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 114.023065][ T7488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.440'. [ 114.061390][ T7488] vlan2: entered allmulticast mode [ 114.078763][ T7488] bridge_slave_0: entered allmulticast mode [ 114.115163][ T7496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.442'. [ 114.192461][ T7496] lo speed is unknown, defaulting to 1000 [ 114.244042][ T7500] tc_dump_action: action bad kind [ 114.332052][ T7503] xt_CT: You must specify a L4 protocol and not use inversions on it [ 114.400923][ T7512] tipc: Can't bind to reserved service type 2 [ 114.521941][ T7498] lo speed is unknown, defaulting to 1000 [ 114.711497][ T7525] lo speed is unknown, defaulting to 1000 [ 115.244593][ T7548] xt_TCPMSS: Only works on TCP SYN packets [ 115.256976][ T7548] netlink: 'syz.1.458': attribute type 10 has an invalid length. [ 115.448009][ T7548] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 115.835041][ T7566] netlink: 'syz.0.462': attribute type 2 has an invalid length. [ 116.340072][ T7589] netlink: 'syz.4.469': attribute type 2 has an invalid length. [ 116.535424][ T7604] netlink: 'syz.2.474': attribute type 4 has an invalid length. [ 116.573232][ T7608] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 116.640508][ T7613] syz.4.476[7613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.640641][ T7613] syz.4.476[7613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.666209][ T7613] syz.4.476[7613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.070066][ T7645] lo speed is unknown, defaulting to 1000 [ 117.363856][ T7660] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.638905][ T7671] __nla_validate_parse: 4 callbacks suppressed [ 117.638926][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 117.710195][ T7673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.488'. [ 117.719535][ T7673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.488'. [ 117.784605][ T7679] netlink: 24 bytes leftover after parsing attributes in process `syz.1.489'. [ 118.116964][ T7696] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.118193][ T7695] ieee802154 phy0 wpan0: encryption failed: -22 [ 118.126342][ T7696] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.203912][ T7695] netlink: 'syz.4.495': attribute type 9 has an invalid length. [ 118.620871][ T7724] macvlan2: entered promiscuous mode [ 118.636608][ T7724] macvlan2: entered allmulticast mode [ 118.655456][ T7726] bridge2: entered allmulticast mode [ 118.856342][ T7744] dvmrp0: entered allmulticast mode [ 118.880770][ T7743] dvmrp0: left allmulticast mode [ 119.376982][ T7778] lo speed is unknown, defaulting to 1000 [ 119.806915][ T7804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.530'. [ 120.226420][ T7815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.534'. [ 120.235373][ T7815] netlink: 52 bytes leftover after parsing attributes in process `syz.4.534'. [ 120.266038][ T7815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.534'. [ 120.684442][ T7853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.544'. [ 120.716438][ T7857] smc: net device bond0 applied user defined pnetid SYZ0 [ 120.744410][ T7857] netlink: 116 bytes leftover after parsing attributes in process `syz.0.546'. [ 120.771523][ T7857] smc: net device ip6tnl0 erased user defined pnetid SYZ0 [ 120.780415][ T7859] openvswitch: netlink: Flow key attr not present in new flow. [ 120.794694][ T7857] smc: net device bond0 erased user defined pnetid SYZ0 [ 120.814093][ T7857] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 120.875415][ T7862] lo speed is unknown, defaulting to 1000 [ 122.128958][ T7936] dccp_invalid_packet: P.Data Offset(172) too large [ 122.620892][ T7981] netlink: 'syz.2.581': attribute type 1 has an invalid length. [ 122.669654][ T7981] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.707785][ T7981] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.715244][ T7981] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 122.734331][ T7981] bond4: (slave vti0): Error -95 calling set_mac_address [ 122.743763][ T7993] __nla_validate_parse: 10 callbacks suppressed [ 122.743781][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 122.852749][ T7997] lo speed is unknown, defaulting to 1000 [ 122.945529][ T8002] lo: left allmulticast mode [ 122.975949][ T8002] tunl0: left allmulticast mode [ 122.981422][ T8002] gre0: left allmulticast mode [ 123.005842][ T8002] gretap0: left allmulticast mode [ 123.022336][ T8002] erspan0: left allmulticast mode [ 123.038403][ T8002] ip_vti0: left allmulticast mode [ 123.043623][ T8002] ip6_vti0: left allmulticast mode [ 123.080946][ T8002] sit0: left allmulticast mode [ 123.099460][ T8002] ip6tnl0: left allmulticast mode [ 123.111709][ T8002] ip6gre0: left allmulticast mode [ 123.124920][ T8002] ip6gretap0: left allmulticast mode [ 123.136636][ T8002] bridge0: left allmulticast mode [ 123.162283][ T8002] vcan0: left allmulticast mode [ 123.179269][ T8002] bond0: left allmulticast mode [ 123.193461][ T8002] team0: left allmulticast mode [ 123.202038][ T8002] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 123.209472][ T8002] dummy0: left allmulticast mode [ 123.214638][ T8002] nlmon0: left allmulticast mode [ 123.219934][ T8002] caif0: left allmulticast mode [ 123.225027][ T8002] batadv0: left allmulticast mode [ 123.231194][ T8002] vxcan0: left allmulticast mode [ 123.236804][ T8002] vxcan1: left allmulticast mode [ 123.242315][ T8020] netlink: 32 bytes leftover after parsing attributes in process `syz.4.591'. [ 123.251504][ T8002] veth0: left allmulticast mode [ 123.259079][ T8002] veth1: left allmulticast mode [ 123.264362][ T8002] wg1: left allmulticast mode [ 123.269535][ T8002] wg2: left allmulticast mode [ 123.274438][ T8002] veth0_to_bridge: left allmulticast mode [ 123.282549][ T8002] veth1_to_bridge: left allmulticast mode [ 123.289140][ T8002] veth0_to_bond: left allmulticast mode [ 123.295030][ T8002] bond_slave_0: left allmulticast mode [ 123.300920][ T8002] veth1_to_bond: left allmulticast mode [ 123.307019][ T8002] bond_slave_1: left allmulticast mode [ 123.312710][ T8002] veth0_to_team: left allmulticast mode [ 123.318638][ T8002] team_slave_0: left allmulticast mode [ 123.324667][ T8002] veth1_to_team: left allmulticast mode [ 123.330608][ T8002] team_slave_1: left allmulticast mode [ 123.336403][ T8002] veth0_to_batadv: left allmulticast mode [ 123.342470][ T8002] batadv_slave_0: left allmulticast mode [ 123.348431][ T8002] veth1_to_batadv: left allmulticast mode [ 123.354477][ T8002] batadv_slave_1: left allmulticast mode [ 123.360442][ T8002] xfrm0: left allmulticast mode [ 123.365631][ T8002] veth0_to_hsr: left allmulticast mode [ 123.373638][ T8002] veth1_to_hsr: left allmulticast mode [ 123.379621][ T8002] veth1_virt_wifi: left allmulticast mode [ 123.386714][ T8002] veth0_virt_wifi: left allmulticast mode [ 123.393314][ T8002] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 123.401174][ T8022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.591'. [ 123.413179][ T8002] veth1_vlan: left allmulticast mode [ 123.419144][ T8002] vlan0: left allmulticast mode [ 123.424390][ T8002] vlan1: left allmulticast mode [ 123.428310][ T7998] netlink: 'syz.1.585': attribute type 1 has an invalid length. [ 123.429578][ T8002] macvlan0: left allmulticast mode [ 123.442857][ T8002] macvlan1: left allmulticast mode [ 123.448205][ T8002] ipvlan0: left allmulticast mode [ 123.453477][ T8002] ipvlan1: left allmulticast mode [ 123.458705][ T8002] veth0_vlan: left allmulticast mode [ 123.464157][ T8002] veth1_macvtap: left allmulticast mode [ 123.470005][ T8002] veth0_macvtap: left allmulticast mode [ 123.476102][ T8002] macvtap0: left allmulticast mode [ 123.481444][ T8002] macsec0: left allmulticast mode [ 123.488017][ T8002] geneve0: left allmulticast mode [ 123.493189][ T8002] geneve1: left allmulticast mode [ 123.499022][ T8002] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 123.510898][ T8002] macvlan2: left promiscuous mode [ 123.516209][ T8002] macvlan2: left allmulticast mode [ 123.729705][ T8027] netlink: 'syz.2.592': attribute type 4 has an invalid length. [ 123.818956][ T8031] tipc: Started in network mode [ 123.826340][ T8031] tipc: Node identity ffffffff, cluster identity 4711 [ 123.855831][ T8031] tipc: Node number set to 4294967295 [ 124.165431][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 124.189282][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 124.199574][ T8058] netlink: 4320 bytes leftover after parsing attributes in process `syz.4.600'. [ 124.247515][ T8060] lo speed is unknown, defaulting to 1000 [ 124.423563][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 124.445996][ T8068] pim6reg: entered allmulticast mode [ 124.467885][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.604'. [ 124.544752][ T8061] lo speed is unknown, defaulting to 1000 [ 124.739143][ T8091] dvmrp0: entered allmulticast mode [ 124.771280][ T8085] x_tables: duplicate underflow at hook 1 [ 124.872452][ T8085] dvmrp0: left allmulticast mode [ 125.029387][ T8105] xt_TCPMSS: Only works on TCP SYN packets [ 125.078277][ T8104] netlink: 132 bytes leftover after parsing attributes in process `syz.3.613'. [ 125.092746][ T8109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.614'. [ 125.301480][ T8122] netlink: 'syz.3.618': attribute type 10 has an invalid length. [ 125.311216][ T8122] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 125.459305][ T8133] netlink: 'syz.1.623': attribute type 1 has an invalid length. [ 125.764956][ T8154] xt_NFQUEUE: number of total queues is 0 [ 126.073737][ T5896] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 126.083180][ T5896] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 126.158366][ T8171] netlink: 'syz.0.633': attribute type 9 has an invalid length. [ 126.180480][ T8171] bond_slave_0: entered promiscuous mode [ 126.186641][ T8171] bond_slave_1: entered promiscuous mode [ 126.192396][ T8171] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 126.227883][ T8171] macvlan2: entered promiscuous mode [ 126.233323][ T8171] bond0: entered promiscuous mode [ 126.263583][ T8171] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 126.375199][ T8179] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 127.010206][ T8214] x_tables: unsorted entry at hook 2 [ 127.151971][ T8228] netlink: 'syz.4.651': attribute type 33 has an invalid length. [ 127.175627][ T8223] lo speed is unknown, defaulting to 1000 [ 127.434474][ T8224] lo speed is unknown, defaulting to 1000 [ 127.877049][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 128.209850][ T8279] netlink: 'syz.1.670': attribute type 3 has an invalid length. [ 128.354211][ T8282] lo speed is unknown, defaulting to 1000 [ 128.368136][ T8286] netlink: 'syz.3.672': attribute type 12 has an invalid length. [ 128.406740][ T8286] netlink: 'syz.3.672': attribute type 3 has an invalid length. [ 128.414436][ T8286] __nla_validate_parse: 8 callbacks suppressed [ 128.414451][ T8286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.672'. [ 128.467591][ T8291] netlink: 48 bytes leftover after parsing attributes in process `syz.1.674'. [ 128.777788][ T8303] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 128.800368][ T8303] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 129.362172][ T8319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.685'. [ 129.375393][ T8320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.685'. [ 129.391714][ T8319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.685'. [ 129.434605][ T8320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.685'. [ 129.512967][ T8325] x_tables: duplicate underflow at hook 2 [ 129.529276][ T8336] x_tables: duplicate underflow at hook 2 [ 129.730988][ T8346] netlink: 'syz.4.690': attribute type 5 has an invalid length. [ 129.818987][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 129.858665][ T8340] netlink: 256 bytes leftover after parsing attributes in process `syz.3.688'. [ 130.078281][ T8367] syzkaller1: entered promiscuous mode [ 130.146049][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 130.269644][ T8378] netlink: 'syz.1.698': attribute type 10 has an invalid length. [ 130.282073][ T8378] netlink: 40 bytes leftover after parsing attributes in process `syz.1.698'. [ 130.292362][ T8378] bridge0: port 3(macvlan1) entered blocking state [ 130.299288][ T8378] bridge0: port 3(macvlan1) entered disabled state [ 130.306565][ T8378] macvlan1: entered allmulticast mode [ 130.312135][ T8378] veth1_vlan: entered allmulticast mode [ 130.321011][ T8378] macvlan1: entered promiscuous mode [ 130.337726][ T8378] bridge0: port 3(macvlan1) entered blocking state [ 130.344409][ T8378] bridge0: port 3(macvlan1) entered forwarding state [ 130.609426][ T8388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.747982][ T8399] lo speed is unknown, defaulting to 1000 [ 130.939251][ T8408] team0: left allmulticast mode [ 130.947846][ T8408] team_slave_0: left allmulticast mode [ 130.953476][ T8408] team_slave_1: left allmulticast mode [ 130.963619][ T8408] team0: left promiscuous mode [ 130.980996][ T8408] team_slave_0: left promiscuous mode [ 130.990105][ T8408] team_slave_1: left promiscuous mode [ 130.996737][ T8408] bridge0: port 3(team0) entered disabled state [ 131.010657][ T8409] trusted_key: syz.3.709 sent an empty control message without MSG_MORE. [ 131.022706][ T8408] bridge_slave_1: left allmulticast mode [ 131.028694][ T8408] bridge_slave_1: left promiscuous mode [ 131.036340][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.049280][ T8408] bridge_slave_0: left allmulticast mode [ 131.055438][ T8408] bridge_slave_0: left promiscuous mode [ 131.063712][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.169663][ T8400] lo speed is unknown, defaulting to 1000 [ 131.198384][ T8416] pimreg3: entered allmulticast mode [ 131.381160][ T8423] netlink: 'syz.4.713': attribute type 1 has an invalid length. [ 132.174748][ T8443] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 132.287125][ T8451] netlink: 'syz.4.719': attribute type 4 has an invalid length. [ 132.405098][ T8460] netlink: 'syz.2.724': attribute type 1 has an invalid length. [ 132.428813][ T8460] 8021q: adding VLAN 0 to HW filter on device bond5 [ 132.475001][ T8460] 8021q: adding VLAN 0 to HW filter on device bond5 [ 132.483641][ T8460] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 132.500518][ T8460] bond5: (slave vti0): Error -95 calling set_mac_address [ 132.553527][ T8472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.758202][ T8480] netlink: 'syz.0.730': attribute type 4 has an invalid length. [ 133.233682][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.452999][ T8524] No such timeout policy "syz0" [ 133.466418][ T8527] __nla_validate_parse: 45 callbacks suppressed [ 133.466439][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.742'. [ 133.487686][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.741'. [ 133.502209][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 133.509762][ T8531] erspan0: entered promiscuous mode [ 133.518011][ T8531] bridge0: port 1(macvlan2) entered blocking state [ 133.524845][ T8531] bridge0: port 1(macvlan2) entered disabled state [ 133.531870][ T8531] macvlan2: entered allmulticast mode [ 133.537583][ T8531] erspan0: entered allmulticast mode [ 133.544409][ T8531] macvlan2: entered promiscuous mode [ 133.553743][ T8480] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 133.578023][ T8531] bridge0: port 1(macvlan2) entered blocking state [ 133.585615][ T8531] bridge0: port 1(macvlan2) entered forwarding state [ 133.814559][ T8545] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.835880][ T8545] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.844712][ T8545] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.856616][ T8545] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.930477][ T8546] xt_l2tp: v2 sid > 0xffff: 262144 [ 134.700966][ T8587] nbd: must specify at least one socket [ 134.726343][ T8587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.761'. [ 134.746961][ T8587] netlink: 52 bytes leftover after parsing attributes in process `syz.0.761'. [ 134.765896][ T8587] netlink: 24 bytes leftover after parsing attributes in process `syz.0.761'. [ 134.771942][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.763'. [ 134.798705][ T8587] vlan0: entered allmulticast mode [ 134.805930][ T8587] veth0_vlan: entered allmulticast mode [ 134.825927][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 134.833446][ T8594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.764'. [ 134.871915][ T8592] IPv6: sit1: Disabled Multicast RS [ 134.893122][ T29] audit: type=1107 audit(1732639672.452:2): pid=8591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 135.038633][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'. [ 135.402443][ T8623] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 135.447085][ T59] IPVS: starting estimator thread 0... [ 135.486645][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 135.548007][ T8628] IPVS: using max 21 ests per chain, 50400 per kthread [ 135.630181][ T8631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.638602][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.647773][ T8631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.655461][ T8631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.129230][ T8668] bridge0: entered promiscuous mode [ 136.500229][ T8674] xt_cgroup: path and classid specified [ 136.519609][ T8674] batadv_slave_0: entered allmulticast mode [ 136.755125][ T8695] lo: entered allmulticast mode [ 136.802688][ T8695] pimreg: entered allmulticast mode [ 136.827723][ T8695] pimreg: left allmulticast mode [ 136.841050][ T8695] lo: left allmulticast mode [ 137.322562][ T8733] vlan3: entered promiscuous mode [ 137.412759][ T8734] vlan3: entered promiscuous mode [ 139.086787][ T8779] veth0_vlan: left allmulticast mode [ 139.092335][ T8779] vlan0: left allmulticast mode [ 139.240290][ T8779] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.256140][ T8779] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.265059][ T8779] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.278936][ T8779] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.352936][ T8779] bridge1: left allmulticast mode [ 139.364589][ T8779] bond0: left promiscuous mode [ 139.369498][ T8779] bond_slave_0: left promiscuous mode [ 139.374996][ T8779] bond_slave_1: left promiscuous mode [ 139.381901][ T8779] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 139.389425][ T8779] macvlan2: left promiscuous mode [ 139.401100][ T8779] bridge0: left promiscuous mode [ 139.446171][ T8809] lo: entered allmulticast mode [ 139.476068][ T8809] tunl0: entered allmulticast mode [ 139.497447][ T8809] gre0: entered allmulticast mode [ 139.502659][ T8809] gretap0: entered allmulticast mode [ 139.509195][ T8809] erspan0: entered allmulticast mode [ 139.514904][ T8809] ip_vti0: entered allmulticast mode [ 139.520929][ T8809] ip6_vti0: entered allmulticast mode [ 139.527011][ T8809] sit0: entered allmulticast mode [ 139.532365][ T8809] ip6tnl0: entered allmulticast mode [ 139.538203][ T8809] ip6gre0: entered allmulticast mode [ 139.543918][ T8809] ip6gretap0: entered allmulticast mode [ 139.549861][ T8809] bridge0: entered allmulticast mode [ 139.555439][ T8809] vcan0: entered allmulticast mode [ 139.561214][ T8809] bond0: entered allmulticast mode [ 139.566990][ T8809] bond_slave_0: entered allmulticast mode [ 139.595996][ T8809] bond_slave_1: entered allmulticast mode [ 139.605942][ T8809] team0: entered allmulticast mode [ 139.611116][ T8809] team_slave_0: entered allmulticast mode [ 139.623319][ T8809] team_slave_1: entered allmulticast mode [ 139.631577][ T8809] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 139.639017][ T8809] dummy0: entered allmulticast mode [ 139.644521][ T8809] nlmon0: entered allmulticast mode [ 139.650434][ T8809] caif0: entered allmulticast mode [ 139.656375][ T8809] batadv0: entered allmulticast mode [ 139.662300][ T8809] vxcan0: entered allmulticast mode [ 139.678977][ T8809] vxcan1: entered allmulticast mode [ 139.684306][ T8809] veth0: entered allmulticast mode [ 139.700687][ T8809] veth1: entered allmulticast mode [ 139.708849][ T8809] wg1: entered allmulticast mode [ 139.714225][ T8809] wg2: entered allmulticast mode [ 139.720165][ T8809] veth0_to_bridge: entered allmulticast mode [ 139.726838][ T8809] veth1_to_bridge: entered allmulticast mode [ 139.738219][ T8809] veth0_to_bond: entered allmulticast mode [ 139.746500][ T8809] veth1_to_bond: entered allmulticast mode [ 139.752645][ T8809] veth0_to_team: entered allmulticast mode [ 139.759004][ T8809] veth1_to_team: entered allmulticast mode [ 139.764966][ T8809] veth0_to_batadv: entered allmulticast mode [ 139.771582][ T8809] batadv_slave_0: entered allmulticast mode [ 139.777778][ T8809] veth1_to_batadv: entered allmulticast mode [ 139.783919][ T8809] batadv_slave_1: entered allmulticast mode [ 139.790395][ T8809] xfrm0: entered allmulticast mode [ 139.795627][ T8809] veth0_to_hsr: entered allmulticast mode [ 139.805881][ T8809] veth1_to_hsr: entered allmulticast mode [ 139.811937][ T8809] veth1_virt_wifi: entered allmulticast mode [ 139.818322][ T8809] veth0_virt_wifi: entered allmulticast mode [ 139.824393][ T8809] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 139.831966][ T8809] veth1_vlan: entered allmulticast mode [ 139.837825][ T8809] veth0_vlan: entered allmulticast mode [ 139.843466][ T8809] vlan0: entered allmulticast mode [ 139.848763][ T8809] vlan1: entered allmulticast mode [ 139.854001][ T8809] macvlan0: entered allmulticast mode [ 139.859838][ T8809] macvlan1: entered allmulticast mode [ 139.865367][ T8809] ipvlan0: entered allmulticast mode [ 139.871057][ T8809] ipvlan1: entered allmulticast mode [ 139.876535][ T8809] veth1_macvtap: entered allmulticast mode [ 139.882439][ T8809] veth0_macvtap: entered allmulticast mode [ 139.888844][ T8809] macvtap0: entered allmulticast mode [ 139.894327][ T8809] macsec0: entered allmulticast mode [ 139.899783][ T8809] geneve0: entered allmulticast mode [ 139.905199][ T8809] geneve1: entered allmulticast mode [ 139.910809][ T8809] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 139.918456][ T8809] bridge1: entered allmulticast mode [ 139.923877][ T8809] bond1: entered allmulticast mode [ 139.930195][ T8809] bond2: entered allmulticast mode [ 139.935762][ T8809] bridge2: entered allmulticast mode [ 139.941238][ T8809] bridge_slave_1.: entered allmulticast mode [ 139.947908][ T8809] netdevsim netdevsim2 eth0: entered allmulticast mode [ 139.954932][ T8809] netdevsim netdevsim2 eth1: entered allmulticast mode [ 139.961990][ T8809] netdevsim netdevsim2 eth2: entered allmulticast mode [ 139.968997][ T8809] netdevsim netdevsim2 eth3: entered allmulticast mode [ 139.976476][ T8809] syztnl1: entered allmulticast mode [ 139.981899][ T8809] bond3: entered allmulticast mode [ 139.987219][ T8809] macvlan2: entered allmulticast mode [ 139.992739][ T8809] ip6tnl1: entered allmulticast mode [ 140.000005][ T8809] bond4: entered allmulticast mode [ 140.007392][ T8809] team1: entered allmulticast mode [ 140.012642][ T8809] bond5: entered allmulticast mode [ 140.017902][ T8809] ip6gre1: entered allmulticast mode [ 140.023251][ T8809] syzkaller0: entered allmulticast mode [ 140.030164][ T8809] ip6erspan0: entered allmulticast mode [ 140.079394][ T8820] __nla_validate_parse: 8 callbacks suppressed [ 140.079414][ T8820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.815'. [ 140.356721][ T8831] tap0: tun_chr_ioctl cmd 2148553947 [ 140.362374][ T8833] tap0: tun_chr_ioctl cmd 4294967290 [ 140.410380][ T8841] lo speed is unknown, defaulting to 1000 [ 140.787776][ T8856] lo speed is unknown, defaulting to 1000 [ 140.844689][ T8863] dvmrp0: entered allmulticast mode [ 140.979925][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 141.073080][ T8869] lo speed is unknown, defaulting to 1000 [ 141.263215][ T8878] Cannot find add_set index 832 as target [ 141.516763][ T8891] IPv6: sit1: Disabled Multicast RS [ 141.743983][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.837'. [ 141.785236][ T8899] nbd: illegal input index -1 [ 141.816044][ T8901] netlink: 134788 bytes leftover after parsing attributes in process `syz.3.838'. [ 142.103734][ T8912] netlink: 32 bytes leftover after parsing attributes in process `syz.3.841'. [ 142.190373][ T8919] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 142.345403][ T8928] netlink: 'syz.2.846': attribute type 58 has an invalid length. [ 142.370376][ T8928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.846'. [ 142.443894][ T8933] netlink: 'syz.4.847': attribute type 1 has an invalid length. [ 142.507433][ T8936] netlink: 'syz.4.847': attribute type 1 has an invalid length. [ 142.723940][ T8945] netlink: 'syz.0.853': attribute type 7 has an invalid length. [ 142.734547][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 143.069990][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 143.141378][ T8967] vlan3: entered allmulticast mode [ 143.165836][ T8967] macvtap0: entered allmulticast mode [ 143.171375][ T8967] veth0_macvtap: entered allmulticast mode [ 143.207175][ T8966] lo speed is unknown, defaulting to 1000 [ 143.353358][ T8979] lo speed is unknown, defaulting to 1000 [ 143.608078][ T8997] netlink: 36 bytes leftover after parsing attributes in process `syz.3.867'. [ 143.648585][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.869'. [ 143.842147][ T9009] netlink: 'syz.1.870': attribute type 1 has an invalid length. [ 144.002538][ T9019] IPVS: set_ctl: invalid protocol: 22 172.30.1.4:20002 [ 144.223600][ T9030] netlink: 'syz.0.875': attribute type 9 has an invalid length. [ 144.431838][ T9038] sit0: entered promiscuous mode [ 144.437555][ T9038] sit0: left allmulticast mode [ 144.442704][ T9038] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 144.573667][ T9048] ip6gre1: entered allmulticast mode [ 144.781362][ T9054] netlink: 'syz.4.885': attribute type 2 has an invalid length. [ 145.268785][ T9090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.306824][ T9090] batadv_slave_1: entered promiscuous mode [ 145.369645][ T9094] tipc: Enabled bearer , priority 0 [ 145.480229][ T9096] wg2: entered promiscuous mode [ 145.495342][ T9096] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 145.834733][ T9111] __nla_validate_parse: 11 callbacks suppressed [ 145.834753][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 145.860869][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.903'. [ 145.894502][ T9111] ipvlan2: entered allmulticast mode [ 145.919499][ T9111] veth0_vlan: entered allmulticast mode [ 146.028534][ T9122] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 146.364296][ T9141] netlink: 'syz.4.909': attribute type 1 has an invalid length. [ 146.513825][ T9150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.907'. [ 147.346422][ T9211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.923'. [ 147.361095][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 147.384335][ T9213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.924'. [ 147.507475][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 147.753535][ T9211] team0 (unregistering): Port device team_slave_0 removed [ 147.764913][ T9211] team0 (unregistering): Port device team_slave_1 removed [ 147.776135][ T9211] team0 (unregistering): Port device wlan1 removed [ 148.085714][ T9256] lo speed is unknown, defaulting to 1000 [ 148.108426][ T5850] Bluetooth: hci0: command tx timeout [ 148.422400][ T9273] netlink: 36 bytes leftover after parsing attributes in process `syz.3.934'. [ 148.450201][ T9266] lo speed is unknown, defaulting to 1000 [ 148.645460][ T9264] rdma_rxe: rxe_newlink: failed to add lo [ 148.853161][ T9289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.913725][ T9293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.937'. [ 148.956832][ T9258] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 149.071548][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'. [ 149.101031][ T9296] ip6gre2: entered promiscuous mode [ 149.122479][ T9296] ip6gre2: entered allmulticast mode [ 149.260492][ T9298] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.300879][ T9301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.320145][ T9301] bond2: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 149.331652][ T9301] bond2: (slave ip6tnl1): Error -95 calling set_mac_address [ 149.374556][ T9309] gretap0: entered promiscuous mode [ 149.380052][ T9309] gretap0: left allmulticast mode [ 150.230617][ T9338] netlink: 'syz.3.950': attribute type 10 has an invalid length. [ 150.324316][ T9338] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 150.439946][ T9351] lo speed is unknown, defaulting to 1000 [ 150.858896][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 150.864350][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 150.892644][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 150.912131][ T9378] __nla_validate_parse: 6 callbacks suppressed [ 150.912151][ T9378] netlink: 32 bytes leftover after parsing attributes in process `syz.0.960'. [ 150.933636][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 150.975855][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 150.981312][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 150.999029][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 151.004424][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 151.038897][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 151.054642][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 151.087800][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 151.095244][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 151.107630][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 151.114242][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 151.121004][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 151.129549][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 151.135038][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 151.143682][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 151.158497][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 151.163939][ T9372] tun0: tun_chr_ioctl cmd 1074025681 [ 151.319402][ T9393] No such timeout policy "syz0" [ 151.327045][ T9394] netlink: 'syz.0.965': attribute type 7 has an invalid length. [ 151.401405][ T9396] netlink: 76 bytes leftover after parsing attributes in process `syz.0.968'. [ 151.411523][ T9396] block nbd0: not configured, cannot reconfigure [ 151.489672][ T9401] netlink: 'syz.0.968': attribute type 10 has an invalid length. [ 151.505988][ T9401] veth0_macvtap: left promiscuous mode [ 151.517027][ T9401] team0: Device veth0_macvtap failed to register rx_handler [ 151.617618][ T9405] lo speed is unknown, defaulting to 1000 [ 151.965107][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.971'. [ 151.989883][ T9415] lo speed is unknown, defaulting to 1000 [ 152.176333][ T9405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.970'. [ 152.458559][ T9436] lo speed is unknown, defaulting to 1000 [ 153.272878][ T9473] netlink: 'syz.0.989': attribute type 32 has an invalid length. [ 153.381186][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 154.229482][ T9546] dvmrp5: entered allmulticast mode [ 154.471270][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'. [ 154.472201][ T9564] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 154.506408][ T9567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1015'. [ 154.629887][ T9580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1022'. [ 154.827819][ T9590] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 154.850209][ T9596] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1027'. [ 154.870523][ T9597] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1027'. [ 154.908995][ T9596] netlink: 'syz.4.1027': attribute type 27 has an invalid length. [ 155.214771][ T9623] SET target dimension over the limit! [ 155.461639][ T9636] lo speed is unknown, defaulting to 1000 [ 155.484072][ T9636] lo speed is unknown, defaulting to 1000 [ 155.510775][ T9636] lo speed is unknown, defaulting to 1000 [ 155.550719][ T9642] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 155.594978][ T9636] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 155.626873][ T9647] lo speed is unknown, defaulting to 1000 [ 155.672766][ T9636] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 155.792438][ T9636] lo speed is unknown, defaulting to 1000 [ 155.823427][ T9636] lo speed is unknown, defaulting to 1000 [ 155.854330][ T9636] lo speed is unknown, defaulting to 1000 [ 155.864350][ T9636] lo speed is unknown, defaulting to 1000 [ 155.874650][ T9636] lo speed is unknown, defaulting to 1000 [ 155.884759][ T9636] lo speed is unknown, defaulting to 1000 [ 156.201066][ T9668] sctp: [Deprecated]: syz.2.1042 (pid 9668) Use of int in max_burst socket option. [ 156.201066][ T9668] Use struct sctp_assoc_value instead [ 156.265329][ T9670] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 156.480415][ T9651] __nla_validate_parse: 7 callbacks suppressed [ 156.480433][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 156.519548][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 156.541603][ T5893] hid-generic 0005:07C0:0058.0002: item fetching failed at offset 0/1 [ 156.563874][ T5893] hid-generic 0005:07C0:0058.0002: probe with driver hid-generic failed with error -22 [ 157.152255][ T9698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1054'. [ 157.176454][ T9698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1054'. [ 157.373878][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'. [ 157.425036][ T5160] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.441693][ T5160] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.459227][ T5160] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.473377][ T5160] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.482471][ T5160] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.490858][ T5160] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.634701][ T9704] lo speed is unknown, defaulting to 1000 [ 157.635339][ T9712] Â: renamed from pim6reg1 [ 157.814497][ T9704] lo speed is unknown, defaulting to 1000 [ 158.103429][ T9704] chnl_net:caif_netlink_parms(): no params data found [ 158.308348][ T9704] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.328649][ T9704] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.344276][ T9704] bridge_slave_0: entered allmulticast mode [ 158.354242][ T9704] bridge_slave_0: entered promiscuous mode [ 158.402754][ T9704] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.426385][ T9704] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.433698][ T9704] bridge_slave_1: entered allmulticast mode [ 158.467636][ T9704] bridge_slave_1: entered promiscuous mode [ 158.556442][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1073'. [ 158.590246][ T9769] lo speed is unknown, defaulting to 1000 [ 158.592756][ T9704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.630847][ T9704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.747288][ T9704] team0: Port device team_slave_0 added [ 158.778308][ T9704] team0: Port device team_slave_1 added [ 158.840614][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.852927][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.863955][ T9792] netlink: 'syz.0.1075': attribute type 1 has an invalid length. [ 158.891836][ T9704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.961569][ T9704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.975877][ T9704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.003894][ T9704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.015414][ T9769] lo speed is unknown, defaulting to 1000 [ 159.198236][ T9704] hsr_slave_0: entered promiscuous mode [ 159.213914][ T9704] hsr_slave_1: entered promiscuous mode [ 159.231428][ T9704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.254534][ T9704] Cannot create hsr debugfs directory [ 159.264120][ T9803] geneve0: entered allmulticast mode [ 159.321435][ T9808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1080'. [ 159.549052][ T5160] Bluetooth: hci1: command tx timeout [ 159.838385][ T9830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1087'. [ 159.838593][ T9704] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.869469][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 159.884371][ T9704] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 159.886877][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'. [ 159.918192][ T9829] No such timeout policy "syz0" [ 160.051631][ T9704] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.083168][ T9704] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 160.247558][ T9704] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.263077][ T9704] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 160.473882][ T9704] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.492831][ T9704] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 160.513099][ T9848] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 160.517049][ T9865] vlan1: entered promiscuous mode [ 160.523060][ T9848] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 160.532503][ T9865] team0: Device vlan1 is already an upper device of the team interface [ 160.721387][ T9704] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.738502][ T9704] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.759657][ T9704] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.779898][ T9704] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.020970][ T9704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.124663][ T9704] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.145260][ T6900] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.152482][ T6900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.178531][ T6894] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.186878][ T6894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.620303][ T9704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.626467][ T5160] Bluetooth: hci1: command tx timeout [ 161.680963][ T9930] netlink: 'syz.1.1113': attribute type 3 has an invalid length. [ 162.124995][ T9704] veth0_vlan: entered promiscuous mode [ 162.155111][ T9704] veth1_vlan: entered promiscuous mode [ 162.236896][ T9704] veth0_macvtap: entered promiscuous mode [ 162.263720][ T9704] veth1_macvtap: entered promiscuous mode [ 162.303569][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.327835][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.349826][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.385547][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.424841][ T9704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.437809][ T9704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.449108][ T9704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.461291][ T9704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.482021][ T9950] netlink: 'syz.0.1119': attribute type 21 has an invalid length. [ 162.490724][ T9950] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.509214][ T9704] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.528018][ T9704] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.551641][ T9704] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.575170][ T9704] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.711100][ T9953] netlink: 'syz.0.1120': attribute type 1 has an invalid length. [ 162.719209][ T9953] __nla_validate_parse: 5 callbacks suppressed [ 162.719226][ T9953] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1120'. [ 162.852163][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.860314][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.920331][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.945757][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.004955][ T9961] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1124'. [ 163.269217][ T9970] lo speed is unknown, defaulting to 1000 [ 163.564958][ T9970] lo speed is unknown, defaulting to 1000 [ 164.055019][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1132'. [ 164.073432][ T9986] gtp0: entered promiscuous mode [ 164.080517][ T9986] gtp0: entered allmulticast mode [ 164.230857][ T9996] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 164.382426][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.621264][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.632876][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.645926][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.656634][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.664617][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.672502][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.743363][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.797273][T10009] lo speed is unknown, defaulting to 1000 [ 164.812651][T10014] ebt_limit: overflow, try lower: 570423552/2483027968 [ 164.841659][T10014] netlink: 'syz.3.1139': attribute type 10 has an invalid length. [ 164.897098][T10014] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.928177][T10014] bond0: (slave team0): Enslaving as an active interface with an up link [ 164.948361][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1139'. [ 164.969199][T10021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 164.991039][T10014] netlink: 'syz.3.1139': attribute type 10 has an invalid length. [ 165.055521][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.109152][T10023] lo speed is unknown, defaulting to 1000 [ 165.115053][T10009] lo speed is unknown, defaulting to 1000 [ 165.122605][T10014] bond0: (slave team0): Releasing backup interface [ 165.227402][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.387802][T10023] lo speed is unknown, defaulting to 1000 [ 165.408936][T10041] netlink: 'syz.0.1145': attribute type 2 has an invalid length. [ 165.433805][T10041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1145'. [ 165.645517][T10009] chnl_net:caif_netlink_parms(): no params data found [ 165.709259][T10050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1148'. [ 165.801534][ T11] bridge_slave_1: left allmulticast mode [ 165.808053][ T11] bridge_slave_1: left promiscuous mode [ 165.816022][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.833317][T10067] netlink: 'syz.2.1153': attribute type 3 has an invalid length. [ 165.849385][ T11] bridge_slave_0: left allmulticast mode [ 165.855103][ T11] bridge_slave_0: left promiscuous mode [ 165.862379][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.331699][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.343122][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.353824][ T11] bond0 (unregistering): Released all slaves [ 166.369775][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1156'. [ 166.519910][T10086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1158'. [ 166.757018][ T5850] Bluetooth: hci1: command tx timeout [ 166.781700][T10009] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.789484][T10009] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.797058][T10009] bridge_slave_0: entered allmulticast mode [ 166.804885][T10009] bridge_slave_0: entered promiscuous mode [ 166.881561][T10009] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.905067][T10009] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.927775][T10009] bridge_slave_1: entered allmulticast mode [ 166.934889][T10009] bridge_slave_1: entered promiscuous mode [ 166.956647][T10110] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1164'. [ 166.980884][T10098] lo speed is unknown, defaulting to 1000 [ 167.167422][T10115] bond3: entered promiscuous mode [ 167.183078][T10115] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.334264][T10115] bond3 (unregistering): Released all slaves [ 167.354165][T10009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.370639][T10108] geneve2: entered promiscuous mode [ 167.387134][T10009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.398786][T10098] lo speed is unknown, defaulting to 1000 [ 167.565561][T10009] team0: Port device team_slave_0 added [ 167.584281][T10121] netlink: 'syz.2.1167': attribute type 5 has an invalid length. [ 167.618316][T10009] team0: Port device team_slave_1 added [ 167.657931][ T11] hsr_slave_0: left promiscuous mode [ 167.664433][ T11] hsr_slave_1: left promiscuous mode [ 167.674450][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.683914][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.699164][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.708334][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.725974][T10127] netlink: 'syz.1.1168': attribute type 1 has an invalid length. [ 167.747494][ T11] veth1_macvtap: left promiscuous mode [ 167.753863][ T11] veth0_macvtap: left promiscuous mode [ 167.761804][ T11] veth1_vlan: left promiscuous mode [ 167.767649][ T11] veth0_vlan: left promiscuous mode [ 168.266376][ T11] team0 (unregistering): Port device team_slave_1 removed [ 168.318566][ T11] team0 (unregistering): Port device team_slave_0 removed [ 168.799912][T10009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.807201][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.833959][T10009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.836327][ T5850] Bluetooth: hci1: command tx timeout [ 168.852103][T10127] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 168.908486][T10009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.952022][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.003137][T10009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.066357][T10146] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 169.308833][T10009] hsr_slave_0: entered promiscuous mode [ 169.330043][T10009] hsr_slave_1: entered promiscuous mode [ 169.341759][T10009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.349517][T10009] Cannot create hsr debugfs directory [ 169.915628][T10164] __nla_validate_parse: 4 callbacks suppressed [ 169.915646][T10164] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1179'. [ 169.980060][T10168] infiniband syz0: set active [ 170.010338][T10168] bridge_slave_0: left allmulticast mode [ 170.034230][T10168] bridge_slave_0: left promiscuous mode [ 170.046587][T10168] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.063724][T10168] bridge_slave_1: left allmulticast mode [ 170.069713][T10168] bridge_slave_1: left promiscuous mode [ 170.075462][T10168] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.120160][T10168] bond0: (slave bond_slave_0): Releasing backup interface [ 170.142744][T10168] bond0: (slave bond_slave_1): Releasing backup interface [ 170.203010][T10168] team0: Port device team_slave_0 removed [ 170.226729][T10168] team0: Port device team_slave_1 removed [ 170.233037][T10168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.256596][T10168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.265499][T10168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.281921][T10168] macvlan1: left allmulticast mode [ 170.295821][T10168] veth1_vlan: left allmulticast mode [ 170.301196][T10168] macvlan1: left promiscuous mode [ 170.310409][T10168] bridge0: port 3(macvlan1) entered disabled state [ 170.354189][T10168] bond0: (slave wlan1): Releasing backup interface [ 170.387801][T10168] dummy0: left promiscuous mode [ 170.410900][T10168] team0: Port device vlan2 removed [ 170.428694][ T25] lo speed is unknown, defaulting to 1000 [ 170.457178][T10171] wg2: left promiscuous mode [ 170.493914][T10171] team0: Port device wg2 added [ 170.545259][T10177] lo speed is unknown, defaulting to 1000 [ 170.554772][T10175] pimreg: entered allmulticast mode [ 170.742772][T10177] lo speed is unknown, defaulting to 1000 [ 170.857457][T10009] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.883953][T10009] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.898905][T10009] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 170.907115][ T5160] Bluetooth: hci1: command tx timeout [ 170.916660][T10009] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.103699][T10009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.121935][T10009] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.132588][T10200] bridge0: port 1(gretap0) entered blocking state [ 171.168876][T10200] bridge0: port 1(gretap0) entered disabled state [ 171.175615][T10200] gretap0: entered allmulticast mode [ 171.212508][T10200] gretap0: entered promiscuous mode [ 171.235239][T10200] bridge0: port 1(gretap0) entered blocking state [ 171.243071][T10200] bridge0: port 1(gretap0) entered forwarding state [ 171.322701][T10208] unknown channel width for channel at 909000KHz? [ 171.324765][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.336486][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.352777][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.360068][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.369677][T10204] gretap0: left allmulticast mode [ 171.374741][T10204] gretap0: left promiscuous mode [ 171.381526][T10204] bridge0: port 1(gretap0) entered disabled state [ 171.412422][T10203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1189'. [ 171.751481][T10009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.396927][T10236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'. [ 172.452226][T10236] bridge_slave_1: left promiscuous mode [ 172.485295][T10236] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.500873][T10236] bridge_slave_0: left promiscuous mode [ 172.515924][T10236] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.632909][T10009] veth0_vlan: entered promiscuous mode [ 172.681608][T10009] veth1_vlan: entered promiscuous mode [ 172.751682][T10009] veth0_macvtap: entered promiscuous mode [ 172.763491][T10009] veth1_macvtap: entered promiscuous mode [ 172.784320][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.795478][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.812335][T10009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.843866][T10009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.861897][T10009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.875015][T10009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.891207][T10009] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.903152][T10009] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.923989][T10009] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.934022][T10009] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.986610][ T5160] Bluetooth: hci1: command 0x0419 tx timeout [ 173.019857][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.032102][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.062215][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.095843][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.822494][T10285] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1209'. [ 173.844139][T10285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1209'. [ 174.083738][T10299] ebtables: ebtables: counters copy to user failed while replacing table [ 174.287518][ T2953] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.559186][T10321] netlink: 'syz.0.1216': attribute type 13 has an invalid length. [ 174.680550][ T2953] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.752369][ T5160] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 174.764880][ T5160] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 174.775464][ T5160] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 174.786047][ T5160] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 174.794280][ T5160] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 174.804258][ T5160] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 174.863817][T10330] vlan2: entered allmulticast mode [ 174.895328][T10334] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 174.911933][T10330] macvtap0: entered allmulticast mode [ 174.928591][T10330] macvtap0: left allmulticast mode [ 174.959155][T10331] vlan2: entered allmulticast mode [ 174.964334][T10331] macvtap0: entered allmulticast mode [ 174.981193][T10331] macvtap0: left allmulticast mode [ 175.065397][ T2953] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.109729][T10326] lo speed is unknown, defaulting to 1000 [ 175.174128][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'. [ 175.249318][T10348] bond3: entered promiscuous mode [ 175.254567][T10348] bond3: entered allmulticast mode [ 175.262516][T10348] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.286313][ T2953] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.309945][T10326] lo speed is unknown, defaulting to 1000 [ 175.309983][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1226'. [ 175.461566][ T2953] bridge_slave_1: left allmulticast mode [ 175.482279][ T2953] bridge_slave_1: left promiscuous mode [ 175.500219][ T2953] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.517911][ T2953] bridge_slave_0: left allmulticast mode [ 175.523951][ T2953] bridge_slave_0: left promiscuous mode [ 175.536303][ T2953] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.863376][ T5160] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.882358][ T5160] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.891000][ T5160] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.914504][ T5160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.927619][T10360] netlink: 'syz.2.1229': attribute type 10 has an invalid length. [ 175.936899][ T5160] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 175.944563][ T5160] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.946404][T10360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1229'. [ 176.192513][ T2953] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.203644][ T2953] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.213966][ T2953] bond0 (unregistering): Released all slaves [ 176.227042][T10360] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 176.389930][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1232'. [ 176.400620][T10379] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1232'. [ 176.411725][T10326] chnl_net:caif_netlink_parms(): no params data found [ 176.444978][T10359] lo speed is unknown, defaulting to 1000 [ 176.647390][T10390] nbd: couldn't find a device at index 1073741824 [ 176.659076][T10390] Bluetooth: MGMT ver 1.23 [ 176.673323][T10359] lo speed is unknown, defaulting to 1000 [ 176.783541][T10326] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.784441][T10397] sctp: [Deprecated]: syz.2.1236 (pid 10397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.784441][T10397] Use struct sctp_sack_info instead [ 176.805889][T10326] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.814607][T10326] bridge_slave_0: entered allmulticast mode [ 176.821980][T10326] bridge_slave_0: entered promiscuous mode [ 176.836480][ T5850] Bluetooth: hci1: command tx timeout [ 176.850560][T10326] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.871296][T10326] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.895978][T10326] bridge_slave_1: entered allmulticast mode [ 176.908493][T10326] bridge_slave_1: entered promiscuous mode [ 176.971665][T10399] unknown channel width for channel at 909000KHz? [ 176.980016][T10399] unknown channel width for channel at 909000KHz? [ 177.021383][ T2953] hsr_slave_0: left promiscuous mode [ 177.081094][ T2953] hsr_slave_1: left promiscuous mode [ 177.091904][T10409] netlink: 'syz.2.1241': attribute type 1 has an invalid length. [ 177.105491][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.105573][T10409] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1241'. [ 177.113371][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.133667][ T2953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.146063][ T2953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.175193][ T2953] veth1_macvtap: left promiscuous mode [ 177.181163][ T2953] veth0_macvtap: left promiscuous mode [ 177.194855][ T2953] veth1_vlan: left promiscuous mode [ 177.205903][ T2953] veth0_vlan: left promiscuous mode [ 177.240498][T10415] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1243'. [ 177.342345][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'. [ 177.351610][T10418] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1244'. [ 177.362978][T10418] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1244'. [ 177.724791][ T2953] team0 (unregistering): Port device team_slave_1 removed [ 177.771135][ T2953] team0 (unregistering): Port device team_slave_0 removed [ 178.029882][ T5850] Bluetooth: hci0: command tx timeout [ 178.264066][T10419] dvmrp0: entered allmulticast mode [ 178.296612][T10326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.318546][T10326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.467622][T10326] team0: Port device team_slave_0 added [ 178.487699][T10359] chnl_net:caif_netlink_parms(): no params data found [ 178.556584][T10326] team0: Port device team_slave_1 added [ 178.696992][T10326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.704050][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.730363][T10326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.744120][T10326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.751444][T10326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.777944][T10326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.848114][T10326] hsr_slave_0: entered promiscuous mode [ 178.858615][T10326] hsr_slave_1: entered promiscuous mode [ 178.867819][T10326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.875437][T10326] Cannot create hsr debugfs directory [ 178.891621][T10359] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.901462][T10359] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.908614][ T5850] Bluetooth: hci1: command tx timeout [ 178.923886][T10438] netlink: 'syz.0.1250': attribute type 1 has an invalid length. [ 178.933733][T10359] bridge_slave_0: entered allmulticast mode [ 178.942584][T10359] bridge_slave_0: entered promiscuous mode [ 178.952147][T10359] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.959965][T10359] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.968412][T10359] bridge_slave_1: entered allmulticast mode [ 178.975625][T10359] bridge_slave_1: entered promiscuous mode [ 178.986508][T10444] pimreg3: entered allmulticast mode [ 179.058794][T10359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.079907][T10359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.168491][T10438] pimreg3: left allmulticast mode [ 179.214372][T10359] team0: Port device team_slave_0 added [ 179.249705][T10359] team0: Port device team_slave_1 added [ 179.375155][T10359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.384479][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.411154][T10359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.461811][T10359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.481979][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.516483][T10359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.703382][T10359] hsr_slave_0: entered promiscuous mode [ 179.730839][T10359] hsr_slave_1: entered promiscuous mode [ 179.745057][T10359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.759301][T10359] Cannot create hsr debugfs directory [ 180.088276][T10326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.102220][T10326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 180.106412][ T5850] Bluetooth: hci0: command tx timeout [ 180.210984][T10359] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.278084][T10326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 180.313685][T10326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 180.355628][T10359] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.371569][T10512] lo speed is unknown, defaulting to 1000 [ 180.452472][T10521] __nla_validate_parse: 6 callbacks suppressed [ 180.452490][T10521] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1272'. [ 180.469624][T10359] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.563143][T10512] lo speed is unknown, defaulting to 1000 [ 180.594735][T10359] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.751890][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'. [ 180.783465][T10326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.807527][T10530] vlan2: entered allmulticast mode [ 180.826420][T10530] xfrm0: entered allmulticast mode [ 180.959840][T10326] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.988799][ T5850] Bluetooth: hci1: command tx timeout [ 181.086207][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.093473][ T6890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.128068][ T6890] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.135254][ T6890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.238655][T10359] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 181.273532][T10359] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 181.330240][T10359] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 181.359401][T10359] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.370370][T10549] netlink: 'syz.1.1279': attribute type 32 has an invalid length. [ 181.385158][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1279'. [ 181.401060][T10550] IPv6: sit2: Disabled Multicast RS [ 181.409436][T10549] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 181.422225][T10549] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1279'. [ 181.434696][T10549] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1279'. [ 181.444145][T10549] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1279'. [ 181.462542][T10550] syzkaller0: left allmulticast mode [ 181.604519][T10359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.637403][T10555] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1281'. [ 181.663215][T10359] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.703584][ T6890] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.710801][ T6890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.753144][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.760378][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.909414][T10326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.962630][T10559] dummy0: entered promiscuous mode [ 181.991003][T10559] macsec1: entered promiscuous mode [ 182.018774][T10559] dummy0: left promiscuous mode [ 182.186171][ T5850] Bluetooth: hci0: command tx timeout [ 182.206251][T10359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.247745][T10584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1287'. [ 182.374415][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1286'. [ 182.378121][T10359] veth0_vlan: entered promiscuous mode [ 182.409461][T10590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1286'. [ 182.421916][T10359] veth1_vlan: entered promiscuous mode [ 182.524125][T10359] veth0_macvtap: entered promiscuous mode [ 182.542405][T10326] veth0_vlan: entered promiscuous mode [ 182.574122][T10359] veth1_macvtap: entered promiscuous mode [ 182.617407][T10359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.635595][T10359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.664422][T10359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.673146][T10326] veth1_vlan: entered promiscuous mode [ 182.703662][T10359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.714935][T10359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.727394][T10359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.735989][T10608] netlink: 'syz.0.1292': attribute type 7 has an invalid length. [ 182.762200][T10359] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.771442][T10359] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.780600][T10359] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.789499][T10359] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.848987][T10326] veth0_macvtap: entered promiscuous mode [ 182.902897][T10326] veth1_macvtap: entered promiscuous mode [ 182.950410][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.962903][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.987430][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.003410][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.021470][T10326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.046114][ T6890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.053975][ T6890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.072349][ T5850] Bluetooth: hci1: command tx timeout [ 183.082618][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.093689][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.103634][T10326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.114390][T10326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.125478][T10326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.194634][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.202776][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.211682][T10326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.226074][T10326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.234819][T10326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.243928][T10326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.468438][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.468718][ T6890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.476751][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.484302][ T6890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.213988][T10668] netlink: 'syz.1.1307': attribute type 29 has an invalid length. [ 184.528055][ T6900] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.743474][ T6900] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.843724][ T6900] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.925497][ T6900] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.181154][ T6900] bridge_slave_1: left allmulticast mode [ 185.207427][ T6900] bridge_slave_1: left promiscuous mode [ 185.213227][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.297415][ T6900] bridge_slave_0: left allmulticast mode [ 185.305114][ T6900] bridge_slave_0: left promiscuous mode [ 185.321660][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.704261][ T5160] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.718740][ T5160] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.731148][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.739258][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.751304][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.761573][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.761743][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.778452][ T5862] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 185.790088][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.802944][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.811287][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 185.832373][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.106862][ T6900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.119146][ T6900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.130555][ T6900] bond0 (unregistering): Released all slaves [ 186.147943][T10699] bond0: (slave bond_slave_0): Releasing backup interface [ 186.167771][T10699] bond0: (slave bond_slave_1): Releasing backup interface [ 186.187098][T10699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.195123][T10699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.207553][T10699] bond2: (slave bridge2): Releasing active interface [ 186.440389][T10711] lo speed is unknown, defaulting to 1000 [ 186.683819][T10710] lo speed is unknown, defaulting to 1000 [ 186.692340][T10711] lo speed is unknown, defaulting to 1000 [ 186.699815][T10731] netlink: 'syz.1.1320': attribute type 12 has an invalid length. [ 186.760950][T10739] __nla_validate_parse: 5 callbacks suppressed [ 186.760968][T10739] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1321'. [ 186.804945][T10742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1322'. [ 186.944144][T10749] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1323'. [ 186.962606][T10749] netlink: 'syz.1.1323': attribute type 7 has an invalid length. [ 186.976360][T10749] netlink: 'syz.1.1323': attribute type 8 has an invalid length. [ 186.979898][T10710] lo speed is unknown, defaulting to 1000 [ 187.006722][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 187.016135][T10752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'. [ 187.060832][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 187.104967][T10711] chnl_net:caif_netlink_parms(): no params data found [ 187.215565][ T6900] hsr_slave_0: left promiscuous mode [ 187.225512][ T6900] hsr_slave_1: left promiscuous mode [ 187.242300][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.250473][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.262349][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.269983][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.293086][ T6900] veth1_macvtap: left promiscuous mode [ 187.299162][ T6900] veth0_macvtap: left promiscuous mode [ 187.306484][ T6900] veth1_vlan: left promiscuous mode [ 187.311902][ T6900] veth0_vlan: left promiscuous mode [ 187.767797][ T6900] team0 (unregistering): Port device team_slave_1 removed [ 187.816546][ T6900] team0 (unregistering): Port device team_slave_0 removed [ 187.872574][ T5160] Bluetooth: hci0: command tx timeout [ 187.948922][ T5160] Bluetooth: hci1: command tx timeout [ 188.285176][T10756] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 188.552792][ T5928] hid-generic 0005:10CF:0040.0003: item fetching failed at offset 0/1 [ 188.582145][ T5928] hid-generic 0005:10CF:0040.0003: probe with driver hid-generic failed with error -22 [ 188.664455][T10711] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.672211][T10711] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.692434][T10711] bridge_slave_0: entered allmulticast mode [ 188.700211][T10711] bridge_slave_0: entered promiscuous mode [ 188.734913][T10784] lo speed is unknown, defaulting to 1000 [ 188.744416][T10711] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.781425][T10711] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.814305][T10711] bridge_slave_1: entered allmulticast mode [ 188.847001][T10711] bridge_slave_1: entered promiscuous mode [ 188.871050][T10710] chnl_net:caif_netlink_parms(): no params data found [ 188.980443][T10711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.007497][T10784] lo speed is unknown, defaulting to 1000 [ 189.014404][T10711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.169220][T10711] team0: Port device team_slave_0 added [ 189.183911][T10802] Bluetooth: MGMT ver 1.23 [ 189.197276][T10711] team0: Port device team_slave_1 added [ 189.281986][T10711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.289146][T10711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.322005][T10711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.336680][T10806] lo speed is unknown, defaulting to 1000 [ 189.342663][T10711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.349929][T10711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.395844][T10711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.412935][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 189.468555][T10810] xt_bpf: check failed: parse error [ 189.482542][T10710] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.502176][T10710] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.504124][T10810] netlink: 'syz.0.1337': attribute type 9 has an invalid length. [ 189.520498][T10710] bridge_slave_0: entered allmulticast mode [ 189.533101][T10710] bridge_slave_0: entered promiscuous mode [ 189.554749][T10710] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.570327][T10710] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.586300][T10710] bridge_slave_1: entered allmulticast mode [ 189.603729][T10710] bridge_slave_1: entered promiscuous mode [ 189.648424][T10711] hsr_slave_0: entered promiscuous mode [ 189.665043][T10711] hsr_slave_1: entered promiscuous mode [ 189.679274][T10711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.691752][T10711] Cannot create hsr debugfs directory [ 189.716131][T10806] lo speed is unknown, defaulting to 1000 [ 189.724701][T10710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.771368][T10710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.871923][ T6900] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.906512][T10710] team0: Port device team_slave_0 added [ 189.924885][T10710] team0: Port device team_slave_1 added [ 189.951448][ T5862] Bluetooth: hci0: command tx timeout [ 189.963185][ T6900] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.026305][ T5862] Bluetooth: hci1: command tx timeout [ 190.046931][ T6900] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.097289][T10710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.104303][T10710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.133230][T10710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.205358][ T6900] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.258079][T10710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.271811][T10710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.316135][T10710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.404421][T10710] hsr_slave_0: entered promiscuous mode [ 190.412031][T10710] hsr_slave_1: entered promiscuous mode [ 190.423854][T10710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.441493][T10710] Cannot create hsr debugfs directory [ 190.498668][T10843] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 190.563326][T10845] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1350'. [ 190.594749][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 190.609510][T10845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1350'. [ 190.643300][ T6900] bridge_slave_1: left allmulticast mode [ 190.649360][ T6900] bridge_slave_1: left promiscuous mode [ 190.655152][ T6900] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.664474][ T6900] bridge_slave_0: left allmulticast mode [ 190.670589][ T6900] bridge_slave_0: left promiscuous mode [ 190.677055][ T6900] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.144466][ T6900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.158157][ T6900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.169538][ T6900] bond0 (unregistering): Released all slaves [ 191.201684][T10854] infiniband syz0: set down [ 191.406854][T10856] netlink: 'syz.2.1354': attribute type 2 has an invalid length. [ 191.420033][T10856] netlink: 'syz.2.1354': attribute type 1 has an invalid length. [ 191.629735][ T5862] Bluetooth: hci2: command 0x0406 tx timeout [ 191.629744][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 191.865061][T10854] batadv_slave_1: left promiscuous mode [ 192.025988][ T5850] Bluetooth: hci0: command tx timeout [ 192.096694][T10854] veth0_macvtap: left allmulticast mode [ 192.106063][ T5850] Bluetooth: hci1: command tx timeout [ 192.123781][T10854] geneve0: left allmulticast mode [ 192.137055][T10854] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.150705][T10854] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.159659][T10854] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.168749][T10854] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.233618][T10854] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.245350][T10854] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.254660][T10854] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.263804][T10854] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 192.273949][T10854] geneve2: left promiscuous mode [ 192.279312][T10854] geneve2: left allmulticast mode [ 192.288833][T10854] vlan2: left promiscuous mode [ 192.298503][T10854] bond1: left promiscuous mode [ 192.303323][T10854] bond1: left allmulticast mode [ 192.316429][T10854] macvtap0: left allmulticast mode [ 192.321657][T10854] vlan3: left allmulticast mode [ 192.340766][T10854] ipvlan2: left allmulticast mode [ 192.345989][T10854] veth0_vlan: left allmulticast mode [ 192.356543][T10854] bond3: left promiscuous mode [ 192.361365][T10854] bond3: left allmulticast mode [ 192.440607][ T59] lo speed is unknown, defaulting to 1000 [ 192.467012][T10861] __nla_validate_parse: 4 callbacks suppressed [ 192.467034][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1355'. [ 192.527178][ T59] lo speed is unknown, defaulting to 1000 [ 192.687428][T10864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1355'. [ 192.785149][T10866] pim6reg1: entered promiscuous mode [ 192.791815][T10866] pim6reg1: entered allmulticast mode [ 192.854797][T10869] lo speed is unknown, defaulting to 1000 [ 193.097398][T10869] lo speed is unknown, defaulting to 1000 [ 193.575149][ T6900] hsr_slave_0: left promiscuous mode [ 193.583848][ T6900] hsr_slave_1: left promiscuous mode [ 193.597869][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.605346][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.652612][ T6900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.674815][ T6900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.752430][ T6900] veth1_macvtap: left promiscuous mode [ 193.758673][ T6900] veth0_macvtap: left promiscuous mode [ 193.769868][ T6900] veth1_vlan: left promiscuous mode [ 193.778140][ T6900] veth0_vlan: left promiscuous mode [ 194.113115][ T5850] Bluetooth: hci0: command tx timeout [ 194.189093][ T5850] Bluetooth: hci1: command tx timeout [ 194.338242][ T6900] team0 (unregistering): Port device team_slave_1 removed [ 194.380388][ T6900] team0 (unregistering): Port device team_slave_0 removed [ 194.857827][T10891] macsec2: entered promiscuous mode [ 194.863121][T10891] veth1_to_team: entered promiscuous mode [ 194.871216][T10891] macsec2: entered allmulticast mode [ 194.883216][T10891] veth1_to_team: entered allmulticast mode [ 194.893482][T10891] veth1_to_team: left allmulticast mode [ 194.899178][T10891] veth1_to_team: left promiscuous mode [ 195.040231][T10908] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ÿÿÿÿ [ 195.197371][T10711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.272257][T10711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.304803][T10711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.423121][T10924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1373'. [ 195.439339][T10918] lo speed is unknown, defaulting to 1000 [ 195.462418][T10710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 195.479068][T10711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 195.544632][T10710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 195.684609][T10710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 195.795300][T10918] lo speed is unknown, defaulting to 1000 [ 195.806856][T10710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.349622][T10710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.405341][T10710] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.443447][T10711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.489158][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.496376][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.531972][ T6894] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.539187][ T6894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.673817][T10711] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.758263][ T6911] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.765449][ T6911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.799807][ T6903] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.807058][ T6903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.195201][T10973] vlan4: entered allmulticast mode [ 197.203311][T10973] bridge0: port 1(vlan4) entered blocking state [ 197.222672][T10973] bridge0: port 1(vlan4) entered disabled state [ 197.231835][T10973] vlan4: entered promiscuous mode [ 197.304402][T10710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.357132][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1384'. [ 197.520693][T10990] IPv6: sit2: Disabled Multicast RS [ 197.546929][T10990] bond0: (slave sit2): The slave device specified does not support setting the MAC address [ 197.581285][T10990] bond0: (slave sit2): Error -95 calling set_mac_address [ 197.773827][T11007] syzkaller1: entered promiscuous mode [ 197.786855][T11007] syzkaller1: entered allmulticast mode [ 197.810621][T11011] tun0: tun_chr_ioctl cmd 1074025675 [ 197.841463][T11011] tun0: persist enabled [ 197.846565][T11015] tun0: tun_chr_ioctl cmd 1074025675 [ 197.851905][T11015] tun0: persist enabled [ 197.892679][T10711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.914753][T11009] tun0: tun_chr_ioctl cmd 1074025675 [ 197.922161][T11009] tun0: persist disabled [ 197.935312][T11009] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1388'. [ 197.971639][T10710] veth0_vlan: entered promiscuous mode [ 198.009899][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'. [ 198.023277][T10710] veth1_vlan: entered promiscuous mode [ 198.061422][T10711] veth0_vlan: entered promiscuous mode [ 198.093556][T10711] veth1_vlan: entered promiscuous mode [ 198.108483][T10710] veth0_macvtap: entered promiscuous mode [ 198.123149][T10710] veth1_macvtap: entered promiscuous mode [ 198.139912][T11021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1390'. [ 198.151961][T10710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.159887][T11021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1390'. [ 198.163353][T10710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.182827][T10710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.209447][T11021] dummy0: entered promiscuous mode [ 198.215406][T11021] bond0: entered promiscuous mode [ 198.222494][T11021] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 198.230420][T11021] Cannot create hsr debugfs directory [ 198.236248][T11021] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 198.246510][T11021] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 198.259726][T10711] veth0_macvtap: entered promiscuous mode [ 198.268673][T10710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.280280][T10710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.307687][T10710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.330143][T10711] veth1_macvtap: entered promiscuous mode [ 198.341099][T10710] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.354794][T10710] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.364548][T10710] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.374060][T10710] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.438285][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.457966][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.469183][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.488713][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.507430][T10711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.529268][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.540440][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.560399][T10711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.571194][T10711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.582780][T10711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.619255][T11028] bond5: entered promiscuous mode [ 198.624513][T11028] bond5: entered allmulticast mode [ 198.630892][T11028] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.704819][T10711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.730333][T10711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.739341][T10711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.748185][T10711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.832755][ T6903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.844247][ T6903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.916752][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.943577][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.020953][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.043994][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.142568][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.179196][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.192692][T11056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1398'. [ 199.702499][ T6903] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.240617][ T6903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.359152][ T6903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.580369][ T5160] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.594706][ T5160] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.622275][ T5160] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.635127][ T5160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.648820][ T6903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.660463][ T5160] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.670883][ T5160] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.934749][T11073] lo speed is unknown, defaulting to 1000 [ 201.014352][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.068417][ T5160] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.078959][ T5160] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.082928][T11073] lo speed is unknown, defaulting to 1000 [ 201.088512][ T5160] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.099849][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.126201][T11081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.130344][T11079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.154711][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.182625][ T5862] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 201.215390][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.275339][T11083] lo speed is unknown, defaulting to 1000 [ 201.303343][T11073] chnl_net:caif_netlink_parms(): no params data found [ 201.320745][T11094] netlink: 'syz.0.1407': attribute type 11 has an invalid length. [ 201.371243][T11091] netlink: 'syz.0.1407': attribute type 21 has an invalid length. [ 201.384448][T11091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.392301][T11091] IPv6: NLM_F_CREATE should be set when creating new route [ 201.399605][T11091] IPv6: NLM_F_CREATE should be set when creating new route [ 201.406885][T11091] IPv6: NLM_F_CREATE should be set when creating new route [ 201.438071][T11083] lo speed is unknown, defaulting to 1000 [ 201.563346][T11073] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.578124][T11073] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.585554][T11073] bridge_slave_0: entered allmulticast mode [ 201.593046][T11073] bridge_slave_0: entered promiscuous mode [ 201.607910][T11073] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.621836][T11073] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.631721][T11073] bridge_slave_1: entered allmulticast mode [ 201.645048][T11073] bridge_slave_1: entered promiscuous mode [ 201.848252][T11073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.860567][T11108] netlink: 'syz.2.1411': attribute type 4 has an invalid length. [ 201.880449][T11073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.050656][T11073] team0: Port device team_slave_0 added [ 202.062213][ T6903] bridge_slave_1: left allmulticast mode [ 202.069507][ T6903] bridge_slave_1: left promiscuous mode [ 202.075526][ T6903] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.101926][ T6903] bridge_slave_0: left allmulticast mode [ 202.108798][ T6903] bridge_slave_0: left promiscuous mode [ 202.115025][ T6903] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.206670][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1414'. [ 202.492583][ T6903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.503978][ T6903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.514928][ T6903] bond0 (unregistering): Released all slaves [ 202.532967][T11073] team0: Port device team_slave_1 added [ 202.633353][T11127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1416'. [ 202.651953][T11127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1416'. [ 202.687264][T11083] chnl_net:caif_netlink_parms(): no params data found [ 202.703572][T11073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.714443][T11073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.750107][T11073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.784884][T11073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.792101][T11073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.819514][T11073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.877556][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1417'. [ 202.921633][ T5862] Bluetooth: hci0: command tx timeout [ 202.949149][T11129] lo speed is unknown, defaulting to 1000 [ 203.093607][T11083] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.119980][T11083] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.148853][T11083] bridge_slave_0: entered allmulticast mode [ 203.160556][T11083] bridge_slave_0: entered promiscuous mode [ 203.168417][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1417'. [ 203.209480][T11073] hsr_slave_0: entered promiscuous mode [ 203.216417][T11073] hsr_slave_1: entered promiscuous mode [ 203.223345][T11073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.232067][T11073] Cannot create hsr debugfs directory [ 203.239428][T11130] lo speed is unknown, defaulting to 1000 [ 203.239521][T11083] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.253988][T11083] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.261561][T11083] bridge_slave_1: entered allmulticast mode [ 203.293113][T11083] bridge_slave_1: entered promiscuous mode [ 203.306872][ T5862] Bluetooth: hci1: command tx timeout [ 203.474487][T11083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.567751][T11083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.623815][T11153] ax25_connect(): syz.2.1424 uses autobind, please contact jreuter@yaina.de [ 203.664302][T11129] lo speed is unknown, defaulting to 1000 [ 203.781458][T11130] lo speed is unknown, defaulting to 1000 [ 203.831459][T11083] team0: Port device team_slave_0 added [ 203.930698][T11083] team0: Port device team_slave_1 added [ 203.989490][ T6903] hsr_slave_0: left promiscuous mode [ 203.998576][ T6903] hsr_slave_1: left promiscuous mode [ 204.021627][ T6903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.041234][ T6903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.065110][ T6903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.076150][ T6903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.136815][ T6903] veth1_macvtap: left promiscuous mode [ 204.142411][ T6903] veth0_macvtap: left promiscuous mode [ 204.159061][ T6903] veth1_vlan: left promiscuous mode [ 204.164418][ T6903] veth0_vlan: left promiscuous mode [ 204.699016][T11164] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1426'. [ 204.970423][ T6903] team0 (unregistering): Port device team_slave_1 removed [ 205.000115][ T5862] Bluetooth: hci0: command tx timeout [ 205.019585][ T6903] team0 (unregistering): Port device team_slave_0 removed [ 205.397785][ T5862] Bluetooth: hci1: command tx timeout [ 205.437408][T11157] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 205.447978][T11083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.454934][T11083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.489066][T11083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.503733][T11158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1425'. [ 205.575529][T11175] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1427'. [ 205.631812][T11083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.638930][T11083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.672627][T11083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.803358][T11180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1429'. [ 205.855907][T11083] hsr_slave_0: entered promiscuous mode [ 205.875589][T11083] hsr_slave_1: entered promiscuous mode [ 205.929838][T11083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.937572][T11083] Cannot create hsr debugfs directory [ 206.284060][ T6903] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.323442][T11073] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.334307][T11073] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.350403][T11073] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.390203][ T6903] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.407597][T11073] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 206.451146][ T6903] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.583051][ T6903] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.681226][T11073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.716796][T11073] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.747582][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1435'. [ 206.778517][ T6900] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.785730][ T6900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.805075][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1435'. [ 206.844020][ T6900] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.851269][ T6900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.887333][ T6903] bridge_slave_1: left allmulticast mode [ 206.893156][ T6903] bridge_slave_1: left promiscuous mode [ 206.916594][ T6903] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.931806][ T6903] bridge_slave_0: left allmulticast mode [ 206.944867][ T6903] bridge_slave_0: left promiscuous mode [ 206.951740][ T6903] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.066459][ T5862] Bluetooth: hci0: command tx timeout [ 207.433417][ T6903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.450293][ T6903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.461610][ T6903] bond0 (unregistering): Released all slaves [ 207.476706][ T5862] Bluetooth: hci1: command tx timeout [ 207.663820][T11073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.676318][T11222] Bluetooth: MGMT ver 1.23 [ 207.913372][T11242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'. [ 207.926113][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1447'. [ 208.108226][T11253] vcan0: Master is either lo or non-ether device [ 208.244723][ T6903] hsr_slave_0: left promiscuous mode [ 208.251025][ T6903] hsr_slave_1: left promiscuous mode [ 208.259669][ T6903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.269086][ T6903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.285620][ T6903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.295073][T11257] Cannot find add_set index 32768 as target [ 208.299384][ T6903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.350566][ T6903] veth1_macvtap: left promiscuous mode [ 208.365362][ T6903] veth0_macvtap: left promiscuous mode [ 208.371645][ T6903] veth1_vlan: left promiscuous mode [ 208.377950][ T6903] veth0_vlan: left promiscuous mode [ 208.868625][ T6903] team0 (unregistering): Port device team_slave_1 removed [ 208.911930][ T6903] team0 (unregistering): Port device team_slave_0 removed [ 209.156132][ T5862] Bluetooth: hci0: command tx timeout [ 209.378383][T11073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.420499][T11083] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.444145][T11262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.509998][T11083] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.546976][ T5862] Bluetooth: hci1: command tx timeout [ 209.550521][T11083] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 209.618218][T11083] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 209.689547][T11073] veth0_vlan: entered promiscuous mode [ 209.804551][T11073] veth1_vlan: entered promiscuous mode [ 209.829608][T11073] veth0_macvtap: entered promiscuous mode [ 209.839577][T11073] veth1_macvtap: entered promiscuous mode [ 209.874404][T11073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.885521][T11073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.942783][T11073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.969339][T11284] netlink: 'syz.0.1455': attribute type 1 has an invalid length. [ 209.980398][T11284] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1455'. [ 209.996716][T11284] xt_bpf: check failed: parse error [ 210.011827][T11073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.028027][T11073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.044980][T11073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.063809][T11073] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.090981][T11073] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.102306][T11073] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.116703][T11073] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.274608][T11083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.292467][T11083] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.309370][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.316553][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.352648][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.359869][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.477640][ T6903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.511257][ T6903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.541512][T11304] macsec0: entered allmulticast mode [ 210.559972][ T6894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.566569][T11083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.578854][ T6894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.920032][T11083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.076497][T11327] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (134217729), value rounded to 0 ms [ 211.289084][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.412848][T11083] veth0_vlan: entered promiscuous mode [ 211.448165][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.471134][T11083] veth1_vlan: entered promiscuous mode [ 211.496708][T11083] veth0_macvtap: entered promiscuous mode [ 211.504915][T11083] veth1_macvtap: entered promiscuous mode [ 211.521336][T11083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.532289][T11083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.543983][T11083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.555343][T11083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.567579][T11083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.579898][T11083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.590594][T11083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.600839][T11083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.611502][T11083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.622328][T11083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.670633][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.685623][T11083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.694529][T11083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.704072][T11083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.720646][T11083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.775504][ T6894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.786117][ T6894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.898744][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.922089][ T6894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.939868][ T6894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.019313][T11347] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1471'. [ 212.189161][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.200960][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.215931][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.245110][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.256552][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.267237][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.277997][ T11] bridge_slave_1: left allmulticast mode [ 212.283684][ T11] bridge_slave_1: left promiscuous mode [ 212.302630][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.315138][ T11] bridge_slave_0: left allmulticast mode [ 212.327129][ T11] bridge_slave_0: left promiscuous mode [ 212.332831][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.712002][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.724564][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.735517][ T11] bond0 (unregistering): Released all slaves [ 212.781077][T11367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1478'. [ 212.882338][T11353] lo speed is unknown, defaulting to 1000 [ 213.101670][T11353] lo speed is unknown, defaulting to 1000 [ 213.252505][T11379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.415396][ T11] hsr_slave_0: left promiscuous mode [ 213.428328][ T11] hsr_slave_1: left promiscuous mode [ 213.434457][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.444123][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.453247][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.460804][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.485180][ T11] veth1_macvtap: left promiscuous mode [ 213.491105][ T11] veth0_macvtap: left promiscuous mode [ 213.498166][ T11] veth1_vlan: left promiscuous mode [ 213.503442][ T11] veth0_vlan: left promiscuous mode [ 213.891380][ T11] team0 (unregistering): Port device team_slave_1 removed [ 213.934055][ T11] team0 (unregistering): Port device team_slave_0 removed [ 214.027015][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1483'. [ 214.079549][T11393] Bluetooth: MGMT ver 1.23 [ 214.292823][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.304178][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.322317][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.340844][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.354100][ T5862] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.356087][ T5160] Bluetooth: hci0: command tx timeout [ 214.375794][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.650475][T11389] vlan0: entered promiscuous mode [ 214.660255][T11393] netlink: 'syz.0.1483': attribute type 21 has an invalid length. [ 214.669885][T11393] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1483'. [ 214.797274][T11398] lo speed is unknown, defaulting to 1000 [ 214.924588][T11398] lo speed is unknown, defaulting to 1000 [ 215.044298][T11353] chnl_net:caif_netlink_parms(): no params data found [ 215.057202][T11413] x_tables: duplicate underflow at hook 2 [ 215.146856][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 215.264729][T11353] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.273076][T11353] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.291342][T11353] bridge_slave_0: entered allmulticast mode [ 215.303192][T11353] bridge_slave_0: entered promiscuous mode [ 215.332854][T11353] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.350807][T11353] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.365563][T11353] bridge_slave_1: entered allmulticast mode [ 215.374451][T11353] bridge_slave_1: entered promiscuous mode [ 215.420755][T11435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1496'. [ 215.491900][T11353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.581826][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.612775][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1498'. [ 215.651538][T11353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.762686][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.804658][T11398] chnl_net:caif_netlink_parms(): no params data found [ 215.907656][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.980712][T11353] team0: Port device team_slave_0 added [ 216.014574][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.039972][T11353] team0: Port device team_slave_1 added [ 216.054172][T11450] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 216.074638][T11453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1501'. [ 216.099688][ T5862] ================================================================== [ 216.107787][ T5862] BUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 [ 216.115425][ T5862] Read of size 8 at addr ffff88807a74f198 by task kworker/u9:6/5862 [ 216.123389][ T5862] [ 216.125715][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: kworker/u9:6 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 216.136215][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.146261][ T5862] Workqueue: hci0 hci_cmd_sync_work [ 216.151471][ T5862] Call Trace: [ 216.154748][ T5862] [ 216.157679][ T5862] dump_stack_lvl+0x241/0x360 [ 216.162363][ T5862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.167642][ T5862] ? __pfx__printk+0x10/0x10 [ 216.172231][ T5862] ? _printk+0xd5/0x120 [ 216.176381][ T5862] ? __virt_addr_valid+0x183/0x530 [ 216.181487][ T5862] ? __virt_addr_valid+0x183/0x530 [ 216.186594][ T5862] print_report+0x169/0x550 [ 216.191091][ T5862] ? __virt_addr_valid+0x183/0x530 [ 216.196282][ T5862] ? __virt_addr_valid+0x183/0x530 [ 216.201389][ T5862] ? __virt_addr_valid+0x45f/0x530 [ 216.206490][ T5862] ? __phys_addr+0xba/0x170 [ 216.211020][ T5862] ? set_powered_sync+0x3a/0xc0 [ 216.215874][ T5862] kasan_report+0x143/0x180 [ 216.220393][ T5862] ? set_powered_sync+0x3a/0xc0 [ 216.225241][ T5862] set_powered_sync+0x3a/0xc0 [ 216.229911][ T5862] ? __pfx_set_powered_sync+0x10/0x10 [ 216.235279][ T5862] hci_cmd_sync_work+0x22b/0x400 [ 216.240214][ T5862] ? process_scheduled_works+0x976/0x1850 [ 216.245935][ T5862] process_scheduled_works+0xa63/0x1850 [ 216.251500][ T5862] ? __pfx_process_scheduled_works+0x10/0x10 [ 216.257477][ T5862] ? assign_work+0x364/0x3d0 [ 216.262067][ T5862] worker_thread+0x870/0xd30 [ 216.266657][ T5862] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 216.272546][ T5862] ? __kthread_parkme+0x169/0x1d0 [ 216.277589][ T5862] ? __pfx_worker_thread+0x10/0x10 [ 216.282699][ T5862] kthread+0x2f0/0x390 [ 216.286813][ T5862] ? __pfx_worker_thread+0x10/0x10 [ 216.291944][ T5862] ? __pfx_kthread+0x10/0x10 [ 216.296545][ T5862] ret_from_fork+0x4b/0x80 [ 216.300957][ T5862] ? __pfx_kthread+0x10/0x10 [ 216.305539][ T5862] ret_from_fork_asm+0x1a/0x30 [ 216.310300][ T5862] [ 216.313309][ T5862] [ 216.315619][ T5862] Allocated by task 11453: [ 216.320029][ T5862] kasan_save_track+0x3f/0x80 [ 216.324706][ T5862] __kasan_kmalloc+0x98/0xb0 [ 216.329286][ T5862] __kmalloc_cache_noprof+0x19c/0x2c0 [ 216.334649][ T5862] mgmt_pending_new+0x65/0x250 [ 216.339404][ T5862] mgmt_pending_add+0x36/0x120 [ 216.344249][ T5862] set_powered+0x3cd/0x5e0 [ 216.348657][ T5862] hci_mgmt_cmd+0xc47/0x11d0 [ 216.353244][ T5862] hci_sock_sendmsg+0x7b8/0x11c0 [ 216.358178][ T5862] __sock_sendmsg+0x221/0x270 [ 216.362850][ T5862] sock_write_iter+0x2d7/0x3f0 [ 216.367604][ T5862] vfs_write+0xaeb/0xd30 [ 216.371839][ T5862] ksys_write+0x18f/0x2b0 [ 216.376161][ T5862] do_syscall_64+0xf3/0x230 [ 216.380657][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.386543][ T5862] [ 216.388852][ T5862] Freed by task 11455: [ 216.392902][ T5862] kasan_save_track+0x3f/0x80 [ 216.397573][ T5862] kasan_save_free_info+0x40/0x50 [ 216.402590][ T5862] __kasan_slab_free+0x59/0x70 [ 216.407348][ T5862] kfree+0x1a0/0x440 [ 216.411240][ T5862] settings_rsp+0x2bc/0x390 [ 216.415754][ T5862] mgmt_pending_foreach+0xd1/0x130 [ 216.420885][ T5862] __mgmt_power_off+0x106/0x430 [ 216.425754][ T5862] hci_dev_close_sync+0x6c4/0x11c0 [ 216.430889][ T5862] hci_dev_close+0x112/0x210 [ 216.435484][ T5862] sock_do_ioctl+0x158/0x460 [ 216.440070][ T5862] sock_ioctl+0x626/0x8e0 [ 216.444397][ T5862] __se_sys_ioctl+0xf5/0x170 [ 216.448985][ T5862] do_syscall_64+0xf3/0x230 [ 216.453498][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.459401][ T5862] [ 216.461723][ T5862] The buggy address belongs to the object at ffff88807a74f180 [ 216.461723][ T5862] which belongs to the cache kmalloc-96 of size 96 [ 216.475593][ T5862] The buggy address is located 24 bytes inside of [ 216.475593][ T5862] freed 96-byte region [ffff88807a74f180, ffff88807a74f1e0) [ 216.489230][ T5862] [ 216.491552][ T5862] The buggy address belongs to the physical page: [ 216.497963][ T5862] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a74f [ 216.506720][ T5862] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 216.514254][ T5862] page_type: f5(slab) [ 216.518262][ T5862] raw: 00fff00000000000 ffff88801b041280 ffffea000099c5c0 dead000000000005 [ 216.526834][ T5862] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 216.535401][ T5862] page dumped because: kasan: bad access detected [ 216.541828][ T5862] page_owner tracks the page as allocated [ 216.547544][ T5862] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 2966, tgid 2966 (kworker/u8:8), ts 73515596930, free_ts 73425599737 [ 216.566811][ T5862] post_alloc_hook+0x1f3/0x230 [ 216.571574][ T5862] get_page_from_freelist+0x3649/0x3790 [ 216.577117][ T5862] __alloc_pages_noprof+0x292/0x710 [ 216.582316][ T5862] alloc_pages_mpol_noprof+0x3e8/0x680 [ 216.587764][ T5862] alloc_slab_page+0x6a/0x140 [ 216.592435][ T5862] allocate_slab+0x5a/0x2f0 [ 216.596939][ T5862] ___slab_alloc+0xcd1/0x14b0 [ 216.601608][ T5862] __slab_alloc+0x58/0xa0 [ 216.605936][ T5862] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 216.611299][ T5862] nsim_fib_event_nb+0x17c/0x10b0 [ 216.616316][ T5862] notifier_call_chain+0x19f/0x3e0 [ 216.621424][ T5862] atomic_notifier_call_chain+0xdb/0x180 [ 216.627051][ T5862] call_fib_notifiers+0x31/0x60 [ 216.631889][ T5862] fib6_add+0x1bd5/0x4420 [ 216.636325][ T5862] ip6_ins_rt+0x106/0x170 [ 216.640646][ T5862] __ipv6_ifa_notify+0x5d2/0x1230 [ 216.645668][ T5862] page last free pid 35 tgid 35 stack trace: [ 216.651660][ T5862] free_unref_page+0xdf9/0x1140 [ 216.656507][ T5862] ringbuf_map_free+0xc2/0x120 [ 216.661266][ T5862] bpf_map_free_deferred+0xe4/0x100 [ 216.666461][ T5862] process_scheduled_works+0xa63/0x1850 [ 216.672000][ T5862] worker_thread+0x870/0xd30 [ 216.676586][ T5862] kthread+0x2f0/0x390 [ 216.680644][ T5862] ret_from_fork+0x4b/0x80 [ 216.685051][ T5862] ret_from_fork_asm+0x1a/0x30 [ 216.689822][ T5862] [ 216.692142][ T5862] Memory state around the buggy address: [ 216.697762][ T5862] ffff88807a74f080: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 216.705846][ T5862] ffff88807a74f100: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 216.713897][ T5862] >ffff88807a74f180: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 216.721947][ T5862] ^ [ 216.726783][ T5862] ffff88807a74f200: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 216.734832][ T5862] ffff88807a74f280: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 216.742880][ T5862] ================================================================== [ 216.765848][ T5850] Bluetooth: hci1: command tx timeout [ 216.770457][T11453] nbd: must specify at least one socket [ 216.772923][ T5862] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 216.772941][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: kworker/u9:6 Not tainted 6.12.0-syzkaller-05480-gfcc79e1714e8 #0 [ 216.772964][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.772977][ T5862] Workqueue: hci0 hci_cmd_sync_work [ 216.773008][ T5862] Call Trace: [ 216.773015][ T5862] [ 216.773023][ T5862] dump_stack_lvl+0x241/0x360 [ 216.773050][ T5862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.773071][ T5862] ? __pfx__printk+0x10/0x10 [ 216.773091][ T5862] ? preempt_schedule+0xe1/0xf0 [ 216.773114][ T5862] ? vscnprintf+0x5d/0x90 [ 216.773139][ T5862] panic+0x349/0x880 [ 216.773167][ T5862] ? check_panic_on_warn+0x21/0xb0 [ 216.773189][ T5862] ? __pfx_panic+0x10/0x10 [ 216.773212][ T5862] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 216.773234][ T5862] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 216.773256][ T5862] ? print_report+0x502/0x550 [ 216.773277][ T5862] check_panic_on_warn+0x86/0xb0 [ 216.773298][ T5862] ? set_powered_sync+0x3a/0xc0 [ 216.773377][ T5862] end_report+0x77/0x160 [ 216.773395][ T5862] kasan_report+0x154/0x180 [ 216.773415][ T5862] ? set_powered_sync+0x3a/0xc0 [ 216.773442][ T5862] set_powered_sync+0x3a/0xc0 [ 216.773465][ T5862] ? __pfx_set_powered_sync+0x10/0x10 [ 216.773490][ T5862] hci_cmd_sync_work+0x22b/0x400 [ 216.773516][ T5862] ? process_scheduled_works+0x976/0x1850 [ 216.773540][ T5862] process_scheduled_works+0xa63/0x1850 [ 216.773575][ T5862] ? __pfx_process_scheduled_works+0x10/0x10 [ 216.773604][ T5862] ? assign_work+0x364/0x3d0 [ 216.773630][ T5862] worker_thread+0x870/0xd30 [ 216.773657][ T5862] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 216.773681][ T5862] ? __kthread_parkme+0x169/0x1d0 [ 216.773707][ T5862] ? __pfx_worker_thread+0x10/0x10 [ 216.773732][ T5862] kthread+0x2f0/0x390 [ 216.773750][ T5862] ? __pfx_worker_thread+0x10/0x10 [ 216.773773][ T5862] ? __pfx_kthread+0x10/0x10 [ 216.773793][ T5862] ret_from_fork+0x4b/0x80 [ 216.773810][ T5862] ? __pfx_kthread+0x10/0x10 [ 216.773829][ T5862] ret_from_fork_asm+0x1a/0x30 [ 216.773857][ T5862] [ 216.777654][ T5862] Kernel Offset: disabled