last executing test programs: 1m14.221388637s ago: executing program 2 (id=994): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0xffff05ac, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c00000011000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003"], 0x4c}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@bridge_dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x60a10, 0x10809}}, 0x20}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettaction={0x1c4, 0x32, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7406}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x219, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe00}}]}]}, 0x1c4}}, 0x4000) 1m3.553440795s ago: executing program 2 (id=994): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0xffff05ac, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c00000011000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003"], 0x4c}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@bridge_dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x60a10, 0x10809}}, 0x20}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettaction={0x1c4, 0x32, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7406}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x219, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe00}}]}]}, 0x1c4}}, 0x4000) 51.247266644s ago: executing program 2 (id=994): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0xffff05ac, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c00000011000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003"], 0x4c}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@bridge_dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x60a10, 0x10809}}, 0x20}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettaction={0x1c4, 0x32, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7406}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x219, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe00}}]}]}, 0x1c4}}, 0x4000) 46.662007309s ago: executing program 1 (id=2730): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000280)={{r0}, 0x0, &(0x7f0000000240)}, 0x20) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x2, 0x0, @void, @value}, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r8, r5, 0x16, 0x0, 0x4000, @void, @value}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @NHA_ID={0x8}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan1\x00'}) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x4008804) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r10, 0x8923, &(0x7f0000000040)={'dummy0\x00', 0x1ff}) 46.244579401s ago: executing program 1 (id=2735): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) connect$vsock_stream(r0, &(0x7f00000007c0)={0x28, 0x0, 0xffffd8ee, @hyper}, 0x10) r2 = socket(0x23, 0x80805, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r3, 0x0) write(r3, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) r4 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0xfff3, 0x0, 0x2, 0xffeffffc}, {0x16, 0x0, 0x0, 0x2}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0xfff3, 0x0, 0x2, 0xffeffffc}, {0x16, 0x0, 0x0, 0x2}]}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0xae0, 0x8d8, 0x4c, 0x1a, 0x0, 0x75, 0xa10, 0x258, 0x258, 0xa10, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'syz_tun\x00', 'macvlan0\x00'}, 0x0, 0x8b0, 0x8d8, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@unspec=@u32={{0x7e0}, {[{}, {}, {}, {}, {}, {}, {[], [], 0x0, 0x64}], 0x9}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb40) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) (async) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x2, 0x4, {0xa, 0x4e20, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x32) (async) connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x2, 0x4, {0xa, 0x4e20, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x32) sendto$inet6(r5, &(0x7f0000000140)="1000000005000595cfed06801cce2289aa071bffcb7ff79cc2bedae72809540746deb26f1e2066da70bcc3", 0x2b, 0x40091, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x8, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) 46.02232178s ago: executing program 1 (id=2739): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r2, 0x1) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @remote}, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r1, r0, r0]}}], 0x28, 0x20008880}}], 0x2, 0x4c054) 39.310995818s ago: executing program 2 (id=994): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0xffff05ac, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c00000011000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003"], 0x4c}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@bridge_dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x60a10, 0x10809}}, 0x20}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettaction={0x1c4, 0x32, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7406}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x219, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe00}}]}]}, 0x1c4}}, 0x4000) 37.275072502s ago: executing program 1 (id=2739): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r2, 0x1) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @remote}, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r1, r0, r0]}}], 0x28, 0x20008880}}], 0x2, 0x4c054) 24.421061851s ago: executing program 2 (id=994): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0xffff05ac, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c00000011000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003"], 0x4c}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@bridge_dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x60a10, 0x10809}}, 0x20}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettaction={0x1c4, 0x32, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7406}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x219, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe00}}]}]}, 0x1c4}}, 0x4000) 23.880491982s ago: executing program 1 (id=2739): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r2, 0x1) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @remote}, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r1, r0, r0]}}], 0x28, 0x20008880}}], 0x2, 0x4c054) 9.646759705s ago: executing program 2 (id=994): r0 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0xffff05ac, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c00000011000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003"], 0x4c}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@bridge_dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x60a10, 0x10809}}, 0x20}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@gettaction={0x1c4, 0x32, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7406}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x219, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffe00}}]}]}, 0x1c4}}, 0x4000) 9.11221788s ago: executing program 1 (id=2739): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r2, 0x1) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @remote}, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r1, r0, r0]}}], 0x28, 0x20008880}}], 0x2, 0x4c054) 2.444431052s ago: executing program 4 (id=3098): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0, 0xd}, {0x0}, {0x0}, {&(0x7f0000000980)=""/113, 0x7e}, {&(0x7f00000007c0)=""/202}], 0x6}}], 0x1, 0x120, 0x0) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0xd0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x308, 0xffffffff, 0xc0, 0x190, 0x0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2}}]}, @REJECT={0x28}}, {{@ip={@remote, @multicast1, 0xffffff00, 0xff, 'ip6gre0\x00', 'pimreg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x2, 0x1, 0x4, 0x1, 0x2], 0x1, 0x2}, {0x5, [0x4, 0x4, 0x2, 0x0, 0x3, 0x3], 0x5, 0x1}}}}, {{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'ip6erspan0\x00', 'pimreg0\x00', {}, {0xff}, 0x16}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1]}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0xfb, 0x4}, {}, 0x0, 0xbe6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000140)=0x86) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f00000001c0)=""/26, &(0x7f0000000380)=0x1a) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r6}) getuid() sendmsg$nl_generic(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002d0010002abd7000fcdbdf25000000000c00cd8008001c00", @ANYRES32, @ANYBLOB="04003c006ae574a0a43076cfdedd7e92cb8f05bc756033b24f9dd08a0e5980d1830216fe411f45109890c61540a97cabb5dd6b24b8777a3a3fea48107b98d6917554680d0e6072be6c12ffb10a15e9c36d2ba77b042e5cadbdb907f1ca5c7a6278c2717537abd7809bfe3a07541f88a6c2a5b998a0eb8a8c49a093afcbdec86e8c3fb268"], 0x24}}, 0x48000) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d000babadc31d000000000007000000", @ANYRES32=r9], 0x1c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.48211139s ago: executing program 3 (id=3102): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000300000000020000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x200, 0x0, @l2={'ib', 0x3a, 'gretap0\x00'}}}}}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000640)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f3100000017250017000000000400370009000300", 0x28}, {&(0x7f0000000300)="ef894fdcbcdabcaf90e7b7bd070042628d1de763acdbe34ab066973b7a7959dc4816bcdeaeba1f54b70df7c54652940cc4119dc1d88adad3737e526e1904fd07ff0890c5d72e87faa64ec51484ebb67694514b6b993ee0a7c79141433a049fa39cbd91c454b68bbd689b2a1b019ea90f9dc3d10060cbe6a09fc555840d7597cc556aa7005b31c5386d8525cf49d3626978f016c343ff1c53c7c7c444d840a7fca1731dc0c6a0e626375fe2e08d25029445fe9cecc0d6b362935fcd", 0xbb}, {&(0x7f0000000440)="fd84da8e2ced18c5ea67173834ac3526e115ea78bcf48452e00a16e9a80756bb4b60262eceb7879ad73808749756d8f2f142b13e1f26e315067560a81e2c015d3b958724a162fa8331433d49faad75c15feb9f16120d9b91895533abaf173055", 0x60}, {&(0x7f00000003c0)}], 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x26c, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x43, 0x4, "7595861429cdd7429ffa4887b50f744d28d043de22d8f9e4e3bf280f7bce28f9d14bdfedef9d3d7af141578af7b51a7931c6f4a190f6663f1b4c96663aa2d5"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xca}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x98, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6c481beb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1d, 0x5, "4a2b20aed17d8088defdf8350549e7d1642cd6bf79529e3823"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x150, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x85, 0x4, "084876900a0b870997f34d75b74de3142e1055e74a69f7f2997131b4adc79110ef72867835024c591652296f6fea64f41f24a67bc3236a5e0eea0db009cbad396fb649686c6af09e8d86033fa909aaab0e73dd54ab049fa78d3f4092599ae5c22076f1abbd3ee731713c134fa742cd10b9d1f1a45f920abe7188c6fb61f51e1a74"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0xb4, 0x4, "870c306fc2ff5175fc00fe94c971d871cfe946bf03deaac074ae09b41e24de733e6b6044342004e6492878c32e029c1376e7b3d0ea1ab91e6832cc5b27b5273b658a5b4878fa82b791683fbe4c46b7371ea0c520774f24313f25e79e0173e47e8a7c8212ebcdd5a6093cb878982d21c7f14ffde89b27ba6539442e8891ab4225b0616b0e7dabc4268feb4924ffb7cdab7c611443350e97bd7d8290fdbea9b5312378a91183af60f97a334d745305c364"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4433964e56d74d98}, 0x64000110) 1.241565181s ago: executing program 4 (id=3103): sendto$inet6(0xffffffffffffffff, &(0x7f0000000740)='|', 0x1, 0x0, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000140)=0x1, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x1, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$can_j1939(r1, &(0x7f00000003c0)={&(0x7f00000002c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000340)=[{&(0x7f00000004c0)=""/172, 0xac}, {&(0x7f0000000200)}], 0x2, &(0x7f0000000580)=""/251, 0xfb}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x1, 0x4}, 0x1}, 0x18) (async) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x100000, {0x0, 0x0, 0x74, r4, {0xfff3, 0x8}, {0x4, 0xfff3}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.215088519s ago: executing program 0 (id=3104): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0xd833, 0x200, 0x0, 0x7, r2}, &(0x7f0000000040)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000100010095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0xd833, 0x200, 0x0, 0x7, r2}, &(0x7f0000000040)=0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000100010095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 1.148497269s ago: executing program 3 (id=3105): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1411, 0x20, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x40004) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000100)=0x400, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x1406, 0x100, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x4000) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x1411, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x11, &(0x7f0000000440)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @generic={0xce, 0x3, 0x6, 0x7, 0x9}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000500)='syzkaller\x00', 0x1201, 0xf0, &(0x7f0000000540)=""/240, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x2, 0x2, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[0x1, r3, r1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x3, 0x4, 0x4, 0x9}], 0x10, 0x6, @void, @value}, 0x94) splice(r4, &(0x7f00000007c0)=0x6, r2, &(0x7f0000000800)=0x4, 0x6, 0xf) sendmsg$inet(r3, &(0x7f0000000b00)={&(0x7f0000000840)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000880)="36e629a7d01795ac8f684417c4c160463398dcde4bcc4d03a984e104192bccfd10a141bbf2", 0x25}, {&(0x7f00000008c0)="ea1c70cee5d7cb", 0x7}, {&(0x7f0000000900)="919b9ed1656db2996dce45c95e91e9a0b9638bcaea80fd538fc85c41ca6ca0dd268c6aa421c0422361d6dd7a0ba6484bb0486e79439bb6fe026c592fa3f7c12e32ced937d5da5c11c0e944fb12a7444cff007ec6109d1f8b95af97601c71ee6398b72f17fca74b6dd8c61de6449798206ebad1c52c628f471038ed275126747f2a5a32191290", 0x86}, {&(0x7f00000009c0)="97a4c078a7dee31c48104623d15e6ad53c2456bf466632916ed7be87df967967856b5a7c4ac1ca32fba6a3b6398c30c818ef10125ebc40fa0ba1f2263d5477ade510de086ef5525a7f7f9e3cf0945b50c800dcec371b104d0c01f5a423b2d0ffa4869b5a8efd120a6fa1f4fb0fd2108cee", 0x71}, {&(0x7f0000000a40)="3aa5c82a70f8814a56b0d1d25be6", 0xe}], 0x5}, 0x20040004) clock_gettime(0x6, &(0x7f0000000b40)) r5 = accept4(r0, 0x0, &(0x7f0000000b80), 0x80000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c40)={'netpci0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000d40)={'tunl0\x00', &(0x7f0000000c80)={'syztnl2\x00', 0x0, 0x40, 0x10, 0xfeb, 0x7, {{0x1a, 0x4, 0x0, 0x6, 0x68, 0x66, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0x45, 0x0, [{0x2, 0xe, "4b15e8ce04394c5d142102e1"}, {0x0, 0x8, "f943c97d1cf2"}, {0x5, 0x11, "d2c5ddeefeb0a29fd4cf8c0203649f"}, {0x5, 0x7, "b937012f23"}, {0x5, 0xc, "46333a3b9194f93bc605"}, {0x1, 0x5, "f46e3b"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x1, [@remote]}, @end, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000e00)={'erspan0\x00', &(0x7f0000000d80)={'syztnl2\x00', 0x0, 0x7, 0x40, 0x7, 0x8, {{0xc, 0x4, 0x3, 0xd, 0x30, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast2, @loopback, {[@ssrr={0x89, 0x7, 0x65, [@local]}, @ssrr={0x89, 0x13, 0x86, [@rand_addr=0x64010100, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000e40)={@mcast2, 0x0}, &(0x7f0000000e80)=0x14) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000ec0)=0x0, &(0x7f0000000f00)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000001280)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001240)={&(0x7f0000000f40)={0x2d4, r6, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x5c, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x164, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f00000012c0), &(0x7f0000001300)=0x4) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000001340)=0x75, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000013c0), r5) sendmsg$IPVS_CMD_DEL_SERVICE(r12, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0xc0, r13, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x835}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3aa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001540)={'wlan1\x00'}) ioctl(r0, 0x8000, &(0x7f0000001580)="93b9f1e32e55c884412b3a45c49e08e2b54cf3fbf9d28681074bb034d54841d7401f78e968a0e0893c5314dec44e2301") syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001600)={'syz_tun\x00'}) syz_genetlink_get_family_id$fou(&(0x7f0000001640), 0xffffffffffffffff) 1.040466581s ago: executing program 0 (id=3106): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x0, @empty}, &(0x7f0000000080)=0x80) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x1, 0x8, {{0x21, 0x4, 0x2, 0x4, 0x84, 0x66, 0x0, 0x1, 0x2b, 0x0, @rand_addr=0x64010102, @remote, {[@lsrr={0x83, 0x13, 0x46, [@empty, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x22}]}, @rr={0x7, 0x2b, 0x95, [@private=0xa010100, @empty, @empty, @empty, @empty, @broadcast, @empty, @local, @multicast2, @multicast2]}, @ssrr={0x89, 0x13, 0x26, [@dev={0xac, 0x14, 0x14, 0x2f}, @empty, @empty, @private=0xa010100]}, @noop, @timestamp={0x44, 0x1c, 0x1c, 0x0, 0x1, [0x8, 0x7ff, 0x3ff, 0x0, 0x3, 0x8]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4008054) socket$inet6(0xa, 0x80000, 0x1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe4, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0xc881}, 0x4044044) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000580)={0x0, @dev, @remote}, &(0x7f00000005c0)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1e4, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40084}, 0x4000000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000880), r0) r5 = socket$inet6(0xa, 0x6, 0x8) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xa, &(0x7f00000008c0)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000940)='GPL\x00', 0x8000, 0x73, &(0x7f0000000980)=""/115, 0x41100, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0xbf, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0x9, 0x200, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000bc0)=@o_path={&(0x7f0000000b80)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x19, 0x1f, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x580}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x8}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000d40)='syzkaller\x00', 0xcc, 0x5b, &(0x7f0000000d80)=""/91, 0x40f00, 0x2d, '\x00', r4, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000e40)={0x3, 0x8, 0xfffffffc, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000e80)=[0xffffffffffffffff], &(0x7f0000000ec0)=[{0x0, 0x5, 0x9, 0x3}, {0x2, 0x4, 0x9, 0x2}, {0x0, 0x5, 0x6, 0x1}, {0x5, 0x2, 0xd, 0x4}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c00)={@fallback=r8, r6, 0x13, 0x4, r7, @void, @value=r9}, 0x20) sendmsg$nl_route(r0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)=@ipv6_getnetconf={0x54, 0x52, 0x130, 0x70bd26, 0x25dfdbfd, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x6}, @NETCONFA_FORWARDING={0x8, 0x2, 0xfffffff7}, @NETCONFA_FORWARDING={0x8, 0x2, 0x5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1ff}, @NETCONFA_FORWARDING={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_FORWARDING={0x8, 0x2, 0x3ff}, @NETCONFA_IFINDEX={0x8, 0x1, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x40180) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000001180)=@get={0x1, &(0x7f0000001100)=""/118, 0x10}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000011c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000001200)='cpuacct.usage_all\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000001240)=0x82, 0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r11, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x28, r12, 0x400, 0x800, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1) socket$nl_route(0x10, 0x3, 0x0) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000001440), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, r14, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xb5, 0xc, 0x9, 0x5}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24004004}, 0x800) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001540)) socket$inet6_sctp(0xa, 0x5, 0x84) 1.033378222s ago: executing program 4 (id=3107): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x30, &(0x7f0000000340)=[@in={0x2, 0x0, @local}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000440)=0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x0, 0x37f, 0x148, 0x150, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000080)={r1}, 0x8) 803.17254ms ago: executing program 4 (id=3108): r0 = socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000080)=""/8, 0x5}) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async) r4 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x2}, 0x20}}, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r5, 0x4010744d, &(0x7f0000000000)=0x20000002) (async, rerun: 32) recvfrom(r3, &(0x7f0000000000)=""/27, 0x1b, 0x40000040, 0x0, 0x0) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000009e00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x100, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0xd4, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000841}, 0x4) 629.856527ms ago: executing program 0 (id=3109): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000001240)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6076db4000442f00fe800000000000000000000000000021ff020000000000000000000000000001"], 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="08010000000901080000000000000000010000060c00048008000140000000080c000480080001400000ffff080005400000001f0900010073797a300000000008000640000000010800064000000000b8000200060003400003000014000180080001000a01010208000200e00000012c00018014000300fe8000000000000000000000000000aa140004000000000000000000000000000000000014000180080001007f00000108000200ac1414340c0002"], 0x108}}, 0x0) (async) r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0xffffff81}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 576.832881ms ago: executing program 3 (id=3110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@newtaction={0x5c, 0x30, 0x7, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r4, &(0x7f0000000180)={0x27}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000440)="1a425f3770b268af205c2096cf3a0b353c28019586fa75f943c682a9b3c128851c1c2fe1350a5b994766bce1e24b59d3262ec578e70cb8295b3cee57fb4c161429a2bff8fbf5647da75032c187832a049fea981c7b864465de6bce7661e604adc7fca93f6062578fb4719a710f8870b4586c893ae3d978e64922e14638584262c24a8af7b6ee9678504342", 0x3, r0, 0x4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da", &(0x7f0000000100), 0x1003, r0}, 0x38) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000070090000000000000600000018110000e0d83e2c36405c29ebd9dd04a183aba9869019d0830e20e08556dd66745d9142ee05b8d22c8b6b789ca0cac3159ec5f6c83f17c5e26348a06d2cf548000ba4e3b808cd0872a34a346ab28d6cc700ca7309d52026a018f581bd75611fdf5569f7ffb8ab2a12916aa45ef172246f9182d2955d9387e0e0c1393c67b1fadea52b969662883038c4c64bd277d1", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 463.91403ms ago: executing program 4 (id=3111): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) 437.445238ms ago: executing program 0 (id=3112): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000104000000000000000000007400", @ANYRES32=r1, @ANYBLOB="00000000000000002c0012800b00010067726574617000001c000280060011000000000008000400a8680000060010"], 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r3, 0x1, 0x0, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 315.988285ms ago: executing program 3 (id=3113): r0 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x401, 0x40, 0x7, 'snmp\x00', 'syz0\x00', {0x8000000000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 233.310435ms ago: executing program 0 (id=3114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x81e, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) (async) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, 0x0, &(0x7f0000000040)) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r2, 0x75fb3000) r4 = epoll_create1(0x0) epoll_pwait(r4, &(0x7f00000003c0)=[{}], 0x1, 0x7, &(0x7f0000000400)={[0x173]}, 0x8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x13, 0x1b, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @cb_func={0x18, 0x8, 0x4, 0x0, 0x8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 160.670071ms ago: executing program 4 (id=3115): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='spmi_read_begin\x00', r1}, 0x18) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) (async) r3 = socket$alg(0x26, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18200b660770e0000000000000000000000000000000180100002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b7030000040000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) (async) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000640)="09520f00", 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@fallback=r6, 0xffffffffffffffff, 0x18, 0x10, 0x0, @void, @value=r1}, 0x20) r7 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r8 = socket$rds(0x15, 0x5, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r9, 0x0) (async) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5e8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x1810) sendmsg$rds(r8, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x200000, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x40) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r12, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r13, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) sendmmsg$inet6(r0, &(0x7f00000024c0)=[{{&(0x7f0000000880)={0xa, 0x4e22, 0x80000000, @remote, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="14000000000000002900000000680e000000000000000000"], 0x18}}], 0x1, 0x8000801) 84.707432ms ago: executing program 3 (id=3116): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x72, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0000002d000000010000000200000002000000", @ANYRES32=r1, @ANYBLOB="23e4000000000000000000000000080000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000004000000020000000d00"/28], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000021c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002200)={0x3c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000180)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r9 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet(r9, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)="ba6252c030451dd962f9a9076e5fac3c2d6a10659a23673ad2c4766de9a7ea7f7cc62e30f87f51a2c6178a681c245680a9ae0e1b22a23df0d3fc47e3c15479bb82c7aea7d713237c7b0f1263a0241585c5a2e107482e697a6549d74d2d9acbc5d0fd29d184e924ca0cef4aef0432f02cc9faf637fad9e06b4266166d82e10c16b821b3b32d6f01159651ab98c02f86533784fcfb40c00ec1cb68a7545fb3e891fa2670e3cec5d6f5cd291e60fe25ffe0b5", 0xb1}, {&(0x7f0000000100)="98cd892512869c3a50a25c81b8ed", 0xe}, {&(0x7f0000000140)="2aa2574ccb64d8620fdc", 0xa}, {&(0x7f0000000200)="b350a50c1b897d0e2ef19fc9acb39c1172d6f6f54f34b6590cd2c156bb7ec591c1b75925c4ddfa", 0x27}], 0x4}}], 0x1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r10, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e000000693b39ba7cf57b", @ANYRES32=r10, @ANYBLOB="0300"/20, @ANYRES32=r11, @ANYRES32, @ANYBLOB="0000000004000000050000000900"/28], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000b000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r14 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r14, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) sendmmsg$inet6(r14, &(0x7f0000004380)=[{{&(0x7f0000000340)={0xa, 0x4e21, 0x433d, @empty, 0x6}, 0x1c, 0x0}}], 0x1, 0x4000410) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 82.479977ms ago: executing program 0 (id=3117): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x260, 0x150, 0x150, 0x0, 0xf8010000, 0x370, 0x238, 0x238, 0x370, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@eui64={{0x28}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [0x4e24], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x0, [{}, {0x0, 0x4}], 0x0, 0xd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'pim6reg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xc, 0xe, 0xfffffffa, 0xfa8, '\x00', 'syz0\x00', {0x100000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="f0000000100001000000000000000008fe8000000000000000080000000000aa00000000292938887af48b000000000000ffff0a0101004e2300000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e01010000000000000000000000008c000000000000000000000000000000000000000000000000000000000000000400000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xf0}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x4020) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000340)={0x0, 0x2710}, 0x10) recvmsg(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="d700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000c500f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e6b3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7a29aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e17fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4314f244a94aa8e98b0b263f0083bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc06000000000000008fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e05000000d03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf2871ed2aa2a05e319374511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b22589f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b24464e0ff504b87c90697ec2a82bbfd1c31713190d3e6e502c434909d6ba06cd0361a0fd90552272f24519ea9938413947edd3a0a7aa780c1dcdddf13b46ca94f37c89664c9cc1857d64ca371fa1b6131"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xe6445995d9064ed7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]]}, 0x2c}}, 0x0) sendmsg$inet(r6, &(0x7f0000001d80)={0x0, 0x0, 0x0}, 0x400c885) pipe(&(0x7f00000055c0)={0xffffffffffffffff}) shutdown(r10, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) sendmmsg$inet_sctp(r3, &(0x7f0000008800)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="776b08de", 0x4}], 0x1, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x8, 0x8, 0xf}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x81}}], 0x38, 0x4040000}], 0x1, 0x0) 0s ago: executing program 3 (id=3118): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x30, 0x10, 0x439, 0x70bd2a, 0xffffffe8, {0x0, 0x0, 0xe403, r4, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x20}}, 0x44) (async, rerun: 32) socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) kernel console output (not intermixed with test programs): alid length. [ 284.116739][T13769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.118056][T14088] netlink: 'syz.0.2347': attribute type 4 has an invalid length. [ 284.129766][T13769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.143386][T13769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.152347][T13769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.161931][T14088] netlink: 9491 bytes leftover after parsing attributes in process `syz.0.2347'. [ 284.332184][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.337362][T14098] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2350'. [ 284.351058][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.451507][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.493062][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.611616][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2355'. [ 284.829330][T14119] xt_bpf: check failed: parse error [ 284.925102][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 285.030051][ T3018] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 285.371547][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.397916][T14158] x_tables: unsorted underflow at hook 3 [ 285.870386][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.058912][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 286.205013][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.274261][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.363762][ T62] bridge_slave_1: left allmulticast mode [ 286.369569][ T62] bridge_slave_1: left promiscuous mode [ 286.375330][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.384916][ T62] bridge_slave_0: left allmulticast mode [ 286.390910][ T62] bridge_slave_0: left promiscuous mode [ 286.396598][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.678069][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.691030][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.702056][ T62] bond0 (unregistering): Released all slaves [ 287.170621][ T3020] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 287.170644][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 287.250260][T14184] xfrm0 speed is unknown, defaulting to 1000 [ 287.285450][T14185] __nla_validate_parse: 3 callbacks suppressed [ 287.285471][T14185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2374'. [ 287.308503][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 287.376589][T14187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2375'. [ 287.499981][T14184] xfrm0 speed is unknown, defaulting to 1000 [ 287.638837][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 287.658323][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.669323][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.685061][ T62] hsr_slave_0: left promiscuous mode [ 287.691323][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.716443][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.802691][ T62] hsr_slave_1: left promiscuous mode [ 287.814378][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.829511][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.843163][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'. [ 287.859055][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.877041][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.926589][ T62] veth1_macvtap: left promiscuous mode [ 287.933154][ T62] veth0_macvtap: left promiscuous mode [ 287.939120][ T62] veth1_vlan: left promiscuous mode [ 287.944639][ T62] veth0_vlan: left promiscuous mode [ 288.328338][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 288.442363][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 288.610986][ T62] team0 (unregistering): Port device team_slave_1 removed [ 288.654365][ T62] team0 (unregistering): Port device team_slave_0 removed [ 289.046619][T14184] xfrm0 speed is unknown, defaulting to 1000 [ 289.124823][T14184] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 289.240055][T14184] xfrm0 speed is unknown, defaulting to 1000 [ 289.247347][T14184] xfrm0 speed is unknown, defaulting to 1000 [ 289.308306][T14184] xfrm0 speed is unknown, defaulting to 1000 [ 289.349623][T14184] xfrm0 speed is unknown, defaulting to 1000 [ 289.370974][T14184] xfrm0 speed is unknown, defaulting to 1000 [ 289.394364][T14184] xfrm0 speed is unknown, defaulting to 1000 [ 289.399085][T14221] x_tables: duplicate entry at hook 2 [ 289.432076][ T3018] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 289.471593][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2384'. [ 289.492467][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2384'. [ 289.502323][T14225] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2385'. [ 289.544921][T14225] tipc: Enabling of bearer rejected, failed to enable media [ 289.588986][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 289.589236][T14230] sctp: [Deprecated]: syz.1.2387 (pid 14230) Use of int in maxseg socket option. [ 289.589236][T14230] Use struct sctp_assoc_value instead [ 289.646647][T14191] lo speed is unknown, defaulting to 1000 [ 289.667135][T14232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.758104][ T5837] Bluetooth: hci1: command tx timeout [ 289.816461][T14241] Cannot find del_set index 4 as target [ 289.827348][T14242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.924236][T14244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2391'. [ 290.011875][T14246] vlan0: entered allmulticast mode [ 290.017095][T14246] veth0_vlan: entered allmulticast mode [ 290.034122][T14252] ÿ: renamed from macvtap0 [ 290.050931][T14259] netlink: 'syz.3.2392': attribute type 10 has an invalid length. [ 290.134671][T14259] bridge0: port 1(team0) entered blocking state [ 290.149641][T14259] bridge0: port 1(team0) entered disabled state [ 290.160799][T14259] team0: entered promiscuous mode [ 290.222879][T14191] chnl_net:caif_netlink_parms(): no params data found [ 290.430297][T14282] netlink: 'syz.1.2401': attribute type 2 has an invalid length. [ 290.571926][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 290.580906][T14191] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.610730][T14191] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.639556][T14191] bridge_slave_0: entered allmulticast mode [ 290.647769][T14191] bridge_slave_0: entered promiscuous mode [ 290.674179][T14191] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.682279][T14191] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.691214][T14191] bridge_slave_1: entered allmulticast mode [ 290.702265][T14191] bridge_slave_1: entered promiscuous mode [ 290.711179][T14295] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 290.748329][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 290.837003][T14191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.853497][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2409'. [ 290.855144][T14314] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 290.880063][T14191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.880385][T14311] netlink: 'syz.1.2409': attribute type 5 has an invalid length. [ 290.933704][T14191] team0: Port device team_slave_0 added [ 290.943221][T14311] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2409'. [ 290.943521][T14316] netlink: 'syz.1.2409': attribute type 23 has an invalid length. [ 290.982143][T14191] team0: Port device team_slave_1 added [ 291.029696][T14191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.036890][T14191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.067321][T14191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.084707][T14191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.094537][T14191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.125244][T14191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.241689][T14191] hsr_slave_0: entered promiscuous mode [ 291.259138][T14191] hsr_slave_1: entered promiscuous mode [ 291.265670][T14191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.279533][T14191] Cannot create hsr debugfs directory [ 291.416869][T14322] openvswitch: netlink: Duplicate or invalid key (type 0). [ 291.424525][T14322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.551144][T14329] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2414'. [ 291.565619][T14329] team0: Mode "l " not found [ 291.738562][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.829568][ T5837] Bluetooth: hci1: command tx timeout [ 291.904532][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 292.014598][T14191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 292.035846][T14191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 292.065696][T14365] netlink: 'syz.4.2422': attribute type 1 has an invalid length. [ 292.099483][T14365] netlink: 'syz.4.2422': attribute type 1 has an invalid length. [ 292.117001][T14191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 292.154055][T14372] netlink: 'syz.1.2423': attribute type 4 has an invalid length. [ 292.207228][T14191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 292.253586][T14360] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 292.264139][T14360] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 292.566891][T14393] __nla_validate_parse: 1 callbacks suppressed [ 292.566910][T14393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2429'. [ 292.675459][T14191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.777923][T14401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.836003][T14191] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.863443][ T3018] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 292.889752][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.896986][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.940996][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.948308][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.023039][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2433'. [ 293.070870][ T3018] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 293.130844][T14380] lo speed is unknown, defaulting to 1000 [ 293.139014][T14380] xfrm0 speed is unknown, defaulting to 1000 [ 293.315254][T14419] bond0: entered promiscuous mode [ 293.332243][T14419] bond0: left promiscuous mode [ 293.483346][T14427] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2439'. [ 293.518756][T14427] tipc: Resetting bearer [ 293.536952][T14427] tipc: Resetting bearer [ 293.566972][T14427] gretap0: entered promiscuous mode [ 293.592166][T14433] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2439'. [ 293.632838][T14433] 0ªî{X¹¦: renamed from gretap0 [ 293.694526][T14433] tipc: Disabling bearer [ 293.744560][T14433] 0ªî{X¹¦: left promiscuous mode [ 293.785928][T14433] 0ªî{X¹¦: entered allmulticast mode [ 293.792661][T14433] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 293.873885][T14191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.909297][ T5837] Bluetooth: hci1: command tx timeout [ 293.934579][T14443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2442'. [ 293.966425][T14191] veth0_vlan: entered promiscuous mode [ 293.983849][T14191] veth1_vlan: entered promiscuous mode [ 293.990757][T14447] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2442'. [ 294.000770][T14060] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 294.082314][T14445] netlink: 'syz.4.2443': attribute type 5 has an invalid length. [ 294.093366][T14191] veth0_macvtap: entered promiscuous mode [ 294.120958][T14191] veth1_macvtap: entered promiscuous mode [ 294.185555][T14191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.220004][T14060] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 294.241454][T14191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.271671][T14191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.280998][T14191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.290411][T14191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.299667][T14191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.527216][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.557493][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.641982][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2449'. [ 294.654988][ T3029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.674769][T14472] bond0: entered promiscuous mode [ 294.693393][ T3029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.714844][T14472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.114172][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2454'. [ 295.161306][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 295.299004][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2457'. [ 295.324114][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2459'. [ 295.361493][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 295.545624][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.806592][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.942165][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.153697][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.250000][ T12] bridge_slave_1: left allmulticast mode [ 296.255697][ T12] bridge_slave_1: left promiscuous mode [ 296.261763][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.271986][ T12] bridge_slave_0: left allmulticast mode [ 296.277705][ T12] bridge_slave_0: left promiscuous mode [ 296.283706][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.298316][ T2980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 296.489685][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 296.600877][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.612364][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.626489][ T12] bond0 (unregistering): Released all slaves [ 296.975263][ T12] hsr_slave_0: left promiscuous mode [ 296.984483][ T12] hsr_slave_1: left promiscuous mode [ 296.996596][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.004369][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.013081][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.020615][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.058819][ T12] veth1_macvtap: left promiscuous mode [ 297.064503][ T12] veth0_macvtap: left promiscuous mode [ 297.078283][ T12] veth1_vlan: left promiscuous mode [ 297.083671][ T12] veth0_vlan: left promiscuous mode [ 297.418744][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 297.578775][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.597526][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.607130][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.631117][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.638516][ T146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 297.650816][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.832289][ T12] team0 (unregistering): Port device team_slave_1 removed [ 297.873671][ T12] team0 (unregistering): Port device team_slave_0 removed [ 298.240014][T14528] tipc: New replicast peer: 255.255.255.255 [ 298.247569][T14528] tipc: Enabled bearer , priority 10 [ 298.399665][T14549] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 298.540360][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 298.738207][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 298.809403][T14570] __nla_validate_parse: 1 callbacks suppressed [ 298.809423][T14570] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2473'. [ 299.140594][T14587] 8021q: VLANs not supported on ip6gre0 [ 299.319786][T14598] tipc: Started in network mode [ 299.335640][T14598] tipc: Node identity 00000000000040000000000000000001, cluster identity 4711 [ 299.372875][T14598] tipc: Enabling of bearer rejected, failed to enable media [ 299.388743][T14541] lo speed is unknown, defaulting to 1000 [ 299.409968][T14541] xfrm0 speed is unknown, defaulting to 1000 [ 299.668204][ T5832] Bluetooth: hci1: command tx timeout [ 299.689232][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 299.731982][T14622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2488'. [ 299.851289][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 299.866446][T14541] chnl_net:caif_netlink_parms(): no params data found [ 299.901103][T14633] No such timeout policy "syz0" [ 299.908240][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 300.152183][T14656] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2494'. [ 300.182503][T14652] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2493'. [ 300.247231][T14659] netlink: 'syz.1.2493': attribute type 2 has an invalid length. [ 300.368574][T14541] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.387314][T14541] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.402945][T14541] bridge_slave_0: entered allmulticast mode [ 300.421987][T14541] bridge_slave_0: entered promiscuous mode [ 300.441198][T14541] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.465980][T14541] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.489414][T14541] bridge_slave_1: entered allmulticast mode [ 300.522797][T14541] bridge_slave_1: entered promiscuous mode [ 300.581023][T14673] netlink: 'syz.3.2500': attribute type 24 has an invalid length. [ 300.696258][T14541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.719595][T14679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.734148][T14541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.776827][T14682] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2503'. [ 300.818394][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 300.885392][T14541] team0: Port device team_slave_0 added [ 300.903226][T14541] team0: Port device team_slave_1 added [ 301.028997][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 301.041156][T14636] lo speed is unknown, defaulting to 1000 [ 301.062440][T14541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.070514][T14541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.102196][T14541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.121385][T14636] xfrm0 speed is unknown, defaulting to 1000 [ 301.123198][T14697] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 301.143451][T14541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.150817][T14541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.181793][T14541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.214642][T14700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2508'. [ 301.251278][T14691] 8021q: adding VLAN 0 to HW filter on device bond6 [ 301.260526][T14691] bond6: entered promiscuous mode [ 301.265756][T14691] bond6: entered allmulticast mode [ 301.288871][T14691] bond0: (slave bond6): Enslaving as an active interface with an up link [ 301.473437][T14712] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 301.587849][T14541] hsr_slave_0: entered promiscuous mode [ 301.611023][T14541] hsr_slave_1: entered promiscuous mode [ 301.628872][T14541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.636516][T14541] Cannot create hsr debugfs directory [ 301.656798][T14710] sit0: entered promiscuous mode [ 301.676042][T14710] netlink: 'syz.1.2511': attribute type 1 has an invalid length. [ 301.708282][T14710] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2511'. [ 301.748093][ T5832] Bluetooth: hci1: command tx timeout [ 301.921009][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2515'. [ 301.961973][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 302.139105][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 302.163757][T14734] netlink: 'syz.4.2517': attribute type 5 has an invalid length. [ 302.340652][T14746] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2521'. [ 302.493199][T14750] syzkaller1: entered promiscuous mode [ 302.508697][T14750] syzkaller1: entered allmulticast mode [ 302.544490][T14750] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 302.928134][T14768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2529'. [ 302.996900][T14768] veth7: entered allmulticast mode [ 303.016247][T14541] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 303.049321][T14541] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 303.083680][T14541] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 303.094706][ T2980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 303.151480][T14541] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 303.270363][T14784] vlan0: entered allmulticast mode [ 303.281222][T14784] gretap0: entered allmulticast mode [ 303.389165][T14541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.427329][T14541] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.446153][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.453326][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.496876][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.504149][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.810163][T14818] xt_hashlimit: size too large, truncated to 1048576 [ 303.828156][ T5832] Bluetooth: hci1: command tx timeout [ 304.007492][T14541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.031917][T14826] __nla_validate_parse: 4 callbacks suppressed [ 304.031936][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2542'. [ 304.154489][T14541] veth0_vlan: entered promiscuous mode [ 304.224353][T14541] veth1_vlan: entered promiscuous mode [ 304.279216][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2545'. [ 304.289745][ T146] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 304.289764][ T146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 304.325764][T14833] openvswitch: netlink: nsh attribute has 31087 unknown bytes. [ 304.338110][T14833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.357797][T14541] veth0_macvtap: entered promiscuous mode [ 304.384654][T14838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2547'. [ 304.396106][T14541] veth1_macvtap: entered promiscuous mode [ 304.416886][ T146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 304.476517][T14541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.532690][T14541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.566700][T14541] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.577660][T14541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.590905][T14541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.600441][T14541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.724414][T14850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2551'. [ 304.795127][T14855] veth0_vlan: left promiscuous mode [ 304.888661][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.896549][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.972632][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.003287][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.114818][T14864] netlink: 'syz.4.2557': attribute type 1 has an invalid length. [ 305.139091][T14864] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2557'. [ 305.360755][T14879] netlink: 'syz.0.2561': attribute type 11 has an invalid length. [ 305.438967][ T2980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 305.558336][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 305.616133][T14899] xt_TCPMSS: Only works on TCP SYN packets [ 305.644688][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2568'. [ 305.775434][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2572'. [ 305.852443][T14916] ip6gre2: entered allmulticast mode [ 306.027692][T14928] netlink: 'syz.1.2577': attribute type 21 has an invalid length. [ 306.060546][T14928] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2577'. [ 306.139834][ T2980] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.588213][ T146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 306.698371][ T146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 307.140190][ T2980] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.316676][ T2980] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.405760][ T2980] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.496542][ T2980] bridge_slave_1: left allmulticast mode [ 307.502685][ T2980] bridge_slave_1: left promiscuous mode [ 307.508825][ T2980] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.518992][ T2980] bridge_slave_0: left allmulticast mode [ 307.524700][ T2980] bridge_slave_0: left promiscuous mode [ 307.530978][ T2980] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.700249][ T146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 307.808993][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 307.938880][T14943] netlink: 'syz.4.2582': attribute type 23 has an invalid length. [ 307.977297][ T2980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.019480][ T2980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.041867][ T2980] bond0 (unregistering): Released all slaves [ 308.092060][T14938] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 308.174448][T14951] syzkaller1: entered promiscuous mode [ 308.228510][T14951] syzkaller1: entered allmulticast mode [ 308.271433][T14951] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2583'. [ 308.306177][T14951] netlink: zone id is out of range [ 308.338636][T14951] netlink: zone id is out of range [ 308.363518][T14957] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 308.374744][T14951] netlink: zone id is out of range [ 308.395191][T14951] netlink: get zone limit has 8 unknown bytes [ 308.499762][T14964] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 308.581056][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.606675][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.620603][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.633835][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.652041][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 308.696735][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2592'. [ 308.781093][T14978] ÿ: renamed from dummy0 (while UP) [ 308.810921][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 308.910827][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 308.929828][T14988] vxcan1: tx address claim with different name [ 309.098144][T14996] xt_cgroup: xt_cgroup: no path or classid specified [ 309.474492][T14968] lo speed is unknown, defaulting to 1000 [ 309.520573][T14968] xfrm0 speed is unknown, defaulting to 1000 [ 309.561702][T15025] __nla_validate_parse: 3 callbacks suppressed [ 309.561727][T15025] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2608'. [ 309.706089][T15028] geneve2: entered promiscuous mode [ 309.712955][T15028] geneve2: entered allmulticast mode [ 309.757844][T15029] tipc: Enabled bearer , priority 0 [ 309.852777][T15034] syzkaller0: entered promiscuous mode [ 309.858470][T15034] syzkaller0: entered allmulticast mode [ 309.864851][T15034] tipc: Resetting bearer [ 309.893790][T15026] tipc: Resetting bearer [ 309.960678][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 310.068756][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 310.447731][T15052] x_tables: ip_tables: osf match: only valid for protocol 6 [ 310.631492][T15057] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2618'. [ 310.708532][ T5832] Bluetooth: hci1: command tx timeout [ 311.090627][ T146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 311.190693][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 311.425670][T15026] tipc: Disabling bearer [ 311.454310][ T2980] hsr_slave_0: left promiscuous mode [ 311.462195][ T2980] hsr_slave_1: left promiscuous mode [ 311.470226][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.477723][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.500085][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.517912][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.554305][ T2980] veth1_macvtap: left promiscuous mode [ 311.562539][ T2980] veth0_macvtap: left promiscuous mode [ 311.568373][ T2980] veth1_vlan: left promiscuous mode [ 311.573897][ T2980] veth0_vlan: left promiscuous mode [ 312.094637][ T2980] team0 (unregistering): Port device team_slave_1 removed [ 312.136193][ T2980] team0 (unregistering): Port device team_slave_0 removed [ 312.208404][ T146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 312.310556][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 312.788474][ T5832] Bluetooth: hci1: command tx timeout [ 312.803359][T15075] netlink: 'syz.3.2624': attribute type 29 has an invalid length. [ 312.839234][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2623'. [ 312.865533][T15081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2625'. [ 313.022459][T14968] chnl_net:caif_netlink_parms(): no params data found [ 313.054201][T15091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2628'. [ 313.067622][T15093] netlink: 'syz.4.2627': attribute type 7 has an invalid length. [ 313.098230][T15093] netlink: 15 bytes leftover after parsing attributes in process `syz.4.2627'. [ 313.126997][T15093] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2627'. [ 313.155026][T15093] netlink: 872 bytes leftover after parsing attributes in process `syz.4.2627'. [ 313.223833][T15091] bond7: entered promiscuous mode [ 313.237582][T15091] 8021q: adding VLAN 0 to HW filter on device bond7 [ 313.371405][ T146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 313.499350][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 313.610680][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2633'. [ 313.636813][T14968] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.662746][T14968] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.685450][T14968] bridge_slave_0: entered allmulticast mode [ 313.716584][T14968] bridge_slave_0: entered promiscuous mode [ 313.728163][T14968] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.751179][T14968] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.761724][T14968] bridge_slave_1: entered allmulticast mode [ 313.770797][T14968] bridge_slave_1: entered promiscuous mode [ 313.890542][T14968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.907763][T14968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.044511][T14968] team0: Port device team_slave_0 added [ 314.072585][T14968] team0: Port device team_slave_1 added [ 314.187051][T14968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.197512][T14968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.230633][T14968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.252741][T15145] geneve3: entered promiscuous mode [ 314.258378][T15145] geneve3: entered allmulticast mode [ 314.273960][T14968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.291854][T14968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.330666][T14968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.423344][T14968] hsr_slave_0: entered promiscuous mode [ 314.436142][T14968] hsr_slave_1: entered promiscuous mode [ 314.443539][T14968] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.453332][T14968] Cannot create hsr debugfs directory [ 314.543294][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 314.649227][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 314.673427][T15168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2647'. [ 314.878137][ T5846] Bluetooth: hci1: command tx timeout [ 315.065468][T15190] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2654'. [ 315.249956][T15200] sctp: [Deprecated]: syz.4.2657 (pid 15200) Use of int in max_burst socket option. [ 315.249956][T15200] Use struct sctp_assoc_value instead [ 315.283217][T14968] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 315.339130][T14968] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 315.361526][T14968] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 315.378331][T15207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2658'. [ 315.389255][T14968] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 315.509443][T15209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2659'. [ 315.567736][T15213] No such timeout policy "syz0" [ 315.633164][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'. [ 315.651188][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 315.702129][T15222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2663'. [ 315.712534][T15223] netlink: 'syz.4.2662': attribute type 1 has an invalid length. [ 315.761152][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 315.809396][T14968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.863969][T15227] bridge8: entered allmulticast mode [ 315.902956][T14968] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.986064][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.993319][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.000872][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2667'. [ 316.016739][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2667'. [ 316.112017][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.119307][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.175533][T15245] netlink: 'syz.1.2672': attribute type 1 has an invalid length. [ 316.184119][T15246] netlink: 'syz.1.2672': attribute type 1 has an invalid length. [ 316.196978][T15243] syzkaller1: entered promiscuous mode [ 316.215181][T15243] syzkaller1: entered allmulticast mode [ 316.234434][T15253] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2672'. [ 316.245574][T15251] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2674'. [ 316.372883][T15246] veth9: entered promiscuous mode [ 316.677829][T15280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.742879][T15283] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.812851][T14968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.814155][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 316.929184][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 316.948319][ T5846] Bluetooth: hci1: command 0x0419 tx timeout [ 317.011987][T14968] veth0_vlan: entered promiscuous mode [ 317.061993][T14968] veth1_vlan: entered promiscuous mode [ 317.167675][T14968] veth0_macvtap: entered promiscuous mode [ 317.196824][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.225365][T14968] veth1_macvtap: entered promiscuous mode [ 317.281162][T14968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.329224][T14968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.343213][T14968] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.376505][T14968] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.399180][T14968] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.412635][T14968] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.433644][T15315] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 317.444451][T15316] netlink: 'syz.3.2688': attribute type 1 has an invalid length. [ 317.515176][T15316] 8021q: adding VLAN 0 to HW filter on device bond8 [ 317.571067][T15319] xt_CT: No such helper "pptp" [ 317.776478][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.797345][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.846611][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.866018][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.989708][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 318.052435][ T2980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 318.461618][ T2980] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.550869][T15365] netlink: 'syz.1.2702': attribute type 1 has an invalid length. [ 318.676417][ T2980] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.766000][ T2980] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.859689][ T2980] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.008826][ T2980] bridge_slave_1: left allmulticast mode [ 319.014535][ T2980] bridge_slave_1: left promiscuous mode [ 319.022878][ T2980] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.035104][ T2980] bridge_slave_0: left allmulticast mode [ 319.041649][ T2980] bridge_slave_0: left promiscuous mode [ 319.047386][ T2980] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.118717][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 319.178900][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 319.402889][ T2980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.414907][ T2980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.425982][ T2980] bond0 (unregistering): Released all slaves [ 319.779112][ T2980] hsr_slave_0: left promiscuous mode [ 319.785553][ T2980] hsr_slave_1: left promiscuous mode [ 319.792532][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.800521][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.809150][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.816696][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.843681][ T2980] veth1_macvtap: left promiscuous mode [ 319.849370][ T2980] veth0_macvtap: left promiscuous mode [ 319.855059][ T2980] veth1_vlan: left promiscuous mode [ 319.861159][ T2980] veth0_vlan: left promiscuous mode [ 320.253581][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 320.300370][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 320.327241][ T2980] team0 (unregistering): Port device team_slave_1 removed [ 320.369153][ T2980] team0 (unregistering): Port device team_slave_0 removed [ 320.550014][T15381] __nla_validate_parse: 11 callbacks suppressed [ 320.550035][T15381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2704'. [ 320.566038][T15381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2704'. [ 320.956792][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.978980][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.993157][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.026114][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.036742][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.377429][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 321.439243][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 321.620802][T15415] syzkaller1: entered promiscuous mode [ 321.643798][T15415] syzkaller1: entered allmulticast mode [ 321.667345][T15413] ipt_ECN: cannot use operation on non-tcp rule [ 321.690035][T15415] raw_sendmsg: syz.1.2710 forgot to set AF_INET. Fix it! [ 321.838459][T15397] lo speed is unknown, defaulting to 1000 [ 321.860229][T15397] xfrm0 speed is unknown, defaulting to 1000 [ 322.117358][T15439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2719'. [ 322.188650][T15432] netlink: 'syz.3.2718': attribute type 24 has an invalid length. [ 322.308193][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 322.347395][T15397] chnl_net:caif_netlink_parms(): no params data found [ 322.514994][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 322.539151][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 322.547695][T15459] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 322.559840][T15459] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 322.567637][T15459] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 322.577294][T15459] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 322.591589][T15459] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 322.686929][T15466] netlink: 'syz.4.2725': attribute type 1 has an invalid length. [ 322.729780][T15466] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2725'. [ 322.835435][T15397] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.861235][T15397] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.888418][T15397] bridge_slave_0: entered allmulticast mode [ 322.906861][T15397] bridge_slave_0: entered promiscuous mode [ 322.911253][T15481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2729'. [ 322.930082][T15397] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.937865][T15397] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.953562][T15397] bridge_slave_1: entered allmulticast mode [ 322.966088][T15397] bridge_slave_1: entered promiscuous mode [ 322.982111][T15483] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.2729'. [ 323.108665][ T5846] Bluetooth: hci1: command tx timeout [ 323.144481][T15397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.194952][T15397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.342642][T15397] team0: Port device team_slave_0 added [ 323.357076][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2733'. [ 323.382510][T15397] team0: Port device team_slave_1 added [ 323.405675][T15500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2734'. [ 323.437840][T15501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2734'. [ 323.552512][T15507] netlink: 'syz.0.2736': attribute type 11 has an invalid length. [ 323.578404][T15397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.585801][T15397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.630361][ T2980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 323.660293][T15397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.680616][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 323.719867][T15397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.741576][T15397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.798576][T15397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.938654][T15397] hsr_slave_0: entered promiscuous mode [ 323.949280][T15397] hsr_slave_1: entered promiscuous mode [ 323.955687][T15397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.969665][T15397] Cannot create hsr debugfs directory [ 324.145210][T15523] xt_hashlimit: size too large, truncated to 1048576 [ 324.161798][T15521] xt_hashlimit: size too large, truncated to 1048576 [ 324.306025][T15523] syz.4.2742: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 324.337194][T15523] CPU: 0 UID: 0 PID: 15523 Comm: syz.4.2742 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 324.337223][T15523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 324.337244][T15523] Call Trace: [ 324.337255][T15523] [ 324.337265][T15523] dump_stack_lvl+0x189/0x250 [ 324.337301][T15523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.337328][T15523] ? __pfx__printk+0x10/0x10 [ 324.337348][T15523] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 324.337380][T15523] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 324.337415][T15523] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 324.337450][T15523] warn_alloc+0x214/0x310 [ 324.337486][T15523] ? __pfx_warn_alloc+0x10/0x10 [ 324.337524][T15523] ? __get_vm_area_node+0x1c5/0x2d0 [ 324.337549][T15523] ? __get_vm_area_node+0x25a/0x2d0 [ 324.337583][T15523] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 324.337647][T15523] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 324.337676][T15523] ? __kasan_kmalloc_large+0x1a/0xa0 [ 324.337704][T15523] ? rcu_is_watching+0x15/0xb0 [ 324.337734][T15523] ? htable_create+0xfc/0x7a0 [ 324.337758][T15523] ? htable_create+0xfc/0x7a0 [ 324.337778][T15523] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 324.337805][T15523] ? htable_create+0xfc/0x7a0 [ 324.337825][T15523] ? hashlimit_pernet+0x23/0x240 [ 324.337857][T15523] htable_create+0xfc/0x7a0 [ 324.337889][T15523] hashlimit_mt_check_common+0x719/0xa10 [ 324.337926][T15523] hashlimit_mt_check_v1+0x221/0x360 [ 324.337951][T15523] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 324.337983][T15523] ? xt_find_match+0x1f7/0x250 [ 324.338012][T15523] xt_check_match+0x3ce/0xab0 [ 324.338033][T15523] ? __pfx___mutex_lock+0x10/0x10 [ 324.338061][T15523] ? __pfx_xt_check_match+0x10/0x10 [ 324.338086][T15523] ? pcpu_alloc_noprof+0xfdb/0x16b0 [ 324.338125][T15523] ? xt_find_match+0x1f7/0x250 [ 324.338156][T15523] translate_table+0x1553/0x2040 [ 324.338211][T15523] ? __pfx_translate_table+0x10/0x10 [ 324.338235][T15523] ? __might_fault+0xb0/0x130 [ 324.338284][T15523] ? _copy_from_user+0x94/0xb0 [ 324.338317][T15523] do_ip6t_set_ctl+0x970/0xce0 [ 324.338342][T15523] ? futex_unqueue+0xcb/0xf0 [ 324.338364][T15523] ? rcu_is_watching+0x15/0xb0 [ 324.338393][T15523] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 324.338439][T15523] ? __pfx___mutex_lock+0x10/0x10 [ 324.338462][T15523] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 324.338491][T15523] ? futex_wait+0x285/0x360 [ 324.338520][T15523] ? __pfx_futex_wait+0x10/0x10 [ 324.338551][T15523] nf_setsockopt+0x26c/0x290 [ 324.338581][T15523] rawv6_setsockopt+0x23b/0x5b0 [ 324.338610][T15523] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 324.338636][T15523] ? aa_sock_opt_perm+0x74/0x110 [ 324.338657][T15523] ? sock_common_setsockopt+0x36/0xc0 [ 324.338677][T15523] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 324.338700][T15523] do_sock_setsockopt+0x257/0x3e0 [ 324.338728][T15523] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 324.338749][T15523] ? __fget_files+0x2a/0x420 [ 324.338780][T15523] ? __fget_files+0x3a0/0x420 [ 324.338804][T15523] ? __fget_files+0x2a/0x420 [ 324.338839][T15523] __x64_sys_setsockopt+0x18b/0x220 [ 324.338871][T15523] do_syscall_64+0xf6/0x210 [ 324.338896][T15523] ? clear_bhb_loop+0x45/0xa0 [ 324.338922][T15523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.338941][T15523] RIP: 0033:0x7f45abd8e969 [ 324.338959][T15523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.338977][T15523] RSP: 002b:00007f45a9bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 324.338997][T15523] RAX: ffffffffffffffda RBX: 00007f45abfb6080 RCX: 00007f45abd8e969 [ 324.339012][T15523] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 324.339024][T15523] RBP: 00007f45abe10ab1 R08: 00000000000004c0 R09: 0000000000000000 [ 324.339037][T15523] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 324.339049][T15523] R13: 0000000000000000 R14: 00007f45abfb6080 R15: 00007ffd9cf19f38 [ 324.339083][T15523] [ 324.737427][T15523] Mem-Info: [ 324.740668][T15523] active_anon:3502 inactive_anon:0 isolated_anon:0 [ 324.740668][T15523] active_file:1321 inactive_file:38431 isolated_file:0 [ 324.740668][T15523] unevictable:768 dirty:47 writeback:0 [ 324.740668][T15523] slab_reclaimable:11199 slab_unreclaimable:108262 [ 324.740668][T15523] mapped:28245 shmem:1440 pagetables:656 [ 324.740668][T15523] sec_pagetables:0 bounce:0 [ 324.740668][T15523] kernel_misc_reclaimable:0 [ 324.740668][T15523] free:1326211 free_pcp:3187 free_cma:0 [ 324.804777][T15523] Node 0 active_anon:13808kB inactive_anon:0kB active_file:5284kB inactive_file:153652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112780kB dirty:184kB writeback:0kB shmem:4224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11996kB pagetables:2624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 324.858474][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.868721][T15523] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 324.901952][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.916760][T15523] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 324.940907][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.949445][T15539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2746'. [ 324.959097][T15523] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 324.965747][T15523] Node 0 DMA32 free:1374952kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:13976kB inactive_anon:0kB active_file:5284kB inactive_file:153564kB unevictable:1536kB writepending:180kB present:3129332kB managed:2564156kB mlocked:0kB bounce:0kB free_pcp:13544kB local_pcp:812kB free_cma:0kB [ 325.014533][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.025735][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.033914][T15523] lowmem_reserve[]: 0 0 0 0 0 [ 325.040114][T15523] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 325.071827][T15523] lowmem_reserve[]: 0 0 0 0 0 [ 325.076624][T15523] Node 1 Normal free:3913204kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 325.105795][T15523] lowmem_reserve[]: 0 0 0 0 0 [ 325.110780][T15523] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 325.124192][T15523] Node 0 DMA32: 2*4kB (UE) 18*8kB (E) 23*16kB (ME) 28*32kB (UME) 36*64kB (UME) 26*128kB (UME) 18*256kB (UM) 26*512kB (UM) 9*1024kB (UM) 7*2048kB (UME) 324*4096kB (M) = 1375624kB [ 325.143102][T15523] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 325.154754][T15523] Node 1 Normal: 219*4kB (UME) 57*8kB (UME) 38*16kB (UME) 203*32kB (UME) 90*64kB (UME) 31*128kB (UME) 17*256kB (UME) 5*512kB (UM) 3*1024kB (UME) 3*2048kB (UE) 947*4096kB (M) = 3913204kB [ 325.174994][T15523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 325.186185][T15523] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 325.191631][ T2980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 325.196280][T15523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 325.204383][ T5832] Bluetooth: hci1: command tx timeout [ 325.222694][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 325.255318][T15523] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 325.266744][T15523] 41176 total pagecache pages [ 325.308044][T15523] 0 pages in swap cache [ 325.322942][T15523] Free swap = 124996kB [ 325.327156][T15523] Total swap = 124996kB [ 325.355352][T15523] 2097051 pages RAM [ 325.366358][T15523] 0 pages HighMem/MovableOnly [ 325.388255][T15523] 424354 pages reserved [ 325.392470][T15523] 0 pages cma reserved [ 325.495198][T15397] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 325.513510][T15397] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 325.552336][T15397] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 325.584298][T15397] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 325.653437][T15552] tipc: Enabled bearer , priority 0 [ 325.666133][T15533] lo speed is unknown, defaulting to 1000 [ 325.684955][T15533] xfrm0 speed is unknown, defaulting to 1000 [ 325.855261][T15561] bond5: (slave erspan0): Releasing active interface [ 325.922596][T15569] x_tables: ip_tables: osf match: only valid for protocol 6 [ 326.226690][T15397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.244590][T15583] __nla_validate_parse: 3 callbacks suppressed [ 326.244608][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2757'. [ 326.311658][T15397] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.326575][T15533] chnl_net:caif_netlink_parms(): no params data found [ 326.349382][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.356642][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.369597][ T2980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 326.379727][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 326.443003][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.450269][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.622485][T15533] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.632409][T15533] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.641586][T15533] bridge_slave_0: entered allmulticast mode [ 326.650013][T15533] bridge_slave_0: entered promiscuous mode [ 326.660711][T15533] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.668511][T15533] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.685139][T15533] bridge_slave_1: entered allmulticast mode [ 326.693938][T15533] bridge_slave_1: entered promiscuous mode [ 326.705685][T15599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2761'. [ 326.772906][T15533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.787301][T15533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.896521][T15533] team0: Port device team_slave_0 added [ 326.924396][T15533] team0: Port device team_slave_1 added [ 326.962196][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2763'. [ 327.014063][T15608] netlink: 'syz.4.2763': attribute type 3 has an invalid length. [ 327.024936][T15533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.029076][T15608] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2763'. [ 327.034966][T15533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.044866][T15607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2764'. [ 327.081138][T15533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.107853][T15533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.116776][T15533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.118597][ T5832] Bluetooth: hci4: command tx timeout [ 327.150340][T15533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.170424][T15607] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 327.272977][ T5832] Bluetooth: hci1: command tx timeout [ 327.332985][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2767'. [ 327.426935][T15624] netlink: 'syz.4.2766': attribute type 1 has an invalid length. [ 327.497616][T15533] hsr_slave_0: entered promiscuous mode [ 327.497775][T15627] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2768'. [ 327.513135][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 327.522034][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 327.544701][T15533] hsr_slave_1: entered promiscuous mode [ 327.566740][T15533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.588713][T15533] Cannot create hsr debugfs directory [ 327.597177][T15627] 0·: renamed from hsr_slave_1 (while UP) [ 327.606888][T15627] 0·: entered allmulticast mode [ 327.621631][T15627] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 328.066023][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2775'. [ 328.085140][T15533] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.121702][T15397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.193501][T15533] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.283818][T15659] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20003 [ 328.345172][T15533] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.402588][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2780'. [ 328.422763][T15666] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 328.430600][T15666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.489209][T15533] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.594311][T15397] veth0_vlan: entered promiscuous mode [ 328.610961][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 328.631833][T15397] veth1_vlan: entered promiscuous mode [ 328.659462][ T2980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 328.684934][T15677] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2783'. [ 328.793235][T15397] veth0_macvtap: entered promiscuous mode [ 328.804596][T15533] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 328.825338][T15397] veth1_macvtap: entered promiscuous mode [ 328.825447][T15681] xt_cgroup: xt_cgroup: no path or classid specified [ 328.833918][T15533] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 328.857477][T15533] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 328.880145][T15533] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 328.935412][T15397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.963108][T15686] openvswitch: netlink: Unknown nsh attribute 0 [ 328.980802][T15686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.991555][T15397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.999401][T15686] openvswitch: netlink: Unknown nsh attribute 0 [ 328.999437][T15686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.999759][T15686] openvswitch: netlink: Unknown nsh attribute 0 [ 328.999788][T15686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.000139][T15686] openvswitch: netlink: Unknown nsh attribute 0 [ 329.060159][T15397] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.069386][T15397] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.079766][T15397] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.098237][T15397] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.190657][ T5832] Bluetooth: hci4: command tx timeout [ 329.296192][T15533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.349203][ T5832] Bluetooth: hci1: command tx timeout [ 329.403830][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.415584][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.443357][T15533] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.525067][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.532356][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.567051][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.584674][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.585356][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.599468][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.755690][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 329.780711][T15533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.799301][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 330.271606][T15733] netlink: 'syz.3.2800': attribute type 30 has an invalid length. [ 330.387672][T15533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.567646][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.665671][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.718480][T15533] veth0_vlan: entered promiscuous mode [ 330.741368][T15533] veth1_vlan: entered promiscuous mode [ 330.766463][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.811944][T15533] veth0_macvtap: entered promiscuous mode [ 330.823248][T15533] veth1_macvtap: entered promiscuous mode [ 330.842268][T15533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.853272][T15533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.865043][T15533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.899723][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.919437][T15533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.920655][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 330.931162][T15533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.949760][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 330.960121][T15533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.976701][T15533] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.986035][T15533] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.998139][T15533] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.006869][T15533] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.133533][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.151591][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.162261][ T62] bridge_slave_1: left allmulticast mode [ 331.169376][ T62] bridge_slave_1: left promiscuous mode [ 331.176057][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.185841][ T62] bridge_slave_0: left allmulticast mode [ 331.192314][ T62] bridge_slave_0: left promiscuous mode [ 331.198351][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.273873][ T5832] Bluetooth: hci4: command tx timeout [ 331.544172][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.555877][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.566983][ T62] bond0 (unregistering): Released all slaves [ 331.607325][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.621907][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.974860][ T62] hsr_slave_0: left promiscuous mode [ 331.985888][ T62] hsr_slave_1: left promiscuous mode [ 331.997699][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.006618][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.015743][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.024043][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.047781][ T62] veth1_macvtap: left promiscuous mode [ 332.053436][ T62] veth0_macvtap: left promiscuous mode [ 332.058892][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 332.059929][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 332.067547][ T62] veth1_vlan: left promiscuous mode [ 332.080667][ T62] veth0_vlan: left promiscuous mode [ 333.113229][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.131247][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.147226][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.170338][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.171472][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 333.200768][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.260330][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 333.279884][ T62] team0 (unregistering): Port device team_slave_1 removed [ 333.421669][T15761] __nla_validate_parse: 72 callbacks suppressed [ 333.421689][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2807'. [ 333.437780][T15760] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2807'. [ 333.469477][ T62] team0 (unregistering): Port device team_slave_0 removed [ 333.535615][T15766] netlink: 'syz.0.2808': attribute type 10 has an invalid length. [ 333.620911][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.633878][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.644372][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.667514][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.687157][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.830932][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 334.384770][T15778] tipc: Enabling of bearer rejected, failed to enable media [ 334.409479][ T2980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 334.423131][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 334.532042][T15768] lo speed is unknown, defaulting to 1000 [ 334.542528][T15786] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2813'. [ 334.555635][T15768] xfrm0 speed is unknown, defaulting to 1000 [ 334.975546][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.004666][T15801] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2818'. [ 335.021468][T15756] lo speed is unknown, defaulting to 1000 [ 335.167740][T15756] xfrm0 speed is unknown, defaulting to 1000 [ 335.211812][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.262669][T15816] netlink: 'syz.4.2820': attribute type 10 has an invalid length. [ 335.282799][ T5832] Bluetooth: hci1: command tx timeout [ 335.315337][T15816] macvlan0: entered promiscuous mode [ 335.331951][T15816] macvlan0: entered allmulticast mode [ 335.362116][T15816] veth1_vlan: entered allmulticast mode [ 335.388925][T15816] veth1_vlan: left allmulticast mode [ 335.413152][T15820] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 335.512075][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.549070][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 335.557118][ T2980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 335.580090][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2825'. [ 335.591412][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2825'. [ 335.596848][T15823] lo: entered promiscuous mode [ 335.600557][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2825'. [ 335.611212][T15823] tunl0: entered promiscuous mode [ 335.616106][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2825'. [ 335.628953][T15829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2825'. [ 335.632748][T15823] gre0: entered promiscuous mode [ 335.644752][T15823] gre0: left allmulticast mode [ 335.655335][T15823] gretap0: entered promiscuous mode [ 335.676964][T15823] erspan0: entered promiscuous mode [ 335.692050][T15823] ip_vti0: entered promiscuous mode [ 335.749904][ T5832] Bluetooth: hci4: command tx timeout [ 335.777191][T15838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2827'. [ 335.838921][T15768] chnl_net:caif_netlink_parms(): no params data found [ 335.900013][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.224888][T15768] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.233007][T15768] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.241230][T15768] bridge_slave_0: entered allmulticast mode [ 336.250008][T15768] bridge_slave_0: entered promiscuous mode [ 336.290483][T15768] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.300902][T15768] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.319089][T15768] bridge_slave_1: entered allmulticast mode [ 336.331078][T15768] bridge_slave_1: entered promiscuous mode [ 336.540666][T15860] dvmrp1: entered allmulticast mode [ 336.620905][T15768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.685086][T15768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.695158][ T3018] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 336.777071][T15756] chnl_net:caif_netlink_parms(): no params data found [ 336.806078][T15871] netlink: 'syz.4.2834': attribute type 14 has an invalid length. [ 336.831065][T15871] netlink: 'syz.4.2834': attribute type 13 has an invalid length. [ 336.855015][T15768] team0: Port device team_slave_0 added [ 336.889709][T15768] team0: Port device team_slave_1 added [ 337.107844][T15768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.119156][T15768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.147060][T15768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.160969][T15768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.168626][T15768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.203154][T15768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.215151][ T62] bridge_slave_1: left allmulticast mode [ 337.221501][ T62] bridge_slave_1: left promiscuous mode [ 337.227291][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.240573][ T62] bridge_slave_0: left allmulticast mode [ 337.253671][ T62] bridge_slave_0: left promiscuous mode [ 337.259607][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.348650][ T5832] Bluetooth: hci1: command tx timeout [ 337.644830][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.657693][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.669562][ T62] bond0 (unregistering): Released all slaves [ 337.823054][T14061] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 337.823074][T14061] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.824499][ T146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 337.830665][ T5832] Bluetooth: hci4: command tx timeout [ 338.008965][T15768] hsr_slave_0: entered promiscuous mode [ 338.015859][T15768] hsr_slave_1: entered promiscuous mode [ 338.024211][T15768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.032526][T15768] Cannot create hsr debugfs directory [ 338.102705][T15756] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.122748][T15756] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.134798][T15756] bridge_slave_0: entered allmulticast mode [ 338.150833][T15756] bridge_slave_0: entered promiscuous mode [ 338.218946][T15756] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.248723][T15756] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.275643][T15756] bridge_slave_1: entered allmulticast mode [ 338.287198][T15756] bridge_slave_1: entered promiscuous mode [ 338.506712][T15756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.536459][T15935] xt_ecn: cannot match TCP bits for non-tcp packets [ 338.540154][T15756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.765365][T15942] x_tables: duplicate entry at hook 2 [ 338.870093][T15756] team0: Port device team_slave_0 added [ 338.940213][T15756] team0: Port device team_slave_1 added [ 338.949506][ T2980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 338.957534][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 339.042504][T15756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.050392][T15756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.077105][T15756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.124374][ T62] hsr_slave_0: left promiscuous mode [ 339.131251][ T62] hsr_slave_1: left promiscuous mode [ 339.143308][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.153641][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.168639][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.176115][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.220358][ T62] veth1_macvtap: left promiscuous mode [ 339.226153][ T62] veth0_macvtap: left promiscuous mode [ 339.232291][ T62] veth1_vlan: left promiscuous mode [ 339.237689][ T62] veth0_vlan: left promiscuous mode [ 339.406402][T15965] __nla_validate_parse: 8 callbacks suppressed [ 339.406424][T15965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2859'. [ 339.431394][ T5832] Bluetooth: hci1: command tx timeout [ 339.682210][T15974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2859'. [ 339.919011][ T5832] Bluetooth: hci4: command tx timeout [ 339.935931][ T62] team0 (unregistering): Port device team_slave_1 removed [ 339.977453][ T62] team0 (unregistering): Port device team_slave_0 removed [ 340.109558][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 340.117485][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 340.386800][T15756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.394609][T15756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.421337][T15756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.537871][T15756] hsr_slave_0: entered promiscuous mode [ 340.567213][T15756] hsr_slave_1: entered promiscuous mode [ 340.582458][T15756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.591545][T15756] Cannot create hsr debugfs directory [ 340.842155][T15993] netlink: 'syz.0.2866': attribute type 2 has an invalid length. [ 341.228662][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 341.228700][ T2980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 341.519822][ T5832] Bluetooth: hci1: command tx timeout [ 341.591198][T15768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 341.626848][T15768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 341.644653][T15768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 341.677674][T15768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 341.727060][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2876'. [ 341.857576][T15756] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 341.883239][T15756] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 341.902147][T15756] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 341.936592][T15756] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 341.988957][ T5832] Bluetooth: hci4: command tx timeout [ 342.083403][T16042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2881'. [ 342.260154][T15768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.285273][T15756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.303683][T15768] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.372976][T15756] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.401526][T16055] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.2884'. [ 342.446726][T14061] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.454010][T14061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.463511][ T3018] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 342.471952][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 342.534881][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.542151][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.573124][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.580410][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.603632][T16064] tipc: New replicast peer: 172.20.20.56 [ 342.655352][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.662792][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.253325][T15768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.310284][T16098] netlink: 'syz.0.2895': attribute type 1 has an invalid length. [ 343.318825][T16098] netlink: 'syz.0.2895': attribute type 2 has an invalid length. [ 343.327223][T16098] netlink: 'syz.0.2895': attribute type 1 has an invalid length. [ 343.386757][T15756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.445569][T16102] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2897'. [ 343.491163][T15756] veth0_vlan: entered promiscuous mode [ 343.523871][T15756] veth1_vlan: entered promiscuous mode [ 343.549099][T15768] veth0_vlan: entered promiscuous mode [ 343.589614][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 343.590335][ T146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 343.605872][T15768] veth1_vlan: entered promiscuous mode [ 343.634299][T15756] veth0_macvtap: entered promiscuous mode [ 343.655113][T15756] veth1_macvtap: entered promiscuous mode [ 343.655138][T16106] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2898'. [ 343.672277][T16106] NCSI netlink: No device for ifindex 0 [ 343.702470][T15756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.721918][T16109] syzkaller1: entered promiscuous mode [ 343.733297][T16109] syzkaller1: entered allmulticast mode [ 343.753960][T15756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.794485][T15756] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.806459][T15756] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.816386][T15756] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.826245][T15756] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.867712][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2900'. [ 343.898851][T15768] veth0_macvtap: entered promiscuous mode [ 343.918710][T15768] veth1_macvtap: entered promiscuous mode [ 344.015956][T15768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.039467][T15768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.051970][T15768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.135379][T15768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.168020][T15768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.191672][T15768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.213278][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.229187][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.273715][T15768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.286429][T15768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.297577][T15768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.316637][T15768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.335517][T16128] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 344.360127][T16128] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 344.507774][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.519460][T16138] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 344.530451][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.611276][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.642709][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.710538][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 344.720510][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 344.760460][T16148] netlink: 'syz.3.2909': attribute type 21 has an invalid length. [ 344.770054][T16148] IPv6: NLM_F_CREATE should be specified when creating new route [ 344.777908][T16148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 344.785239][T16148] IPv6: NLM_F_CREATE should be set when creating new route [ 344.792608][T16148] IPv6: NLM_F_CREATE should be set when creating new route [ 344.799982][T16148] IPv6: NLM_F_CREATE should be set when creating new route [ 344.812809][T16150] netlink: 13 bytes leftover after parsing attributes in process `syz.4.2908'. [ 344.836039][T16150] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2908'. [ 344.879265][ T5832] block nbd1: Receive control failed (result -32) [ 344.910857][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.927458][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.061638][T16161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2913'. [ 345.313081][ T3029] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.484432][ T3029] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.745826][ T3029] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.850041][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 345.856316][ T146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 345.966392][ T3029] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.047458][T16191] pimreg: entered allmulticast mode [ 346.094818][T16191] pimreg: left allmulticast mode [ 346.384834][T16200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2924'. [ 346.395405][ T3029] bridge_slave_1: left allmulticast mode [ 346.403801][ T3029] bridge_slave_1: left promiscuous mode [ 346.434859][ T3029] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.482803][ T3029] bridge_slave_0: left allmulticast mode [ 346.496141][T16204] netlink: 'syz.4.2924': attribute type 1 has an invalid length. [ 346.498794][ T3029] bridge_slave_0: left promiscuous mode [ 346.518660][T16204] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2924'. [ 346.540156][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 346.542001][ T3029] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.561589][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 346.572770][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 346.583520][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 346.591341][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.616223][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 346.632283][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 346.643833][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 346.655032][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 346.663560][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.778832][T16214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2928'. [ 346.981772][T16056] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 347.009680][T16056] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 347.079005][ T3029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.093196][ T3029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.104433][ T3029] bond0 (unregistering): Released all slaves [ 347.544575][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2932'. [ 347.619702][T16205] lo speed is unknown, defaulting to 1000 [ 347.658584][T16205] xfrm0 speed is unknown, defaulting to 1000 [ 347.819927][T16243] sctp: [Deprecated]: syz.4.2935 (pid 16243) Use of int in max_burst socket option deprecated. [ 347.819927][T16243] Use struct sctp_assoc_value instead [ 348.108963][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 348.134672][T16205] chnl_net:caif_netlink_parms(): no params data found [ 348.149936][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 348.191609][T16208] lo speed is unknown, defaulting to 1000 [ 348.291021][T16208] xfrm0 speed is unknown, defaulting to 1000 [ 348.324066][T16260] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 348.373174][T16261] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 348.575368][ T3029] hsr_slave_0: left promiscuous mode [ 348.608746][ T3029] hsr_slave_1: left promiscuous mode [ 348.615941][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.630064][ T5846] Bluetooth: hci1: command tx timeout [ 348.650248][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.692039][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.713132][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.722519][ T5846] Bluetooth: hci4: command tx timeout [ 348.755654][ T3029] veth1_macvtap: left promiscuous mode [ 348.762076][ T3029] veth0_macvtap: left promiscuous mode [ 348.767864][ T3029] veth1_vlan: left promiscuous mode [ 348.774639][ T3029] veth0_vlan: left promiscuous mode [ 349.248219][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 349.256168][ T146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 349.273975][ T3029] team0 (unregistering): Port device team_slave_1 removed [ 349.345267][ T3029] team0 (unregistering): Port device team_slave_0 removed [ 349.455367][T13412] IPVS: starting estimator thread 0... [ 349.558509][T16287] IPVS: using max 28 ests per chain, 67200 per kthread [ 350.054418][T16297] netlink: 'syz.0.2946': attribute type 1 has an invalid length. [ 350.068360][T16297] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2946'. [ 350.176354][T16205] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.190285][T16205] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.197611][T16205] bridge_slave_0: entered allmulticast mode [ 350.210222][T16205] bridge_slave_0: entered promiscuous mode [ 350.253848][T16205] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.262396][T16205] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.270995][T16205] bridge_slave_1: entered allmulticast mode [ 350.279666][T16205] bridge_slave_1: entered promiscuous mode [ 350.358330][ T53] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 350.387663][T16056] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 350.501213][T16310] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 350.511908][T16205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.526143][T16205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.708941][ T5846] Bluetooth: hci1: command tx timeout [ 350.788820][ T5846] Bluetooth: hci4: command tx timeout [ 350.832857][T16205] team0: Port device team_slave_0 added [ 350.860260][T16205] team0: Port device team_slave_1 added [ 350.897598][T16326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2955'. [ 350.916255][T16208] chnl_net:caif_netlink_parms(): no params data found [ 351.142987][T16205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.163651][T16205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.220006][T16205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.373249][T16205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.384466][T16205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.412374][T16205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.455660][T16354] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2961'. [ 351.513827][ T3029] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.532610][T16056] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 351.542062][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 351.711761][ T3029] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.815821][T16374] net_ratelimit: 125 callbacks suppressed [ 351.815841][T16374] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 351.824833][T16205] hsr_slave_0: entered promiscuous mode [ 351.848661][T16205] hsr_slave_1: entered promiscuous mode [ 351.855556][T16374] nbd: must specify at least one socket [ 351.863059][T16205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.879164][T16205] Cannot create hsr debugfs directory [ 351.909695][ T3029] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.926067][T16208] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.934003][T16208] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.947584][T16208] bridge_slave_0: entered allmulticast mode [ 351.957105][T16208] bridge_slave_0: entered promiscuous mode [ 351.985270][T16208] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.995781][T16208] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.015863][T16208] bridge_slave_1: entered allmulticast mode [ 352.031921][T16208] bridge_slave_1: entered promiscuous mode [ 352.106368][ T3029] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.237597][T16208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.253360][T16397] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2972'. [ 352.294616][T16208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.366380][T16399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2973'. [ 352.402922][T16208] team0: Port device team_slave_0 added [ 352.416088][T16399] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2973'. [ 352.426095][T16399] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2973'. [ 352.445356][T16208] team0: Port device team_slave_1 added [ 352.515045][T16208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.524852][T16208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.553971][T16208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.566732][ T3029] bridge_slave_1: left allmulticast mode [ 352.574070][ T3029] bridge_slave_1: left promiscuous mode [ 352.598897][ T3029] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.619737][ T3029] bridge_slave_0: left allmulticast mode [ 352.625453][ T3029] bridge_slave_0: left promiscuous mode [ 352.634905][ T3029] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.698827][ T3018] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 352.699705][T16056] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 352.788838][ T5846] Bluetooth: hci1: command tx timeout [ 352.868940][ T5846] Bluetooth: hci4: command tx timeout [ 353.061496][ T3029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.077681][ T3029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.091953][ T3029] bond0 (unregistering): Released all slaves [ 353.121419][T16208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.129637][T16208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.156660][T16208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.803410][T16208] hsr_slave_0: entered promiscuous mode [ 353.830468][T16208] hsr_slave_1: entered promiscuous mode [ 353.848693][T16056] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 353.857710][T16208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.863684][T16448] netlink: 'syz.4.2985': attribute type 9 has an invalid length. [ 353.866386][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 353.886530][T16208] Cannot create hsr debugfs directory [ 353.984535][T16451] netlink: 'syz.3.2986': attribute type 8 has an invalid length. [ 354.063010][T16454] netlink: 'syz.3.2986': attribute type 8 has an invalid length. [ 354.376160][T16465] batadv0: entered promiscuous mode [ 354.387415][T16465] batadv0: left promiscuous mode [ 354.397482][T16469] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2991'. [ 354.422206][T16466] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2990'. [ 354.438525][ T3029] hsr_slave_0: left promiscuous mode [ 354.445209][ T3029] hsr_slave_1: left promiscuous mode [ 354.454959][T16470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2990'. [ 354.455997][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.479781][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.497396][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.519777][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.582948][ T3029] veth1_macvtap: left promiscuous mode [ 354.600173][ T3029] veth0_macvtap: left promiscuous mode [ 354.605910][ T3029] veth1_vlan: left promiscuous mode [ 354.623227][ T3029] veth0_vlan: left promiscuous mode [ 354.868876][ T5846] Bluetooth: hci1: command tx timeout [ 354.948841][ T5846] Bluetooth: hci4: command tx timeout [ 354.984993][ T2980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 355.030884][ T146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 355.166087][ T3029] team0 (unregistering): Port device team_slave_1 removed [ 355.207465][ T3029] team0 (unregistering): Port device team_slave_0 removed [ 355.890511][T16495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2997'. [ 356.049582][T16205] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 356.099698][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 356.123873][T16503] ieee802154 phy0 wpan0: encryption failed: -22 [ 356.144617][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 356.165449][T16205] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 356.192305][T16205] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 356.222664][T16205] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 356.254513][T16506] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 356.311733][T16506] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 356.339014][T16506] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 356.357704][T16506] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 356.377690][T16506] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 356.403082][T16511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3003'. [ 356.426518][T16506] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 356.446299][T16506] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 356.466850][T16506] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 356.487103][T16506] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 356.663879][T16208] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 356.685414][T16205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.693906][T16208] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 356.732373][T16208] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 356.757169][T16208] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 356.794510][T16205] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.855640][T16520] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3005'. [ 356.867202][ T3029] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.874426][ T3029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.886809][T16517] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3005'. [ 356.903349][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.910601][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.213269][T16208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.230266][ T2980] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 357.265966][T16531] netlink: 'syz.3.3008': attribute type 11 has an invalid length. [ 357.287273][ T146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 357.304554][T16208] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.318704][T16531] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3008'. [ 357.353946][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.361222][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.462100][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.469360][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.612496][T16205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.744905][T16205] veth0_vlan: entered promiscuous mode [ 357.775815][T16556] netlink: 'syz.3.3012': attribute type 1 has an invalid length. [ 357.801042][T16205] veth1_vlan: entered promiscuous mode [ 357.867236][T16556] 8021q: adding VLAN 0 to HW filter on device bond11 [ 357.993855][T16205] veth0_macvtap: entered promiscuous mode [ 358.033002][T16208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.069336][T16205] veth1_macvtap: entered promiscuous mode [ 358.189574][T16205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.251805][T16205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.298141][T16208] veth0_vlan: entered promiscuous mode [ 358.310193][T16582] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3021'. [ 358.341944][T16582] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3021'. [ 358.349609][T14061] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 358.359937][T16205] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.375118][T16205] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.390450][T16205] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.409458][T16205] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.443780][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 358.475366][T16208] veth1_vlan: entered promiscuous mode [ 358.724885][T16208] veth0_macvtap: entered promiscuous mode [ 358.756479][T16208] veth1_macvtap: entered promiscuous mode [ 358.804257][T16604] netlink: 'syz.3.3027': attribute type 10 has an invalid length. [ 358.830913][T16604] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3027'. [ 358.848633][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.870690][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.904158][T16604] dummy0: entered promiscuous mode [ 358.913985][T16604] dummy0: left allmulticast mode [ 358.923459][T16604] bridge0: port 2(dummy0) entered blocking state [ 358.936474][T16604] bridge0: port 2(dummy0) entered disabled state [ 358.943889][T16604] dummy0: entered allmulticast mode [ 359.077127][T16613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3026'. [ 359.078982][T16208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.103495][T16208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.123865][T16208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.146259][T16606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3026'. [ 359.163044][T16208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.174748][T16208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.187508][T16208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.227512][T16056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.245477][T16208] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.264988][T16056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.265872][T16208] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.303813][T16208] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.343740][T16208] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.488836][T16056] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 359.644322][T16056] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 359.656808][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.675462][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.714209][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.723319][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.881720][T16641] netlink: 'syz.4.3037': attribute type 33 has an invalid length. [ 359.983106][ T3020] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.354361][ T3020] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.451731][ T3020] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.571177][ T3020] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.611087][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 360.723154][ T3020] bridge_slave_1: left allmulticast mode [ 360.729181][ T3020] bridge_slave_1: left promiscuous mode [ 360.734969][ T3020] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.745575][ T3020] bridge_slave_0: left allmulticast mode [ 360.752174][ T3020] bridge_slave_0: left promiscuous mode [ 360.757993][ T3020] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.771280][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 360.815570][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.825773][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.835265][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.851108][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.863060][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.983238][T16654] net_ratelimit: 24 callbacks suppressed [ 360.983258][T16654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.078844][T16659] tipc: Failed to remove unknown binding: 66,1,1/2889992097:1028231398/1028231400 [ 361.441539][ T3020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.452617][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.462486][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.471657][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.480468][ T3020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.490746][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.500385][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.509084][ T3020] bond0 (unregistering): Released all slaves [ 361.539308][T16650] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 361.748973][T16056] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 361.886325][T16674] __nla_validate_parse: 1 callbacks suppressed [ 361.886345][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3045'. [ 361.929791][T16056] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 361.930467][T16674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3045'. [ 362.008795][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3047'. [ 362.142610][T16646] lo speed is unknown, defaulting to 1000 [ 362.164693][T16683] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3048'. [ 362.487385][T16698] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3053'. [ 362.504284][T16698] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3053'. [ 362.513826][T16664] lo speed is unknown, defaulting to 1000 [ 362.516088][T16664] xfrm0 speed is unknown, defaulting to 1000 [ 362.541756][T16646] xfrm0 speed is unknown, defaulting to 1000 [ 362.912208][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 362.943805][ T3020] hsr_slave_0: left promiscuous mode [ 362.949707][ T5846] Bluetooth: hci1: command tx timeout [ 362.961050][ T3020] hsr_slave_1: left promiscuous mode [ 362.967675][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.975391][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.985345][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.992992][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.039772][T16056] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 363.057736][ T3020] veth1_macvtap: left promiscuous mode [ 363.068337][ T3020] veth0_macvtap: left promiscuous mode [ 363.074539][ T3020] veth1_vlan: left promiscuous mode [ 363.084048][ T3020] veth0_vlan: left promiscuous mode [ 363.589145][ T5846] Bluetooth: hci4: command tx timeout [ 363.640158][ T3020] team0 (unregistering): Port device team_slave_1 removed [ 363.686317][ T3020] team0 (unregistering): Port device team_slave_0 removed [ 364.041466][T14061] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 364.150322][ T3029] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 364.484859][T16664] chnl_net:caif_netlink_parms(): no params data found [ 364.617890][T16743] Cannot find del_set index 5 as target [ 364.676079][T16646] chnl_net:caif_netlink_parms(): no params data found [ 364.859335][T16752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3068'. [ 364.932957][T16664] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.941100][T16664] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.956303][T16664] bridge_slave_0: entered allmulticast mode [ 364.965099][T16664] bridge_slave_0: entered promiscuous mode [ 365.029166][ T5846] Bluetooth: hci1: command tx timeout [ 365.048539][T16664] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.058936][T16664] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.092070][T16664] bridge_slave_1: entered allmulticast mode [ 365.110472][T16664] bridge_slave_1: entered promiscuous mode [ 365.182894][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 365.281559][T16770] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 365.300672][T14061] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 365.325084][T16789] openvswitch: netlink: Message has 4 unknown bytes. [ 365.352571][ T2980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.394324][T16664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.462633][T16664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.492890][T16796] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.594582][ T2980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.668816][ T5846] Bluetooth: hci4: command tx timeout [ 365.727740][T16664] team0: Port device team_slave_0 added [ 365.753603][T16646] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.761667][T16646] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.772968][T16646] bridge_slave_0: entered allmulticast mode [ 365.785191][T16813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3081'. [ 365.790883][T16646] bridge_slave_0: entered promiscuous mode [ 365.804879][T16646] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.813044][T16646] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.833640][T16646] bridge_slave_1: entered allmulticast mode [ 365.844838][T16646] bridge_slave_1: entered promiscuous mode [ 365.884953][T16664] team0: Port device team_slave_1 added [ 365.976132][ T2980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.015884][T16823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3084'. [ 366.055479][T16646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.073573][T16825] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3084'. [ 366.102307][ T2980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.123519][T16664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.134676][T16823] netlink: 'syz.3.3084': attribute type 1 has an invalid length. [ 366.138070][T16664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.143378][T16823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.189054][T16664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.193121][T16823] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 366.213074][T16664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.228676][T16664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.274414][T16664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.302547][T16646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.335130][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 366.439106][T14061] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 366.727842][T16646] team0: Port device team_slave_0 added [ 366.767192][T16664] hsr_slave_0: entered promiscuous mode [ 366.785659][T16664] hsr_slave_1: entered promiscuous mode [ 366.792486][T16847] openvswitch: netlink: Message has 20 unknown bytes. [ 366.801222][T16847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.829332][T16664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.836967][T16664] Cannot create hsr debugfs directory [ 366.856335][T16849] delete_channel: no stack [ 366.859811][T16646] team0: Port device team_slave_1 added [ 367.111279][ T5846] Bluetooth: hci1: command tx timeout [ 367.130698][T16646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.143902][T16646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.177164][T16646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.236399][T16646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.252453][T16646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.285730][T16646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.434472][ T2980] bridge_slave_1: left allmulticast mode [ 367.448015][ T2980] bridge_slave_1: left promiscuous mode [ 367.454803][ T2980] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.468544][T14061] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 367.493136][ T2980] bridge_slave_0: left allmulticast mode [ 367.498995][ T2980] bridge_slave_0: left promiscuous mode [ 367.504788][ T2980] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.544592][T16876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3100'. [ 367.578844][T16056] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 367.631195][T16867] Cannot find del_set index 5 as target [ 367.754493][ T5846] Bluetooth: hci4: command tx timeout [ 367.987544][ T2980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.003863][ T2980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.015081][ T2980] bond0 (unregistering): Released all slaves [ 368.135140][T16646] hsr_slave_0: entered promiscuous mode [ 368.157188][T16646] hsr_slave_1: entered promiscuous mode [ 368.164281][T16646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.180306][T16646] Cannot create hsr debugfs directory [ 368.232412][T16887] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3102'. [ 368.248631][T16886] tipc: Bearer : already 2 bearers with priority 10 [ 368.256568][T16886] tipc: Bearer : trying with adjusted priority [ 368.266262][T16886] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 368.293492][T16887] ï‰Oܼ: renamed from hsr0 [ 368.310952][T16887] ï‰Oܼ: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 368.322504][T16887] ï‰Oܼ: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.333838][T16887] ï‰Oܼ: entered promiscuous mode [ 368.339415][T16887] ï‰Oܼ: left allmulticast mode [ 368.346138][T16887] A link change request failed with some changes committed already. Interface ï‰Oܼ may have been left with an inconsistent configuration, please check. [ 368.599462][T14061] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 368.697576][T16909] No such timeout policy "syz0" [ 368.714388][T16056] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 369.065635][T16926] netlink: 'syz.0.3109': attribute type 1 has an invalid length. [ 369.085599][T16926] netlink: 'syz.0.3109': attribute type 1 has an invalid length. [ 369.094320][T16926] netlink: 'syz.0.3109': attribute type 1 has an invalid length. [ 369.102598][T16926] netlink: 'syz.0.3109': attribute type 2 has an invalid length. [ 369.112612][T16926] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3109'. [ 369.166028][T16933] netlink: 'syz.4.3111': attribute type 1 has an invalid length. [ 369.181628][T16933] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3111'. [ 369.198708][ T5846] Bluetooth: hci1: command tx timeout [ 369.229866][T16938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3112'. [ 369.324803][T16940] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.531071][ T2980] hsr_slave_0: left promiscuous mode [ 369.542399][ T2980] hsr_slave_1: left promiscuous mode [ 369.569278][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.608395][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.616977][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.637074][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.691166][ T2980] veth1_macvtap: left promiscuous mode [ 369.696817][ T2980] veth0_macvtap: left promiscuous mode [ 369.703423][ T2980] veth1_vlan: left promiscuous mode [ 369.709603][ T2980] veth0_vlan: left promiscuous mode [ 369.728432][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 369.831376][ T5846] Bluetooth: hci4: command tx timeout [ 369.864169][ T3020] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 370.220990][ T2980] team0 (unregistering): Port device team_slave_1 removed [ 370.266234][ T2980] team0 (unregistering): Port device team_slave_0 removed [ 370.562160][ T2980] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 370.574091][ T2980] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 370.583754][ T2980] CPU: 1 UID: 0 PID: 2980 Comm: kworker/u8:6 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 370.595906][ T2980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 370.606084][ T2980] Workqueue: netns cleanup_net [ 370.610856][ T2980] RIP: 0010:mld_clear_delrec+0x34a/0x5d0 [ 370.616519][ T2980] Code: ff ff ff e8 e8 f8 3f 01 89 c5 31 ff 89 c6 e8 0d d3 a9 f7 85 ed 74 40 e8 c4 ce a9 f7 eb 05 e8 bd ce a9 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 a7 c3 0b f8 4d 8b 27 49 8d 7f 30 [ 370.636218][ T2980] RSP: 0018:ffffc9000b187490 EFLAGS: 00010206 [ 370.642286][ T2980] RAX: 000000001fffe000 RBX: ffff888033a04538 RCX: ffff88802efb8000 [ 370.650433][ T2980] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 370.658402][ T2980] RBP: 0000000000000001 R08: ffffffff8f7ed377 R09: 1ffffffff1efda6e [ 370.666462][ T2980] R10: dffffc0000000000 R11: fffffbfff1efda6f R12: ffff888026ee1428 [ 370.674444][ T2980] R13: dffffc0000000000 R14: ffff888026ee1400 R15: 00000000ffff0000 [ 370.682422][ T2980] FS: 0000000000000000(0000) GS:ffff8881261cc000(0000) knlGS:0000000000000000 [ 370.691379][ T2980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 370.697976][ T2980] CR2: 0000200000008800 CR3: 000000006326a000 CR4: 00000000003526f0 [ 370.705966][ T2980] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 370.713943][ T2980] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 370.721925][ T2980] Call Trace: [ 370.725224][ T2980] [ 370.728157][ T2980] ? ipv6_mc_down+0x36c/0x480 [ 370.732848][ T2980] ipv6_mc_destroy_dev+0x45/0x5a0 [ 370.737886][ T2980] ? addrconf_ifdown+0x1396/0x1880 [ 370.743018][ T2980] addrconf_ifdown+0x139e/0x1880 [ 370.747972][ T2980] ? tls_dev_event+0x717/0xec0 [ 370.752762][ T2980] ? __pfx_addrconf_ifdown+0x10/0x10 [ 370.758081][ T2980] addrconf_notify+0x1bc/0x1010 [ 370.762953][ T2980] notifier_call_chain+0x1b3/0x3e0 [ 370.768090][ T2980] unregister_netdevice_many_notify+0x15d4/0x2330 [ 370.774537][ T2980] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 370.781318][ T2980] ? unregister_netdevice_queue+0x1b3/0x380 [ 370.787225][ T2980] ? batadv_meshif_destroy_netlink+0x1dd/0x270 [ 370.793415][ T2980] default_device_exit_batch+0x819/0x890 [ 370.799160][ T2980] ? __pfx___might_resched+0x10/0x10 [ 370.804978][ T2980] ? __pfx_default_device_exit_batch+0x10/0x10 [ 370.811152][ T2980] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 370.816634][ T2980] ? __pfx_default_device_exit_batch+0x10/0x10 [ 370.822821][ T2980] cleanup_net+0x7a9/0xbd0 [ 370.827290][ T2980] ? __pfx_cleanup_net+0x10/0x10 [ 370.832242][ T2980] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.837445][ T2980] ? process_scheduled_works+0x9ec/0x17a0 [ 370.843180][ T2980] ? process_scheduled_works+0x9ec/0x17a0 [ 370.848917][ T2980] process_scheduled_works+0xadb/0x17a0 [ 370.854500][ T2980] ? __pfx_process_scheduled_works+0x10/0x10 [ 370.860591][ T2980] worker_thread+0x8a0/0xda0 [ 370.865222][ T2980] kthread+0x70e/0x8a0 [ 370.869300][ T2980] ? __pfx_worker_thread+0x10/0x10 [ 370.874422][ T2980] ? __pfx_kthread+0x10/0x10 [ 370.879054][ T2980] ? __pfx_kthread+0x10/0x10 [ 370.883674][ T2980] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.888880][ T2980] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.894087][ T2980] ? __pfx_kthread+0x10/0x10 [ 370.898681][ T2980] ret_from_fork+0x4b/0x80 [ 370.903112][ T2980] ? __pfx_kthread+0x10/0x10 [ 370.907706][ T2980] ret_from_fork_asm+0x1a/0x30 [ 370.912565][ T2980] [ 370.915594][ T2980] Modules linked in: [ 370.920673][ T2980] ---[ end trace 0000000000000000 ]--- [ 370.926814][ T2980] RIP: 0010:mld_clear_delrec+0x34a/0x5d0 [ 370.932574][ T2980] Code: ff ff ff e8 e8 f8 3f 01 89 c5 31 ff 89 c6 e8 0d d3 a9 f7 85 ed 74 40 e8 c4 ce a9 f7 eb 05 e8 bd ce a9 f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 a7 c3 0b f8 4d 8b 27 49 8d 7f 30 [ 370.954206][ T2980] RSP: 0018:ffffc9000b187490 EFLAGS: 00010206 [ 370.960362][ T2980] RAX: 000000001fffe000 RBX: ffff888033a04538 RCX: ffff88802efb8000 [ 370.968408][ T2980] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 370.976415][ T2980] RBP: 0000000000000001 R08: ffffffff8f7ed377 R09: 1ffffffff1efda6e [ 370.984765][ T2980] R10: dffffc0000000000 R11: fffffbfff1efda6f R12: ffff888026ee1428 [ 370.992891][ T2980] R13: dffffc0000000000 R14: ffff888026ee1400 R15: 00000000ffff0000 [ 371.000904][ T2980] FS: 0000000000000000(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000 [ 371.010296][ T2980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.016937][ T2980] CR2: 00007fc1b59b9f98 CR3: 0000000057eae000 CR4: 00000000003526f0 [ 371.025069][ T2980] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 371.033483][ T2980] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 371.034013][ T146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 371.051055][ T2980] Kernel panic - not syncing: Fatal exception [ 371.057441][ T2980] Kernel Offset: disabled [ 371.061794][ T2980] Rebooting in 86400 seconds..